deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-4666
Published: 2010-03-05
Description: Multiple PHP remote file inclusion vulnerabilities in Webradev Download Protect 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[RootPath] parameter to (1) Framework/EmailTemplates.class.php, (2) Customers/PDPEmailReplaceConstants.class.php, and (3) Admin/ResellersManager.class.php in includes/DProtect/.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.exploit-db.com/exploits/8792; http://www.exploit-db.com/exploits/8792
CVE: CVE-2009-4667
Published: 2010-03-05
Description: SQL injection vulnerability in form.php in WebMember 1.0 allows remote authenticated users to execute arbitrary SQL commands via the formID parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/35227; http://www.exploit-db.com/exploits/8810; http://www.vupen.com/english/advisories/2009/1430
CVE: CVE-2009-4668
Published: 2010-03-05
Description: Stack-based buffer overflow in JetCast.exe 2.0.4.1109 in jetAudio 7.5.2 and 7.5.3.15 allows remote attackers to execute arbitrary code via a long ID3 tag in an MP3 file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://retrogod.altervista.org/9sg_jetcast_heap_bof.html; http://secunia.com/advisories/35195; http://www.exploit-db.com/exploits/8780
CVE: CVE-2009-4669
Published: 2010-03-05
Description: Multiple SQL injection vulnerabilities in RoomPHPlanning 1.6 allow remote attackers to execute arbitrary SQL commands via (1) the loginus parameter to Login.php or (2) the Old Password field to changepwd.php, and allow (3) remote authenticated administrators to execute arbitrary SQL commands via the id parameter to admin/userform.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/35237; http://www.exploit-db.com/exploits/8797; http://secunia.com/advisories/35237
CVE: CVE-2009-4670
Published: 2010-03-05
Description: admin/delitem.php in RoomPHPlanning 1.6 does not require authentication, which allows remote attackers to (1) delete arbitrary users via the user parameter or (2) delete arbitrary rooms via the room parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://secunia.com/advisories/35237; http://www.exploit-db.com/exploits/8797; http://secunia.com/advisories/35237
CVE: CVE-2009-4671
Published: 2010-03-05
Description: Login.php in RoomPHPlanning 1.6 allows remote attackers to bypass authentication and obtain administrative access by setting the room_phplanning cookie to a value associated with the admin account.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://secunia.com/advisories/35237; http://www.exploit-db.com/exploits/8797; http://secunia.com/advisories/35237
CVE: CVE-2009-4672
Published: 2010-03-05
Description: Directory traversal vulnerability in main.php in the WP-Lytebox plugin 1.3 for WordPress allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pg parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/35244; http://www.exploit-db.com/exploits/8791; http://www.securityfocus.com/bid/35098
CVE: CVE-2009-4673
Published: 2010-03-05
Description: SQL injection vulnerability in profile.php in Mole Group Adult Portal Script allows remote attackers to execute arbitrary SQL commands via the user_id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/35246; http://www.exploit-db.com/exploits/8788; https://exchange.xforce.ibmcloud.com/vulnerabilities/50731
CVE: CVE-2009-4674
Published: 2010-03-05
Description: admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified user_id field.
CVSS Score: 7.5 (HIGH)
CWE: CWE-255
References: http://www.exploit-db.com/exploits/8774; http://www.securityfocus.com/bid/35079; https://exchange.xforce.ibmcloud.com/vulnerabilities/50722
CVE: CVE-2009-4675
Published: 2010-03-05
Description: admin/admin_info/index.php in the Mole Group Gastro Portal (Restaurant Directory) Script does not require administrative authentication, which allows remote attackers to change the admin password via an unspecified form submission.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://www.exploit-db.com/exploits/8775; http://www.securityfocus.com/bid/35079; https://exchange.xforce.ibmcloud.com/vulnerabilities/50723
CVE: CVE-2009-3032
Published: 2010-03-05
Description: Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail Security for Microsoft Exchange 5.0.10 through 5.0.13, and other products, allows context-dependent attackers to execute arbitrary code via a crafted OLE document that triggers a heap-based buffer overflow.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=858; http://www-01.ibm.com/support/docview.wss?uid=swg21440812; http://www.securityfocus.com/bid/38468
CVE: CVE-2009-3245
Published: 2010-03-05
Description: OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc; http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038587.html
CVE: CVE-2009-4676
Published: 2010-03-05
Description: Stack-based buffer overflow in JetCast.exe 2.0.4.1109 in jetAudio 7.5.2 and 7.5.3.15 allows remote attackers to execute arbitrary code via a long title in a FLAC file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/35195; http://secunia.com/advisories/35195
CVE: CVE-2010-0302
Published: 2010-03-05
Description: Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS before 1.4.4, when kqueue or epoll is used, allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-3553.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://cups.org/articles.php?L596; http://cups.org/str.php?L3490; http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html
CVE: CVE-2010-0393
Published: 2010-03-05
Description: The _cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4.1, relies on an environment variable to determine the file that provides localized message strings, which allows local users to gain privileges via a file that contains crafted localization data with format string specifiers.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html; http://security.gentoo.org/glsa/glsa-201207-10.xml; http://support.apple.com/kb/HT4077
CVE: CVE-2010-0425
Published: 2010-03-05
Description: modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure that request processing is complete before calling isapi_unload for an ISAPI .dll module, which allows remote attackers to execute arbitrary code via unspecified vectors related to a crafted request, a reset packet, and "orphaned callback pointers."
CVSS Score: 10.0 (HIGH)
References: http://httpd.apache.org/security/vulnerabilities_20.html; http://httpd.apache.org/security/vulnerabilities_22.html; http://lists.vmware.com/pipermail/security-announce/2010/000105.html
CVE: CVE-2010-0433
Published: 2010-03-05
Description: The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, does not check a certain return value, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via SSL cipher negotiation, as demonstrated by a chroot installation of Dovecot or stunnel without Kerberos configuration files inside the chroot.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc; http://cvs.openssl.org/chngview?cn=19374; http://groups.google.com/group/mailing.openssl.users/browse_thread/thread/c3e1ab0034ca4b4c/66aa896c3a78b2f7
CVE: CVE-2010-0434
Published: 2010-03-05
Description: The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain sensitive information via a crafted request that triggers access to memory locations associated with an earlier request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://httpd.apache.org/security/vulnerabilities_22.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039957.html
CVE: CVE-2010-0570
Published: 2010-03-05
Description: Cisco Digital Media Manager (DMM) 5.0.x and 5.1.x has a default password for the Tomcat administration account, which makes it easier for remote attackers to execute arbitrary code via a crafted web application, aka Bug ID CSCta03378.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://secunia.com/advisories/38800; http://securitytracker.com/id?1023671; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1b923.shtml
CVE: CVE-2010-0571
Published: 2010-03-05
Description: Unspecified vulnerability in Cisco Digital Media Manager (DMM) 5.0.x and 5.1.x allows remote authenticated users to gain privileges via unknown vectors, and consequently execute arbitrary code via a crafted web application, aka Bug ID CSCtc46008.
CVSS Score: 8.5 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/38800; http://securitytracker.com/id?1023671; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1b923.shtml
CVE: CVE-2010-0572
Published: 2010-03-05
Description: Cisco Digital Media Manager (DMM) before 5.2 allows remote authenticated users to discover Cisco Digital Media Player credentials via vectors related to reading a (1) error log or (2) stack trace, aka Bug ID CSCtc46050.
CVSS Score: 7.1 (HIGH)
CWE: CWE-200
References: http://secunia.com/advisories/38800; http://securitytracker.com/id?1023671; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1b923.shtml
CVE: CVE-2010-0573
Published: 2010-03-05
Description: Unspecified vulnerability on the Cisco Digital Media Player before 5.2 allows remote attackers to hijack the source of (1) video or (2) data for a display via unknown vectors, related to a "content injection" issue, aka Bug ID CSCtc46024.
CVSS Score: 8.5 (HIGH)
References: http://osvdb.org/62723; http://secunia.com/advisories/38799; http://securitytracker.com/id?1023672
CVE: CVE-2010-0792
Published: 2010-03-05
Description: fcrontab in fcron before 3.0.5 allows local users to read arbitrary files via a symlink attack on an unspecified file.
CVSS Score: 1.9 (LOW)
CWE: CWE-59
References: http://fcron.free.fr/; http://lists.fedoraproject.org/pipermail/package-announce/2010-March/038150.html; http://seclists.org/fulldisclosure/2010/Mar/97
CVE: CVE-2010-0928
Published: 2010-03-05
Description: OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation (FWE) algorithm for certain signature calculations, and does not verify the signature before providing it to a caller, which makes it easier for physically proximate attackers to determine the private key via a modified supply voltage for the microprocessor, related to a "fault-based attack."
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-310
References: http://rdist.root.org/2010/03/08/attacking-rsa-exponentiation-with-fault-injection/; http://www.eecs.umich.edu/~valeria/research/publications/DATE10RSA.pdf; http://www.networkworld.com/news/2010/030410-rsa-security-attack.html
CVE: CVE-2010-0929
Published: 2010-03-05
Description: The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (daemon crash) via crafted data beginning with a byte sequence of 0x4c, 0xb3, 0xff, 0xff, and 0xff.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://lists.immunitysec.com/pipermail/dailydave/2010-March/006063.html; http://www.securityfocus.com/bid/36261; http://lists.immunitysec.com/pipermail/dailydave/2010-March/006063.html
CVE: CVE-2010-0930
Published: 2010-03-05
Description: The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (infinite loop) via crafted data that includes a byte sequence of 0xdc, 0xff, 0xff, and 0xff immediately before the client protocol version number.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://lists.immunitysec.com/pipermail/dailydave/2010-March/006063.html; http://www.securityfocus.com/bid/36261; http://lists.immunitysec.com/pipermail/dailydave/2010-March/006063.html
CVE: CVE-2010-0931
Published: 2010-03-05
Description: The Perforce service (p4s.exe) in Perforce Server 2008.1 allows remote attackers to cause a denial of service (daemon crash) via crafted data, possibly involving a large sndbuf value.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://lists.immunitysec.com/pipermail/dailydave/2010-March/006063.html; http://www.securityfocus.com/bid/36261; http://lists.immunitysec.com/pipermail/dailydave/2010-March/006063.html
CVE: CVE-2010-0932
Published: 2010-03-05
Description: The FTP server in Perforce Server 2008.1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a certain MKD command.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://lists.immunitysec.com/pipermail/dailydave/2010-March/006063.html; http://www.securityfocus.com/bid/36261; http://lists.immunitysec.com/pipermail/dailydave/2010-March/006063.html
CVE: CVE-2010-0933
Published: 2010-03-05
Description: Directory traversal vulnerability in Perforce Server 2008.1 allows remote authenticated users to create arbitrary files via a .. (dot dot) in the argument to the "p4 add" command.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://lists.immunitysec.com/pipermail/dailydave/2010-March/006063.html; http://www.securityfocus.com/bid/36261; http://lists.immunitysec.com/pipermail/dailydave/2010-March/006063.html
CVE: CVE-2010-0934
Published: 2010-03-05
Description: The triggers functionality in Perforce Server 2008.1 allows remote authenticated users with super privileges to execute arbitrary operating-system commands by using a "p4 client" command in conjunction with the form-in trigger script.
CVSS Score: 7.1 (HIGH)
CWE: CWE-78
References: http://lists.immunitysec.com/pipermail/dailydave/2010-March/006063.html; http://www.securityfocus.com/bid/36261; http://lists.immunitysec.com/pipermail/dailydave/2010-March/006063.html
CVE: CVE-2010-0935
Published: 2010-03-05
Description: Perforce Server 2009.2 and earlier, when the protection table is empty, allows remote authenticated users to obtain super privileges via a "p4 protect" command.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://lists.immunitysec.com/pipermail/dailydave/2010-March/006063.html; http://www.perforce.com/perforce/doc.current/manuals/cmdref/protect.html; http://www.securityfocus.com/bid/36261
CVE: CVE-2009-4677
Published: 2010-03-08
Description: Cross-site scripting (XSS) vulnerability in search.php in phpFK PHP Forum ohne 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the search parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/37983; http://www.osvdb.org/61384; http://www.securityfocus.com/bid/41330
CVE: CVE-2009-4678
Published: 2010-03-08
Description: Cross-site scripting (XSS) vulnerability in index.php in Winn Guestbook 2.4 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/0912-exploits/winngb-xss.txt; http://secunia.com/advisories/37963; http://www.exploit-db.com/exploits/10653
CVE: CVE-2009-4679
Published: 2010-03-08
Description: Directory traversal vulnerability in the inertialFATE iF Portfolio Nexus (com_if_nexus) component 1.5 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/37760; http://www.exploit-db.com/exploits/10754; http://www.osvdb.org/61382
CVE: CVE-2010-0936
Published: 2010-03-08
Description: Cross-site scripting (XSS) vulnerability in auth.asp on the D-LINK DKVM-IP8 with firmware 2282_dlinkA4_p8_20071213 allows remote attackers to inject arbitrary web script or HTML via the nickname parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/61615; http://secunia.com/advisories/38051; http://www.exploit-db.com/exploits/11030
CVE: CVE-2010-0937
Published: 2010-03-08
Description: Multiple unspecified vulnerabilities in Visualization Library before 2009.08.812 have unknown impact and attack vectors.
CVSS Score: 7.5 (HIGH)
References: http://visualizationlibrary.com/documentation/pagchangelog.html; http://www.securityfocus.com/bid/37644; http://www.vupen.com/english/advisories/2010/0050
CVE: CVE-2010-0938
Published: 2010-03-08
Description: Cross-site scripting (XSS) vulnerability in todooforum.php in Todoo Forum 2.0 allows remote attackers to inject arbitrary web script or HTML via the id_forum parameter in a post action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/1001-exploits/todooforum-xss.txt; http://secunia.com/advisories/38060; http://www.exploit-db.com/exploits/11099
CVE: CVE-2010-0939
Published: 2010-03-08
Description: Visialis ABB Forum 1.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for fpdb/abb.mdb.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://packetstormsecurity.org/1001-exploits/abbforums-dislclose.txt; http://www.exploit-db.com/exploits/11096; https://exchange.xforce.ibmcloud.com/vulnerabilities/55505
CVE: CVE-2010-0940
Published: 2010-03-08
Description: Cross-site scripting (XSS) vulnerability in guestbook.php in Simple PHP Guestbook 1.0 allows remote attackers to inject arbitrary web script or HTML via the action parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/61614; http://packetstormsecurity.org/1001-exploits/simplephpgb-xss.txt; http://secunia.com/advisories/38053
CVE: CVE-2010-0941
Published: 2010-03-08
Description: Multiple cross-site scripting (XSS) vulnerabilities in eTek Systems Hit Counter 2.0 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php, (2) inc/login.php, (3) admin/index.php, and (4) admin/forgot.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/1001-exploits/hitcounter-xss.txt; http://secunia.com/advisories/38052; http://www.exploit-db.com/exploits/10887
CVE: CVE-2010-0942
Published: 2010-03-08
Description: Directory traversal vulnerability in the jVideoDirect (com_jvideodirect) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.org/1001-exploits/joomlajvideodirect-traversal.txt; http://www.exploit-db.com/exploits/11089; http://www.securityfocus.com/bid/37694
CVE: CVE-2010-0943
Published: 2010-03-08
Description: Directory traversal vulnerability in the JA Showcase (com_jashowcase) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter in a jashowcase action to index.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.org/1001-exploits/joomlajashowcase-traversal.txt; http://secunia.com/advisories/33486; http://www.exploit-db.com/exploits/11090
CVE: CVE-2010-0944
Published: 2010-03-08
Description: Directory traversal vulnerability in the JCollection (com_jcollection) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.org/1001-exploits/joomlajcollection-traversal.txt; http://www.exploit-db.com/exploits/11088; http://www.securityfocus.com/bid/37691
CVE: CVE-2010-0945
Published: 2010-03-08
Description: SQL injection vulnerability in the HotBrackets Tournament Brackets (com_hotbrackets) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/10953; http://www.packetstormsecurity.org/0912-exploits/joomlahotbrackets-sql.txt; http://www.securityfocus.com/bid/37439
CVE: CVE-2010-0946
Published: 2010-03-08
Description: SQL injection vulnerability in the Keep It Simple Stupid (KISS) Software Advertiser (com_ksadvertiser) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the pid parameter in a showcats action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://explo.it/exploits/11068; http://www.securityfocus.com/bid/37682; https://exchange.xforce.ibmcloud.com/vulnerabilities/55526
CVE: CVE-2010-0103
Published: 2010-03-10
Description: UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Arucer.dll file in the %WINDIR%\system32 directory, which allows remote attackers to download arbitrary programs onto a Windows PC, and execute these programs, via a request to TCP port 7777.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.kb.cert.org/vuls/id/154421; http://www.marketwatch.com/story/energizer-announces-duo-charger-and-usb-charger-software-problem-2010-03-05; http://www.securityfocus.com/bid/38571
CVE: CVE-2010-0418
Published: 2010-03-10
Description: The web interface in chumby one before 1.0.4 and chumby classic before 1.7.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a request.
CVSS Score: 10.0 (HIGH)
CWE: CWE-78
References: http://secunia.com/advisories/38972; http://www.awe.com/mark/blog/20100305.html; http://www.chumby.com/pages/release10mar
CVE: CVE-2010-0728
Published: 2010-03-10
Description: smbd in Samba 3.3.11, 3.4.6, and 3.5.0, when libcap support is enabled, runs with the CAP_DAC_OVERRIDE capability, which allows remote authenticated users to bypass intended file permissions via standard filesystem operations with any client.
CVSS Score: 8.5 (HIGH)
CWE: CWE-264
References: http://lists.samba.org/archive/samba-announce/2010/000211.html; http://www.samba.org/samba/history/samba-3.3.12.html; http://www.samba.org/samba/history/samba-3.4.7.html