deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-4536
Published: 2011-01-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in KSES, as used in WordPress before 3.0.4, allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the & (ampersand) character, (2) the case of an attribute name, (3) a padded entity, and (4) an entity that is not in normalized form.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://core.trac.wordpress.org/changeset/17172/branches/3.0; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053289.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053293.html
CVE: CVE-2010-4668
Published: 2011-01-03
Description: The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 2.6.37-rc7 allows local users to cause a denial of service (panic) via a zero-length I/O request in a device ioctl to a SCSI device, related to an unaligned map.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4163.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-400
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=[PII_REDACTED]ae2ef1ce144dded589b62b2a50d575; http://lkml.org/lkml/2010/11/29/68; http://lkml.org/lkml/2010/11/29/70
CVE: CVE-2009-5037
Published: 2011-01-07
Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allow remote attackers to cause a denial of service (ASDM syslog outage) via a long URL, aka Bug IDs CSCsm11264 and CSCtb92911.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf; http://www.securitytracker.com/id?1024963; https://exchange.xforce.ibmcloud.com/vulnerabilities/64732
CVE: CVE-2010-4160
Published: 2011-01-07
Description: Multiple integer overflows in the (1) pppol2tp_sendmsg function in net/l2tp/l2tp_ppp.c, and the (2) l2tp_ip_sendmsg function in net/l2tp/l2tp_ip.c, in the PPPoL2TP and IPoL2TP implementations in the Linux kernel before 2.6.36.2 allow local users to cause a denial of service (heap memory corruption and panic) or possibly gain privileges via a crafted sendto call.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-190
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=253eacc070b114c2ec1f81b067d2fed7305467b0; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8acfe468b0384e834a303f08ebc4953d72fb690a; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html
CVE: CVE-2010-4528
Published: 2011-01-07
Description: directconn.c in the MSN protocol plugin in libpurple 2.7.6 through 2.7.8 in Pidgin before 2.7.9 allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a short p2pv2 packet in a DirectConnect (aka direct connection) session.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-20
References: http://developer.pidgin.im/viewmtn/revision/diff/e76f4ad4ef2f10588195a0eedc7a08f82062f79c/with/aaa07bde3c51d3684391ae6ed86b6dbaeab5d031/libpurple/protocols/msn/directconn.c; http://developer.pidgin.im/viewmtn/revision/info/aaa07bde3c51d3684391ae6ed86b6dbaeab5d031; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052862.html
CVE: CVE-2010-4669
Published: 2011-01-07
Description: The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 allows remote attackers to cause a denial of service (CPU consumption and system hang) by sending many Router Advertisement (RA) messages with different source addresses, as demonstrated by the flood_router6 program in the thc-ipv6 package.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://events.ccc.de/congress/2010/Fahrplan/events/3957.en.html; http://mirror.fem-net.de/CCC/27C3/mp3-audio-only/27c3-3957-en-ipv6_insecurities.mp3; http://mirror.fem-net.de/CCC/27C3/mp4-h264-HQ/27c3-3957-en-ipv6_insecurities.mp4
CVE: CVE-2010-4670
Published: 2011-01-07
Description: The Neighbor Discovery (ND) protocol implementation in the IPv6 stack on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(3) and earlier, and Cisco PIX Security Appliances devices, allows remote attackers to cause a denial of service (CPU consumption and device hang) by sending many Router Advertisement (RA) messages with different source addresses, as demonstrated by the flood_router6 program in the thc-ipv6 package, aka Bug ID CSCti24526.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://events.ccc.de/congress/2010/Fahrplan/events/3957.en.html; http://mirror.fem-net.de/CCC/27C3/mp3-audio-only/27c3-3957-en-ipv6_insecurities.mp3; http://mirror.fem-net.de/CCC/27C3/mp4-h264-HQ/27c3-3957-en-ipv6_insecurities.mp4
CVE: CVE-2010-4671
Published: 2011-01-07
Description: The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS before 15.0(1)XA5 allows remote attackers to cause a denial of service (CPU consumption and device hang) by sending many Router Advertisement (RA) messages with different source addresses, as demonstrated by the flood_router6 program in the thc-ipv6 package, aka Bug ID CSCti33534.
CVSS Score: 7.8 (HIGH)
CWE: CWE-400
References: http://events.ccc.de/congress/2010/Fahrplan/events/3957.en.html; http://mirror.fem-net.de/CCC/27C3/mp3-audio-only/27c3-3957-en-ipv6_insecurities.mp3; http://mirror.fem-net.de/CCC/27C3/mp4-h264-HQ/27c3-3957-en-ipv6_insecurities.mp4
CVE: CVE-2010-4672
Published: 2011-01-07
Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(3) and earlier allow remote attackers to cause a denial of service (block exhaustion) via EIGRP traffic that triggers an EIGRP multicast storm, aka Bug ID CSCtf20269.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/42931; http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf; http://www.securityfocus.com/bid/45767
CVE: CVE-2010-4673
Published: 2011-01-07
Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(4) and earlier allow remote attackers to cause a denial of service via a flood of packets, aka Bug ID CSCtg06316.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf; http://www.securityfocus.com/bid/45766; http://www.securitytracker.com/id?1024963
CVE: CVE-2010-4674
Published: 2011-01-07
Description: Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(4) and earlier allows remote attackers to cause a denial of service (block exhaustion) via multicast traffic, aka Bug ID CSCtg63992.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/42942; http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf; http://www.securityfocus.com/bid/45766
CVE: CVE-2010-4675
Published: 2011-01-07
Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) do not properly determine the interfaces for which TELNET connections should be permitted, which allows remote authenticated users to bypass intended access restrictions via vectors involving the "lowest security level interface," aka Bug ID CSCsv40504.
CVSS Score: 9.0 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/42931; http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf; http://www.securityfocus.com/bid/45767
CVE: CVE-2010-4676
Published: 2011-01-07
Description: Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote authenticated users to cause a denial of service (device crash) via a high volume of IPsec traffic, aka Bug ID CSCsx52748.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/42931; http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf; http://www.securityfocus.com/bid/45767
CVE: CVE-2010-4677
Published: 2011-01-07
Description: emWEB on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to cause a denial of service (daemon crash) via a request for a document whose name contains space characters, aka Bug ID CSCsy08416.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/42931; http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf; http://www.securityfocus.com/bid/45767
CVE: CVE-2010-4678
Published: 2011-01-07
Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permit packets to pass before the configuration has been loaded, which might allow remote attackers to bypass intended access restrictions by sending network traffic during device startup, aka Bug ID CSCsy86769.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/42931; http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf; http://www.securityfocus.com/bid/45767
CVE: CVE-2010-4679
Published: 2011-01-07
Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) do not properly handle Online Certificate Status Protocol (OCSP) connection failures, which allows remote OCSP responders to cause a denial of service (TCP socket exhaustion) by rejecting connection attempts, aka Bug ID CSCsz36816.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/42931; http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf; http://www.securityfocus.com/bid/45767
CVE: CVE-2010-4680
Published: 2011-01-07
Description: The WebVPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permits the viewing of CIFS shares even when CIFS file browsing has been disabled, which allows remote authenticated users to bypass intended access restrictions via CIFS requests, aka Bug ID CSCsz80777.
CVSS Score: 9.0 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/42931; http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf; http://www.securityfocus.com/bid/45767
CVE: CVE-2010-4681
Published: 2011-01-07
Description: Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to bypass SMTP inspection via vectors involving a prepended space character, aka Bug ID CSCte14901.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/42931; http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf; http://www.securityfocus.com/bid/45767
CVE: CVE-2010-4682
Published: 2011-01-07
Description: Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to cause a denial of service (memory consumption) by making multiple incorrect LDAP authentication attempts, aka Bug ID CSCtf29867.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/42931; http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf; http://www.securityfocus.com/bid/45767
CVE: CVE-2009-5038
Published: 2011-01-07
Description: Cisco IOS before 15.0(1)XA does not properly handle IRC traffic during a specific time period after an initial reload, which allows remote attackers to cause a denial of service (device reload) via an attempted connection to a certain IRC server, related to a "corrupted magic value," aka Bug ID CSCso05336.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf; http://www.securityfocus.com/bid/45764; https://exchange.xforce.ibmcloud.com/vulnerabilities/64682
CVE: CVE-2009-5039
Published: 2011-01-07
Description: Memory leak in the gk_circuit_info_do_in_acf function in the H.323 implementation in Cisco IOS before 15.0(1)XA allows remote attackers to cause a denial of service (memory consumption) via a large number of calls over a long duration, as demonstrated by InterZone Clear Token (IZCT) test traffic, aka Bug ID CSCsz72535.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-772
References: http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf; https://exchange.xforce.ibmcloud.com/vulnerabilities/64731; http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf
CVE: CVE-2009-5040
Published: 2011-01-07
Description: CallManager Express (CME) on Cisco IOS before 15.0(1)XA allows remote authenticated users to cause a denial of service (device crash) by using an extension mobility (EM) phone to interact with the menu for SNR number changes, aka Bug ID CSCta63555.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf; http://www.securityfocus.com/bid/45765; https://exchange.xforce.ibmcloud.com/vulnerabilities/64681
CVE: CVE-2010-2640
Published: 2011-01-07
Description: Array index error in the PK font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
CVSS Score: 7.6 (HIGH)
CWE: CWE-20
References: http://git.gnome.org/browse/evince/commit/?id=d4139205b010ed06310d14284e63114e88ec6de2; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052910.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052995.html
CVE: CVE-2010-2641
Published: 2011-01-07
Description: Array index error in the VF font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
CVSS Score: 7.6 (HIGH)
CWE: CWE-20
References: http://git.gnome.org/browse/evince/commit/?id=d4139205b010ed06310d14284e63114e88ec6de2; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052910.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052995.html
CVE: CVE-2010-2642
Published: 2011-01-07
Description: Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://git.gnome.org/browse/evince/commit/?id=d4139205b010ed06310d14284e63114e88ec6de2; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052910.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052995.html
CVE: CVE-2010-2643
Published: 2011-01-07
Description: Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
CVSS Score: 7.6 (HIGH)
CWE: CWE-189
References: http://git.gnome.org/browse/evince/commit/?id=d4139205b010ed06310d14284e63114e88ec6de2; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052910.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052995.html
CVE: CVE-2010-3847
Published: 2011-01-07
Description: elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not properly handle a value of $ORIGIN for the LD_AUDIT environment variable, which allows local users to gain privileges via a crafted dynamic shared object (DSO) located in an arbitrary directory.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://seclists.org/fulldisclosure/2010/Oct/257; http://seclists.org/fulldisclosure/2010/Oct/292; http://seclists.org/fulldisclosure/2010/Oct/294
CVE: CVE-2010-3856
Published: 2011-01-07
Description: ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use of the LD_AUDIT environment variable to reference dynamic shared objects (DSOs) as audit objects, which allows local users to gain privileges by leveraging an unsafe DSO located in a trusted library directory, as demonstrated by libpcprofile.so.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html; http://packetstormsecurity.com/files/173661/OpenSSH-Forwarded-SSH-Agent-Remote-Code-Execution.html; http://seclists.org/fulldisclosure/2010/Oct/344
CVE: CVE-2010-4324
Published: 2011-01-07
Description: Cross-site scripting (XSS) vulnerability in the Approval Form in the User Application in the Roles Based Provisioning Module 3.7.0 before 370D in Novell Identity Manager (aka IDM) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/70298; http://secunia.com/advisories/42819; http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5085293.html
CVE: CVE-2010-4496
Published: 2011-01-07
Description: Multiple SQL injection vulnerabilities in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/70371; http://secunia.com/advisories/42791; http://www.securityfocus.com/bid/45691
CVE: CVE-2010-4497
Published: 2011-01-07
Description: Cross-site scripting (XSS) vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/70372; http://secunia.com/advisories/42791; http://www.securityfocus.com/bid/45691
CVE: CVE-2010-4498
Published: 2011-01-07
Description: Unspecified vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to modify data or obtain sensitive information via a crafted URL.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/70373; http://secunia.com/advisories/42791; http://www.securityfocus.com/bid/45691
CVE: CVE-2010-4499
Published: 2011-01-07
Description: Session fixation vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to hijack web sessions via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/70374; http://secunia.com/advisories/42791; http://www.securityfocus.com/bid/45691
CVE: CVE-2010-4538
Published: 2011-01-07
Description: Buffer overflow in the sect_enttec_dmx_da function in epan/dissectors/packet-enttec.c in Wireshark 1.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ENTTEC DMX packet with Run Length Encoding (RLE) compression.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053042.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053061.html; http://openwall.com/lists/oss-security/2010/12/31/7
CVE: CVE-2010-4539
Published: 2011-01-07
Description: The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger the walking of SVNParentPath collections.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053230.html; http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html; http://mail-archives.apache.org/mod_mbox/subversion-users/201011.mbox/%3C3923B919-C2BE-41AD-84ED-7207837FAD1A%40ncsa.illinois.edu%3E
CVE: CVE-2010-4644
Published: 2011-01-07
Description: Multiple memory leaks in rev_hunt.c in Apache Subversion before 1.6.15 allow remote authenticated users to cause a denial of service (memory consumption and daemon crash) via the -g option to the blame command.
CVSS Score: 3.5 (LOW)
CWE: CWE-399
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053230.html; http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html; http://mail-archives.apache.org/mod_mbox/subversion-users/201011.mbox/%3C4CD33B61.7030203%40thepond.com%3E
CVE: CVE-2010-4683
Published: 2011-01-07
Description: Memory leak in Cisco IOS before 15.0(1)XA5 might allow remote attackers to cause a denial of service (memory consumption) by sending a crafted SIP REGISTER message over UDP, aka Bug ID CSCtg41733.
CVSS Score: 7.8 (HIGH)
CWE: CWE-772
References: http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf; http://www.securityfocus.com/bid/45786; https://exchange.xforce.ibmcloud.com/vulnerabilities/64588
CVE: CVE-2010-4684
Published: 2011-01-07
Description: Cisco IOS before 15.0(1)XA1, when certain TFTP debugging is enabled, allows remote attackers to cause a denial of service (device crash) via a TFTP copy over IPv6, aka Bug ID CSCtb28877.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf; http://www.securityfocus.com/bid/45769; https://exchange.xforce.ibmcloud.com/vulnerabilities/64587
CVE: CVE-2010-4685
Published: 2011-01-07
Description: Cisco IOS before 15.0(1)XA1 does not clear the public key cache upon a change to a certificate map, which allows remote authenticated users to bypass a certificate ban by connecting with a banned certificate that had previously been valid, aka Bug ID CSCta79031.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-295
References: http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf; http://www.securityfocus.com/bid/45769; https://exchange.xforce.ibmcloud.com/vulnerabilities/64586
CVE: CVE-2010-4686
Published: 2011-01-07
Description: CallManager Express (CME) on Cisco IOS before 15.0(1)XA1 does not properly handle SIP TRUNK traffic that contains rate bursts and a "peculiar" request size, which allows remote attackers to cause a denial of service (memory consumption) by sending this traffic over a long duration, aka Bug ID CSCtb47950.
CVSS Score: 7.8 (HIGH)
CWE: CWE-400
References: http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf; http://www.securityfocus.com/bid/45769; https://exchange.xforce.ibmcloud.com/vulnerabilities/64585
CVE: CVE-2010-4687
Published: 2011-01-07
Description: STCAPP (aka the SCCP telephony control application) on Cisco IOS before 15.0(1)XA1 does not properly handle multiple calls to a shared line, which allows remote attackers to cause a denial of service (port hang) by simultaneously ending two calls that were controlled by CallManager Express (CME), aka Bug ID CSCtd42552.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf; http://www.securityfocus.com/bid/45769; https://exchange.xforce.ibmcloud.com/vulnerabilities/64584
CVE: CVE-2010-4523
Published: 2011-01-07
Description: Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related to (1) card-acos5.c, (2) card-atrust-acos.c, and (3) card-starcos.c.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=607427; http://labs.mwrinfosecurity.com/files/Advisories/mwri_opensc-get-serial-buffer-overflow_2010-12-13.pdf; http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052777.html