deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-6742
Published: 2014-02-14
Description: The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 do not have an off autocomplete attribute for a password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg21662928; https://exchange.xforce.ibmcloud.com/vulnerabilities/89858; http://www-01.ibm.com/support/docview.wss?uid=swg21662928
CVE: CVE-2013-6743
Published: 2014-02-14
Description: Cross-site scripting (XSS) vulnerability in the Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving an IMG element.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://osvdb.org/103131; http://www-01.ibm.com/support/docview.wss?uid=swg21662928; https://exchange.xforce.ibmcloud.com/vulnerabilities/89859
CVE: CVE-2014-1219
Published: 2014-02-14
Description: CA 2E Web Option r8.1.2 accepts a predictable substring of a W2E_SSNID session token in place of the entire token, which allows remote attackers to hijack sessions by changing characters at the end of this substring, as demonstrated by terminating a session via a modified SSNID parameter to web2edoc/close.htm.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-20
References: http://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1219/; http://www.securityfocus.com/bid/65537; http://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1219/
CVE: CVE-2014-1253
Published: 2014-02-14
Description: AppleMNT.sys in Apple Boot Camp 5 before 5.1 allows local users to cause a denial of service (kernel memory corruption) or possibly have unspecified other impact via a malformed header in a Portable Executable (PE) file.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-119
References: http://osvdb.org/103267; http://seclists.org/bugtraq/2014/Feb/47; http://support.apple.com/kb/HT6126
CVE: CVE-2012-0052
Published: 2014-02-14
Description: Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 does not check the JON agent key, which allows remote attackers to spoof the identity of arbitrary agents via the registered agent name.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://rhn.redhat.com/errata/RHSA-2012-0089.html; http://rhn.redhat.com/errata/RHSA-2012-0406.html; https://bugzilla.redhat.com/show_bug.cgi?id=781964
CVE: CVE-2012-0062
Published: 2014-02-14
Description: Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 allows remote attackers to hijack agent sessions via an agent registration request without a security token.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-287
References: http://rhn.redhat.com/errata/RHSA-2012-0089.html; http://rhn.redhat.com/errata/RHSA-2012-0406.html; https://bugzilla.redhat.com/show_bug.cgi?id=783008
CVE: CVE-2012-1100
Published: 2014-02-14
Description: Red Hat JBoss Operations Network (JON) 3.0.x before 3.0.1, 2.4.2, and earlier, when LDAP authentication is enabled and the LDAP bind account credentials are invalid, allows remote attackers to login to LDAP-based accounts via an arbitrary password in a login request.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-287
References: http://rhn.redhat.com/errata/RHSA-2012-0396.html; http://rhn.redhat.com/errata/RHSA-2012-0406.html; https://bugzilla.redhat.com/show_bug.cgi?id=799789
CVE: CVE-2012-6149
Published: 2014-02-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) subject or (2) content values of a note in a system.addNote XML-RPC call.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://rhn.redhat.com/errata/RHSA-2014-0148.html; http://secunia.com/advisories/56952; https://bugzilla.redhat.com/show_bug.cgi?id=882000
CVE: CVE-2013-1871
Published: 2014-02-14
Description: Cross-site scripting (XSS) vulnerability in account/EditAddress.do in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allows remote attackers to inject arbitrary web script or HTML via the type parameter.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://osvdb.org/103211; http://rhn.redhat.com/errata/RHSA-2014-0148.html; http://secunia.com/advisories/56952
CVE: CVE-2013-4415
Published: 2014-02-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) whereCriteria variable in a software channels search; (2) end_year, (3) start_hour, (4) end_am_pm, (5) end_day, (6) end_hour, (7) end_minute, (8) end_month, (9) end_year, (10) optionScanDateSearch, (11) result_filter, (12) search_string, (13) show_as, (14) start_am_pm, (15) start_day, (16) start_hour, (17) start_minute, (18) start_month, (19) start_year, or (20) whereToSearch variable in an scap audit results search; (21) end_minute, (22) end_month, (23) end_year, (24) errata_type_bug, (25) errata_type_enhancement, (26) errata_type_security, (27) fineGrained, (28) list_[PII_REDACTED]_sortdir, (29) optionIssueDateSearch, (30) start_am_pm, (31) start_day, (32) start_hour, (33) start_minute, (34) start_month, (35) start_year, or (36) view_mode variable in an errata search; or (37) fineGrained variable in a systems search, related to PAGE_SIZE_LABEL_SELECTED.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://rhn.redhat.com/errata/RHSA-2014-0148.html; http://secunia.com/advisories/56952; https://bugzilla.redhat.com/show_bug.cgi?id=979452
CVE: CVE-2013-6440
Published: 2014-02-14
Description: The (1) BasicParserPool, (2) StaticBasicParserPool, (3) XML Decrypter, and (4) SAML Decrypter in Shibboleth OpenSAML-Java before 2.6.1 set the expandEntityReferences property to true, which allows remote attackers to conduct XML external entity (XXE) attacks via a crafted XML DOCTYPE declaration.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://blog.sendsafely.com/post/[PII_REDACTED]6/web-based-single-sign-on-and-the-dangers-of-saml-xml; http://rhn.redhat.com/errata/RHSA-2014-0170.html; http://rhn.redhat.com/errata/RHSA-2014-0171.html
CVE: CVE-2013-6441
Published: 2014-02-14
Description: The lxc-sshd template (templates/lxc-sshd.in) in LXC before 1.0.0.beta2 uses read-write permissions when mounting /sbin/init, which allows local users to gain privileges by modifying the init file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://www.ubuntu.com/usn/USN-2104-1; https://bugs.launchpad.net/ubuntu/%2Bsource/lxc/%2Bbug/1261045; https://github.com/dotcloud/lxc/pull/1
CVE: CVE-2013-6492
Published: 2014-02-14
Description: The Piranha Configuration Tool in Piranha 0.8.6 does not properly restrict access to webpages, which allows remote attackers to bypass authentication and read or modify the LVS configuration via an HTTP POST request.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264
References: http://bugs.centos.org/view.php?id=6825; http://rhn.redhat.com/errata/RHSA-2014-0174.html; http://rhn.redhat.com/errata/RHSA-2014-0175.html
CVE: CVE-2014-0018
Published: 2014-02-14
Description: Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.0 and JBoss WildFly Application Server, when run under a security manager, do not properly restrict access to the Modular Service Container (MSC) service registry, which allows local users to modify the server via a crafted deployment.
CVSS Score: 1.9 (LOW)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2014-0170.html; http://rhn.redhat.com/errata/RHSA-2014-0171.html; http://rhn.redhat.com/errata/RHSA-2014-0172.html
CVE: CVE-2014-0032
Published: 2014-02-14
Description: The get_resource function in repos.c in the mod_dav_svn module in Apache Subversion before 1.7.15 and 1.8.x before 1.8.6, when SVNListParentPath is enabled, allows remote attackers to cause a denial of service (crash) via vectors related to the server root and request methods other than GET, as demonstrated by the "svn ls http://svn.example.com" command.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-updates/2014-02/msg00086.html; http://lists.opensuse.org/opensuse-updates/2014-03/msg00011.html; http://mail-archives.apache.org/mod_mbox/subversion-dev/201401.mbox/%3C52D328AB.8090502%40reser.org%3E
CVE: CVE-2014-1921
Published: 2014-02-14
Description: parcimonie before 0.8.1, when using a large keyring, sleeps for the same amount of time between fetches, which allows attackers to correlate key fetches via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-362
References: http://seclists.org/oss-sec/2014/q1/305; http://seclists.org/oss-sec/2014/q1/308; http://www.debian.org/security/2014/dsa-2860
CVE: CVE-2014-1948
Published: 2014-02-14
Description: OpenStack Image Registry and Delivery Service (Glance) 2013.2 through 2013.2.1 and Icehouse before icehouse-2 logs a URL containing the Swift store backend password when authentication fails and WARNING level logging is enabled, which allows local users to obtain sensitive information by reading the log.
CVSS Score: 2.6 (LOW)
CWE: CWE-255
References: http://rhn.redhat.com/errata/RHSA-2014-0229.html; http://secunia.com/advisories/56419; http://www.openwall.com/lists/oss-security/2014/02/12/18
CVE: CVE-2014-1950
Published: 2014-02-14
Description: Use-after-free vulnerability in the xc_cpupool_getinfo function in Xen 4.1.x through 4.3.x, when using a multithreaded toolstack, does not properly handle a failure by the xc_cpumap_alloc function, which allows local users with access to management functions to cause a denial of service (heap corruption) and possibly gain privileges via unspecified vectors.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00011.html; http://www.debian.org/security/2014/dsa-3006
CVE: CVE-2014-1960
Published: 2014-02-14
Description: The Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://scn.sap.com/docs/DOC-8218; http://secunia.com/advisories/56942; https://erpscan.io/advisories/erpscan-14-004-sap-netweaver-solution-manager-missing-authorization-check-information-disclosure/
CVE: CVE-2014-1961
Published: 2014-02-14
Description: Unspecified vulnerability in the Portal WebDynPro in SAP NetWeaver allows remote attackers to obtain sensitive path information via unknown attack vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://scn.sap.com/docs/DOC-8218; http://secunia.com/advisories/56947; https://erpscan.io/advisories/erpscan-14-002-sap-portal-webdynpro-path-disclosure/
CVE: CVE-2014-1962
Published: 2014-02-14
Description: Gwsync in SAP CRM 7.02 EHP 2 allows remote attackers to obtain sensitive information via unspecified vectors, related to an XML External Entity (XXE) issue.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://scn.sap.com/docs/DOC-8218; http://secunia.com/advisories/56944; https://erpscan.io/advisories/erpscan-14-003-sap-crm-gwsync-xxe/
CVE: CVE-2014-1963
Published: 2014-02-14
Description: Unspecified vulnerability in Message Server in SAP NetWeaver 7.20 allows remote attackers to cause a denial of service via unknown attack vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://scn.sap.com/docs/DOC-8218; http://secunia.com/advisories/56947; https://erpscan.io/advisories/erpscan-14-001-sap-netweaver-message-server-dos/
CVE: CVE-2014-1964
Published: 2014-02-14
Description: Cross-site scripting (XSS) vulnerability in the Integration Repository in the SAP Exchange Infrastructure (BC-XI) component in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via vectors related to the ESR application and a DIR error.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://scn.sap.com/docs/DOC-8218; http://secunia.com/advisories/56947; https://erpscan.io/advisories/erpscan-14-005-sap-netweaver-dir-error-xss/
CVE: CVE-2014-1965
Published: 2014-02-14
Description: Cross-site scripting (XSS) vulnerability in ISpeakAdapter in the Integration Repository in the SAP Exchange Infrastructure (BC-XI) component 3.0, 7.00 through 7.02, and 7.10 through 7.11 for SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via vectors related to PIP.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/56947; http://www.stechno.net/sap-notes.html?view=sapnote&id=1442517; https://erpscan.io/advisories/erpscan-14-006-sap-netweaver-pip-xss/
CVE: CVE-2014-0322
Published: 2014-02-14
Description: Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via vectors involving crafted JavaScript code, CMarkup, and the onpropertychange attribute of a script element, as exploited in the wild in January and February 2014.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: http://community.websense.com/blogs/securitylabs/archive/2014/02/13/msie-0-day-exploit-cve-2014-0322-possibly-targeting-french-aerospace-organization.aspx; http://technet.microsoft.com/security/advisory/2934088; http://twitter.com/nanoc0re/statuses/[PII_REDACTED]44673281
CVE: CVE-2014-0332
Published: 2014-02-14
Description: Cross-site scripting (XSS) vulnerability in mainPage in Dell SonicWALL GMS before 7.1 SP2, SonicWALL Analyzer before 7.1 SP2, and SonicWALL UMA E5000 before 7.1 SP2 might allow remote attackers to inject arbitrary web script or HTML via the node_id parameter in a ScreenDisplayManager genNetwork action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/103216; http://www.kb.cert.org/vuls/id/727318; http://www.securityfocus.com/bid/65498
CVE: CVE-2014-0813
Published: 2014-02-14
Description: Cross-site request forgery (CSRF) vulnerability in phpMyFAQ before 2.8.6 allows remote attackers to hijack the authentication of arbitrary users for requests that modify settings.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://jvn.jp/en/jp/JVN50943964/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2014-000016; http://osvdb.org/102939
CVE: CVE-2014-0814
Published: 2014-02-14
Description: Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.8.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN30050348/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2014-000015; http://osvdb.org/102940
CVE: CVE-2013-4499
Published: 2014-02-14
Description: Cross-site scripting (XSS) vulnerability in the Bean module 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via the bean title.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://drupal.org/node/2118867; https://drupal.org/node/2118873; https://exchange.xforce.ibmcloud.com/vulnerabilities/88278
CVE: CVE-2013-5351
Published: 2014-02-14
Description: Heap-based buffer overflow in IrfanView before 4.37 allows remote attackers to execute arbitrary code via the LZW code stream in a GIF file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://osvdb.org/101065; http://secunia.com/advisories/54959; http://secunia.com/secunia_research/2013-13/
CVE: CVE-2013-7032
Published: 2014-02-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in the web based operator client in LiveZilla before 5.1.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) name of an uploaded file or (2) customer name in a resource created from an uploaded file, a different vulnerability than CVE-2013-7003.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2013-12/0074.html; http://osvdb.org/101080; http://www.livezilla.net/board/index.php?/topic/163-livezilla-changelog
CVE: CVE-2013-7326
Published: 2014-02-14
Description: Cross-site scripting (XSS) vulnerability in vTiger CRM 5.4.0 allows remote attackers to inject arbitrary web script or HTML via the (1) return_url parameter to modules\com_vtiger_workflow\savetemplate.php, or unspecified vectors to (2) deletetask.php, (3) edittask.php, (4) savetask.php, or (5) saveworkflow.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2013-12/0052.html; http://osvdb.org/100897; http://packetstormsecurity.com/files/124402
CVE: CVE-2011-1831
Published: 2014-02-15
Description: utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to effectively replace any directory with a new filesystem, and consequently gain privileges, via a mount system call.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.html; http://www.ubuntu.com/usn/USN-1188-1; https://bugzilla.redhat.com/show_bug.cgi?id=729465
CVE: CVE-2011-1832
Published: 2014-02-15
Description: utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to remove directories via a umount system call.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.html; http://www.ubuntu.com/usn/USN-1188-1; https://bugzilla.redhat.com/show_bug.cgi?id=729465
CVE: CVE-2011-1834
Published: 2014-02-15
Description: utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly maintain the mtab file during error conditions, which allows local users to cause a denial of service (table corruption) or bypass intended unmounting restrictions via a umount system call.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.html; http://www.ubuntu.com/usn/USN-1188-1; https://bugzilla.redhat.com/show_bug.cgi?id=729465
CVE: CVE-2011-1835
Published: 2014-02-15
Description: The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does not properly ensure that the passphrase file is created, which might allow local users to bypass intended access restrictions at a certain time in the new-user creation steps.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-255
References: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.html; http://www.ubuntu.com/usn/USN-1188-1; https://bugzilla.redhat.com/show_bug.cgi?id=729465
CVE: CVE-2011-1836
Published: 2014-02-15
Description: utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations during the recovery process.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.html; http://www.ubuntu.com/usn/USN-1188-1; https://bugzilla.redhat.com/show_bug.cgi?id=729465
CVE: CVE-2011-1837
Published: 2014-02-15
Description: The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 allows local users to overwrite arbitrary files via unspecified vectors.
CVSS Score: 3.6 (LOW)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.html; http://www.ubuntu.com/usn/USN-1188-1; https://bugzilla.redhat.com/show_bug.cgi?id=729465
CVE: CVE-2011-2500
Published: 2014-02-15
Description: The host_reliable_addrinfo function in support/export/hostname.c in nfs-utils before 1.2.4 does not properly use DNS to verify access to NFS exports, which allows remote attackers to mount filesystems by establishing crafted DNS A and PTR records.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://marc.info/?l=linux-nfs&m=[PII_REDACTED]1953&w=2; http://rhn.redhat.com/errata/RHSA-2011-1534.html; http://sourceforge.net/projects/nfs/files/nfs-utils/1.2.4/
CVE: CVE-2011-2909
Published: 2014-02-15
Description: The do_devinfo_ioctl function in drivers/staging/comedi/comedi_fops.c in the Linux kernel before 3.1 allows local users to obtain sensitive information from kernel memory via a copy of a short string.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=819cbb120eaec7e014e5abd029260db1ca8c5735; http://www.openwall.com/lists/oss-security/2011/08/12/1; https://github.com/torvalds/linux/commit/819cbb120eaec7e014e5abd029260db1ca8c5735
CVE: CVE-2011-3588
Published: 2014-02-15
Description: The SSH configuration in the Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in Red Hat Enterprise Linux, disables the StrictHostKeyChecking option, which allows man-in-the-middle attackers to spoof kdump servers, and obtain sensitive core information, by using an arbitrary SSH key.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-310
References: http://rhn.redhat.com/errata/RHSA-2011-1532.html; http://rhn.redhat.com/errata/RHSA-2012-0152.html; https://bugzilla.redhat.com/show_bug.cgi?id=716439
CVE: CVE-2011-3589
Published: 2014-02-15
Description: The Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in Red Hat Enterprise Linux, uses world-readable permissions for vmcore files, which allows local users to obtain sensitive information by inspecting the file content, as demonstrated by a search for a root SSH key.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-310
References: http://rhn.redhat.com/errata/RHSA-2011-1532.html; http://rhn.redhat.com/errata/RHSA-2012-0152.html; https://bugzilla.redhat.com/show_bug.cgi?id=716439
CVE: CVE-2011-3590
Published: 2014-02-15
Description: The Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in Red Hat Enterprise Linux, includes all of root's SSH private keys within a vmcore file, which allows context-dependent attackers to obtain sensitive information by inspecting the file content.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-310
References: http://rhn.redhat.com/errata/RHSA-2011-1532.html; http://rhn.redhat.com/errata/RHSA-2012-0152.html; https://bugzilla.redhat.com/show_bug.cgi?id=716439
CVE: CVE-2012-1088
Published: 2014-02-15
Description: iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by (1) configure or (2) examples/dhcp-client-script.
CVSS Score: 3.3 (LOW)
CWE: CWE-59
References: http://git.kernel.org/?p=linux/kernel/git/shemminger/iproute2.git%3Ba=commit%3Bh=20ed7b24df05eadf83168d1d0ce0052a31380928; http://git.kernel.org/?p=linux/kernel/git/shemminger/iproute2.git%3Ba=commit%3Bh=e557d1ac3a156ba7521ba44b0b412af4542f83f8; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6211&w=2
CVE: CVE-2012-1171
Published: 2014-02-15
Description: The libxml RSHUTDOWN function in PHP 5.x allows remote attackers to bypass the open_basedir protection mechanism and read arbitrary files via vectors involving a stream_close method call during use of a custom stream wrapper.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: https://bugs.php.net/bug.php?id=61367; https://bugzilla.redhat.com/show_bug.cgi?id=802591; https://github.com/php/php-src/blob/master/ext/libxml/tests/bug61367-read.phpt
CVE: CVE-2012-2663
Published: 2014-02-15
Description: extensions/libxt_tcp.c in iptables through 1.4.21 does not match TCP SYN+FIN packets in --syn rules, which might allow remote attackers to bypass intended firewall restrictions via crafted packets.  NOTE: the CVE-2012-6638 fix makes this issue less relevant.
CVSS Score: 7.5 (HIGH)
References: http://www.spinics.net/lists/netfilter-devel/msg21248.html; https://bugzilla.redhat.com/show_bug.cgi?id=826702; http://www.spinics.net/lists/netfilter-devel/msg21248.html