deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-0037
Published: 2012-06-17
Description: Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted remote attackers to read arbitrary files via a crafted XML external entity (XXE) declaration and reference in an RDF document.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: http://blog.documentfoundation.org/2012/03/22/tdf-announces-libreoffice-3-4-6/; http://librdf.org/raptor/RELEASE.html#rel2_0_7; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077708.html
CVE: CVE-2012-2090
Published: 2012-06-17
Description: Multiple format string vulnerabilities in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in certain data chunk values in an aircraft xml model to (1) fgfs/flightgear/src/Cockpit/panel.cxx or (2) fgfs/flightgear/src/Network/generic.cxx, or (3) a scene graph model to simgear/simgear/scene/model/SGText.cxx.
CVSS Score: 9.3 (HIGH)
CWE: CWE-134
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081997.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082002.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082017.html
CVE: CVE-2012-2091
Published: 2012-06-17
Description: Multiple buffer overflows in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) long string in a rotor tag of an aircraft xml model to the Rotor::getValueforFGSet function in src/FDM/YASim/Rotor.cpp or (2) a crafted UDP packet to the SGSocketUDP::read function in simgear/simgear/simgear/io/sg_socket_udp.cxx.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081997.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082002.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082017.html
CVE: CVE-2012-2417
Published: 2012-06-17
Description: PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers to conduct brute force attacks to obtain the private key.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081713.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081759.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081789.html
CVE: CVE-2012-2668
Published: 2012-06-17
Description: libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and earlier, when using the Mozilla NSS backend, always uses the default cipher suite even when TLSCipherSuite is set, which might cause OpenLDAP to use weaker ciphers than intended and make it easier for remote attackers to obtain sensitive information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=676309; http://rhn.redhat.com/errata/RHSA-2012-1151.html; http://seclists.org/fulldisclosure/2019/Dec/26
CVE: CVE-2012-2670
Published: 2012-06-17
Description: manageuser.php in Collabtive before 0.7.6 allows remote authenticated users, and possibly unauthenticated attackers, to bypass intended access restrictions and upload and execute arbitrary files by uploading an avatar file with an accepted Content-Type such as image/jpeg, then accessing it via a direct request to the file in files/standard/avatar.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2012-06/0007.html; http://www.collabtive.o-dyn.de/blog/?p=426; http://www.openwall.com/lists/oss-security/2012/06/06/6
CVE: CVE-2012-2671
Published: 2012-06-17
Description: The Rack::Cache rubygem 0.3.0 through 1.1 caches Set-Cookie and other sensitive headers, which allows attackers to obtain sensitive cookie information, hijack web sessions, or have other unspecified impact by accessing the cache.
CVSS Score: 7.5 (HIGH)
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081812.html; http://www.openwall.com/lists/oss-security/2012/06/06/4; http://www.openwall.com/lists/oss-security/2012/06/06/8
CVE: CVE-2012-2672
Published: 2012-06-17
Description: Oracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup, which allows local users to obtain context information an access resources from another WAR file by calling the FacesContext.getCurrentInstance function.
CVSS Score: 2.1 (LOW)
References: http://java.net/jira/browse/JAVASERVERFACES-2436; http://rhn.redhat.com/errata/RHSA-2012-1591.html; http://rhn.redhat.com/errata/RHSA-2012-1592.html
CVE: CVE-2012-2691
Published: 2012-06-17
Description: The mc_issue_note_update function in the SOAP API in MantisBT before 1.2.11 does not properly check privileges, which allows remote attackers with bug reporting privileges to edit arbitrary bugnotes via a SOAP request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092926.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093063.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093064.html
CVE: CVE-2012-2692
Published: 2012-06-17
Description: MantisBT before 1.2.11 does not check the delete_attachments_threshold permission when form_security_validation is set to OFF, which allows remote authenticated users with certain privileges to bypass intended access restrictions and delete arbitrary attachments.
CVSS Score: 3.6 (LOW)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092926.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093063.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093064.html
CVE: CVE-2012-2693
Published: 2012-06-17
Description: libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local users to access unintended USB devices.
CVSS Score: 3.7 (LOW)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2012-0748.html; http://rhn.redhat.com/errata/RHSA-2013-0127.html; http://www.openwall.com/lists/oss-security/2012/06/11/2
CVE: CVE-2012-3577
Published: 2012-06-17
Description: Unrestricted file upload vulnerability in doupload.php in the Nmedia Member Conversation plugin before 1.4 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/uploads/user_uploads.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://packetstormsecurity.org/files/113287/WordPress-Nmedia-WP-Member-Conversation-1.35.0-Shell-Upload.html; http://secunia.com/advisories/49375; http://wordpress.org/extend/plugins/wordpress-member-private-conversation/changelog/
CVE: CVE-2012-3578
Published: 2012-06-17
Description: Unrestricted file upload vulnerability in html/Upload.php in the FCChat Widget plugin 2.2.13.1 and earlier for WordPress allows remote attackers to execute arbitrary code by uploading a file with a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in html/images.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://packetstormsecurity.org/files/113323/WordPress-FCChat-Widget-2.x-Shell-Upload.html; http://secunia.com/advisories/49419; http://www.opensyscom.fr/Actualites/wordpress-plugins-fcchat-widget-shell-upload-vulnerability.html
CVE: CVE-2011-3671
Published: 2012-06-18
Description: Use-after-free vulnerability in the nsHTMLSelectElement function in nsHTMLSelectElement.cpp in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allows remote attackers to execute arbitrary code via vectors involving removal of the parent node of an element.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://www.mozilla.org/security/announce/2012/mfsa2012-41.html; https://bugzilla.mozilla.org/show_bug.cgi?id=739343; http://www.mozilla.org/security/announce/2012/mfsa2012-41.html
CVE: CVE-2012-2636
Published: 2012-06-19
Description: Cross-site scripting (XSS) vulnerability in KENT-WEB WEB PATIO 4.04 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN33171616/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000061; http://www.kent-web.com/bbs/patio.html
CVE: CVE-2012-2637
Published: 2012-06-19
Description: Cross-site scripting (XSS) vulnerability in KENT-WEB WEB PATIO 4.04 and earlier might allow remote attackers to inject arbitrary web script or HTML via a crafted cookie.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN58102473/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000062; http://www.kent-web.com/bbs/patio.html
CVE: CVE-2012-2638
Published: 2012-06-19
Description: Cross-site scripting (XSS) vulnerability in SmallPICT.cgi in SmallPICT before 2.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN36993373/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000060; http://wap2.jp/download/spict/
CVE: CVE-2012-3006
Published: 2012-06-19
Description: The Innominate mGuard Smart HW before HW-101130 and BD before BD-101030, mGuard industrial RS, mGuard delta HW before HW-103060 and BD before BD-211010, mGuard PCI, mGuard blade, and EAGLE mGuard appliances with software before 7.5.0 do not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof (1) HTTPS or (2) SSH servers by predicting a key value.
CVSS Score: 7.1 (HIGH)
CWE: CWE-310
References: http://www.innominate.com/data/downloads/software/innominate_security_advisory_20120614_001.pdf; http://www.us-cert.gov/control_systems/pdf/ICSA-12-167-01.pdf; https://freedom-to-tinker.com/blog/nadiah/new-research-theres-no-need-panic-over-factorable-keys-just-mind-your-ps-and-qs
CVE: CVE-2009-0693
Published: 2012-06-19
Description: Multiple buffer overflows in Wyse Device Manager (WDM) 4.7.x allow remote attackers to execute arbitrary code via (1) the User-Agent HTTP header to hserver.dll or (2) unspecified input to hagent.exe.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0101.html; http://www.kb.cert.org/vuls/id/654545; http://www.theregister.co.uk/2009/07/10/wyse_remote_exploit_bugs/
CVE: CVE-2009-0695
Published: 2012-06-19
Description: hagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which allows remote attackers to obtain management access via a crafted query, as demonstrated by a V52 query that triggers a power-off action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://archives.neohapsis.com/archives/fulldisclosure/2009-07/0101.html; http://www.exploit-db.com/exploits/19137/; http://www.kb.cert.org/vuls/id/654545
CVE: CVE-2012-0802
Published: 2012-06-19
Description: Multiple buffer overflows in Spamdyke before 4.3.0 might allow remote attackers to execute arbitrary code via vectors related to "serious errors in the usage of snprintf()/vsnprintf()" in which the return values may be larger than the size of the buffer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/47548; http://secunia.com/advisories/48257; http://security.gentoo.org/glsa/glsa-201203-01.xml
CVE: CVE-2012-0950
Published: 2012-06-19
Description: The Apport hook (DistUpgradeApport.py) in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04, uploads the /var/log/dist-upgrade directory when reporting bugs to Launchpad, which allows remote attackers to read repository credentials by viewing a public bug report.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0949.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.ubuntu.com/usn/USN-1443-2; https://bugs.launchpad.net/ubuntu/%2Bsource/update-manager/%2Bbug/1004503; http://www.ubuntu.com/usn/USN-1443-2
CVE: CVE-2012-0954
Published: 2012-06-19
Description: APT 0.7.x before 0.7.25 and 0.8.x before 0.8.16, when using the apt-key net-update to import keyrings, relies on GnuPG argument order and does not check GPG subkeys, which might allow remote attackers to install altered packages via a man-in-the-middle (MITM) attack.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3587.
CVSS Score: 2.6 (LOW)
CWE: CWE-20
References: http://seclists.org/fulldisclosure/2012/Jun/267; http://seclists.org/fulldisclosure/2012/Jun/271; http://seclists.org/fulldisclosure/2012/Jun/289
CVE: CVE-2012-2334
Published: 2012-06-19
Description: Integer overflow in filter/source/msfilter/msdffimp.cxx in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the length of an Escher graphics record in a PowerPoint (.ppt) document, which triggers a buffer overflow.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://archives.neohapsis.com/archives/bugtraq/2012-05/0091.html; http://cgit.freedesktop.org/libreoffice/core/commit/?id=28a6558f9d3ca2dda3191f8b5b3f2378ee2533da; http://cgit.freedesktop.org/libreoffice/core/commit/?id=512401decb286ba0fc3031939b8f7de8649c502e
CVE: CVE-2012-2753
Published: 2012-06-19
Description: Untrusted search path vulnerability in TrGUI.exe in the Endpoint Connect (aka EPC) GUI in Check Point Endpoint Security R73.x and E80.x on the VPN blade platform, Endpoint Security VPN R75, Endpoint Connect R73.x, and Remote Access Clients E75.x allows local users to gain privileges via a Trojan horse DLL in the current working directory.
CVSS Score: 6.9 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2012-06/0069.html; https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk76480; http://archives.neohapsis.com/archives/bugtraq/2012-06/0069.html
CVE: CVE-2012-3553
Published: 2012-06-19
Description: chan_skinny.c in the Skinny (aka SCCP) channel driver in Asterisk Open Source 10.x before 10.5.1 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by sending a Station Key Pad Button message and closing a connection in off-hook mode, a related issue to CVE-2012-2948.
CVSS Score: 4.0 (MEDIUM)
References: http://downloads.asterisk.org/pub/security/AST-2012-009.html; http://downloads.asterisk.org/pub/security/AST-2012-009.html
CVE: CVE-2012-3587
Published: 2012-06-19
Description: APT 0.7.x before 0.7.25 and 0.8.x before 0.8.16, when using the apt-key net-update to import keyrings, relies on GnuPG argument order and does not check GPG subkeys, which might allow remote attackers to install Trojan horse packages via a man-in-the-middle (MITM) attack.
CVSS Score: 2.6 (LOW)
CWE: CWE-20
References: http://seclists.org/fulldisclosure/2012/Jun/267; http://www.ubuntu.com/usn/USN-1475-1; http://www.ubuntu.com/usn/USN-1477-1
CVE: CVE-2012-3588
Published: 2012-06-19
Description: Directory traversal vulnerability in preview.php in the Plugin Newsletter plugin 1.5 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the data parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/49464; http://www.exploit-db.com/exploits/19018; http://www.opensyscom.fr/Actualites/wordpress-plugins-plugin-newsletter-remote-file-disclosure-vulnerability.html
CVE: CVE-2012-0716
Published: 2012-06-20
Description: Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server 7.0 before 7.0.0.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg1PM53132; http://www.ibm.com/support/docview.wss?uid=swg21595172; http://www.securityfocus.com/bid/52722
CVE: CVE-2012-0717
Published: 2012-06-20
Description: IBM WebSphere Application Server 7.0 before 7.0.0.23, when a certain SSLv2 configuration with client authentication is used, allows remote attackers to bypass X.509 client-certificate authentication via unspecified vectors.
CVSS Score: 2.6 (LOW)
CWE: CWE-287
References: http://www.ibm.com/support/docview.wss?uid=swg1PM52351; http://www.ibm.com/support/docview.wss?uid=swg21595172; http://www.ibm.com/support/docview.wss?uid=swg1PM52351
CVE: CVE-2012-0720
Published: 2012-06-20
Description: Cross-site scripting (XSS) vulnerability in the Integration Solution Console in the Administration Console in IBM WebSphere Application Server 7.0 before 7.0.0.23 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg1PM52274; http://www.ibm.com/support/docview.wss?uid=swg21595172; https://exchange.xforce.ibmcloud.com/vulnerabilities/74044
CVE: CVE-2012-2159
Published: 2012-06-20
Description: Open redirect vulnerability in IBM Eclipse Help System (IEHS), as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Data Collection Developer Library 6.0 and 6.0.1, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://www.ibm.com/support/docview.wss?uid=swg21596690; http://www.ibm.com/support/docview.wss?uid=swg21598423; https://exchange.xforce.ibmcloud.com/vulnerabilities/74832
CVE: CVE-2012-2161
Published: 2012-06-20
Description: Cross-site scripting (XSS) vulnerability in deferredView.jsp in IBM Eclipse Help System (IEHS), as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Data Collection Developer Library 6.0 and 6.0.1, allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg21596690; http://www.ibm.com/support/docview.wss?uid=swg21598423; https://exchange.xforce.ibmcloud.com/vulnerabilities/74833
CVE: CVE-2012-2170
Published: 2012-06-20
Description: The Application Snoop Servlet in IBM WebSphere Application Server 7.0 before 7.0.0.23 does not properly restrict access, which allows remote attackers to obtain sensitive client and request information via a direct request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://www.ibm.com/support/docview.wss?uid=swg1PM56183; http://www.ibm.com/support/docview.wss?uid=swg21595172; https://exchange.xforce.ibmcloud.com/vulnerabilities/75234
CVE: CVE-2012-2173
Published: 2012-06-20
Description: The ODBC driver in IBM Security AppScan Source 7.x and 8.x before 8.6 sends an SHA-1 hash of the connection password during connections to a solidDB database, which allows remote attackers to obtain sensitive information by sniffing the network.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-255
References: http://www.ibm.com/support/docview.wss?uid=swg21598423; https://exchange.xforce.ibmcloud.com/vulnerabilities/75242; http://www.ibm.com/support/docview.wss?uid=swg21598423
CVE: CVE-2012-2174
Published: 2012-06-20
Description: The URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a crafted notes:// URL.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.ibm.com/support/docview.wss?uid=swg21598348; https://exchange.xforce.ibmcloud.com/vulnerabilities/75320; http://www.ibm.com/support/docview.wss?uid=swg21598348
CVE: CVE-2012-2175
Published: 2012-06-20
Description: Buffer overflow in the Attachment_Times method in a certain ActiveX control in dwa85W.dll in IBM Lotus iNotes 8.5.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a long argument.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.ibm.com/support/docview.wss?uid=swg21596862; https://exchange.xforce.ibmcloud.com/vulnerabilities/75321; http://www.ibm.com/support/docview.wss?uid=swg21596862
CVE: CVE-2012-2180
Published: 2012-06-20
Description: The chaining functionality in the Distributed Relational Database Architecture (DRDA) module in IBM DB2 9.7 before FP6 and 9.8 before FP5 allows remote attackers to cause a denial of service (NULL pointer dereference, and resource consumption or daemon crash) via a crafted request.
CVSS Score: 4.3 (MEDIUM)
References: http://www.ibm.com/support/docview.wss?uid=swg1IC82234; http://www.ibm.com/support/docview.wss?uid=swg1IC82367; http://www.ibm.com/support/docview.wss?uid=swg21597090
CVE: CVE-2012-2192
Published: 2012-06-20
Description: The socketpair function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.1.4-FP-25 SP-02 allows local users to cause a denial of service (system crash) via a crafted application that leverages the presence of a socket on the free list.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-399
References: http://aix.software.ibm.com/aix/efixes/security/socket_advisory.asc; http://www.ibm.com/support/docview.wss?uid=isg1IV16603; http://www.ibm.com/support/docview.wss?uid=isg1IV19178
CVE: CVE-2012-3790
Published: 2012-06-20
Description: Cross-site scripting (XSS) vulnerability in index.php in Adiscon LogAnalyzer before 3.4.4 and 3.5.x before 3.5.5 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter in a Search action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://loganalyzer.adiscon.com/downloads/loganalyzer-3-4-4-v3-stable; http://loganalyzer.adiscon.com/downloads/loganalyzer-v3-5-5-v3-beta; http://loganalyzer.adiscon.com/security-advisories/loganalyzer-cross-site-scripting-vulnerability-in-highlight-parameter
CVE: CVE-2011-1923
Published: 2012-06-20
Description: The Diffie-Hellman key-exchange implementation in dhm.c in PolarSSL before 0.14.2 does not properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-5095.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-310
References: http://polarssl.org/trac/wiki/SecurityAdvisory201101; http://www.cl.cam.ac.uk/~rja14/Papers/psandqs.pdf; http://www.nessus.org/plugins/index.php?view=single&id=53360
CVE: CVE-2011-5095
Published: 2012-06-20
Description: The Diffie-Hellman key-exchange implementation in OpenSSL 0.9.8, when FIPS mode is enabled, does not properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-1923.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-310
References: http://www.cl.cam.ac.uk/~rja14/Papers/psandqs.pdf; http://www.nessus.org/plugins/index.php?view=single&id=53360; https://discussions.nessus.org/thread/3381
CVE: CVE-2012-2493
Published: 2012-06-20
Description: The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5 MR6 on Windows, and 2.x before 2.5 MR6 and 3.x before 3.0 MR8 on Mac OS X and Linux, does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug ID CSCtw47523.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-ac; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-ac