deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-0600
Published: 2010-05-27
Description: Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not properly restrict network access to an unspecified configuration file, which allows remote attackers to read passwords and unspecified other account details via a (1) XML RPC or (2) XML RPC over HTTPS session, aka Bug ID CSCtb83512.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/39904; http://securitytracker.com/id?1024027; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2c518.shtml
CVE: CVE-2010-1296
Published: 2010-05-27
Description: Multiple buffer overflows in Adobe Photoshop CS4 before 11.0.2 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) .ASL, (2) .ABR, or (3) .GRD file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.adobe.com/support/security/bulletins/apsb10-13.html; http://www.exploit-db.com/exploits/12751; http://www.exploit-db.com/exploits/12752
CVE: CVE-2010-1449
Published: 2010-05-27
Description: Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that triggers a buffer overflow.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-3143.12.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: http://bugs.python.org/issue8678; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2010-1450
Published: 2010-05-27
Description: Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file containing crafted data that triggers improper processing within the (1) longimagedata or (2) expandrow function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: http://bugs.python.org/issue8678; http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2010-1634
Published: 2010-05-27
Description: Multiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2 allow context-dependent attackers to cause a denial of service (application crash) via a large fragment, as demonstrated by a call to audioop.lin2lin with a long string in the first argument, leading to a buffer overflow.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-3143.5.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-190
References: http://bugs.python.org/issue8674; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042751.html
CVE: CVE-2010-1959
Published: 2010-05-27
Description: Unspecified vulnerability in HP TestDirector for Quality Center 9.2 before Patch8 allows remote attackers to modify data via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01373684; http://osvdb.org/64917; http://secunia.com/advisories/39943
CVE: CVE-2010-2089
Published: 2010-05-27
Description: The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows context-dependent attackers to cause a denial of service (memory corruption and application crash) via crafted arguments, as demonstrated by a call to audioop.reverse with a one-byte string, a different vulnerability than CVE-2010-1634.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-787
References: http://bugs.python.org/issue7673; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042751.html
CVE: CVE-2010-2090
Published: 2010-05-27
Description: The npb_protocol_error function in sna V5router64 in IBM Communications Server for Windows 6.1.3 and Communications Server for AIX (aka CSAIX or CS/AIX) in sna.rte before 6.3.1.2 allows remote attackers to cause a denial of service (daemon crash) via APPC data containing a GDSID variable with a GDS length that is too small.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/39909; http://www-01.ibm.com/support/docview.wss?uid=swg1IZ68810; http://www-01.ibm.com/support/docview.wss?uid=swg1JR36026
CVE: CVE-2010-2091
Published: 2010-05-27
Description: Microsoft Outlook Web Access (OWA) 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is used, does not properly handle the id parameter in a Folder IPF.Note action to the default URI, which might allow remote attackers to obtain sensitive information or conduct cross-site scripting (XSS) attacks via an invalid value.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.exploit-db.com/exploits/12728; http://www.securityfocus.com/archive/1/511401/100/0/threaded; http://www.securityfocus.com/archive/1/511416/100/0/threaded
CVE: CVE-2010-2092
Published: 2010-05-27
Description: SQL injection vulnerability in graph.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via a crafted rra_id parameter in a GET request in conjunction with a valid rra_id value in a POST request or a cookie, which causes the POST or cookie value to bypass the validation routine, but inserts the $_GET value into the resulting query.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://php-security.org/2010/05/13/mops-2010-023-cacti-graph-viewer-sql-injection-vulnerability/index.html; http://secunia.com/advisories/41041; http://www.cacti.net/changelog.php
CVE: CVE-2010-2093
Published: 2010-05-27
Description: Use-after-free vulnerability in the request shutdown functionality in PHP 5.2 before 5.2.13 and 5.3 before 5.3.2 allows context-dependent attackers to cause a denial of service (crash) via a stream context structure that is freed before destruction occurs.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html; http://php-security.org/2010/05/12/mops-2010-022-php-stream-context-use-after-free-on-request-shutdown-vulnerability/index.html
CVE: CVE-2010-2094
Published: 2010-05-27
Description: Multiple format string vulnerabilities in the phar extension in PHP 5.3 before 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) and possibly execute arbitrary code via a crafted phar:// URI that is not properly handled by the (1) phar_stream_flush, (2) phar_wrapper_unlink, (3) phar_parse_url, or (4) phar_wrapper_open_url functions in ext/phar/stream.c; and the (5) phar_wrapper_open_dir function in ext/phar/dirstream.c, which triggers errors in the php_stream_wrapper_log_error function.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-134
References: http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html; http://php-security.org/2010/05/14/mops-2010-024-php-phar_stream_flush-format-string-vulnerability/index.html
CVE: CVE-2010-2095
Published: 2010-05-27
Description: SQL injection vulnerability in index.php in CMSQlite 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the c parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://php-security.org/2010/05/15/mops-2010-029-cmsqlite-c-parameter-sql-injection-vulnerability/index.html; http://php-security.org/2010/05/15/mops-2010-029-cmsqlite-c-parameter-sql-injection-vulnerability/index.html
CVE: CVE-2010-2096
Published: 2010-05-27
Description: Directory traversal vulnerability in index.php in CMSQlite 1.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the mod parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://php-security.org/2010/05/15/mops-2010-030-cmsqlite-mod-parameter-local-file-inclusion-vulnerability/index.html; http://php-security.org/2010/05/15/mops-2010-030-cmsqlite-mod-parameter-local-file-inclusion-vulnerability/index.html
CVE: CVE-2010-2097
Published: 2010-05-27
Description: The (1) iconv_mime_decode, (2) iconv_substr, and (3) iconv_mime_encode functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2507&w=2
CVE: CVE-2010-2098
Published: 2010-05-27
Description: Incomplete blacklist vulnerability in usersettings.php in e107 0.7.20 and earlier allows remote attackers to conduct SQL injection attacks via the loginname parameter.
CVSS Score: 7.5 (HIGH)
References: http://e107.svn.sourceforge.net/viewvc/e107/trunk/e107_0.7/usersettings.php?r1=11521&r2=11538; http://e107.svn.sourceforge.net/viewvc/e107/trunk/e107_0.7/usersettings.php?r1=11538&r2=11541; http://php-security.org/2010/05/15/mops-2010-029-cmsqlite-c-parameter-sql-injection-vulnerability/index.html
CVE: CVE-2010-2099
Published: 2010-05-27
Description: bbcode/php.bb in e107 0.7.20 and earlier does not perform access control checks for all inputs that could contain the php bbcode tag, which allows remote attackers to execute arbitrary PHP code, as demonstrated using the toEmail method in contact.php, related to invocations of the toHTML method.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://php-security.org/2010/05/19/mops-2010-035-e107-bbcode-remote-php-code-execution-vulnerability/index.html; http://www.securityfocus.com/bid/40252; http://php-security.org/2010/05/19/mops-2010-035-e107-bbcode-remote-php-code-execution-vulnerability/index.html
CVE: CVE-2010-2100
Published: 2010-05-27
Description: The (1) htmlentities, (2) htmlspecialchars, (3) str_getcsv, (4) http_build_query, (5) strpbrk, and (6) strtr functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2507&w=2
CVE: CVE-2010-2101
Published: 2010-05-27
Description: The (1) strip_tags, (2) setcookie, (3) strtok, (4) wordwrap, (5) str_word_count, and (6) str_pad functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2507&w=2
CVE: CVE-2010-2102
Published: 2010-05-27
Description: Buffer overflow in Webby Webserver 1.01 allows remote attackers to execute arbitrary code via a long HTTP GET request.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.exploit-db.com/exploits/12740; http://www.securityfocus.com/archive/1/511428/100/0/threaded; http://www.securityfocus.com/bid/40353
CVE: CVE-2010-2103
Published: 2010-05-27
Description: Cross-site scripting (XSS) vulnerability in axis2-admin/axis2-admin/engagingglobally in the administration console in Apache Axis2/Java 1.4.1, 1.5.1, and possibly other versions, as used in SAP Business Objects 12, 3com IMC, and possibly other products, allows remote attackers to inject arbitrary web script or HTML via the modules parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/64844; http://secunia.com/advisories/39906; http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf
CVE: CVE-2010-2104
Published: 2010-05-27
Description: Directory traversal vulnerability in Orbit Downloader 3.0.0.4 and 3.0.0.5 allows user-assisted remote attackers to write arbitrary files via a metalink file containing directory traversal sequences in the name attribute of a file element.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/39527; http://secunia.com/secunia_research/2010-73/; http://www.securityfocus.com/archive/1/511348/100/100/threaded
CVE: CVE-2010-1919
Published: 2010-05-28
Description: Unspecified vulnerability in EMC Avamar 4.1.x and 5.0 before SP1 allows remote attackers to cause a denial of service (gsan service hang) by sending a crafted message using TCP.
CVSS Score: 7.1 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2010-05/0254.html; http://secunia.com/advisories/39919; http://securitytracker.com/id?1024036
CVE: CVE-2010-1938
Published: 2010-05-28
Description: Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long username, as demonstrated by a long USER command to the FreeBSD 8.0 ftpd.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://blog.pi3.com.pl/?p=111; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584932; http://secunia.com/advisories/39963
CVE: CVE-2010-2020
Published: 2010-05-28
Description: sys/nfsclient/nfs_vfsops.c in the NFS client in the kernel in FreeBSD 7.2 through 8.1-PRERELEASE, when vfs.usermount is enabled, does not validate the length of a certain fhsize parameter, which allows local users to gain privileges via a crafted mount request.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-20
References: http://security.FreeBSD.org/advisories/FreeBSD-SA-10:06.nfsclient.asc; http://securitytracker.com/id?1024039; http://www.exploit-db.com/exploits/14002
CVE: CVE-2010-2022
Published: 2010-05-28
Description: jail.c in jail in FreeBSD 8.0 and 8.1-PRERELEASE, when the "-l -U root" options are omitted, does not properly restrict access to the current working directory, which might allow local users to read, modify, or create arbitrary files via standard filesystem operations.
CVSS Score: 3.3 (LOW)
CWE: CWE-264
References: http://security.FreeBSD.org/advisories/FreeBSD-SA-10:04.jail.asc; http://securitytracker.com/id?1024038; http://www.securityfocus.com/bid/40399
CVE: CVE-2010-2105
Published: 2010-05-28
Description: Google Chrome before 5.0.375.55 does not properly follow the Safe Browsing specification's requirements for canonicalization of URLs, which has unspecified impact and remote attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://code.google.com/p/chromium/issues/detail?id=7713; http://googlechromereleases.blogspot.com/2010/05/stable-channel-update.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12113
CVE: CVE-2010-2106
Published: 2010-05-28
Description: Unspecified vulnerability in Google Chrome before 5.0.375.55 might allow remote attackers to spoof the URL bar via vectors involving unload event handlers.
CVSS Score: 4.3 (MEDIUM)
References: http://code.google.com/p/chromium/issues/detail?id=16535; http://googlechromereleases.blogspot.com/2010/05/stable-channel-update.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11644
CVE: CVE-2010-2107
Published: 2010-05-28
Description: Unspecified vulnerability in Google Chrome before 5.0.375.55 allows attackers to cause a denial of service (memory error) or possibly have unspecified other impact via vectors related to the Safe Browsing functionality.
CVSS Score: 10.0 (HIGH)
References: http://code.google.com/p/chromium/issues/detail?id=30079; http://googlechromereleases.blogspot.com/2010/05/stable-channel-update.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12128
CVE: CVE-2010-2108
Published: 2010-05-28
Description: Unspecified vulnerability in Google Chrome before 5.0.375.55 allows remote attackers to bypass the whitelist-mode plugin blocker via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: http://code.google.com/p/chromium/issues/detail?id=39740; http://googlechromereleases.blogspot.com/2010/05/stable-channel-update.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12126
CVE: CVE-2010-2109
Published: 2010-05-28
Description: Unspecified vulnerability in Google Chrome before 5.0.375.55 allows user-assisted remote attackers to cause a denial of service (memory error) or possibly have unspecified other impact via vectors related to the "drag + drop" functionality.
CVSS Score: 7.5 (HIGH)
References: http://code.google.com/p/chromium/issues/detail?id=41469; http://googlechromereleases.blogspot.com/2010/05/stable-channel-update.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12083
CVE: CVE-2010-2110
Published: 2010-05-28
Description: Google Chrome before 5.0.375.55 does not properly execute JavaScript code in the extension context, which has unspecified impact and remote attack vectors.
CVSS Score: 7.5 (HIGH)
References: http://code.google.com/p/chromium/issues/detail?id=42228; http://googlechromereleases.blogspot.com/2010/05/stable-channel-update.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12123
CVE: CVE-2010-2111
Published: 2010-05-28
Description: Cross-site request forgery (CSRF) vulnerability in user/user-set.do in Pacific Timesheet 6.74 build 363 allows remote attackers to hijack the authentication of administrators for requests that create a new administrator via a new_admin action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://cross-site-scripting.blogspot.com/2010/05/pacific-timesheet-674-cross-site.html; http://osvdb.org/64924; http://secunia.com/advisories/39951
CVE: CVE-2010-2112
Published: 2010-05-28
Description: Directory traversal vulnerability in the FTP service in FileCOPA before 5.03 allows remote attackers to read or overwrite arbitrary files via unknown vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: http://osvdb.org/64823; http://secunia.com/advisories/39843; http://osvdb.org/64823
CVE: CVE-2010-2113
Published: 2010-05-28
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in The Uniform Server 5.6.5 allow remote attackers to hijack the authentication of administrators for requests that change passwords via (1) apsetup.php, (2) psetup.php, (3) sslpsetup.php, or (4) mqsetup.php.
CVSS Score: 3.5 (LOW)
CWE: CWE-352
References: http://cross-site-scripting.blogspot.com/2010/05/uniform-server-565-xsrf.html; http://osvdb.org/64858; http://secunia.com/advisories/39913
CVE: CVE-2010-2114
Published: 2010-05-28
Description: Cross-site request forgery (CSRF) vulnerability in pbx/gate in Brekeke PBX 2.4.4.8 allows remote attackers to hijack the authentication of users for requests that change passwords via the pbxadmin.web.PbxUserEdit bean.
CVSS Score: 2.6 (LOW)
CWE: CWE-352
References: http://cross-site-scripting.blogspot.com/2010/05/brekeke-pbx-2448-cross-site-request.html; http://osvdb.org/64950; http://secunia.com/advisories/39952
CVE: CVE-2010-2115
Published: 2010-05-28
Description: SolarWinds TFTP Server 10.4.0.10 allows remote attackers to cause a denial of service (no new connections) via a crafted read request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/64845; http://secunia.com/advisories/39896; http://www.exploit-db.com/exploits/12683
CVE: CVE-2010-2116
Published: 2010-05-28
Description: The web interface in McAfee Email Gateway (formerly IronMail) 6.7.1 allows remote authenticated users, with only Read privileges, to gain Write privileges to modify configuration via the save action in a direct request to admin/systemWebAdminConfig.do.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-732
References: http://osvdb.org/64832; http://secunia.com/advisories/39881; http://www.cybsec.com/vuln/cybsec_advisory_2010_0501_Ironmail_Advisory_Web_Access_Broken.pdf
CVE: CVE-2009-4880
Published: 2010-06-01
Description: Multiple integer overflows in the strfmon implementation in the GNU C Library (aka glibc or libc6) 2.10.1 and earlier allow context-dependent attackers to cause a denial of service (memory consumption or application crash) via a crafted format string, as demonstrated by a crafted first argument to the money_format function in PHP, a related issue to CVE-2008-1391.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://secunia.com/advisories/39900; http://security.gentoo.org/glsa/glsa-201011-01.xml; http://securityreason.com/achievement_securityalert/67
CVE: CVE-2009-4881
Published: 2010-06-01
Description: Integer overflow in the __vstrfmon_l function in stdlib/strfmon_l.c in the strfmon implementation in the GNU C Library (aka glibc or libc6) before 2.10.1 allows context-dependent attackers to cause a denial of service (application crash) via a crafted format string, as demonstrated by the %[PII_REDACTED][PII_REDACTED]n string, a related issue to CVE-2008-1391.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://security.gentoo.org/glsa/glsa-201011-01.xml; http://sources.redhat.com/bugzilla/show_bug.cgi?id=10600; http://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=153aa31b93be22e01b236375fb02a9f9b9a0195f
CVE: CVE-2010-0296
Published: 2010-06-01
Description: The encode_name macro in misc/mntent_r.c in the GNU C Library (aka glibc or libc6) 2.11.1 and earlier, as used by ncpmount and mount.cifs, does not properly handle newline characters in mountpoint names, which allows local users to cause a denial of service (mtab corruption), or possibly modify mount options and gain privileges, via a crafted mount request.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://frugalware.org/security/662; http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html; http://seclists.org/fulldisclosure/2019/Jun/18
CVE: CVE-2010-0830
Published: 2010-06-01
Description: Integer signedness error in the elf_get_dynamic_info function in elf/dynamic-link.h in ld.so in the GNU C Library (aka glibc or libc6) 2.0.1 through 2.11.1, when the --verify option is used, allows user-assisted remote attackers to execute arbitrary code via a crafted ELF program with a negative value for a certain d_tag structure member in the ELF header.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-189
References: http://drosenbe.blogspot.com/2010/05/integer-overflow-in-ldso-cve-2010-0830.html; http://frugalware.org/security/662; http://secunia.com/advisories/39900
CVE: CVE-2010-1641
Published: 2010-06-01
Description: The do_gfs2_set_flags function in fs/gfs2/file.c in the Linux kernel before 2.6.34-git10 does not verify the ownership of a file, which allows local users to bypass intended access restrictions via a SETFLAGS ioctl request.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7df0e0397b9a[PII_REDACTED]db9fdab991941062f; http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00000.html