deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-2521
Published: 2012-05-24
Description: The x86_assign_hw_event function in arch/x86/kernel/cpu/perf_event.c in the Performance Events subsystem in the Linux kernel before 2.6.39 does not properly calculate counter values, which allows local users to cause a denial of service (panic) via the perf program.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-189
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fc66c5210ec2539e800e87d7b3a985323c7be96e; http://www.openwall.com/lists/oss-security/2011/07/06/4
CVE: CVE-2011-2699
Published: 2012-05-24
Description: The IPv6 implementation in the Linux kernel before 3.1 does not generate Fragment Identification values separately for each destination, which makes it easier for remote attackers to cause a denial of service (disrupted networking) by predicting these values and sending crafted packets.
CVSS Score: 7.5 (HIGH)
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=87c48fa3b4630905f98268dde838ee43626a060c; http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1; http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE: CVE-2011-2707
Published: 2012-05-24
Description: The ptrace_setxregs function in arch/xtensa/kernel/ptrace.c in the Linux kernel before 3.1 does not validate user-space pointers, which allows local users to obtain sensitive information from kernel memory locations via a crafted PTRACE_SETXTREGS request.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0d0138ebe24b94065580bd2601f8bb7eb6152f56; http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1; http://www.openwall.com/lists/oss-security/2011/07/20/18
CVE: CVE-2011-2898
Published: 2012-05-24
Description: net/packet/af_packet.c in the Linux kernel before 2.6.39.3 does not properly restrict user-space access to certain packet data structures associated with VLAN Tag Control Information, which allows local users to obtain potentially sensitive information via a crafted application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.3; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=13fcb7bd322164c67926ffe272846d4860196dc6; http://www.openwall.com/lists/oss-security/2011/08/03/7
CVE: CVE-2011-2906
Published: 2012-05-24
Description: Integer signedness error in the pmcraid_ioctl_passthrough function in drivers/scsi/pmcraid.c in the Linux kernel before 3.1 might allow local users to cause a denial of service (memory consumption or memory corruption) via a negative size value in an ioctl call. NOTE: this may be a vulnerability only in unusual environments that provide a privileged program for obtaining the required file descriptor.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b5b515445f4f5a905c5dd27e6e682868ccd6c09d; http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1; http://www.openwall.com/lists/oss-security/2011/08/09/8
CVE: CVE-2011-2918
Published: 2012-05-24
Description: The Performance Events subsystem in the Linux kernel before 3.1 does not properly handle event overflows associated with PERF_COUNT_SW_CPU_CLOCK events, which allows local users to cause a denial of service (system hang) via a crafted application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a8b0ca17b80e92faab46ee7179ba9e99ccb61233; http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1; http://www.openwall.com/lists/oss-security/2011/08/16/1
CVE: CVE-2011-3188
Published: 2012-05-24
Description: The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service (disrupted networking) or hijack network sessions by predicting these values and sending crafted packets.
CVSS Score: 9.1 (CRITICAL)
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6e5714eaf77d79ae1c8b47e3e040ff5411b717ec; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bc0b96b54a21246e377122d54569eef71cec535f; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6211&w=2
CVE: CVE-2011-3191
Published: 2012-05-24
Description: Integer signedness error in the CIFSFindNext function in fs/cifs/cifssmb.c in the Linux kernel before 3.1 allows remote CIFS servers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large length value in a response to a read request for a directory.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9438fabb73eb48055b58b89fc51e0bc4db22fabd; http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1; http://www.openwall.com/lists/oss-security/2011/08/24/2
CVE: CVE-2011-3353
Published: 2012-05-24
Description: Buffer overflow in the fuse_notify_inval_entry function in fs/fuse/dev.c in the Linux kernel before 3.1 allows local users to cause a denial of service (BUG_ON and system crash) by leveraging the ability to mount a FUSE filesystem.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c2183d1e9b3f313dd8ba2b1b0197c8d9fb86a7ae; http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1; http://www.openwall.com/lists/oss-security/2011/09/09/6
CVE: CVE-2011-3359
Published: 2012-05-24
Description: The dma_rx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers, which allows remote attackers to cause a denial of service (system crash) via a crafted frame.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c85ce65ecac078ab1a1835c87c4a6319cf74660a; http://www.openwall.com/lists/oss-security/2011/09/14/2
CVE: CVE-2011-3363
Published: 2012-05-24
Description: The setup_cifs_sb function in fs/cifs/connect.c in the Linux kernel before 2.6.39 does not properly handle DFS referrals, which allows remote CIFS servers to cause a denial of service (system crash) by placing a referral at the root of a share.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=[PII_REDACTED]2ffeac779d2529a348f99567fa5c33; http://www.openwall.com/lists/oss-security/2011/09/14/12
CVE: CVE-2011-4080
Published: 2012-05-24
Description: The sysrq_sysctl_handler function in kernel/sysctl.c in the Linux kernel before 2.6.39 does not require the CAP_SYS_ADMIN capability to modify the dmesg_restrict value, which allows local users to bypass intended access restrictions and read the kernel ring buffer by leveraging root privileges, as demonstrated by a root user in a Linux Containers (aka LXC) environment.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bfdc0b497faa82a0ba2f9dddcf109231dd519fcc; http://www.openwall.com/lists/oss-security/2011/10/26/10
CVE: CVE-2011-4081
Published: 2012-05-24
Description: crypto/ghash-generic.c in the Linux kernel before 3.1 allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact by triggering a failed or missing ghash_setkey function call, followed by a (1) ghash_update function call or (2) ghash_final function call, as demonstrated by a write operation on an AF_ALG socket.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7ed47b7d142ec99ad6880bbbec51e9f12b3af74c; http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1; http://www.openwall.com/lists/oss-security/2011/10/27/2
CVE: CVE-2012-1824
Published: 2012-05-25
Description: Untrusted search path vulnerability in Measuresoft ScadaPro Client before 4.0.0 and ScadaPro Server before 4.0.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
CVSS Score: 7.2 (HIGH)
References: http://www.measuresoft.net/downloads/Measuresoft%20SCADA%204.4.6/issue_disks/Client/DOCUMENTATION/ReleaseNotes.doc; http://www.measuresoft.net/downloads/Measuresoft%20SCADA%204.4.6/issue_disks/Server/DOCUMENTATION/ReleaseNotes.doc; http://www.us-cert.gov/control_systems/pdf/ICSA-12-145-01.pdf
CVE: CVE-2012-2426
Published: 2012-05-25
Description: The server in xArrow before 3.4.1 does not properly allocate memory, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://www.us-cert.gov/control_systems/pdf/ICSA-12-145-02.pdf; http://www.us-cert.gov/control_systems/pdf/ICSA-12-145-02.pdf
CVE: CVE-2012-2427
Published: 2012-05-25
Description: Heap-based buffer overflow in the server in xArrow before 3.4.1 allows remote attackers to execute arbitrary code via packets that trigger an invalid free operation.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/control_systems/pdf/ICSA-12-145-02.pdf; http://www.us-cert.gov/control_systems/pdf/ICSA-12-145-02.pdf
CVE: CVE-2012-2428
Published: 2012-05-25
Description: Integer overflow in the server in xArrow before 3.4.1 allows remote attackers to execute arbitrary code via a crafted packet that triggers an out-of-bounds read operation.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://www.us-cert.gov/control_systems/pdf/ICSA-12-145-02.pdf; http://www.us-cert.gov/control_systems/pdf/ICSA-12-145-02.pdf
CVE: CVE-2012-2429
Published: 2012-05-25
Description: The server in xArrow before 3.4.1 performs an invalid read operation, which allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://www.us-cert.gov/control_systems/pdf/ICSA-12-145-02.pdf; http://www.us-cert.gov/control_systems/pdf/ICSA-12-145-02.pdf
CVE: CVE-2011-2722
Published: 2012-05-25
Description: The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing (HPLIP) 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file.
CVSS Score: 1.2 (LOW)
CWE: CWE-59
References: http://hplipopensource.com/hplip-web/release_notes.html; http://rhn.redhat.com/errata/RHSA-2013-0133.html; http://secunia.com/advisories/48441
CVE: CVE-2012-2176
Published: 2012-05-25
Description: Multiple stack-based buffer overflows in a certain ActiveX control in qp2.cab in IBM Lotus Quickr 8.2 before 8.2.0.27-002a for Domino allow remote attackers to execute arbitrary code via a long argument to the (1) Attachment_Times or (2) Import_Times method.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.ibm.com/support/docview.wss?uid=swg21596191; http://www.securityfocus.com/bid/53678; http://www.securitytracker.com/id?1027097
CVE: CVE-2012-2568
Published: 2012-05-25
Description: d41d8cd98f00b204e9800998ecf8427e.php in the management web server on the Seagate BlackArmor device allows remote attackers to change the administrator password via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/49282; http://www.kb.cert.org/vuls/id/515283; http://www.securityfocus.com/bid/53670
CVE: CVE-2012-1413
Published: 2012-05-27
Description: Cross-site scripting (XSS) vulnerability in zc_install/includes/modules/pages/database_setup/header_php.php in Zen Cart 1.5.0 and earlier, when the software is being installed, allows remote attackers to inject arbitrary web script or HTML via the db_username parameter to zc_install/index.php.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: https://www.trustwave.com/spiderlabs/advisories/TWSL2012-004.txt; https://www.trustwave.com/spiderlabs/advisories/TWSL2012-004.txt
CVE: CVE-2012-1792
Published: 2012-05-27
Description: Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Setup/Application/Install/RPC/DBCheck.php in OSCommerce Online Merchant 3.0.2, when the software is being installed, allows remote attackers to inject arbitrary web script or HTML via the name parameter to oscommerce/index.php, which is not properly handled in an error message.  NOTE: this might not be a vulnerability, since the ability to access oscommerce/index.php during installation may already imply administrator privileges.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: https://www.trustwave.com/spiderlabs/advisories/TWSL2012-005.txt; https://www.trustwave.com/spiderlabs/advisories/TWSL2012-005.txt
CVE: CVE-2012-2235
Published: 2012-05-27
Description: Cross-site scripting (XSS) vulnerability in Support Incident Tracker (SiT!) 3.65 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter to index.php, which is not properly handled in an error message.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://www.trustwave.com/spiderlabs/advisories/TWSL2012-012.txt; https://www.trustwave.com/spiderlabs/advisories/TWSL2012-012.txt
CVE: CVE-2012-2935
Published: 2012-05-27
Description: Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Shop/Application/Checkout/pages/main.php in OSCommerce Online Merchant 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the value_title parameter, a different vulnerability than CVE-2012-1059.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/75900; https://github.com/osCommerce/oscommerce/commit/a5aeb0448cc333cc4b801c0e01981b218fd9c7df; https://exchange.xforce.ibmcloud.com/vulnerabilities/75900
CVE: CVE-2012-2435
Published: 2012-05-27
Description: Directory traversal vulnerability in the captcha module in Pligg CMS before 1.2.2 allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the captcha parameter to module.php, as demonstrated by cross-site request forgery (CSRF) attacks.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://forums.pligg.com/downloads.php?do=file&id=15; http://pligg.svn.sourceforge.net/viewvc/pligg?view=revision&revision=2440; https://www.htbridge.com/advisory/HTB23089
CVE: CVE-2012-2436
Published: 2012-05-27
Description: Multiple cross-site scripting (XSS) vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to inject arbitrary web script or HTML via (1) an arbitrary parameter in a move or (2) minimize action to admin/admin_index.php; (3) the karma_username parameter to module.php in the karma module; (4) q_1_low, (5) q_1_high, (6) q_2_low, or (7) q_2_high parameter in a configure action to module.php in the captcha module; or (8) the edit parameter to module.php in the admin_language module.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://forums.pligg.com/downloads.php?do=file&id=15; http://pligg.svn.sourceforge.net/viewvc/pligg/trunk/modules/admin_language/admin_language_main.php?r1=2442&r2=2441&pathrev=2442; http://pligg.svn.sourceforge.net/viewvc/pligg?view=revision&revision=2440
CVE: CVE-2012-2936
Published: 2012-05-27
Description: Multiple cross-site scripting (XSS) vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) page parameter to (a) admin/admin_comments.php or (b) admin/admin_links.php; or list parameter in a (3) move or (4) minimize action to (c) admin/admin_index.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://forums.pligg.com/downloads.php?do=file&id=15; http://osvdb.org/82044; http://osvdb.org/82045
CVE: CVE-2012-2937
Published: 2012-05-27
Description: Multiple SQL injection vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) list parameter in a move action to admin/admin_index.php, (2) display parameter in a minimize action to admin/admin_index.php, (3) enabled[] parameter to admin/admin_users.php, or (4) msg_id to the module.php in the simple_messaging module.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://forums.pligg.com/downloads.php?do=file&id=15; http://osvdb.org/82048; http://osvdb.org/82049
CVE: CVE-2012-2938
Published: 2012-05-27
Description: Multiple cross-site scripting (XSS) vulnerabilities in Travelon Express 6.2.2 allow remote attackers to inject arbitrary web script or HTML via the holiday name field to (1) holiday_add.php or (2) holiday_view.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/81887; http://osvdb.org/81888; http://www.exploit-db.com/exploits/18871
CVE: CVE-2012-2939
Published: 2012-05-27
Description: Multiple unrestricted file upload vulnerabilities in Travelon Express 6.2.2 allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension using (1) airline-edit.php, (2) hotel-image-add.php, or (3) hotel-add.php.
CVSS Score: 6.5 (MEDIUM)
References: http://iel-sayed.blogspot.com/2012/05/travelon-express-cms-v622-multiple-web.html; http://www.exploit-db.com/exploits/18871; http://www.osvdb.org/81889
CVE: CVE-2012-2940
Published: 2012-05-27
Description: MediaChance Real-DRAW PRO 5.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted (1) PNG, (2) WMF, (3) PSD, (4) TGA, (5) TTF, (6) BMP, (7) TIFF, or (8) PCX file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://www.exploit-db.com/exploits/18902; http://www.securityfocus.com/bid/53636; https://exchange.xforce.ibmcloud.com/vulnerabilities/75733
CVE: CVE-2012-2941
Published: 2012-05-27
Description: Cross-site scripting (XSS) vulnerability in search/ in Yandex.Server 2010 9.0 Enterprise allows remote attackers to inject arbitrary web script or HTML via the text parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/files/112945/Yandex.Server-2010-9.0-Enterprise-Cross-Site-Scripting.html; http://www.securityfocus.com/bid/53622; https://exchange.xforce.ibmcloud.com/vulnerabilities/75788
CVE: CVE-2012-2942
Published: 2012-05-27
Description: Buffer overflow in the trash buffer in the header capture functionality in HAProxy before 1.4.21, when global.tune.bufsize is set to a value greater than the default and header rewriting is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-119
References: http://haproxy.1wt.eu/#news; http://haproxy.1wt.eu/download/1.4/src/CHANGELOG; http://haproxy.1wt.eu/git?p=haproxy-1.4.git%3Ba=commit%3Bh=30297cb17147a8d339eb160226bcc08c91d9530b
CVE: CVE-2012-2943
Published: 2012-05-27
Description: CRLF injection vulnerability in cryptographp.inc.php in Cryptographp allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the cfg parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://packetstormsecurity.org/files/112859/Cryptographp-Local-File-Inclusion-HTTP-Response-Splitting.html; http://www.securityfocus.com/bid/53609; https://exchange.xforce.ibmcloud.com/vulnerabilities/75768
CVE: CVE-2012-2949
Published: 2012-05-29
Description: The ZTE sync_agent program for Android 2.3.4 on the Score M device uses a hardcoded ztex1609523 password to control access to commands, which allows remote attackers to gain privileges via a crafted application.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://blog.mylookout.com/blog/2012/05/21/zte-security-vulnerability; http://www.pcmag.com/article2/0%2C2817%2C2404639%2C00.asp; http://www.reuters.com/article/2012/05/18/us-zte-phone-idUSBRE84H08J20120518
CVE: CVE-2011-3048
Published: 2012-05-29
Description: The png_set_text_2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted text chunk in a PNG image file, which triggers a memory allocation failure that is not properly handled, leading to a heap-based buffer overflow.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077007.html
CVE: CVE-2012-0220
Published: 2012-05-29
Description: Multiple cross-site scripting (XSS) vulnerabilities in the meta plugin (Plugin/meta.pm) in ikiwiki before 3.20120516 allow remote attackers to inject arbitrary web script or HTML via the (1) author or (2) authorurl meta tags.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://ikiwiki.info/news/version_3.20120516/; http://osvdb.org/81995; http://secunia.com/advisories/49199
CVE: CVE-2012-0804
Published: 2012-05-29
Description: Heap-based buffer overflow in the proxy_connect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTTP response.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-updates/2012-02/msg00064.html; http://rhn.redhat.com/errata/RHSA-2012-0321.html; http://secunia.com/advisories/47869
CVE: CVE-2012-1053
Published: 2012-05-29
Description: The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows local users to gain privileges via vectors related to (1) the change_user not dropping supplementary groups in certain conditions, (2) changes to the eguid without associated changes to the egid, or (3) the addition of the real gid to supplementary groups.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00003.html; http://projects.puppetlabs.com/issues/12457; http://projects.puppetlabs.com/issues/12458
CVE: CVE-2012-1054
Published: 2012-05-29
Description: Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3, when managing a user login file with the k5login resource type, allows local users to gain privileges via a symlink attack on .k5login.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00003.html; http://projects.puppetlabs.com/issues/12460; http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.14
CVE: CVE-2012-1906
Published: 2012-05-29
Description: Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 uses predictable file names when installing Mac OS X packages from a remote source, which allows local users to overwrite arbitrary files or install arbitrary packages via a symlink attack on a temporary file in /tmp.
CVSS Score: 3.3 (LOW)
CWE: CWE-264
References: http://projects.puppetlabs.com/issues/13260; http://puppetlabs.com/security/cve/cve-2012-1906/; http://secunia.com/advisories/48743
CVE: CVE-2012-1986
Published: 2012-05-29
Description: Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with an authorized SSL key and certain permissions on the puppet master to read arbitrary files via a symlink attack in conjunction with a crafted REST request for a file in a filebucket.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079227.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079289.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080003.html