deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-5040
Published: 2011-11-02
Description: PHP remote file inclusion vulnerability in nucleus/plugins/NP_gallery.php in the NP_Gallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary PHP code via a URL in the DIR_NUCLEUS parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/40022; http://www.exploit-db.com/exploits/12787/; http://www.osvdb.org/65004
CVE: CVE-2010-5041
Published: 2011-11-02
Description: SQL injection vulnerability in index.php in the NP_Gallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary SQL commands via the id parameter in a plugin action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/40022; http://www.exploit-db.com/exploits/12787/; http://www.osvdb.org/65005
CVE: CVE-2010-5042
Published: 2011-11-02
Description: Cross-site scripting (XSS) vulnerability in the DJ-ArtGallery (com_djartgallery) component 0.9.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the cid[] parameter in an editItem action to administrator/index.php.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/65188; http://secunia.com/advisories/40073; http://www.exploit-db.com/exploits/13737/
CVE: CVE-2010-5043
Published: 2011-11-02
Description: SQL injection vulnerability in the DJ-ArtGallery (com_djartgallery) component 0.9.1 for Joomla! allows remote authenticated users to execute arbitrary SQL commands via the cid[] parameter in an editItem action to administrator/index.php.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/65187; http://secunia.com/advisories/40073; http://www.exploit-db.com/exploits/13737/
CVE: CVE-2010-5044
Published: 2011-11-02
Description: SQL injection vulnerability in models/log.php in the Search Log (com_searchlog) component 3.1.0 for Joomla! allows remote authenticated users, with Public Back-end privileges, to execute arbitrary SQL commands via the search parameter in a log action to administrator/index.php.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/65185; http://secunia.com/advisories/40055; http://www.exploit-db.com/exploits/13746/
CVE: CVE-2010-5045
Published: 2011-11-02
Description: Cross-site scripting (XSS) vulnerability in poll/default.asp in Smart ASP Survey allows remote attackers to inject arbitrary web script or HTML via the catid parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/36028; http://www.exploit-db.com/exploits/13880; http://www.securityfocus.com/bid/40870
CVE: CVE-2011-2676
Published: 2011-11-03
Description: The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and PC/Mobile before 3.1, plug-ins for Movable Type do not require administrative authentication, which allows remote authenticated users to modify data via unspecified vectors.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-287
References: http://jvn.jp/en/jp/JVN34980730/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2011-000078; http://www.ark-web.jp/movabletype/a-form/docs/security_patch.html
CVE: CVE-2011-3995
Published: 2011-11-03
Description: Unspecified vulnerability in Twilight Frontier Touhou Hisouten 1.06 and earlier allows remote attackers to cause a denial of service (daemon crash) via unknown network traffic.
CVSS Score: 5.0 (MEDIUM)
References: http://jvn.jp/en/jp/JVN50227837/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2011-000089; https://exchange.xforce.ibmcloud.com/vulnerabilities/71027
CVE: CVE-2011-4005
Published: 2011-11-03
Description: Cross-site request forgery (CSRF) vulnerability in the Services Ready Platform Configuration Utility web interface on the Cisco Small Business SRP521W, SRP526W, and SRP527W with firmware before 1.1.24 and the Small Business SRP541W, SRP546W, and SRP547W with firmware before 1.2.1 allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary commands, aka Bug ID CSCtr45124.
CVSS Score: 9.3 (HIGH)
CWE: CWE-352
References: http://secunia.com/advisories/46664; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111102-srp500; http://www.securityfocus.com/bid/50495
CVE: CVE-2011-4273
Published: 2011-11-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in GoAhead Webserver 2.18 allow remote attackers to inject arbitrary web script or HTML via (1) the group parameter to goform/AddGroup, related to addgroup.asp; (2) the url parameter to goform/AddAccessLimit, related to addlimit.asp; or the (3) user (aka User ID) or (4) group parameter to goform/AddUser, related to adduser.asp.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/46894; http://www.kb.cert.org/vuls/id/384427; https://exchange.xforce.ibmcloud.com/vulnerabilities/70434
CVE: CVE-2011-4274
Published: 2011-11-03
Description: Cross-site scripting (XSS) vulnerability in the A-Form PC and PC/Mobile before 3.1 plug-ins for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-2676.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.ark-web.jp/movabletype/a-form/docs/security_patch.html; http://www.ark-web.jp/movabletype/blog/2011/09/aform_update110927.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/70405
CVE: CVE-2011-3379
Published: 2011-11-03
Description: The is_a function in PHP 5.3.7 and 5.3.8 triggers a call to the __autoload function, which makes it easier for remote attackers to execute arbitrary code by providing a crafted URL and leveraging potentially unsafe behavior in certain PEAR packages and custom autoloaders.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041; http://securityreason.com/securityalert/8525; http://svn.php.net/viewvc/?view=revision&revision=317183
CVE: CVE-2011-4078
Published: 2011-11-03
Description: include/iniset.php in Roundcube Webmail 0.5.4 and earlier, when PHP 5.3.7 or 5.3.8 is used, allows remote attackers to trigger a GET request for an arbitrary URL, and cause a denial of service (resource consumption and inbox outage), via a Subject header containing only a URL, a related issue to CVE-2011-3379.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041; http://openwall.com/lists/oss-security/2011/10/26/6; http://trac.roundcube.net/ticket/1488086
CVE: CVE-2011-4100
Published: 2011-11-03
Description: The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.3 does not initialize a certain variable, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://anonsvn.wireshark.org/viewvc?view=revision&revision=39140; http://openwall.com/lists/oss-security/2011/11/01/9; http://osvdb.org/76768
CVE: CVE-2011-4101
Published: 2011-11-03
Description: The dissect_infiniband_common function in epan/dissectors/packet-infiniband.c in the Infiniband dissector in Wireshark 1.4.0 through 1.4.9 and 1.6.x before 1.6.3 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed packet.
CVSS Score: 4.3 (MEDIUM)
References: http://anonsvn.wireshark.org/viewvc?view=revision&revision=39500; http://openwall.com/lists/oss-security/2011/11/01/9; http://osvdb.org/76769
CVE: CVE-2011-4102
Published: 2011-11-03
Description: Heap-based buffer overflow in the erf_read_header function in wiretap/erf.c in the ERF file parser in Wireshark 1.4.0 through 1.4.9 and 1.6.x before 1.6.3 allows remote attackers to cause a denial of service (application crash) via a malformed file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://anonsvn.wireshark.org/viewvc?view=revision&revision=39508; http://openwall.com/lists/oss-security/2011/11/01/9; http://osvdb.org/76770
CVE: CVE-2011-3986
Published: 2011-11-03
Description: Cross-site scripting (XSS) vulnerability in Pligg before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN04013920/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2011-000084; http://jvn.jp/en/jp/JVN04013920/index.html
CVE: CVE-2011-3987
Published: 2011-11-03
Description: dtsoftbus01.sys in DAEMON Tools Lite before 4.41.3, Pro Standard before 4.41.0315, and Pro Advanced before 4.41.0315 allows local users to cause a denial of service (system crash) via an invalid DeviceIoControl request to \\.\dtsoftbusctl.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-399
References: http://archives.neohapsis.com/archives/bugtraq/2011-10/0101.html; http://jvn.jp/en/jp/JVN07414354/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2011-000085
CVE: CVE-2011-3992
Published: 2011-11-03
Description: Buffer overflow in the SSH server functionality on the D-Link DES-3800 with firmware before 4.50B052, DWL-2100AP with firmware before 2.50RC548, and DWL-3200AP with firmware before 2.55RC549 allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://jvn.jp/en/jp/JVN72640744/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2011-000092; http://osvdb.org/76628
CVE: CVE-2011-3993
Published: 2011-11-03
Description: SKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.2 and earlier, MailPack 1.741 and earlier, and AutoTagging 0.08 and earlier plugins for Movable Type, uses weak permissions, which allows remote authenticated users to modify files and settings via unspecified vectors.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-264
References: http://jvn.jp/en/jp/JVN41032068/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2011-000093; http://www.mtcms.jp/news/product/[PII_REDACTED]21.html
CVE: CVE-2011-3994
Published: 2011-11-03
Description: Cross-site request forgery (CSRF) vulnerability in SKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.2 and earlier, MailPack 1.741 and earlier, and AutoTagging 0.08 and earlier plugins for Movable Type, allows remote attackers to hijack the authentication of arbitrary users for requests that modify data.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://jvn.jp/en/jp/JVN56667137/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2011-000094; http://www.mtcms.jp/news/product/[PII_REDACTED]21.html
CVE: CVE-2011-3996
Published: 2011-11-03
Description: The LiveData Service in CSWorks before 2.0.4115.1 allows remote attackers to cause a denial of service (service crash) via crafted TCP packets.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://jvn.jp/en/jp/JVN98649286/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2011-000095; http://secunia.com/advisories/46625
CVE: CVE-2011-4277
Published: 2011-11-03
Description: Cross-site scripting (XSS) vulnerability in CourseForum ProjectForum 7.0.1.3038 allows remote attackers to inject arbitrary web script or HTML via a crafted name of an object within a more object on a wiki page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.kb.cert.org/vuls/id/901251; http://www.kb.cert.org/vuls/id/901251
CVE: CVE-2011-1513
Published: 2011-11-04
Description: Static code injection vulnerability in install_.php in e107 CMS 0.7.24 and probably earlier versions, when the installation script is not removed, allows remote attackers to inject arbitrary PHP code into e107_config.php via a crafted MySQL server name.
CVSS Score: 7.5 (HIGH)
CWE: CWE-78
References: http://e107.svn.sourceforge.net/viewvc/e107/trunk/e107_0.8/install_.php?r1=11931&r2=12376&pathrev=12376; http://www.coresecurity.com/content/e107-cms-script-command-injection; http://www.securityfocus.com/bid/50339
CVE: CVE-2011-3164
Published: 2011-11-04
Description: Unspecified vulnerability in HP-UX Containers (formerly HP-UX Secure Resource Partitions (SRP)) A.03.00, A.03.00.002, and A.03.01, when running with patch PHKL_42310, allows local users to gain privileges via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
References: http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03057703&ac.admitted=[PII_REDACTED]12.876[PII_REDACTED]80143; http://secunia.com/advisories/46617; http://www.securityfocus.com/bid/50396
CVE: CVE-2011-3171
Published: 2011-11-04
Description: Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when running on SUSE Linux Enterprise Server and possibly other operating systems, when the Netware OES remote server feature is enabled, allows local users to overwrite arbitrary files via unknown vectors.
CVSS Score: 3.6 (LOW)
CWE: CWE-22
References: http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00016.html; http://www.securityfocus.com/bid/49541
CVE: CVE-2011-3330
Published: 2011-11-04
Description: Buffer overflow in the UnitelWay Windows Device Driver, as used in Schneider Electric Unity Pro 6 and earlier, OPC Factory Server 3.34, Vijeo Citect 7.20 and earlier, Telemecanique Driver Pack 2.6 and earlier, Monitor Pro 7.6 and earlier, and PL7 Pro 4.5 and earlier, allows local users, and possibly remote attackers, to execute arbitrary code via an unspecified system parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/46534; http://www.scada.schneider-electric.com/sites/scada/en/login/vijeo-citect-unitelway-windows-device-driver.page; http://www.securityfocus.com/bid/50319
CVE: CVE-2011-3364
Published: 2011-11-04
Description: Incomplete blacklist vulnerability in the svEscape function in settings/plugins/ifcfg-rh/shvar.c in the ifcfg-rh plug-in for GNOME NetworkManager 0.9.1, 0.9.0, 0.8.1, and possibly other versions, when PolicyKit is configured to allow users to create new connections, allows local users to execute arbitrary commands via a newline character in the name for a new network connection, which is not properly handled when writing to the ifcfg file.
CVSS Score: 6.9 (MEDIUM)
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066828.html; http://www.mandriva.com/security/advisories?name=MDVSA-2011:171; http://www.redhat.com/support/errata/RHSA-2011-1338.html
CVE: CVE-2011-3402
Published: 2011-11-04
Description: Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via crafted font data in a Word document or web page, as exploited in the wild in November 2011 by Duqu, aka "TrueType Font Parsing Vulnerability."
CVSS Score: 8.8 (HIGH)
References: http://blogs.mcafee.com/mcafee-labs/the-day-of-the-golden-jackal-%E2%80%93-further-tales-of-the-stuxnet-files; http://blogs.technet.com/b/msrc/archive/2011/11/03/microsoft-releases-security-advisory-2639658.aspx; http://isc.sans.edu/diary/Duqu+Mitigation/11950
CVE: CVE-2011-3581
Published: 2011-11-04
Description: Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns before 1.6.11 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Resource Record (RR) with an unknown type containing input that is longer than a specified length.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068091.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068201.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068239.html
CVE: CVE-2011-3594
Published: 2011-11-04
Description: The g_markup_escape_text function in the SILC protocol plug-in in libpurple 2.10.0 and earlier, as used in Pidgin and possibly other products, allows remote attackers to cause a denial of service (crash) via invalid UTF-8 sequences that trigger use of invalid pointers and an out-of-bounds read, related to interactions with certain versions of glib2.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://developer.pidgin.im/ticket/14636; http://developer.pidgin.im/viewmtn/revision/diff/be5e66abad2af29604bc794cc4c6600ab12751f3/with/7eb1f6d56cc58bbb5b56b7df53955d36b9b419b8; http://pidgin.im/news/security/?id=56
CVE: CVE-2011-3616
Published: 2011-11-04
Description: The getSkillname function in the eve module in Conky 1.8.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on /tmp/.cesf.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=612033; http://secunia.com/advisories/43225; http://secunia.com/advisories/46353
CVE: CVE-2011-3989
Published: 2011-11-04
Description: SQL injection vulnerability in DBD::mysqlPP 0.04 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://jvn.jp/en/jp/JVN51216285/index.html; http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000086.html; http://www.securityfocus.com/bid/50139
CVE: CVE-2011-3991
Published: 2011-11-04
Description: Untrusted search path vulnerability in FFFTP 1.98a and earlier allows local users to execute arbitrary code via unspecified functions.
CVSS Score: 9.3 (HIGH)
References: http://jvn.jp/en/jp/JVN62336482/index.html; http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000091.html; http://secunia.com/advisories/46649
CVE: CVE-2011-4066
Published: 2011-11-04
Description: SQL injection vulnerability in bbs/tb.php in Gnuboard 4.33.02 and earlier allows remote attackers to execute arbitrary SQL commands via the PATH_INFO.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/17992; http://www.securityfocus.com/bid/50173; http://www.securitytracker.com/id?1026197
CVE: CVE-2011-3168
Published: 2011-11-07
Description: Unspecified vulnerability in the POP and IMAP service implementations in HP TCP/IP Services 5.6 and 5.7 for OpenVMS allows remote attackers to obtain sensitive information via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01908983; http://www.securitytracker.com/id?1026279; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01908983
CVE: CVE-2011-3169
Published: 2011-11-07
Description: Unspecified vulnerability in the SMTP service implementation in HP TCP/IP Services 5.6 and 5.7 for OpenVMS allows remote attackers to cause a denial of service via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01915145; http://www.securitytracker.com/id?1026277; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01915145
CVE: CVE-2011-3607
Published: 2011-11-08
Description: Integer overflow in the ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif module is enabled, allows local users to gain privileges via a .htaccess file with a crafted SetEnvIf directive, in conjunction with a crafted HTTP request header, leading to a heap-based buffer overflow.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-189
References: http://archives.neohapsis.com/archives/fulldisclosure/2011-11/0023.html; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041; http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html
CVE: CVE-2011-4415
Published: 2011-11-08
Description: The ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif module is enabled, does not restrict the size of values of environment variables, which allows local users to cause a denial of service (memory consumption or NULL pointer dereference) via a .htaccess file with a crafted SetEnvIf directive, in conjunction with a crafted HTTP request header, related to (1) the "len +=" statement and (2) the apr_pcalloc function call, a different vulnerability than CVE-2011-3607.
CVSS Score: 1.2 (LOW)
CWE: CWE-20
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041; http://www.gossamer-threads.com/lists/apache/dev/403775; http://www.halfdog.net/Security/2011/ApacheModSetEnvIfIntegerOverflow/
CVE: CVE-2011-2004
Published: 2011-11-08
Description: Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (reboot) via a crafted TrueType font file, aka "TrueType Font Parsing Vulnerability," a different vulnerability than CVE-2011-3402.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: http://www.kb.cert.org/vuls/id/675073; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-084; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14133
CVE: CVE-2011-2013
Published: 2011-11-08
Description: Integer overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code by sending a sequence of crafted UDP packets to a closed port, aka "Reference Counter Overflow Vulnerability."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-189, CWE-190
References: http://www.securitytracker.com/id?1026290; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-083; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13877
CVE: CVE-2011-2014
Published: 2011-11-08
Description: The LDAP over SSL (aka LDAPS) implementation in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directory Service (AD LDS) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not examine Certificate Revocation Lists (CRLs), which allows remote authenticated users to bypass intended certificate restrictions and access Active Directory resources by leveraging a revoked X.509 certificate for a domain account, aka "LDAPS Authentication Bypass Vulnerability."
CVSS Score: 9.0 (HIGH)
CWE: CWE-287
References: http://www.securitytracker.com/id?1026294; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-086; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13278
CVE: CVE-2011-2016
Published: 2011-11-08
Description: Untrusted search path vulnerability in Windows Mail and Windows Meeting Space in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .eml or .wcinv file, aka "Windows Mail Insecure Library Loading Vulnerability."
CVSS Score: 7.3 (HIGH)
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-085; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14028; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-085
CVE: CVE-2011-2446
Published: 2011-11-08
Description: The DIRapi library in Adobe Shockwave Player before 11.6.3.633 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2448.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb11-27.html; http://www.securitytracker.com/id?1026288; http://www.adobe.com/support/security/bulletins/apsb11-27.html