deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-4311
Published: 2010-11-26
Description: Free Simple Software 1.0 stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://www.securityfocus.com/archive/1/514863/100/0/threaded; https://www.uncompiled.com/2010/11/free-simple-software-sql-injection-vulnerability-cve-2010-4298/; http://www.securityfocus.com/archive/1/514863/100/0/threaded
CVE: CVE-2010-4312
Published: 2010-11-26
Description: The default configuration of Apache Tomcat 6.x does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to hijack a session via script access to a cookie.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-16
References: http://www.securityfocus.com/archive/1/514866/100/0/threaded; http://www.securityfocus.com/archive/1/514866/100/0/threaded
CVE: CVE-2010-4072
Published: 2010-11-29
Description: The copy_shmid_to_user function in ipc/shm.c in the Linux kernel before 2.6.37-rc1 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the shmctl system call and the "old shm interface."
CVSS Score: 1.9 (LOW)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3af54c9bd9e6f14f896aac1bb0e8405ae0bc7a44; http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html
CVE: CVE-2010-4073
Published: 2010-11-29
Description: The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize certain structures, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the (1) compat_sys_semctl, (2) compat_sys_msgctl, and (3) compat_sys_shmctl functions in ipc/compat.c; and the (4) compat_sys_mq_open and (5) compat_sys_mq_getsetattr functions in ipc/compat_mq.c.
CVSS Score: 1.9 (LOW)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=03145beb455cf5c20a761e8451e30b8a74ba58d9; http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html
CVE: CVE-2010-4074
Published: 2010-11-29
Description: The USB subsystem in the Linux kernel before 2.6.36-rc5 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to TIOCGICOUNT ioctl calls, and the (1) mos7720_ioctl function in drivers/usb/serial/mos7720.c and (2) mos7840_ioctl function in drivers/usb/serial/mos7840.c.
CVSS Score: 1.9 (LOW)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a0846f1868b11cd827bdfeaf4527d8b1b1c0b098; http://lkml.org/lkml/2010/9/15/392; http://secunia.com/advisories/42890
CVE: CVE-2010-4075
Published: 2010-11-29
Description: The uart_get_count function in drivers/serial/serial_core.c in the Linux kernel before 2.6.37-rc1 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call.
CVSS Score: 1.9 (LOW)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d281da7ff6f70efca0553c288bb883e8605b3862; http://lkml.indiana.edu/hypermail//linux/kernel/1009.1/03388.html; http://secunia.com/advisories/42884
CVE: CVE-2010-4076
Published: 2010-11-29
Description: The rs_ioctl function in drivers/char/amiserial.c in the Linux kernel 2.6.36.1 and earlier does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call.
CVSS Score: 1.9 (LOW)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d281da7ff6f70efca0553c288bb883e8605b3862; http://lkml.org/lkml/2010/9/15/389; http://www.openwall.com/lists/oss-security/2010/09/25/2
CVE: CVE-2010-4077
Published: 2010-11-29
Description: The ntty_ioctl_tiocgicount function in drivers/char/nozomi.c in the Linux kernel 2.6.36.1 and earlier does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call.
CVSS Score: 1.9 (LOW)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d281da7ff6f70efca0553c288bb883e8605b3862; http://lkml.indiana.edu/hypermail//linux/kernel/1009.1/03387.html; http://secunia.com/advisories/42890
CVE: CVE-2010-4078
Published: 2010-11-29
Description: The sisfb_ioctl function in drivers/video/sis/sis_main.c in the Linux kernel before 2.6.36-rc6 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FBIOGET_VBLANK ioctl call.
CVSS Score: 1.9 (LOW)
CWE: CWE-909
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fd02db9de73faebc51240619c7c7f99bee9f65c7; http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html
CVE: CVE-2010-4079
Published: 2010-11-29
Description: The ivtvfb_ioctl function in drivers/media/video/ivtv/ivtvfb.c in the Linux kernel before 2.6.36-rc8 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FBIOGET_VBLANK ioctl call.
CVSS Score: 1.9 (LOW)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=[PII_REDACTED]94169cfd0b1d97d29fcb4b4c6f2ac9; http://lkml.org/lkml/2010/9/15/393; http://secunia.com/advisories/42890
CVE: CVE-2010-4249
Published: 2010-11-29
Description: The wait_for_unix_gc function in net/unix/garbage.c in the Linux kernel before 2.6.37-rc3-next-20101125 does not properly select times for garbage collection of inflight sockets, which allows local users to cause a denial of service (system hang) via crafted use of the socketpair and sendmsg system calls for SOCK_SEQPACKET sockets.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-400
References: http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=9915672d41273f5b77f1b3c29b391ffb7732b84b; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.html; http://lkml.org/lkml/2010/11/23/395
CVE: CVE-2010-3858
Published: 2010-11-30
Description: The setup_arg_pages function in fs/exec.c in the Linux kernel before 2.6.36, when CONFIG_STACK_GROWSDOWN is used, does not properly restrict the stack memory consumption of the (1) arguments and (2) environment for a 32-bit application on a 64-bit platform, which allows local users to cause a denial of service (system crash) via a crafted exec system call, a related issue to CVE-2010-2240.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-400
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1b528181b2ffa14721fb28ad1bd539fe1732c583; http://grsecurity.net/~spender/64bit_dos.c; http://secunia.com/advisories/42758
CVE: CVE-2010-4248
Published: 2010-11-30
Description: Race condition in the __exit_signal function in kernel/exit.c in the Linux kernel before 2.6.37-rc2 allows local users to cause a denial of service via vectors related to multithreaded exec, the use of a thread group leader in kernel/posix-cpu-timers.c, and the selection of a new thread group leader in the de_thread function in fs/exec.c.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e0a70217107e6f[PII_REDACTED]412cb27bb4cea194; http://secunia.com/advisories/42789; http://secunia.com/advisories/42890
CVE: CVE-2010-4080
Published: 2010-11-30
Description: The snd_hdsp_hwdep_ioctl function in sound/pci/rme9652/hdsp.c in the Linux kernel before 2.6.36-rc6 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via an SNDRV_HDSP_IOCTL_GET_CONFIG_INFO ioctl call.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e68d3b316ab7b02a074edc4f770e6a746390cb7d; http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html
CVE: CVE-2010-4081
Published: 2010-11-30
Description: The snd_hdspm_hwdep_ioctl function in sound/pci/rme9652/hdspm.c in the Linux kernel before 2.6.36-rc6 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via an SNDRV_HDSPM_IOCTL_GET_CONFIG_INFO ioctl call.
CVSS Score: 1.9 (LOW)
CWE: CWE-909
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e68d3b316ab7b02a074edc4f770e6a746390cb7d; http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html
CVE: CVE-2010-4082
Published: 2010-11-30
Description: The viafb_ioctl_get_viafb_info function in drivers/video/via/ioctl.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a VIAFB_GET_INFO ioctl call.
CVSS Score: 1.9 (LOW)
CWE: CWE-909
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b4aaa78f4c2f9cde2f335b14f4ca30b01f9651ca; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html
CVE: CVE-2010-4083
Published: 2010-11-30
Description: The copy_semid_to_user function in ipc/sem.c in the Linux kernel before 2.6.36 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via a (1) IPC_INFO, (2) SEM_INFO, (3) IPC_STAT, or (4) SEM_STAT command in a semctl system call.
CVSS Score: 1.9 (LOW)
CWE: CWE-909
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=982f7c2b2e6a28f8f266e075d92e19c0dd4c6e56; http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html
CVE: CVE-2010-4354
Published: 2010-11-30
Description: The remote-access IPSec VPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices, PIX Security Appliances 500 series devices, and VPN Concentrators 3000 series devices responds to an Aggressive Mode IKE Phase I message only when the group name is configured on the device, which allows remote attackers to enumerate valid group names via a series of IKE negotiation attempts, aka Bug ID CSCtj96108, a different vulnerability than CVE-2005-2025.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.cisco.com/en/US/products/products_security_response09186a0080b5992c.html; http://www.cisco.com/en/US/products/products_security_response09186a0080b5992c.html
CVE: CVE-2008-7267
Published: 2010-12-01
Description: SQL injection vulnerability in announcements.php in SiteEngine 5.x allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/32404; http://www.securityfocus.com/archive/1/497747/100/0/threaded; http://www.securityfocus.com/bid/31889
CVE: CVE-2008-7268
Published: 2010-12-01
Description: The phpinfo function in SiteEngine 5.x allows remote attackers to obtain system information by setting the action parameter to php_info in misc.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/32404; http://www.securityfocus.com/archive/1/497747/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/46180
CVE: CVE-2008-7269
Published: 2010-12-01
Description: Open redirect vulnerability in api.php in SiteEngine 5.x allows user-assisted remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the forward parameter in a logout action.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/archive/1/497747/100/0/threaded; http://www.securityfocus.com/bid/31888; https://www.exploit-db.com/exploits/6823
CVE: CVE-2009-5019
Published: 2010-12-01
Description: Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/NewsPad.mdb.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://packetstormsecurity.org/files/view/84294/webwiznewspad-disclose.txt; http://www.exploit-db.com/exploits/10637; http://www.exploit-db.com/exploits/15544
CVE: CVE-2010-4355
Published: 2010-12-01
Description: Cross-site scripting (XSS) vulnerability in DaDaBIK before 4.3 beta2, when the insert or edit feature is enabled, allows remote authenticated users to inject arbitrary web script or HTML via the select_single parameter.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://secunia.com/advisories/42220; http://www.dadabik.org/index.php?function=show_changelog; http://www.securityfocus.com/bid/44826
CVE: CVE-2010-4356
Published: 2010-12-01
Description: SQL injection vulnerability in news_default.asp in Site2Nite Big Truck Broker allows remote attackers to execute arbitrary SQL commands via the txtSiteId parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/files/view/96148/site2nitebigtruck-sql.txt; http://secunia.com/advisories/42383; http://www.exploit-db.com/exploits/15627
CVE: CVE-2010-4357
Published: 2010-12-01
Description: SQL injection vulnerability in comments.php in SiteEngine 7.1 allows remote attackers to execute arbitrary SQL commands via the module parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/42353; http://www.exploit-db.com/exploits/15612; http://www.securityfocus.com/bid/45056
CVE: CVE-2010-4358
Published: 2010-12-01
Description: Multiple cross-site scripting (XSS) vulnerabilities in gb.cgi in MRCGIGUY (MCG) Guestbook 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, (3) website, and (4) message parameters.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://evuln.com/vulns/144/summary.html; http://packetstormsecurity.org/files/view/96101/mcgguestbook-xss.txt; http://secunia.com/advisories/42315
CVE: CVE-2010-4359
Published: 2010-12-01
Description: SQL injection vulnerability in index.php in Jurpopage 0.2.0 allows remote attackers to execute arbitrary SQL commands via the category parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/files/view/96131/jurpopage-sql.txt; http://secunia.com/advisories/42387; http://www.exploit-db.com/exploits/15621
CVE: CVE-2010-4360
Published: 2010-12-01
Description: Multiple SQL injection vulnerabilities in index.php in Jurpopage 0.2.0 allow remote attackers to execute arbitrary SQL commands via the (1) note and (2) pg parameters, different vectors than CVE-2010-4359. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/42387; http://www.securityfocus.com/bid/45076; http://secunia.com/advisories/42387
CVE: CVE-2010-4361
Published: 2010-12-01
Description: Cross-site scripting (XSS) vulnerability in url-gateway.php in Jurpopage 0.2.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/42387; http://www.securityfocus.com/bid/45076; http://secunia.com/advisories/42387
CVE: CVE-2010-4362
Published: 2010-12-01
Description: Multiple SQL injection vulnerabilities in MicroNetsoft RV Dealer Website allow remote attackers to execute arbitrary SQL commands via the (1) selStock parameter to search.asp and the (2) orderBy parameter to showAlllistings.asp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/41319; http://www.exploit-db.com/exploits/15629; http://www.securityfocus.com/bid/45089
CVE: CVE-2010-4363
Published: 2010-12-01
Description: Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY (MCG) FreeTicket 1.0.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) email parameters in a showtickets action.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://evuln.com/vulns/146/summary.html; http://packetstormsecurity.org/files/view/96138/freeticket-sql.txt; http://secunia.com/advisories/42313
CVE: CVE-2010-4364
Published: 2010-12-01
Description: DaDaBIK 4.3 beta3, when running in a case-sensitive environment, does not include the htmLawed library, which allows remote attackers to bypass the protection mechanism for CVE-2010-4355 and conduct cross-site scripting (XSS) attacks via the (1) html content and (2) rich_editor fields.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/69468; http://secunia.com/advisories/42363; http://www.dadabik.org/index.php?function=show_changelog
CVE: CVE-2010-4365
Published: 2010-12-01
Description: SQL injection vulnerability in JE Ajax Event Calendar (com_jeajaxeventcalendar) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the event_id parameter in an alleventlist_more action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/files/view/96125/joomlaajax-sql.txt; http://secunia.com/advisories/39836; http://www.exploit-db.com/exploits/15610
CVE: CVE-2010-4366
Published: 2010-12-01
Description: Multiple cross-site scripting (XSS) vulnerabilities in forum_new_topic.php in Chameleon Social Networking allow remote attackers to inject arbitrary web script or HTML via the (1) thread_title and (2) thread_description parameters in a message.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/42206; http://www.exploit-db.com/exploits/15543; http://www.osvdb.org/69359
CVE: CVE-2009-5020
Published: 2010-12-02
Description: Open redirect vulnerability in awredir.pl in AWStats before 6.95 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://awstats.sourceforge.net/docs/awstats_changelog.txt; http://awstats.sourceforge.net/docs/awstats_changelog.txt
CVE: CVE-2010-1323
Published: 2010-12-02
Description: MIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center (KDC), or forge a KRB-SAFE message via certain checksums that (1) are unkeyed or (2) use RC4 keys.
CVSS Score: 3.7 (LOW)
CWE: CWE-310
References: http://kb.vmware.com/kb/1035108; http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051976.html
CVE: CVE-2010-1324
Published: 2010-12-02
Description: MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to forge GSS tokens, gain privileges, or have unspecified other impact via (1) an unkeyed checksum, (2) an unkeyed PAC checksum, or (3) a KrbFastArmoredReq checksum based on an RC4 key.
CVSS Score: 3.7 (LOW)
CWE: CWE-310
References: http://kb.vmware.com/kb/1035108; http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051976.html
CVE: CVE-2010-2586
Published: 2010-12-02
Description: Multiple integer overflows in in_nsv.dll in the in_nsv plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted Table of Contents (TOC) in a (1) NSV stream or (2) NSV file that triggers a heap-based buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://forums.winamp.com/showthread.php?t=324322; http://forums.winamp.com/showthread.php?threadid=159785; http://secunia.com/advisories/42004
CVE: CVE-2010-3266
Published: 2010-12-02
Description: Multiple cross-site scripting (XSS) vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via (1) the pcd parameter to edit_bug.aspx, (2) the bug_id parameter to edit_comment.aspx, (3) the id parameter to edit_user_permissions2.aspx, or (4) the default_name parameter to edit_customfield.aspx.  NOTE: some of these details are obtained from third party information.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://btnet.svn.sourceforge.net/viewvc/btnet/RELEASE_NOTES.TXT?revision=578&view=markup; http://secunia.com/advisories/42418; http://www.coresecurity.com/content/multiple-vulnerabilities-in-bugtracker
CVE: CVE-2010-3267
Published: 2010-12-02
Description: Multiple SQL injection vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to execute arbitrary SQL commands via (1) the qu_id parameter to bugs.aspx, (2) the row_id parameter to delete_query.aspx, the (3) new_project or (4) us_id parameter to edit_bug.aspx, or (5) the bug_list parameter to massedit.aspx.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://btnet.svn.sourceforge.net/viewvc/btnet/RELEASE_NOTES.TXT?revision=578&view=markup; http://secunia.com/advisories/42418; http://www.coresecurity.com/content/multiple-vulnerabilities-in-bugtracker
CVE: CVE-2010-4020
Published: 2010-12-02
Description: MIT Kerberos 5 (aka krb5) 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which might allow remote authenticated users to forge a (1) AD-SIGNEDPATH or (2) AD-KDC-ISSUED signature, and possibly gain privileges, by leveraging the small key space that results from certain one-byte stream-cipher operations.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-310
References: http://kb.vmware.com/kb/1035108; http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051976.html
CVE: CVE-2010-4021
Published: 2010-12-02
Description: The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 does not properly restrict the use of TGT credentials for armoring TGS requests, which might allow remote authenticated users to impersonate a client by rewriting an inner request, aka a "KrbFastReq forgery issue."
CVSS Score: 2.1 (LOW)
CWE: CWE-16, CWE-264
References: http://kb.vmware.com/kb/1035108; http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html
CVE: CVE-2010-4329
Published: 2010-12-02
Description: Cross-site scripting (XSS) vulnerability in the PMA_linkOrButton function in libraries/common.lib.php in the database (db) search script in phpMyAdmin 2.11.x before 2.11.11.1 and 3.x before 3.3.8.1 allows remote attackers to inject arbitrary web script or HTML via a crafted request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051942.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051956.html; http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commitdiff%3Bh=4341818d73d454451f024950a4ce0141608ac7f8