deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2003-1594
Published: 2010-04-05
Description: NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly enforce FTPREST.TXT settings, which allows remote attackers to bypass intended access restrictions via an FTP session.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1; http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
CVE: CVE-2003-1595
Published: 2010-04-05
Description: NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly perform "intruder detection," which has unspecified impact and attack vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1; http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
CVE: CVE-2003-1596
Published: 2010-04-05
Description: NWFTPD.nlm before 5.03.12 in the FTP server in Novell NetWare does not properly restrict filesystem use by anonymous users with NFS Gateway home directories, which allows remote attackers to bypass intended access restrictions via an FTP session.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1; http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
CVE: CVE-2004-2767
Published: 2010-04-05
Description: NWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWare does not promptly close DS sessions, which allows remote attackers to cause a denial of service (connection slot exhaustion) by establishing many FTP sessions that persist for the lifetime of a DS session.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1; http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
CVE: CVE-2005-4887
Published: 2010-04-05
Description: NWFTPD.nlm before 5.06.05 in the FTP server in Novell NetWare 6.5 SP5 allows attackers to have an unspecified impact via vectors related to passwords.
CVSS Score: 7.5 (HIGH)
References: http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1; https://bugzilla.novell.com/show_bug.cgi?id=133977; http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
CVE: CVE-2005-4888
Published: 2010-04-05
Description: NWFTPD.nlm before 5.06.04 in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (excessive stale connections) by establishing many FTP sessions, which persist in the Not-Logged-In state after each session is completed.
CVSS Score: 5.0 (MEDIUM)
References: http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1; https://bugzilla.novell.com/show_bug.cgi?id=97819; http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
CVE: CVE-2007-6734
Published: 2010-04-05
Description: NWFTPD.nlm before 5.08.07 in the FTP server in Novell NetWare 6.5 SP7 does not properly implement the FTPREST.TXT NOREMOTE restriction, which allows remote authenticated users to access directories outside of the home server via unspecified vectors.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1; https://bugzilla.novell.com/show_bug.cgi?id=272093; http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
CVE: CVE-2007-6735
Published: 2010-04-05
Description: NWFTPD.nlm before 5.08.06 in the FTP server in Novell NetWare does not properly handle partial matches for container names in the FTPREST.TXT file, which allows remote attackers to bypass intended access restrictions via an FTP session.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1; https://bugzilla.novell.com/show_bug.cgi?id=260459; http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
CVE: CVE-2008-3279
Published: 2010-04-05
Description: Untrusted search path vulnerability in libbrlttybba.so in brltty 3.7.2 allows local users to gain privileges via a crafted library, related to an incorrect RPATH setting.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/39231; http://www.redhat.com/support/errata/RHSA-2010-0181.html; http://www.vupen.com/english/advisories/2010/0755
CVE: CVE-2009-4764
Published: 2010-04-05
Description: Adobe Reader 8.x and 9.x on Windows is able to execute EXE files that are embedded in a PDF document, which makes it easier for remote attackers to trick users into executing arbitrary code via a crafted document.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://lists.immunitysec.com/pipermail/dailydave/2010-April/006072.html; http://lists.immunitysec.com/pipermail/dailydave/2010-April/006074.html; http://www.metasploit.com/redmine/projects/framework/repository/revisions/8379/changes/modules/exploits/windows/fileformat/adobe_pdf_embedded_exe.rb
CVE: CVE-2010-0825
Published: 2010-04-05
Description: lib-src/movemail.c in movemail in emacs 22 and 23 allows local users to read, modify, or delete arbitrary mailbox files via a symlink attack, related to improper file-permission checks.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/39155; http://www.mandriva.com/security/advisories?name=MDVSA-2010:083; http://www.ubuntu.com/usn/USN-919-1
CVE: CVE-2010-0826
Published: 2010-04-05
Description: The Free Software Foundation (FSF) Berkeley DB NSS module (aka libnss-db) 2.2.3pre1 reads the DB_CONFIG file in the current working directory, which allows local users to obtain sensitive information via a symlink attack involving a setgid or setuid application that uses this module.
CVSS Score: 1.9 (LOW)
CWE: CWE-200
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705; http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038760.html; http://secunia.com/advisories/39165
CVE: CVE-2010-0828
Published: 2010-04-05
Description: Cross-site scripting (XSS) vulnerability in action/Despam.py in the Despam action module in MoinMoin 1.8.7 and 1.9.2 allows remote authenticated users to inject arbitrary web script or HTML by creating a page with a crafted URI.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=575995; http://hg.moinmo.in/moin/1.9/rev/6e603e5411ca; http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038490.html
CVE: CVE-2010-1238
Published: 2010-04-05
Description: MoinMoin 1.7.1 allows remote attackers to bypass the textcha protection mechanism by modifying the textcha-question and textcha-answer fields to have empty values.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/39284; http://www.debian.org/security/2010/dsa-2024; http://www.ubuntu.com/usn/USN-925-1
CVE: CVE-2010-1239
Published: 2010-04-05
Description: Foxit Reader before 3.2.1.0401 allows remote attackers to (1) execute arbitrary local programs via a certain "/Type /Action /S /Launch" sequence, and (2) execute arbitrary programs embedded in a PDF document via an unspecified "/Launch /Action" sequence, a related issue to CVE-2009-0836.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://blog.didierstevens.com/2010/03/29/escape-from-pdf/; http://blog.didierstevens.com/2010/03/31/escape-from-foxit-reader/; http://www.f-secure.com/weblog/archives/00001923.html
CVE: CVE-2010-1240
Published: 2010-04-05
Description: Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in the Launch File warning dialog, which makes it easier for remote attackers to trick users into executing an arbitrary local program that was specified in a PDF document, as demonstrated by a text field that claims that the Open button will enable the user to read an encrypted message.
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://blog.didierstevens.com/2010/03/29/escape-from-pdf/; http://blog.didierstevens.com/2010/06/29/quickpost-no-escape-from-pdf/; http://lists.immunitysec.com/pipermail/dailydave/2010-April/006075.html
CVE: CVE-2010-1241
Published: 2010-04-05
Description: Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, aka FG-VD-10-005.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://blog.fortinet.com/the-upcoming-blackhat-europe-2010-presentation/; http://lists.immunitysec.com/pipermail/dailydave/2010-April/006077.html; http://www.adobe.com/support/security/bulletins/apsb10-09.html
CVE: CVE-2010-1242
Published: 2010-04-05
Description: Multiple cross-site scripting (XSS) vulnerabilities in the IBM Web Interface for Content Management (aka WEBi) before 1.0.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/39186; http://www-01.ibm.com/support/docview.wss?uid=swg24025662; http://www-1.ibm.com/support/docview.wss?uid=swg1IO11274
CVE: CVE-2010-1243
Published: 2010-04-05
Description: The IBM Web Interface for Content Management (aka WEBi) before 1.0.4 creates persistent cookies on client workstations, which has unspecified impact and attack vectors.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/39186; http://www-01.ibm.com/support/docview.wss?uid=swg24025662; http://www-1.ibm.com/support/docview.wss?uid=swg1IO11279
CVE: CVE-2009-2822
Published: 2010-04-05
Description: AirPort Utility before 5.5.1 for Apple AirPort Base Station does not properly distribute MAC address ACLs to network extenders, which allows remote attackers to bypass intended access restrictions via an 802.11 authentication frame.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2010//Mar/msg00004.html; http://secunia.com/advisories/39160; http://securitytracker.com/id?1023801
CVE: CVE-2009-2936
Published: 2010-04-05
Description: The Command Line Interface (aka Server CLI or administration interface) in the master process in the reverse proxy server in Varnish before 2.1.0 does not require authentication for commands received through a TCP port, which allows remote attackers to (1) execute arbitrary code via a vcl.inline directive that provides a VCL configuration file containing inline C code; (2) change the ownership of the master process via param.set, stop, and start directives; (3) read the initial line of an arbitrary file via a vcl.load directive; or (4) conduct cross-site request forgery (CSRF) attacks that leverage a victim's location on a trusted network and improper input validation of directives.  NOTE: the vendor disputes this report, saying that it is "fundamentally misguided and pointless.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-April/040359.html; http://www.securityfocus.com/archive/1/510360/100/0/threaded; http://www.securityfocus.com/archive/1/510368/100/0/threaded
CVE: CVE-2010-0009
Published: 2010-04-05
Description: Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify (1) hashes or (2) passwords.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://archives.neohapsis.com/archives/bugtraq/2010-03/0267.html; http://couchdb.apache.org/security.html; http://secunia.com/advisories/39146
CVE: CVE-2010-0625
Published: 2010-04-05
Description: Stack-based buffer overflow in NWFTPD.nlm before 5.10.01 in the FTP server in Novell NetWare 5.1 through 6.5 SP8 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long (1) MKD, (2) RMD, (3) RNFR, or (4) DELE command.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/39151; http://securitytracker.com/id?1023768; http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
CVE: CVE-2010-0684
Published: 2010-04-05
Description: Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script or HTML via the JMSDestination parameter in a queue action.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://activemq.apache.org/activemq-531-release.html; http://secunia.com/advisories/39223; http://securitytracker.com/id?1023778
CVE: CVE-2010-1244
Published: 2010-04-05
Description: Cross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to hijack the authentication of unspecified victims for requests that create queues via the JMSDestination parameter in a queue action.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://activemq.apache.org/activemq-531-release.html; http://secunia.com/advisories/39223; https://exchange.xforce.ibmcloud.com/vulnerabilities/57398
CVE: CVE-2010-0173
Published: 2010-04-05
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 9.3 (HIGH)
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038367.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038378.html; http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
CVE: CVE-2010-0174
Published: 2010-04-05
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038367.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038378.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038406.html
CVE: CVE-2010-0175
Published: 2010-04-05
Description: Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038367.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038378.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038406.html
CVE: CVE-2010-0176
Published: 2010-04-05
Description: Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038367.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038378.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038406.html
CVE: CVE-2010-0177
Published: 2010-04-05
Description: Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html; http://secunia.com/advisories/38566; http://secunia.com/advisories/39117
CVE: CVE-2010-0178
Published: 2010-04-05
Description: Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by loading a chrome: URL and then loading a javascript: URL.
CVSS Score: 7.6 (HIGH)
CWE: CWE-94
References: http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html; http://secunia.com/advisories/39136; http://secunia.com/advisories/39240
CVE: CVE-2010-0179
Published: 2010-04-05
Description: Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute arbitrary JavaScript via a crafted HTTP response.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-94
References: http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00002.html; http://secunia.com/advisories/3924
CVE: CVE-2010-0181
Published: 2010-04-05
Description: Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail application in situations where an IMG element has a SRC attribute that is a redirect to a mailto: URL, which allows remote attackers to cause a denial of service (excessive application launches) via an HTML document with many images.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html; http://secunia.com/advisories/39136; http://secunia.com/advisories/39397
CVE: CVE-2010-0182
Published: 2010-04-05
Description: The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended access restrictions via crafted content.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html; http://secunia.com/advisories/39397; http://support.avaya.com/css/P8/documents/100091069
CVE: CVE-2010-1265
Published: 2010-04-06
Description: SQL injection vulnerability in Adam Corley dcsFlashGames (com_dcs_flashgames) allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1003-exploits/joomladcsflashgames-sql.txt; http://secunia.com/advisories/39161; http://www.exploit-db.com/exploits/11884
CVE: CVE-2010-1266
Published: 2010-04-06
Description: Multiple PHP remote file inclusion vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) template, (2) menu, (3) events, and (4) SITEROOT parameters to template/babyweb/index.php; the (5) modules and (6) copyright parameters to template/calm/footer.php; the (7) menu parameter to template/calm/top.php; and the (8) modules, (9) copyright, and (10) menu parameters to template/wm025/footer.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://inj3ct0r.com/exploits/11394; http://packetstormsecurity.org/1003-exploits/webmaid-rfilfi.txt; http://www.exploit-db.com/exploits/11831
CVE: CVE-2010-1267
Published: 2010-04-06
Description: Multiple directory traversal vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow remote attackers to read arbitrary files via directory traversal sequences in the com parameter to (1) cContactus.php, (2) cGuestbook.php, and (3) cArticle.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://inj3ct0r.com/exploits/11394; http://packetstormsecurity.org/1003-exploits/webmaid-rfilfi.txt; http://www.exploit-db.com/exploits/11831
CVE: CVE-2010-1268
Published: 2010-04-06
Description: Directory traversal vulnerability in index.php in justVisual CMS 2.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files directory traversal sequences in the p parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/63156; http://packetstormsecurity.org/1003-exploits/justvisual-lfi.txt; http://secunia.com/advisories/39093
CVE: CVE-2010-1269
Published: 2010-04-06
Description: SQL injection vulnerability in auktion.php in phpscripte24 Niedrig Gebote Pro Auktions System II allows remote attackers to execute arbitrary SQL commands via the id_auk parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://4004securityproject.wordpress.com/2010/03/18/phpscripte24-niedrig-gebote-pro-auktions-system-ii-blind-sql-injection-auktion-php/; http://packetstormsecurity.org/1003-exploits/phpscripte24-sql.txt; http://secunia.com/advisories/38971
CVE: CVE-2010-1270
Published: 2010-04-06
Description: SQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote attackers to execute arbitrary SQL commands via the id_auk parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://4004securityproject.wordpress.com/2010/03/16/phpscripte24-auktionshaus-community-standart-system/; http://packetstormsecurity.org/1003-exploits/multiauktions-sql.txt; http://secunia.com/advisories/38971
CVE: CVE-2010-0750
Published: 2010-04-06
Description: pkexec.c in pkexec in libpolkit in PolicyKit 0.96 allows local users to determine the existence of arbitrary files via the argument.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://bugs.freedesktop.org/show_bug.cgi?id=26982; http://cgit.freedesktop.org/PolicyKit/commit/?id=14bdfd816512a82b1ad258fa143ae5faa945df8a; http://marc.info/?l=oss-security&m=[PII_REDACTED]1235&w=2
CVE: CVE-2010-0751
Published: 2010-04-06
Description: The ip_evictor function in ip_fragment.c in libnids before 1.24, as used in dsniff and possibly other products, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via crafted fragmented packets.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-476
References: http://freefr.dl.sourceforge.net/project/libnids/libnids/1.24/libnids-1.24.releasenotes.txt; http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038375.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038388.html
CVE: CVE-2010-1144
Published: 2010-04-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2010-0751, CVE-2010-1277.  Reason: this candidate was intended for one issue, but it was accidentally assigned to two different issues, one for libnids and another for Zabbix.  Notes: All CVE users should consult CVE-2010-0751 (libnids) and CVE-2010-1277 (Zabbix) to determine which ID is appropriate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2010-1147
Published: 2010-04-06
Description: Stack-based buffer overflow in Open Direct Connect Hub (aka Open DC Hub or OpenDCHub) 0.8.1 allows remote authenticated users to execute arbitrary code via a long MyINFO message.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-119
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=576308; http://lists.fedoraproject.org/pipermail/package-announce/2010-April/040360.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-April/040380.html