deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-0983
Published: 2013-06-05
Description: Stack consumption vulnerability in CoreAnimation in Apple Mac OS X before 10.8.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted text glyph in a URL encountered by Safari.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html; http://support.apple.com/kb/HT5784; http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html
CVE: CVE-2013-0984
Published: 2013-06-05
Description: Directory Service in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted message.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html; http://support.apple.com/kb/HT5784; http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html
CVE: CVE-2013-0985
Published: 2013-06-05
Description: Disk Management in Apple Mac OS X before 10.8.4 does not properly authenticate attempts to disable FileVault, which allows local users to cause a denial of service (loss of encryption functionality) via an unspecified command line.
CVSS Score: 2.1 (LOW)
CWE: CWE-287
References: http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html; http://support.apple.com/kb/HT5784; http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html
CVE: CVE-2013-0990
Published: 2013-06-05
Description: SMB in Apple Mac OS X before 10.8.4, when file sharing is enabled, allows remote authenticated users to create or modify files outside of a shared directory via unspecified vectors.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html; http://support.apple.com/kb/HT5784; http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html
CVE: CVE-2013-1009
Published: 2013-06-05
Description: WebKit, as used in Apple Safari before 6.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2013-1023.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html; http://support.apple.com/kb/HT5785; http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html
CVE: CVE-2013-1012
Published: 2013-06-05
Description: Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 6.0.5 allows remote attackers to inject arbitrary web script or HTML via vectors involving IFRAME elements.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html; http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html; http://secunia.com/advisories/54886
CVE: CVE-2013-1013
Published: 2013-06-05
Description: XSS Auditor in WebKit in Apple Safari before 6.0.5 does not properly rewrite URLs, which allows remote attackers to trigger unintended form submissions via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html; http://support.apple.com/kb/HT5785; http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html
CVE: CVE-2013-1023
Published: 2013-06-05
Description: WebKit, as used in Apple Safari before 6.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2013-1009.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html; http://support.apple.com/kb/HT5785; http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html
CVE: CVE-2013-1024
Published: 2013-06-05
Description: CoreMedia Playback in Apple Mac OS X before 10.8.4 does not properly initialize memory during the processing of text tracks, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html; http://support.apple.com/kb/HT5784
CVE: CVE-2013-3948
Published: 2013-06-05
Description: Apple iOS 6.1.3 does not follow redirects during determination of the hostname to display in an iOS Enterprise Deployment installation dialog, which makes it easier for remote attackers to trigger installation of arbitrary applications via a download-manifest itms-services:// URL that leverages an open redirect vulnerability within a trusted domain.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf; http://support.apple.com/kb/HT6162; http://www.syscan.org/index.php/sg/program/day/2
CVE: CVE-2013-3949
Published: 2013-06-05
Description: The posix_spawn system call in the XNU kernel in Apple Mac OS X 10.8.x does not prevent use of the _POSIX_SPAWN_DISABLE_ASLR and _POSIX_SPAWN_ALLOW_DATA_EXEC flags for setuid and setgid programs, which allows local users to bypass intended access restrictions via a wrapper program that calls the posix_spawnattr_setflags function.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf; http://www.syscan.org/index.php/sg/program/day/2; http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf
CVE: CVE-2013-3950
Published: 2013-06-05
Description: Stack-based buffer overflow in the openSharedCacheFile function in dyld.cpp in dyld in Apple iOS 5.1.x and 6.x through 6.1.3 makes it easier for attackers to conduct untethering attacks via a long string in the DYLD_SHARED_CACHE_DIR environment variable.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE: CVE-2013-3951
Published: 2013-06-05
Description: sys/openbsd/stack_protector.c in libc in Apple iOS 6.1.3 and Mac OS X 10.8.x does not properly parse the Apple strings employed in the user-space stack-cookie implementation, which allows local users to bypass cookie randomization by executing a program with a call-path beginning with the stack-guard= substring, as demonstrated by an iOS untethering attack or an attack against a setuid Mac OS X program.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-20
References: http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf; http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html
CVE: CVE-2013-3952
Published: 2013-06-05
Description: The fill_pipeinfo function in bsd/kern/sys_pipe.c in the XNU kernel in Apple Mac OS X 10.8.x allows local users to defeat the KASLR protection mechanism via the PROC_PIDFDPIPEINFO option to the proc_info system call for a kernel pipe handle.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf; http://www.syscan.org/index.php/sg/program/day/2; http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf
CVE: CVE-2013-3953
Published: 2013-06-05
Description: The mach_port_space_info function in osfmk/ipc/mach_debug.c in the XNU kernel in Apple Mac OS X 10.8.x does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory via a crafted call.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf; http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html; http://support.apple.com/kb/HT5934
CVE: CVE-2013-3954
Published: 2013-06-05
Description: The posix_spawn system call in the XNU kernel in Apple Mac OS X 10.8.x does not properly validate the data for file actions and port actions, which allows local users to (1) cause a denial of service (panic) via a size value that is inconsistent with a header count field, or (2) obtain sensitive information from kernel heap memory via a certain size value in conjunction with a crafted buffer.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-20
References: http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf; http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
CVE: CVE-2013-3955
Published: 2013-06-05
Description: The get_xattrinfo function in the XNU kernel in Apple iOS 5.x and 6.x through 6.1.3 on iPad devices does not properly validate the header of an AppleDouble file, which might allow local users to cause a denial of service (memory corruption) or have unspecified other impact via an invalid file on an msdosfs filesystem.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-20
References: http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf; http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html; http://support.apple.com/kb/HT5934
CVE: CVE-2013-1205
Published: 2013-06-06
Description: The Event Center module in Cisco WebEx Meetings Server does not perform request authentication in all intended circumstances, which allows remote attackers to discover host keys and event passwords via crafted URLs, aka Bug ID CSCue62485.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1205; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1205
CVE: CVE-2013-2318
Published: 2013-06-06
Description: The Content Provider in the MovatwiTouch application before 1.793 and MovatwiTouch Paid application before 1.793 for Android does not properly restrict access to authorization information, which allows attackers to hijack Twitter accounts via a crafted application.
CVSS Score: 2.6 (LOW)
CWE: CWE-264
References: http://jvn.jp/en/jp/JVN90289505/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000047; http://movatwitter.jugem.jp/?eid=442
CVE: CVE-2013-2324
Published: 2013-06-06
Description: Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1629.
CVSS Score: 10.0 (HIGH)
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657
CVE: CVE-2013-2325
Published: 2013-06-06
Description: Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1633.
CVSS Score: 10.0 (HIGH)
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657
CVE: CVE-2013-2326
Published: 2013-06-06
Description: Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1634.
CVSS Score: 10.0 (HIGH)
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657
CVE: CVE-2013-2327
Published: 2013-06-06
Description: Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1635.
CVSS Score: 10.0 (HIGH)
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657
CVE: CVE-2013-2328
Published: 2013-06-06
Description: Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1636.
CVSS Score: 10.0 (HIGH)
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657
CVE: CVE-2013-2329
Published: 2013-06-06
Description: Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1637.
CVSS Score: 10.0 (HIGH)
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657
CVE: CVE-2013-2330
Published: 2013-06-06
Description: Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1638.
CVSS Score: 10.0 (HIGH)
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657
CVE: CVE-2013-2331
Published: 2013-06-06
Description: Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1652.
CVSS Score: 10.0 (HIGH)
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657
CVE: CVE-2013-2332
Published: 2013-06-06
Description: Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1654.
CVSS Score: 10.0 (HIGH)
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657
CVE: CVE-2013-2333
Published: 2013-06-06
Description: Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1680.
CVSS Score: 10.0 (HIGH)
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657
CVE: CVE-2013-2334
Published: 2013-06-06
Description: Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1681.
CVSS Score: 10.0 (HIGH)
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657
CVE: CVE-2013-2335
Published: 2013-06-06
Description: Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1733.
CVSS Score: 10.0 (HIGH)
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03781657
CVE: CVE-2013-3919
Published: 2013-06-06
Description: resolver.c in ISC BIND 9.8.5 before 9.8.5-P1, 9.9.3 before 9.9.3-P1, and 9.6-ESV-R9 before 9.6-ESV-R9-P1, when a recursive resolver is configured, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for a record in a malformed zone.
CVSS Score: 7.8 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html; https://kb.isc.org/article/AA-00967/; https://support.apple.com/kb/HT6536
CVE: CVE-2011-4604
Published: 2013-06-07
Description: The bat_socket_read function in net/batman-adv/icmp_socket.c in the Linux kernel before 3.3 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted batman-adv ICMP packet.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b5a1eeef04cc7859f34dec9b72ea1b28e4aba07c; http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html; http://www.kernel.org/pub/linux/kernel/v3.x/patch-3.3.bz2
CVE: CVE-2013-1929
Published: 2013-06-07
Description: Heap-based buffer overflow in the tg3_read_vpd function in drivers/net/ethernet/broadcom/tg3.c in the Linux kernel before 3.8.6 allows physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via crafted firmware that specifies a long string in the Vital Product Data (VPD) data structure.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-119
References: http://cansecwest.com/slides/2013/PrivateCore%20CSW%202013.pdf; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=715230a44310a8cf66fbfb5a46f9a62a9b2de424; http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101836.html
CVE: CVE-2013-2128
Published: 2013-06-07
Description: The tcp_read_sock function in net/ipv4/tcp.c in the Linux kernel before 2.6.34 does not properly manage skb consumption, which allows local users to cause a denial of service (system crash) via a crafted splice system call for a TCP socket.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=baff42ab[PII_REDACTED]bf4d5870359e31711746ae; http://rhn.redhat.com/errata/RHSA-2013-1051.html
CVE: CVE-2013-2141
Published: 2013-06-07
Description: The do_tkill function in kernel/signal.c in the Linux kernel before 3.8.9 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via a crafted application that makes a (1) tkill or (2) tgkill system call.
CVSS Score: 2.1 (LOW)
CWE: CWE-399
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b9e146d8eb3b9ecae5086d373b50fa0c1f3e7f0f; http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html; http://rhn.redhat.com/errata/RHSA-2013-1801.html
CVE: CVE-2013-2146
Published: 2013-06-07
Description: arch/x86/kernel/cpu/perf_event_intel.c in the Linux kernel before 3.8.9, when the Performance Events Subsystem is enabled, specifies an incorrect bitmask, which allows local users to cause a denial of service (general protection fault and system crash) by attempting to set a reserved bit.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-20
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f1923820c447e986a9da0fc6bf60c1dccdf0408e; http://rhn.redhat.com/errata/RHSA-2013-1173.html; http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.9
CVE: CVE-2013-2147
Published: 2013-06-07
Description: The HP Smart Array controller disk-array driver and Compaq SMART2 controller disk-array driver in the Linux kernel through 3.9.4 do not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory via (1) a crafted IDAGETPCIINFO command for a /dev/ida device, related to the ida_locked_ioctl function in drivers/block/cpqarray.c or (2) a crafted CCISS_PASSTHRU32 command for a /dev/cciss device, related to the cciss_ioctl32_passthru function in drivers/block/cciss.c.
CVSS Score: 2.1 (LOW)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html; http://lkml.org/lkml/2013/6/3/127; http://lkml.org/lkml/2013/6/3/131
CVE: CVE-2013-2148
Published: 2013-06-07
Description: The fill_event_metadata function in fs/notify/fanotify/fanotify_user.c in the Linux kernel through 3.9.4 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory via a read operation on the fanotify descriptor.
CVSS Score: 2.1 (LOW)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html; http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html
CVE: CVE-2013-2850
Published: 2013-06-07
Description: Heap-based buffer overflow in the iscsi_add_notunderstood_response function in drivers/target/iscsi/iscsi_target_parameters.c in the iSCSI target subsystem in the Linux kernel through 3.9.4 allows remote attackers to cause a denial of service (memory corruption and OOPS) or possibly execute arbitrary code via a long key that is not properly handled during construction of an error-response packet.
CVSS Score: 7.9 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cea4dcfdad926a27a18e188720efe0f2c9403456; http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00011.html
CVE: CVE-2013-2851
Published: 2013-06-07
Description: Format string vulnerability in the register_disk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/md_mod/parameters/new_array in order to create a crafted /dev/md device name.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-134
References: http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html; http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html
CVE: CVE-2013-2852
Published: 2013-06-07
Description: Format string vulnerability in the b43_request_firmware function in drivers/net/wireless/b43/main.c in the Broadcom B43 wireless driver in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and including format string specifiers in an fwpostfix modprobe parameter, leading to improper construction of an error message.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-134
References: http://git.kernel.org/cgit/linux/kernel/git/linville/wireless.git/commit/?id=9538cbaab6e8b8046039b4b2eb6c9d614dc782bd; http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html; http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html
CVE: CVE-2013-0142
Published: 2013-06-07
Description: QNAP VioStor NVR devices with firmware 4.0.3, and the Surveillance Station Pro component in QNAP NAS, have a hardcoded guest account, which allows remote attackers to obtain web-server login access via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-255
References: http://www.kb.cert.org/vuls/id/927644; http://www.kb.cert.org/vuls/id/927644
CVE: CVE-2013-0143
Published: 2013-06-07
Description: cgi-bin/pingping.cgi on QNAP VioStor NVR devices with firmware 4.0.3, and in the Surveillance Station Pro component in QNAP NAS, allows remote authenticated users to execute arbitrary commands by leveraging guest access and placing shell metacharacters in the query string.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: http://www.kb.cert.org/vuls/id/927644; http://www.kb.cert.org/vuls/id/927644
CVE: CVE-2013-0144
Published: 2013-06-07
Description: Cross-site request forgery (CSRF) vulnerability in cgi-bin/create_user.cgi on QNAP VioStor NVR devices with firmware 4.0.3 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts via a NEW USER action.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www.kb.cert.org/vuls/id/927644; http://www.kb.cert.org/vuls/id/927644