deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-5024
Published: 2011-12-29
Description: Cross-site scripting (XSS) vulnerability in mmsearch/design in the Mailman/htdig integration patch for Mailman allows remote attackers to inject arbitrary web script or HTML via the config parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://sitewat.ch/Advisory/View/3; https://sitewat.ch/Advisory/View/3
CVE: CVE-2011-5025
Published: 2011-12-29
Description: Multiple cross-site scripting (XSS) vulnerabilities in the wiki application in Yaws 1.88 allow remote attackers to inject arbitrary web script or HTML via (1) the tag parameter to editTag.yaws, (2) the index parameter to showOldPage.yaws, (3) the node parameter to allRefsToMe.yaws, or (4) the text parameter to editPage.yaws.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/51276; https://sitewat.ch/Advisory/View/4; http://www.securityfocus.com/bid/51276
CVE: CVE-2011-4163
Published: 2011-12-29
Description: Unspecified vulnerability in HP Database Archiving Software 6.31 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1213.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2173&w=2; http://www.securityfocus.com/bid/51205; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2173&w=2
CVE: CVE-2011-4164
Published: 2011-12-29
Description: Unspecified vulnerability in HP Database Archiving Software 6.31 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1214.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2173&w=2; http://www.securityfocus.com/bid/51205; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2173&w=2
CVE: CVE-2011-4165
Published: 2011-12-29
Description: Unspecified vulnerability in HP Database Archiving Software 6.31 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1263.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2173&w=2; http://www.securityfocus.com/bid/51205; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2173&w=2
CVE: CVE-2011-4615
Published: 2011-12-29
Description: Multiple cross-site scripting (XSS) vulnerabilities in Zabbix before 1.8.10 allow remote attackers to inject arbitrary web script or HTML via the gname parameter (aka host groups name) to (1) hostgroups.php and (2) usergrps.php, the update action to (3) hosts.php and (4) scripts.php, and (5) maintenance.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071660.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071687.html; http://osvdb.org/77771
CVE: CVE-2011-5027
Published: 2011-12-29
Description: Cross-site scripting (XSS) vulnerability in ZABBIX before 1.8.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the profiler.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071660.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071687.html; http://osvdb.org/77772
CVE: CVE-2011-5028
Published: 2011-12-29
Description: Directory traversal vulnerability in novelllogmanager/FileDownload in Novell Sentinel Log Manager 1.2.0.1_938 and earlier, as used in Novell Sentinel before 7.0.1.0, allows remote authenticated users to read arbitrary files via a .. (dot dot) in the filename parameter.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/fulldisclosure/2011-12/0368.html; http://osvdb.org/77948; http://secunia.com/advisories/47258
CVE: CVE-2011-5029
Published: 2011-12-29
Description: Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog 0.7.0 and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the (1) entry parameter to delete.php or (2) category parameter to index.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/77696; http://osvdb.org/77697; http://secunia.com/advisories/46893
CVE: CVE-2011-5030
Published: 2011-12-29
Description: Cross-site scripting (XSS) vulnerability in the Meta tags quick module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors, probably related to "names of entity bundles."
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://drupal.org/node/1370878; http://drupal.org/node/1370934; http://osvdb.org/77740
CVE: CVE-2011-5031
Published: 2011-12-29
Description: Multiple SQL injection vulnerabilities in servlet/capexweb.parentvalidatepassword in cApexWEB 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) dfuserid and (2) dfpassword parameters.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/47285; http://www.exploit-db.com/exploits/18247; http://www.osvdb.org/77998
CVE: CVE-2011-5032
Published: 2011-12-29
Description: WMDrive.sys 3.4.181.224 in WinMount 3.5.1018 allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted 0x87342000 IOCTL request to the WMDriver device.
CVSS Score: 4.9 (MEDIUM)
References: http://osvdb.org/77747; http://secunia.com/advisories/46872; https://exchange.xforce.ibmcloud.com/vulnerabilities/71764
CVE: CVE-2011-5033
Published: 2011-12-29
Description: Stack-based buffer overflow in CFS.c in ConfigServer Security & Firewall (CSF) before 5.43, when running on a DirectAdmin server, allows local users to cause a denial of service (crash) via a long string in an admin.list file.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-119
References: http://forum.configserver.com/viewtopic.php?f=4&t=5008; http://www.configserver.com/free/csf/changelog.txt; http://www.exploit-db.com/exploits/18225
CVE: CVE-2011-3414
Published: 2011-12-30
Description: The CaseInsensitiveHashProvider.getHashCode function in the HashTable implementation in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters, aka "Collisions in HashTable May Cause DoS Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.html; http://www.kb.cert.org/vuls/id/903934; http://www.nruns.com/_downloads/advisory28122011.pdf
CVE: CVE-2011-3415
Published: 2011-12-30
Description: Open redirect vulnerability in the Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted return URL, aka "Insecure Redirect in .NET Form Authentication Vulnerability."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://jvn.jp/en/jp/JVN71256611/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2011-003557; http://www.securityfocus.com/bid/51202
CVE: CVE-2011-3416
Published: 2011-12-30
Description: The Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 allows remote authenticated users to obtain access to arbitrary user accounts via a crafted username, aka "ASP.Net Forms Authentication Bypass Vulnerability."
CVSS Score: 8.5 (HIGH)
CWE: CWE-264
References: http://www.us-cert.gov/cas/techalerts/TA11-347A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-100; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14363
CVE: CVE-2011-3417
Published: 2011-12-30
Description: The Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0, when sliding expiry is enabled, does not properly handle cached content, which allows remote attackers to obtain access to arbitrary user accounts via a crafted URL, aka "ASP.NET Forms Authentication Ticket Caching Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/51203; http://www.us-cert.gov/cas/techalerts/TA11-347A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-100
CVE: CVE-2011-4084
Published: 2011-12-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4858. Reason: This candidate is a duplicate of CVE-2011-4858. Notes: All CVE users should reference CVE-2011-4858 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2011-4461
Published: 2011-12-30
Description: Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-310
References: http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0075&w=2; http://secunia.com/advisories/47408
CVE: CVE-2011-4462
Published: 2011-12-30
Description: Plone 4.1.3 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.html; http://secunia.com/advisories/47406; http://www.kb.cert.org/vuls/id/903934
CVE: CVE-2011-4815
Published: 2011-12-30
Description: Ruby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.html; http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-talk/391606; http://jvn.jp/en/jp/JVN90615481/index.html
CVE: CVE-2011-4838
Published: 2011-12-30
Description: JRuby before 1.6.5.1 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-400
References: http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.html; http://jruby.org/2011/12/27/jruby-1-6-5-1.html; http://rhn.redhat.com/errata/RHSA-2012-1232.html
CVE: CVE-2011-4885
Published: 2011-12-30
Description: PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.html; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041; http://lists.apple.com/archives/security-announce/2012/May/msg00001.html
CVE: CVE-2011-5034
Published: 2011-12-30
Description: Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.  NOTE: this might overlap CVE-2011-4461.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.html; http://secunia.com/advisories/47412; http://www.kb.cert.org/vuls/id/903934
CVE: CVE-2011-5035
Published: 2011-12-30
Description: Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 and 8.2, and possibly other products, computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters, aka Oracle security ticket S0104869.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.html; http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00010.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1663&w=2
CVE: CVE-2011-5036
Published: 2011-12-30
Description: Rack before 1.1.3, 1.2.x before 1.2.5, and 1.3.x before 1.3.6 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.html; http://www.debian.org/security/2013/dsa-2783; http://www.kb.cert.org/vuls/id/903934
CVE: CVE-2011-5037
Published: 2011-12-30
Description: Google V8 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters, as demonstrated by attacks against Node.js.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2011-12/0181.html; http://www.kb.cert.org/vuls/id/903934; http://www.nruns.com/_downloads/advisory28122011.pdf
CVE: CVE-2011-5038
Published: 2011-12-30
Description: SQL injection vulnerability in hitCode hitAppoint 4.5.17 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/47140; http://www.osvdb.org/77580; https://exchange.xforce.ibmcloud.com/vulnerabilities/71740
CVE: CVE-2011-5039
Published: 2011-12-30
Description: Multiple SQL injection vulnerabilities in Infoproject Biznis Heroj allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters to login.php, (3) the filter parameter to widget.dokumenti_lista.php, and (4) the fin_nalog_id parameter to nalozi_naslov.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/18259; http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5064.php; http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5065.php
CVE: CVE-2011-5040
Published: 2011-12-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in Infoproject Biznis Heroj allow remote attackers to inject arbitrary web script or HTML via the config parameter to (1) nalozi_naslov.php and (2) widget.dokumenti_lista.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.exploit-db.com/exploits/18259; http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5064.php; https://exchange.xforce.ibmcloud.com/vulnerabilities/71928
CVE: CVE-2011-5041
Published: 2011-12-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in Pulse Pro CMS 1.7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) d parameter in a blocks action and (2) post_id parameter in an edit-post action to index.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/77693; http://packetstormsecurity.org/files/view/107830/pulsepro172-xss.txt; http://secunia.com/advisories/47225
CVE: CVE-2011-5042
Published: 2011-12-30
Description: Cross-site scripting (XSS) vulnerability in inc/lib/lib.base.php in SASHA 0.2.0 allows remote attackers to inject arbitrary web script or HTML via the instructors parameter.  NOTE: the original disclosure also mentions the section_title parameter, but this was disputed by the vendor and retracted by the original researcher.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2011-12/0123.html; http://sasha.svn.sourceforge.net/viewvc/sasha/branches/SASHA_0.2/SASHA/inc/lib/lib.base.php?r1=95&r2=96&pathrev=96; http://sourceforge.net/apps/mantisbt/sasha/view.php?id=13
CVE: CVE-2011-5043
Published: 2011-12-30
Description: TomatoSoft Free Mp3 Player 1.0 allows remote attackers to cause a denial of service (application crash) via a long string in an MP3 file, possibly a buffer overflow.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://www.exploit-db.com/exploits/18254; https://exchange.xforce.ibmcloud.com/vulnerabilities/71870; http://www.exploit-db.com/exploits/18254
CVE: CVE-2011-5044
Published: 2011-12-30
Description: SopCast 3.4.7.45585 uses weak permissions (Everyone:Full Control) for Diagnose.exe, which allows local users to execute arbitrary code by replacing Diagnose.exe with a Trojan horse program.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/40940; http://www.exploit-db.com/exploits/18201; http://www.osvdb.org/77724
CVE: CVE-2011-5045
Published: 2011-12-30
Description: Cross-site scripting (XSS) vulnerability in details_view.php in PHP Booking Calendar 10e allows remote attackers to inject arbitrary web script or HTML via the page_info_message parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2011-12/0124.html; http://sourceforge.net/tracker/?func=detail&aid=3469106&group_id=132702&atid=724998; https://exchange.xforce.ibmcloud.com/vulnerabilities/71883
CVE: CVE-2011-5046
Published: 2011-12-30
Description: The Graphics Device Interface (GDI) in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted data, as demonstrated by a large height attribute of an IFRAME element rendered by Safari, aka "GDI Access Violation Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://osvdb.org/77908; http://secunia.com/advisories/47237; http://twitter.com/w3bd3vil/statuses/[PII_REDACTED]9261824
CVE: CVE-2011-1710
Published: 2011-12-31
Description: Multiple integer overflows in the HTTP server in the Novell XTier framework 3.1.8 allow remote attackers to cause a denial of service (service crash) or possibly execute arbitrary code via crafted header length variables.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://download.novell.com/patch/finder/?keywords=b8833ce91ca8c8d2a478a8a32a2e2efb; http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00012.html; http://support.novell.com/security/cve/CVE-2011-1710.html
CVE: CVE-2011-4617
Published: 2011-12-31
Description: virtualenv.py in virtualenv before 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/.
CVSS Score: 1.2 (LOW)
CWE: CWE-59
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071638.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071643.html; http://openwall.com/lists/oss-security/2011/12/19/2
CVE: CVE-2011-4620
Published: 2011-12-31
Description: Buffer overflow in the ulSetError function in util/ulError.cxx in PLIB 1.8.5, as used in TORCS 1.3.1 and other products, allows user-assisted remote attackers to execute arbitrary code via vectors involving a long error message, as demonstrated by a crafted acc file for TORCS. NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00013.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00015.html; http://openwall.com/lists/oss-security/2011/12/21/2
CVE: CVE-2011-3657
Published: 2012-01-02
Description: Multiple cross-site scripting (XSS) vulnerabilities in Bugzilla 2.x and 3.x before 3.4.13, 3.5.x and 3.6.x before 3.6.7, 3.7.x and 4.0.x before 4.0.3, and 4.1.x through 4.1.3, when debug mode is used, allow remote attackers to inject arbitrary web script or HTML via vectors involving a (1) tabular report, (2) graphical report, or (3) new chart.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2011-12/0184.html; http://www.bugzilla.org/security/3.4.12/; https://bugzilla.mozilla.org/show_bug.cgi?id=697699
CVE: CVE-2011-3667
Published: 2012-01-02
Description: The User.offer_account_by_email WebService method in Bugzilla 2.x and 3.x before 3.4.13, 3.5.x and 3.6.x before 3.6.7, 3.7.x and 4.0.x before 4.0.3, and 4.1.x through 4.1.3, when createemailregexp is not empty, does not properly handle user_can_create_account settings, which allows remote attackers to create user accounts by leveraging a token contained in an e-mail message.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287
References: http://archives.neohapsis.com/archives/bugtraq/2011-12/0184.html; http://www.bugzilla.org/security/3.4.12/; https://bugzilla.mozilla.org/show_bug.cgi?id=711714
CVE: CVE-2011-3668
Published: 2012-01-02
Description: Cross-site request forgery (CSRF) vulnerability in post_bug.cgi in Bugzilla 2.x, 3.x, and 4.x before 4.2rc1 allows remote attackers to hijack the authentication of arbitrary users for requests that create bug reports.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://secunia.com/advisories/47368; http://www.bugzilla.org/security/3.4.12/; https://bugzilla.mozilla.org/show_bug.cgi?id=703975
CVE: CVE-2011-3669
Published: 2012-01-02
Description: Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 2.x, 3.x, and 4.x before 4.2rc1 allows remote attackers to hijack the authentication of arbitrary users for requests that upload attachments.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://secunia.com/advisories/47368; http://www.bugzilla.org/security/3.4.12/; https://bugzilla.mozilla.org/show_bug.cgi?id=703983
CVE: CVE-2011-4642
Published: 2012-01-03
Description: mappy.py in Splunk Web in Splunk 4.2.x before 4.2.5 does not properly restrict use of the mappy command to access Python classes, which allows remote authenticated administrators to execute arbitrary code by leveraging the sys module in a request to the search application, as demonstrated by a cross-site request forgery (CSRF) attack, aka SPL-45172.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-352
References: http://secunia.com/advisories/47232; http://www.exploit-db.com/exploits/18245/; http://www.sec-1.com/blog/?p=233
CVE: CVE-2011-4643
Published: 2012-01-03
Description: Multiple directory traversal vulnerabilities in Splunk 4.x before 4.2.5 allow remote authenticated users to read arbitrary files via a .. (dot dot) in a URI to (1) Splunk Web or (2) the Splunkd HTTP Server, aka SPL-45243.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/47232; http://www.exploit-db.com/exploits/18245/; http://www.sec-1.com/blog/?p=233
CVE: CVE-2011-4644
Published: 2012-01-03
Description: Splunk 4.2.5 and earlier, when a Free license is selected, enables potentially undesirable functionality within an environment that intentionally does not support authentication, which allows remote attackers to (1) read arbitrary files via a management-console session that leverages the ability to create crafted data sources, or (2) execute management commands via an HTTP request.
CVSS Score: 9.3 (HIGH)
CWE: CWE-287
References: http://www.exploit-db.com/exploits/18245/; http://www.sec-1.com/blog/?p=233; http://www.sec-1.com/blog/wp-content/uploads/2011/12/Attacking_Splunk_Release.pdf