deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-4852
Published: 2011-12-16
Description: The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 generates web pages containing external links in response to GET requests with query strings for enterprise/mobile-monitor/ and certain other files, which makes it easier for remote attackers to obtain sensitive information by reading (1) web-server access logs or (2) web-server Referer logs, related to a "cross-domain Referer leakage" issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://xss.cx/kb/parallels/xss-parallelspleskpanel.v10.4.4_build20111103.18-os_windows-2003-2008-reflected-cross-site-scripting-cwe79-capec86-javascript-injection-example-poc-report.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/72095; http://xss.cx/kb/parallels/xss-parallelspleskpanel.v10.4.4_build20111103.18-os_windows-2003-2008-reflected-cross-site-scripting-cwe79-capec86-javascript-injection-example-poc-report.html
CVE: CVE-2011-4853
Published: 2011-12-16
Description: The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 includes an RFC 1918 IP address within a web page, which allows remote attackers to obtain potentially sensitive information by reading this page, as demonstrated by smb/user/list-data/items-per-page/ and certain other files.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://xss.cx/kb/parallels/xss-parallelspleskpanel.v10.4.4_build20111103.18-os_windows-2003-2008-reflected-cross-site-scripting-cwe79-capec86-javascript-injection-example-poc-report.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/72094; http://xss.cx/kb/parallels/xss-parallelspleskpanel.v10.4.4_build20111103.18-os_windows-2003-2008-reflected-cross-site-scripting-cwe79-capec86-javascript-injection-example-poc-report.html
CVE: CVE-2011-4854
Published: 2011-12-16
Description: The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 does not ensure that Content-Type HTTP headers match the corresponding Content-Type data in HTML META elements, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving the get_enabled_product_icon program.  NOTE: it is possible that only clients, not the Plesk product, could be affected by this issue.
CVSS Score: 9.3 (HIGH)
References: http://xss.cx/kb/parallels/xss-parallelspleskpanel.v10.4.4_build20111103.18-os_windows-2003-2008-reflected-cross-site-scripting-cwe79-capec86-javascript-injection-example-poc-report.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/72093; http://xss.cx/kb/parallels/xss-parallelspleskpanel.v10.4.4_build20111103.18-os_windows-2003-2008-reflected-cross-site-scripting-cwe79-capec86-javascript-injection-example-poc-report.html
CVE: CVE-2011-4855
Published: 2011-12-16
Description: The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 omits the Content-Type header's charset parameter for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving admin/customer-service-plan/list/reset-search/true/ and certain other files.  NOTE: it is possible that only clients, not the Plesk product, could be affected by this issue.
CVSS Score: 9.3 (HIGH)
References: http://xss.cx/kb/parallels/xss-parallelspleskpanel.v10.4.4_build20111103.18-os_windows-2003-2008-reflected-cross-site-scripting-cwe79-capec86-javascript-injection-example-poc-report.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/72092; http://xss.cx/kb/parallels/xss-parallelspleskpanel.v10.4.4_build20111103.18-os_windows-2003-2008-reflected-cross-site-scripting-cwe79-capec86-javascript-injection-example-poc-report.html
CVE: CVE-2011-4856
Published: 2011-12-16
Description: The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving admin/health/parameters and certain other files.  NOTE: it is possible that only clients, not the Plesk product, could be affected by this issue.
CVSS Score: 9.3 (HIGH)
References: http://xss.cx/kb/parallels/xss-parallelspleskpanel.v10.4.4_build20111103.18-os_windows-2003-2008-reflected-cross-site-scripting-cwe79-capec86-javascript-injection-example-poc-report.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/72091; http://xss.cx/kb/parallels/xss-parallelspleskpanel.v10.4.4_build20111103.18-os_windows-2003-2008-reflected-cross-site-scripting-cwe79-capec86-javascript-injection-example-poc-report.html
CVE: CVE-2011-3834
Published: 2011-12-16
Description: Multiple integer overflows in the in_avi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary code via an AVI file with a crafted value for (1) the number of streams or (2) the size of the RIFF INFO chunk, leading to a heap-based buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://forums.winamp.com/showthread.php?t=332010; http://secunia.com/advisories/46882; http://secunia.com/secunia_research/2011-81/
CVE: CVE-2011-4369
Published: 2011-12-16
Description: Unspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on Windows, Adobe Reader and Acrobat 9.x through 9.4.6 on Mac OS X, Adobe Reader and Acrobat 10.x through 10.1.1 on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00019.html; http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00020.html; http://www.adobe.com/support/security/bulletins/apsb11-30.html
CVE: CVE-2011-4857
Published: 2011-12-16
Description: Heap-based buffer overflow in the in_mod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker (IT) file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://forums.winamp.com/showthread.php?t=332010; http://secunia.com/advisories/46882; https://exchange.xforce.ibmcloud.com/vulnerabilities/72054
CVE: CVE-2011-3339
Published: 2011-12-17
Description: Cross-site scripting (XSS) vulnerability in the Admin Control Center in Sentinel HASP Run-time Environment 5.95 and earlier in SafeNet Sentinel HASP (formerly Aladdin HASP SRM) run-time installer before 6.x and SDK before 5.11, as used in 7 Technologies (7T) IGSS 7 and other products, when Firefox 2.0 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that trigger write access to a configuration file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.safenet-inc.com/support-downloads/sentinel-drivers/CVE-2011-3339/; http://www.securityfocus.com/bid/51028; http://www.us-cert.gov/control_systems/pdf/ICSA-11-314-01.pdf
CVE: CVE-2011-4141
Published: 2011-12-17
Description: Untrusted search path vulnerability in EMC RSA SecurID Software Token 4.1 before 4.1.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Software Token file.
CVSS Score: 9.3 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2011-12/0089.html; http://secunia.com/advisories/45665; http://securitytracker.com/id?1026426
CVE: CVE-2011-4602
Published: 2011-12-17
Description: The XMPP protocol plugin in libpurple in Pidgin before 2.10.1 does not properly handle missing fields in (1) voice-chat and (2) video-chat stanzas, which allows remote attackers to cause a denial of service (application crash) via a crafted message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://developer.pidgin.im/viewmtn/revision/info/fb216fc88b085afc06d9a15209519cde1f4df6c6; http://pidgin.im/news/security/?id=58; http://secunia.com/advisories/47219
CVE: CVE-2011-4603
Published: 2011-12-17
Description: The silc_channel_message function in ops.c in the SILC protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data, which allows remote attackers to cause a denial of service (application crash) via a crafted message, a different vulnerability than CVE-2011-3594.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://developer.pidgin.im/viewmtn/revision/diff/c7b95cc3be0590b52edc02d4750ae62844c1acb6/with/afb9ede3de989f217f03d5670cca00e628bd11f1/libpurple/protocols/silc/ops.c; http://developer.pidgin.im/viewmtn/revision/info/afb9ede3de989f217f03d5670cca00e628bd11f1; http://secunia.com/advisories/47234
CVE: CVE-2011-4859
Published: 2011-12-17
Description: The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSXETY* and TSXP57* modules, the M340 BMXNOE01* and BMXP3420* modules, and the STB DIO STBNIC2212 and STBNIP2* modules, uses hardcoded passwords for the (1) AUTCSE, (2) AUT_CSE, (3) fdrusers, (4) ftpuser, (5) loader, (6) nic2212, (7) nimrohs2212, (8) nip2212, (9) noe77111_v500, (10) ntpupdate, (11) pcfactory, (12) sysdiag, (13) target, (14) test, (15) USER, and (16) webserver accounts, which makes it easier for remote attackers to obtain access via the (a) TELNET, (b) Windriver Debug, or (c) FTP port.
CVSS Score: 10.0 (HIGH)
References: http://reversemode.com/index.php?option=com_content&task=view&id=80&Itemid=1; http://secunia.com/advisories/47723; http://www.securityfocus.com/bid/51605
CVE: CVE-2011-4860
Published: 2011-12-17
Description: The ComputePassword function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device (aka the Quantum 140NOE771* module) generates the password for the fwupgrade account by performing a calculation on the MAC address, which makes it easier for remote attackers to obtain access via a (1) ARP request message or (2) Neighbor Solicitation message.
CVSS Score: 10.0 (HIGH)
CWE: CWE-287
References: http://reversemode.com/index.php?option=com_content&task=view&id=80&Itemid=1; http://reversemode.com/index.php?option=com_content&task=view&id=80&Itemid=1
CVE: CVE-2011-4861
Published: 2011-12-17
Description: The modbus_125_handler function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device (aka the Quantum 140NOE771* module) allows remote attackers to install arbitrary firmware updates via a MODBUS 125 function code to TCP port 502.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://reversemode.com/index.php?option=com_content&task=view&id=80&Itemid=1; http://reversemode.com/index.php?option=com_content&task=view&id=80&Itemid=1
CVE: CVE-2011-4528
Published: 2011-12-20
Description: Unbound before 1.4.13p2 attempts to free unallocated memory during processing of duplicate CNAME records in a signed zone, which allows remote DNS servers to cause a denial of service (daemon crash) via a crafted response.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071525.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071535.html; http://osvdb.org/77909
CVE: CVE-2011-4717
Published: 2011-12-20
Description: Directory traversal vulnerability in zFTPServer Suite 6.0.0.52 allows remote authenticated users to delete arbitrary directories via a crafted RMD (aka rmdir) command.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: http://forum.zftpserver.com/viewtopic.php?f=4&t=2927; http://www.infoserve.de/system/files/advisories/INFOSERVE-ADV2011-09.txt; http://forum.zftpserver.com/viewtopic.php?f=4&t=2927
CVE: CVE-2011-4723
Published: 2011-12-20
Description: The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-312, CWE-312
References: http://en.securitylab.ru/lab/PT-2011-30; http://en.securitylab.ru/lab/PT-2011-30; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-4723
CVE: CVE-2011-4869
Published: 2011-12-20
Description: validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service (daemon crash) via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071525.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071535.html; http://osvdb.org/77910
CVE: CVE-2011-4779
Published: 2011-12-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2011-4642.  Reason: This candidate is a reservation duplicate of CVE-2011-4642.  Notes: All CVE users should reference CVE-2011-4642 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2011-3658
Published: 2011-12-21
Description: The SVG implementation in Mozilla Firefox 8.0, Thunderbird 8.0, and SeaMonkey 2.5 does not properly interact with DOMAttrModified event handlers, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via vectors involving removal of SVG elements.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00009.html; http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html
CVE: CVE-2011-3660
Published: 2011-12-21
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors that trigger a compartment mismatch associated with the nsDOMMessageEvent::GetData function, and unknown other vectors.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00009.html; http://osvdb.org/77952
CVE: CVE-2011-3661
Published: 2011-12-21
Description: YARR, as used in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted JavaScript.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00009.html; http://secunia.com/advisories/47302
CVE: CVE-2011-3663
Published: 2011-12-21
Description: Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to capture keystrokes entered on a web page, even when JavaScript is disabled, by using SVG animation accessKey events within that web page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00009.html; http://osvdb.org/77954
CVE: CVE-2011-3664
Published: 2011-12-21
Description: Mozilla Firefox before 9.0, Thunderbird before 9.0, and SeaMonkey before 2.6 on Mac OS X do not properly handle certain DOM frame deletions by plugins, which allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) or possibly have unspecified other impact via a crafted web site.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/47302; http://secunia.com/advisories/47334; http://www.mozilla.org/security/announce/2011/mfsa2011-57.html
CVE: CVE-2011-3665
Published: 2011-12-21
Description: Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an Ogg VIDEO element that is not properly handled after scaling.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00009.html; http://osvdb.org/77956
CVE: CVE-2011-3666
Published: 2011-12-21
Description: Mozilla Firefox before 3.6.25 and Thunderbird before 3.1.17 on Mac OS X do not consider .jar files to be executable files, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted file.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-2372 on Mac OS X.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://www.mozilla.org/security/announce/2011/mfsa2011-59.html; http://www.securitytracker.com/id?1026445; http://www.securitytracker.com/id?1026447
CVE: CVE-2011-4037
Published: 2011-12-22
Description: Buffer overflow in Sielco Sistemi Winlog PRO before 2.07.09 and Winlog Lite before 2.07.09 allows user-assisted remote attackers to execute arbitrary code via invalid data in unspecified fields of a project file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/47078; http://securitytracker.com/id?1026388; http://www.us-cert.gov/control_systems/pdf/ICSA-11-298-01.pdf
CVE: CVE-2011-4203
Published: 2011-12-22
Description: CRLF injection vulnerability in calendar/set.php in the Calendar component in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, 2.1.x before 2.1.3, and 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors involving the url variable.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-94
References: http://penturalabs.wordpress.com/2011/12/13/advisory-crlf-injection-vulnerability-in-moodle/; http://tracker.moodle.org/browse/MDL-24808; http://penturalabs.wordpress.com/2011/12/13/advisory-crlf-injection-vulnerability-in-moodle/
CVE: CVE-2011-4453
Published: 2011-12-22
Description: The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitrary code via PHP sequences in a crafted order parameter in a pagelist directive, leading to unintended use of the PHP create_function function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.exploit-db.com/exploits/18149/; http://www.exploit-db.com/exploits/18243/; http://www.pmwiki.org/wiki/PITS/01271
CVE: CVE-2011-3990
Published: 2011-12-22
Description: Cross-site scripting (XSS) vulnerability in plugin/comment.inc.php in PukiWiki Plus! 1.4.7plus-u2-i18n and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN76515037/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2011-000107; http://pukiwiki.cafelounge.net/plus/?%E9%96%8B%E7%99%BA%E6%97%A5%E8%A8%98%2F2011-12-19
CVE: CVE-2011-4634
Published: 2011-12-22
Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x before 3.4.8 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted database name, related to the Database Synchronize panel; (2) a crafted database name, related to the Database rename panel; (3) a crafted SQL query, related to the table overview panel; (4) a crafted SQL query, related to the view creation dialog; (5) a crafted column type, related to the table search dialog; or (6) a crafted column type, related to the create index dialog.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-December/071040.html; http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commitdiff%3Bh=077c10020e349e8c1beb[PII_REDACTED]2fde616913; http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commitdiff%3Bh=1490533d91e9d3820e78ca4eac7981886eaea2cb
CVE: CVE-2011-4780
Published: 2011-12-22
Description: Multiple cross-site scripting (XSS) vulnerabilities in libraries/display_export.lib.php in phpMyAdmin 3.4.x before 3.4.9 allow remote attackers to inject arbitrary web script or HTML via crafted URL parameters, related to the export panels in the (1) server, (2) database, and (3) table sections.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071523.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071537.html; http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=bd3735ba584e7a49aee[PII_REDACTED]5354b061f61
CVE: CVE-2011-4782
Published: 2011-12-22
Description: Cross-site scripting (XSS) vulnerability in libraries/config/ConfigFile.class.php in the setup interface in phpMyAdmin 3.4.x before 3.4.9 allows remote attackers to inject arbitrary web script or HTML via the host parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071523.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071537.html; http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=0e707906e69ce90c4852a0fce2a0fac7db86a3cd
CVE: CVE-2011-2768
Published: 2011-12-23
Description: Tor before 0.2.2.34, when configured as a client or bridge, sends a TLS certificate chain as part of an outgoing OR connection, which allows remote relays to bypass intended anonymity properties by reading this chain and then determining the set of entry guards that the client or bridge had selected.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264
References: http://www.debian.org/security/2011/dsa-2331; https://blog.torproject.org/blog/tor-02234-released-security-patches; http://www.debian.org/security/2011/dsa-2331
CVE: CVE-2011-2769
Published: 2011-12-23
Description: Tor before 0.2.2.34, when configured as a bridge, accepts the CREATE and CREATE_FAST values in the Command field of a cell within an OR connection that it initiated, which allows remote relays to enumerate bridges by using these values.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.debian.org/security/2011/dsa-2331; https://blog.torproject.org/blog/tor-02234-released-security-patches; http://www.debian.org/security/2011/dsa-2331
CVE: CVE-2011-2778
Published: 2011-12-23
Description: Multiple heap-based buffer overflows in Tor before 0.2.2.35 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code by (1) establishing a SOCKS connection to SocksPort or (2) leveraging a SOCKS proxy configuration.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://www.debian.org/security/2011/dsa-2363; https://blog.torproject.org/blog/tor-02235-released-security-patches; http://www.debian.org/security/2011/dsa-2363
CVE: CVE-2011-4894
Published: 2011-12-23
Description: Tor before 0.2.2.34, when configured as a bridge, uses direct DirPort access instead of a Tor TLS connection for a directory fetch, which makes it easier for remote attackers to enumerate bridges by observing DirPort connections.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://blog.torproject.org/blog/tor-02234-released-security-patches; https://blog.torproject.org/blog/tor-02234-released-security-patches
CVE: CVE-2011-4895
Published: 2011-12-23
Description: Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which makes it easier for remote attackers to enumerate bridges by observing circuit building.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://blog.torproject.org/blog/tor-02234-released-security-patches; https://blog.torproject.org/blog/tor-02234-released-security-patches