deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-3015
Published: 2010-08-20
Description: Integer overflow in the ext4_ext_get_blocks function in fs/ext4/extents.c in the Linux kernel before 2.6.34 allows local users to cause a denial of service (BUG and system crash) via a write operation on the last block of a large file, followed by a sync operation.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-189
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=731eb1a03a8445cde2cb23ecfb3580c6fa7bb690; http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html
CVE: CVE-2010-3058
Published: 2010-08-20
Description: The Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.x.x before 5.5.7, and 6.1.0.0, establishes an open UDP port, which might allow remote attackers to overwrite memory locations and execute arbitrary code, or cause a denial of service (application hang), via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/41044; http://www-01.ibm.com/support/docview.wss?uid=swg1IC69883; http://www-01.ibm.com/support/docview.wss?uid=swg21443820
CVE: CVE-2010-3059
Published: 2010-08-20
Description: Buffer overflow in the message-protocol implementation in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.x.x before 5.5.7, and 6.1.0.0, allows remote attackers to read and modify data, and possibly have other impact, via an unspecified command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/41044; http://www-01.ibm.com/support/docview.wss?uid=swg1IC69883; http://www-01.ibm.com/support/docview.wss?uid=swg21443820
CVE: CVE-2010-3060
Published: 2010-08-20
Description: Unspecified vulnerability in the message-protocol implementation in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.x.x before 5.5.7, and 6.1.0.0, allows remote attackers to cause a denial of service (daemon outage) via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/41044; http://www-01.ibm.com/support/docview.wss?uid=swg1IC69883; http://www-01.ibm.com/support/docview.wss?uid=swg21443820
CVE: CVE-2010-3061
Published: 2010-08-20
Description: Unspecified vulnerability in the message-protocol implementation in the Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.x.x before 5.5.7, and 6.1.0.0, allows remote attackers to cause a denial of service (recovery failure), and possibly trigger loss of data, via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/41044; http://www-01.ibm.com/support/docview.wss?uid=swg1IC69883; http://www-01.ibm.com/support/docview.wss?uid=swg21443820
CVE: CVE-2010-1768
Published: 2010-08-20
Description: Unspecified vulnerability in Apple iTunes before 9.1 allows local users to gain console privileges via vectors related to log files, "insecure file operation," and syncing an iPhone, iPad, or iPod touch.
CVSS Score: 6.9 (MEDIUM)
References: http://support.apple.com/kb/HT4105; http://www.securityfocus.com/bid/42538; https://exchange.xforce.ibmcloud.com/vulnerabilities/61222
CVE: CVE-2010-1795
Published: 2010-08-20
Description: Untrusted search path vulnerability in Apple iTunes before 9.1, when running on Windows 7, Vista, and XP, allows local users and possibly remote attackers to gain privileges via a Trojan horse DLL in the current working directory.
CVSS Score: 9.3 (HIGH)
References: http://support.apple.com/kb/HT4105; http://www.acrossecurity.com/aspr/ASPR-2010-08-18-1-PUB.txt; http://www.securityfocus.com/archive/1/513190/100/0/threaded
CVE: CVE-2010-2944
Published: 2010-08-20
Description: The authenticate function in LDAPUserFolder/LDAPUserFolder.py in zope-ldapuserfolder 2.9-1 does not verify the password for the emergency account, which allows remote attackers to gain privileges.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=593466; http://secunia.com/advisories/41022; http://www.openwall.com/lists/oss-security/2010/08/18/3
CVE: CVE-2010-3014
Published: 2010-08-20
Description: The Coda filesystem kernel module, as used in NetBSD and FreeBSD, when Coda is loaded and Venus is running with /coda mounted, allows local users to read sensitive heap memory via a large out_size value in a ViceIoctl struct to a Coda ioctl, which triggers a buffer over-read.
CVSS Score: 1.2 (LOW)
CWE: CWE-200
References: http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/coda/coda.h.diff?r1=1.15&r2=1.16&only_with_tag=MAIN; http://svn.freebsd.org/viewvc/base?view=revision&revision=210997; http://www.securityfocus.com/archive/1/513151/100/0/threaded
CVE: CVE-2010-3062
Published: 2010-08-20
Description: mysqlnd_wireprotocol.c in the Mysqlnd extension in PHP 5.3 through 5.3.2 allows remote attackers to (1) read sensitive memory via a modified length value, which is not properly handled by the php_mysqlnd_ok_read function; or (2) trigger a heap-based buffer overflow via a modified length value, which is not properly handled by the php_mysqlnd_rset_header_read function.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html; http://php-security.org/2010/05/31/mops-2010-056-php-php_mysqlnd_ok_read-information-leak-vulnerability/index.html
CVE: CVE-2010-3063
Published: 2010-08-20
Description: The php_mysqlnd_read_error_from_line function in the Mysqlnd extension in PHP 5.3 through 5.3.2 does not properly calculate a buffer length, which allows context-dependent attackers to trigger a heap-based buffer overflow via crafted inputs that cause a negative length value to be used.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html; http://php-security.org/2010/05/31/mops-2010-058-php-php_mysqlnd_read_error_from_line-buffer-overflow-vulnerability/index.html
CVE: CVE-2010-3064
Published: 2010-08-20
Description: Stack-based buffer overflow in the php_mysqlnd_auth_write function in the Mysqlnd extension in PHP 5.3 through 5.3.2 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) username or (2) database name argument to the (a) mysql_connect or (b) mysqli_connect function.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html; http://php-security.org/2010/05/31/mops-2010-059-php-php_mysqlnd_auth_write-stack-buffer-overflow-vulnerability/index.html
CVE: CVE-2010-3065
Published: 2010-08-20
Description: The default session serializer in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 does not properly handle the PS_UNDEF_MARKER marker, which allows context-dependent attackers to modify arbitrary session variables via a crafted session variable name.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html; http://php-security.org/2010/05/31/mops-2010-060-php-session-serializer-session-data-injection-vulnerability/index.html
CVE: CVE-2010-3096
Published: 2010-08-20
Description: Directory traversal vulnerability in SoftX FTP Client 3.3 and possibly earlier allows remote FTP servers to write arbitrary files via "..\" (dot dot backslash) sequences in a filename.
CVSS Score: 9.3 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/40973; http://www.htbridge.ch/advisory/directory_traversal_in_softx_ftp_client.html; http://www.securityfocus.com/archive/1/513085/100/0/threaded
CVE: CVE-2010-3097
Published: 2010-08-20
Description: Directory traversal vulnerability in WinFrigate Frigate 3 FTP client 3.36 and earlier allows remote FTP servers to overwrite arbitrary files via a "..\" (dot dot backslash) in a filename.
CVSS Score: 9.3 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/40898; http://www.htbridge.ch/advisory/directory_traversal_in_frigate_3_built_in_ftp_client.html; http://secunia.com/advisories/40898
CVE: CVE-2010-3098
Published: 2010-08-20
Description: Directory traversal vulnerability in IoRush Software FTP Rush 1.1.3 and possibly earlier allows remote FTP servers to overwrite arbitrary files via a "..\" (dot dot backslash) in a filename.
CVSS Score: 9.3 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/40900; http://www.htbridge.ch/advisory/directory_traversal_in_ftp_rush.html; http://secunia.com/advisories/40900
CVE: CVE-2010-3099
Published: 2010-08-20
Description: Directory traversal vulnerability in SmartSoft Ltd SmartFTP Client 4.0.1124.0, and possibly other versions before 4.0 Build 1133, allows remote FTP servers to overwrite arbitrary files via a "..\" (dot dot backslash) in a filename.  NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/40899; http://www.htbridge.ch/advisory/directory_traversal_in_smartftp.html; http://www.smartftp.com/forums/index.php?/topic/16425-smartftp-client-40-change-log/
CVE: CVE-2010-3100
Published: 2010-08-20
Description: Directory traversal vulnerability in Porta+ FTP Client 4.1, and possibly other versions, allows remote FTP servers to overwrite arbitrary files via a directory traversal sequences in a filename.
CVSS Score: 9.3 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/40985; http://www.osvdb.org/67256; http://secunia.com/advisories/40985
CVE: CVE-2010-2484
Published: 2010-08-20
Description: The strrchr function in PHP 5.2 before 5.2.14 allows context-dependent attackers to obtain sensitive information (memory contents) or trigger memory corruption by causing a userspace interruption of an internal function or handler.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html
CVE: CVE-2010-2531
Published: 2010-08-20
Description: The var_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer to the user when certain fatal errors occur, even if display_errors is off, which allows remote attackers to obtain sensitive information by causing the application to exceed limits for memory, execution time, or recursion.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
CVE: CVE-2010-2710
Published: 2010-08-20
Description: Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01926980; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01926980
CVE: CVE-2010-2533
Published: 2010-08-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2010-2621.  Reason: This candidate is a reservation duplicate of CVE-2010-2621.  Notes: All CVE users should reference CVE-2010-2621 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2010-3101
Published: 2010-08-21
Description: Directory traversal vulnerability in FTPx Corp FTP Explorer 10.5.19.1 for Windows, and probably earlier versions, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename.
CVSS Score: 9.3 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/40901; http://www.htbridge.ch/advisory/directory_traversal_in_ftp_explorer.html; http://secunia.com/advisories/40901
CVE: CVE-2010-3102
Published: 2010-08-21
Description: Directory traversal vulnerability in SiteDesigner Technologies, Inc. 3D-FTP Client 9.0 build 2, and probably earlier versions, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename.
CVSS Score: 9.3 (HIGH)
CWE: CWE-22
References: http://www.htbridge.ch/advisory/directory_traversal_in_3d_ftp_client.html; http://www.htbridge.ch/advisory/directory_traversal_in_3d_ftp_client.html
CVE: CVE-2010-3103
Published: 2010-08-21
Description: Directory traversal vulnerability in FTPGetter Team FTPGetter 3.51.0.05, and probably earlier versions, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename.
CVSS Score: 9.3 (HIGH)
CWE: CWE-22
References: http://www.htbridge.ch/advisory/directory_traversal_in_ftpgetter.html; http://www.htbridge.ch/advisory/directory_traversal_in_ftpgetter.html
CVE: CVE-2010-3104
Published: 2010-08-21
Description: Directory traversal vulnerability in DeskShare AutoFTP Manager 4.31, and probably earlier versions, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename.
CVSS Score: 9.3 (HIGH)
CWE: CWE-22
References: http://www.htbridge.ch/advisory/directory_traversal_in_autoftp_manager.html; http://www.htbridge.ch/advisory/directory_traversal_in_autoftp_manager.html
CVE: CVE-2010-1527
Published: 2010-08-23
Description: Stack-based buffer overflow in Novell iPrint Client before 5.44 allows remote attackers to execute arbitrary code via a long call-back-url parameter in an op-client-interface-version action.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/40805; http://secunia.com/secunia_research/2010-104/; http://www.novell.com/support/viewContent.do?externalId=7006679
CVE: CVE-2010-1644
Published: 2010-08-23
Description: Multiple cross-site scripting (XSS) vulnerabilities in Cacti before 0.8.7f, as used in Red Hat High Performance Computing (HPC) Solution and other products, allow remote attackers to inject arbitrary web script or HTML via the (1) hostname or (2) description parameter to host.php, or (3) the host_id parameter to data_sources.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/41041; http://svn.cacti.net/viewvc?view=rev&revision=5901; http://www.cacti.net/release_notes_0_8_7f.php
CVE: CVE-2010-1645
Published: 2010-08-23
Description: Cacti before 0.8.7f, as used in Red Hat High Performance Computing (HPC) Solution and other products, allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in (1) the FQDN field of a Device or (2) the Vertical Label field of a Graph Template.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/41041; http://svn.cacti.net/viewvc?view=rev&revision=5778; http://svn.cacti.net/viewvc?view=rev&revision=5782
CVE: CVE-2010-2543
Published: 2010-08-23
Description: Cross-site scripting (XSS) vulnerability in include/top_graph_header.php in Cacti before 0.8.7g allows remote attackers to inject arbitrary web script or HTML via the graph_start parameter to graph.php.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-4032.2.b.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://cacti.net/release_notes_0_8_7g.php; http://marc.info/?l=oss-security&m=[PII_REDACTED]2586&w=2; http://marc.info/?l=oss-security&m=[PII_REDACTED]4299&w=2
CVE: CVE-2010-2544
Published: 2010-08-23
Description: Cross-site scripting (XSS) vulnerability in utilities.php in Cacti before 0.8.7g, as used in Red Hat High Performance Computing (HPC) Solution and other products, allows remote attackers to inject arbitrary web script or HTML via the filter parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://cacti.net/release_notes_0_8_7g.php; http://marc.info/?l=oss-security&m=[PII_REDACTED]2586&w=2; http://marc.info/?l=oss-security&m=[PII_REDACTED]4299&w=2
CVE: CVE-2010-2545
Published: 2010-08-23
Description: Multiple cross-site scripting (XSS) vulnerabilities in Cacti before 0.8.7g, as used in Red Hat High Performance Computing (HPC) Solution and other products, allow remote attackers to inject arbitrary web script or HTML via (1) the name element in an XML template to templates_import.php; and allow remote authenticated administrators to inject arbitrary web script or HTML via vectors related to (2) cdef.php, (3) data_input.php, (4) data_queries.php, (5) data_sources.php, (6) data_templates.php, (7) gprint_presets.php, (8) graph.php, (9) graphs_new.php, (10) graphs.php, (11) graph_templates_inputs.php, (12) graph_templates_items.php, (13) graph_templates.php, (14) graph_view.php, (15) host.php, (16) host_templates.php, (17) lib/functions.php, (18) lib/html_form.php, (19) lib/html_form_template.php, (20) lib/html.php, (21) lib/html_tree.php, (22) lib/rrd.php, (23) rra.php, (24) tree.php, and (25) user_admin.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://cacti.net/release_notes_0_8_7g.php; http://marc.info/?l=oss-security&m=[PII_REDACTED]2586&w=2; http://marc.info/?l=oss-security&m=[PII_REDACTED]4299&w=2
CVE: CVE-2010-3105
Published: 2010-08-23
Description: The PluginGetDriverFile function in Novell iPrint Client before 5.44 interprets an uninitialized memory location as a pointer value, which allows remote attackers to execute arbitrary code via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/40805; http://www.securityfocus.com/bid/42576; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11817
CVE: CVE-2010-3106
Published: 2010-08-23
Description: The ienipp.ocx ActiveX control in the browser plugin in Novell iPrint Client before 5.42 does not properly validate the debug parameter, which allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a parameter value with a crafted length, related to the ExecuteRequest method.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://download.novell.com/Download?buildid=ftwZBxEFjIg~; http://dvlabs.tippingpoint.com/advisory/TPTI-10-06; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12044
CVE: CVE-2010-3107
Published: 2010-08-23
Description: A certain ActiveX control in ienipp.ocx in the browser plugin in Novell iPrint Client before 5.42 does not properly restrict the set of files to be deleted, which allows remote attackers to cause a denial of service (recursive file deletion) via unspecified vectors related to a "logic flaw" in the CleanUploadFiles method in the nipplib.dll module.
CVSS Score: 7.1 (HIGH)
CWE: CWE-264
References: http://download.novell.com/Download?buildid=ftwZBxEFjIg~; http://dvlabs.tippingpoint.com/advisory/TPTI-10-05; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12074
CVE: CVE-2010-3108
Published: 2010-08-23
Description: Buffer overflow in the browser plugin in Novell iPrint Client before 5.42 allows remote attackers to execute arbitrary code by using EMBED elements to pass parameters with long names.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://download.novell.com/Download?buildid=ftwZBxEFjIg~; http://www.zerodayinitiative.com/advisories/ZDI-10-139/; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11915
CVE: CVE-2010-3109
Published: 2010-08-23
Description: Stack-based buffer overflow in the browser plugin in Novell iPrint Client before 5.42 allows remote attackers to execute arbitrary code via a long operation parameter.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://download.novell.com/Download?buildid=ftwZBxEFjIg~; http://www.zerodayinitiative.com/advisories/ZDI-10-140/; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12046
CVE: CVE-2010-0428
Published: 2010-08-24
Description: libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0, does not properly validate guest QXL driver pointers, which allows guest OS users to cause a denial of service (invalid pointer dereference and guest OS crash) or possibly gain privileges via unspecified vectors.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=568699; https://rhn.redhat.com/errata/RHSA-2010-0622.html; https://rhn.redhat.com/errata/RHSA-2010-0633.html
CVE: CVE-2010-0429
Published: 2010-08-24
Description: libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0, does not properly restrict the addresses upon which memory-management actions are performed, which allows guest OS users to cause a denial of service (guest OS crash) or possibly gain privileges via unspecified vectors.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-264
References: https://bugzilla.redhat.com/show_bug.cgi?id=568701; https://rhn.redhat.com/errata/RHSA-2010-0622.html; https://rhn.redhat.com/errata/RHSA-2010-0633.html
CVE: CVE-2010-0431
Published: 2010-08-24
Description: QEMU-KVM, as used in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and KVM 83, does not properly validate guest QXL driver pointers, which allows guest OS users to cause a denial of service (invalid pointer dereference and guest OS crash) or possibly gain privileges via unspecified vectors.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=568809; https://rhn.redhat.com/errata/RHSA-2010-0622.html; https://rhn.redhat.com/errata/RHSA-2010-0627.html
CVE: CVE-2010-0435
Published: 2010-08-24
Description: The Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2, and KVM 83, when the Intel VT-x extension is enabled, allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) via vectors related to instruction emulation.
CVSS Score: 4.6 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html; http://secunia.com/advisories/42778; http://www.vupen.com/english/advisories/2011/0012
CVE: CVE-2010-2784
Published: 2010-08-24
Description: The subpage MMIO initialization functionality in the subpage_register function in exec.c in QEMU-KVM, as used in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and KVM 83, does not properly select the index for access to the callback array, which allows guest OS users to cause a denial of service (guest OS crash) or possibly gain privileges via unspecified vectors.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-264
References: http://www.spinics.net/lists/kvm/msg39173.html; https://bugzilla.redhat.com/show_bug.cgi?id=619411; https://rhn.redhat.com/errata/RHSA-2010-0622.html
CVE: CVE-2010-2811
Published: 2010-08-24
Description: Virtual Desktop Server Manager (VDSM) in Red Hat Enterprise Virtualization (RHEV) 2.2 does not properly accept TCP connections for SSL sessions, which allows remote attackers to cause a denial of service (daemon outage) via crafted SSL traffic.
CVSS Score: 5.7 (MEDIUM)
References: http://securitytracker.com/id?1024347; http://www.securityfocus.com/bid/42580; https://bugzilla.redhat.com/show_bug.cgi?id=622928
CVE: CVE-2010-2947
Published: 2010-08-24
Description: Heap-based buffer overflow in the HX_split function in string.c in libHX before 3.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a string that is inconsistent with the expected number of fields.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://libhx.git.sourceforge.net/git/gitweb.cgi?p=libhx/libhx%3Ba=commit%3Bh=904a46f90dd3f046bfac0b64a5e813d7cd4fca59; http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html; http://www.mandriva.com/security/advisories?name=MDVSA-2010:165