deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-4506
Published: 2011-02-07
Description: Passlogix v-GO Self-Service Password Reset (SSPR) and OEM before 7.0A allows physically proximate attackers to execute arbitrary programs without authentication by triggering use of an invalid SSL certificate and using the Internet Explorer interface to navigate through the filesystem via a "Save As" dialog that is reachable from the "Certificate Export" wizard.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-310
References: http://securityreason.com/securityalert/8065; http://www.securityfocus.com/bid/46452; https://exchange.xforce.ibmcloud.com/vulnerabilities/65439
CVE: CVE-2011-0323
Published: 2011-02-07
Description: Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allows remote attackers to execute arbitrary code by calling the exposed unsafe (1) SetLogFilePath and (2) SigMessage methods to create arbitrary files with arbitrary content.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/42800; http://secunia.com/secunia_research/2011-1/; http://www.securityfocus.com/bid/46128
CVE: CVE-2011-0324
Published: 2011-02-07
Description: Multiple heap-based buffer overflows in Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allow remote attackers to execute arbitrary code via a long (1) KeyString property, (2) NewPath parameter to the SetLocalIniFilePath method, or (3) NewPortPath parameter to the SetTabletPortPath method.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/42800; http://secunia.com/secunia_research/2011-2/; http://www.securityfocus.com/bid/46128
CVE: CVE-2011-0522
Published: 2011-02-07
Description: The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/codec/subtitles/subsusf.c) in VideoLAN VLC Media Player 1.1 before 1.1.6-rc allows remote attackers to execute arbitrary code via a subtitle with an opening "<" without a closing ">" in an MKV file, which triggers heap memory corruption, as demonstrated using refined-australia-blu720p-sample.mkv.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://git.videolan.org/gitweb.cgi?p=vlc/vlc-1.1.git%3Ba=tag%3Bh=bb16813ddb61a53113c71bccc[PII_REDACTED]85452; http://mailman.videolan.org/pipermail/vlc-devel/2011-January/078607.html; http://mailman.videolan.org/pipermail/vlc-devel/2011-January/078614.html
CVE: CVE-2011-0531
Published: 2011-02-07
Description: demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary commands via a crafted MKV (WebM or Matroska) file that triggers memory corruption, related to "class mismatching" and the MKV_IS_ID macro.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=59491dcedffbf97612d2c572943b56ee4289dd07; http://osvdb.org/70698; http://secunia.com/advisories/43131
CVE: CVE-2011-0899
Published: 2011-02-07
Description: The AES encryption module 7.x-1.4 for Drupal leaves certain debugging code enabled in release, which records the plaintext password of the last logged-in user and allows remote attackers to gain privileges as that user.
CVSS Score: 5.0 (MEDIUM)
References: http://drupal.org/node/1040728; http://drupal.org/node/1048998; http://osvdb.org/70767
CVE: CVE-2011-0900
Published: 2011-02-07
Description: Stack-based buffer overflow in the tsc_launch_remote function (src/support.c) in Terminal Server Client (tsclient) 0.150, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a .RDP file with a long hostname argument.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://osvdb.org/70749; http://secunia.com/advisories/43120; http://www.exploit-db.com/exploits/16095
CVE: CVE-2011-0901
Published: 2011-02-07
Description: Multiple stack-based buffer overflows in the tsc_launch_remote function (src/support.c) in Terminal Server Client (tsclient) 0.150, and possibly other versions, allow user-assisted remote attackers to execute arbitrary code via a .RDP file with a long (1) username, (2) password, or (3) domain argument.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://osvdb.org/70749; http://secunia.com/advisories/43120; https://exchange.xforce.ibmcloud.com/vulnerabilities/65101
CVE: CVE-2011-0902
Published: 2011-02-07
Description: Multiple untrusted search path vulnerabilities in the Java Service in Sun Microsystems SunScreen Firewall on SunOS 5.9 allow local users to execute arbitrary code via a modified (1) PATH or (2) LD_LIBRARY_PATH environment variable.
CVSS Score: 6.9 (MEDIUM)
References: http://www.exploit-db.com/exploits/16041; http://www.securityfocus.com/bid/45963; https://exchange.xforce.ibmcloud.com/vulnerabilities/64887
CVE: CVE-2011-0903
Published: 2011-02-07
Description: Multiple directory traversal vulnerabilities in AR Web Content Manager (AWCM) 2.2 allow remote attackers to read arbitrary files and possibly have other unspecified impact via a .. (dot dot) in the (1) awcm_theme or (2) awcm_lang cookie to (a) index.php or (b) header.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://www.exploit-db.com/exploits/16049; http://www.securityfocus.com/bid/46017; https://exchange.xforce.ibmcloud.com/vulnerabilities/64980
CVE: CVE-2011-0526
Published: 2011-02-08
Description: Cross-site scripting (XSS) vulnerability in index.php in Vanilla Forums before 2.0.17 allows remote attackers to inject arbitrary web script or HTML via the Target parameter in a /entry/signin action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://openwall.com/lists/oss-security/2011/01/27/2; http://openwall.com/lists/oss-security/2011/01/27/5; http://secunia.com/advisories/43074
CVE: CVE-2011-0908
Published: 2011-02-08
Description: Open redirect vulnerability in Vanilla Forums before 2.0.17.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the Target parameter to an unspecified component, a different vulnerability than CVE-2011-0526.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://www.vanillaforums.org/discussion/comment/134729/#Comment_134729; http://www.vanillaforums.org/discussion/comment/134729/#Comment_134729
CVE: CVE-2011-0909
Published: 2011-02-08
Description: Cross-site scripting (XSS) vulnerability in Vanilla Forums before 2.0.17.6 allows remote attackers to inject arbitrary web script or HTML via the p parameter to an unspecified component, a different vulnerability than CVE-2011-0526.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.vanillaforums.org/discussion/comment/134729/#Comment_134729; http://www.vanillaforums.org/discussion/comment/134729/#Comment_134729
CVE: CVE-2011-0910
Published: 2011-02-08
Description: The cookie implementation in Vanilla Forums before 2.0.17.6 makes it easier for remote attackers to spoof signed requests, and consequently obtain access to arbitrary user accounts, via HMAC timing attacks.
CVSS Score: 6.4 (MEDIUM)
References: http://www.vanillaforums.org/discussion/comment/134729/#Comment_134729; http://www.vanillaforums.org/discussion/comment/134729/#Comment_134729
CVE: CVE-2010-4728
Published: 2011-02-08
Description: Zikula before 1.3.1 uses the rand and srand PHP functions for random number generation, which makes it easier for remote attackers to defeat protection mechanisms based on randomization by predicting a return value, as demonstrated by the authid protection mechanism.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://code.zikula.org/core/ticket/2009; http://code.zikula.org/core/ticket/2009
CVE: CVE-2010-4729
Published: 2011-02-08
Description: Zikula before 1.2.3 does not use the authid protection mechanism for (1) the lostpassword form and (2) mailpasswd processing, which makes it easier for remote attackers to generate a flood of password requests and possibly conduct cross-site request forgery (CSRF) attacks via multiple form submissions.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://code.zikula.org/core/ticket/1979; http://code.zikula.org/core12/browser/tags/Zikula-1.2.5/src/docs/CHANGELOG; http://code.zikula.org/core/ticket/1979
CVE: CVE-2011-0535
Published: 2011-02-08
Description: Cross-site request forgery (CSRF) vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to hijack the authentication of administrators for requests that change account privileges via an edit access_permissions action to index.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://bl0g.yehg.net/2011/02/zikula-cms-124-cross-site-request.html; http://code.zikula.org/core12/browser/tags/Zikula-1.2.5/src/docs/CHANGELOG; http://community.zikula.org/index.php?module=News&func=display&sid=3041&title=zikula-1.2.5-released
CVE: CVE-2011-0538
Published: 2011-02-08
Description: Wireshark 1.2.0 through 1.2.14, 1.4.0 through 1.4.3, and 1.5.0 frees an uninitialized pointer during processing of a .pcap file in the pcap-ng format, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055364.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055650.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055664.html
CVE: CVE-2011-0885
Published: 2011-02-08
Description: A certain Comcast Business Gateway configuration of the SMC SMCD3G-CCR with firmware before 1.4.0.49.2 has a default password of D0nt4g3tme for the mso account, which makes it easier for remote attackers to obtain administrative access via the (1) web interface or (2) TELNET interface.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://seclists.org/bugtraq/2011/Feb/36; http://secunia.com/advisories/43199; http://securityreason.com/securityalert/8066
CVE: CVE-2011-0886
Published: 2011-02-08
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the SMC SMCD3G-CCR (aka Comcast Business Gateway) with firmware before 1.4.0.49.2 allow remote attackers to (1) hijack the intranet connectivity of arbitrary users for requests that perform a login via goform/login, or hijack the authentication of administrators for requests that (2) enable external logins via an mso_remote_enable action to goform/RemoteRange or (3) change DNS settings via a manual_dns_enable action to goform/Basic.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://seclists.org/bugtraq/2011/Feb/36; http://secunia.com/advisories/43199; http://securityreason.com/securityalert/8068
CVE: CVE-2011-0887
Published: 2011-02-08
Description: The web management portal on the SMC SMCD3G-CCR (aka Comcast Business Gateway) with firmware before 1.4.0.49.2 uses predictable session IDs based on time values, which makes it easier for remote attackers to hijack sessions via a brute-force attack on the userid cookie.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://seclists.org/bugtraq/2011/Feb/36; http://secunia.com/advisories/43199; http://securityreason.com/securityalert/8068
CVE: CVE-2011-0911
Published: 2011-02-08
Description: Cross-site scripting (XSS) vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: it is possible that this overlaps CVE-2011-0535.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://community.zikula.org/index.php?module=News&func=display&sid=3041&title=zikula-1.2.5-released; http://community.zikula.org/index.php?module=News&func=display&sid=3041&title=zikula-1.2.5-released
CVE: CVE-2011-0912
Published: 2011-02-08
Description: Argument injection vulnerability in IBM Lotus Notes 8.0.x before 8.0.2 FP6 and 8.5.x before 8.5.1 FP5 allows remote attackers to execute arbitrary code via a cai:// URL containing a --launcher.library option that specifies a UNC share pathname for a DLL file, aka SPR PRAD82YJW2.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/43222; http://www-01.ibm.com/support/docview.wss?uid=swg21461514; http://www.vupen.com/english/advisories/2011/0295
CVE: CVE-2011-0913
Published: 2011-02-08
Description: Stack-based buffer overflow in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP getEnvironmentString request, related to the local variable cache.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/43208; http://www-01.ibm.com/support/docview.wss?uid=swg21461514; http://zerodayinitiative.com/advisories/ZDI-11-053/
CVE: CVE-2011-0914
Published: 2011-02-08
Description: Integer signedness error in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP client request, leading to a heap-based buffer overflow.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://secunia.com/advisories/43208; http://www-01.ibm.com/support/docview.wss?uid=swg21461514; http://zerodayinitiative.com/advisories/ZDI-11-052/
CVE: CVE-2011-0915
Published: 2011-02-08
Description: Stack-based buffer overflow in nrouter.exe in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a long name parameter in a Content-Type header in a malformed Notes calendar (aka iCalendar or iCal) meeting request, aka SPR KLYH87LL23.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/43208; http://www-01.ibm.com/support/docview.wss?uid=swg21461514; http://www.securityfocus.com/archive/1/516245/100/0/threaded
CVE: CVE-2011-0916
Published: 2011-02-08
Description: Stack-based buffer overflow in the SMTP service in IBM Lotus Domino allows remote attackers to execute arbitrary code via long arguments in a filename parameter in a malformed MIME e-mail message, aka SPR KLYH889M8H.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/43247; http://www-01.ibm.com/support/docview.wss?uid=swg21461514; http://zerodayinitiative.com/advisories/ZDI-11-049/
CVE: CVE-2011-0917
Published: 2011-02-08
Description: Buffer overflow in nLDAP.exe in IBM Lotus Domino allows remote attackers to execute arbitrary code via a long string in an LDAP Bind operation, aka SPR KLYH87LMVX.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/43224; http://www-01.ibm.com/support/docview.wss?uid=swg21461514; http://www.exploit-db.com/exploits/16190/
CVE: CVE-2011-0918
Published: 2011-02-08
Description: Stack-based buffer overflow in the NRouter (aka Router) service in IBM Lotus Domino allows remote attackers to execute arbitrary code via long filenames associated with Content-ID and ATTACH:CID headers in attachments in malformed calendar-request e-mail messages, aka SPR KLYH87LKRE.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/43224; http://www-01.ibm.com/support/docview.wss?uid=swg21461514; http://zerodayinitiative.com/advisories/ZDI-11-046/
CVE: CVE-2011-0919
Published: 2011-02-08
Description: Multiple stack-based buffer overflows in the (1) POP3 and (2) IMAP services in IBM Lotus Domino allow remote attackers to execute arbitrary code via non-printable characters in an envelope sender address, aka SPR KLYH87LLVJ.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/43224; http://www-01.ibm.com/support/docview.wss?uid=swg21461514; http://www.securityfocus.com/archive/1/516232/100/0/threaded
CVE: CVE-2011-0920
Published: 2011-02-08
Description: The Remote Console in IBM Lotus Domino, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and execute arbitrary code via unspecified vectors, aka SPR PRAD89WGRS.
CVSS Score: 9.3 (HIGH)
CWE: CWE-287
References: http://www-01.ibm.com/support/docview.wss?uid=swg21461514; http://www-01.ibm.com/support/docview.wss?uid=swg21461514
CVE: CVE-2011-0030
Published: 2011-02-09
Description: The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout the logout of one user and the login session of the next user, aka "CSRSS Elevation of Privilege Vulnerability," a different vulnerability than CVE-2010-0023.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/70826; http://secunia.com/advisories/43250; http://www.securitytracker.com/id?1025045
CVE: CVE-2011-0031
Published: 2011-02-09
Description: The (1) JScript 5.8 and (2) VBScript 5.8 scripting engines in Microsoft Windows Server 2008 R2 and Windows 7 do not properly load decoded scripts obtained from web pages, which allows remote attackers to trigger memory corruption and consequently obtain sensitive information via a crafted web site, aka "Scripting Engines Information Disclosure Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://osvdb.org/70827; http://secunia.com/advisories/43249; http://www.securityfocus.com/bid/46139
CVE: CVE-2011-0039
Published: 2011-02-09
Description: The Local Security Authority Subsystem Service (LSASS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly process authentication requests, which allows local users to gain privileges via a request with a crafted length, aka "LSASS Length Validation Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-287
References: http://secunia.com/advisories/43253; http://www.securityfocus.com/bid/46152; http://www.securitytracker.com/id?1025049
CVE: CVE-2011-0040
Published: 2011-02-09
Description: The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a service principal name (SPN), which allows remote attackers to cause a denial of service (authentication downgrade or outage) via a crafted request that triggers name collisions, aka "Active Directory SPN Validation Vulnerability."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/70825; http://secunia.com/advisories/43215; http://www.securityfocus.com/bid/46145
CVE: CVE-2011-0045
Published: 2011-02-09
Description: The Trace Events functionality in the kernel in Microsoft Windows XP SP3 does not properly perform type conversion, which causes integer truncation and insufficient memory allocation and triggers a buffer overflow, which allows local users to gain privileges via a crafted application, related to WmiTraceMessageVa, aka "Windows Kernel Integer Truncation Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://osvdb.org/70823; http://securityreason.com/securityalert/8110; http://support.avaya.com/css/P8/documents/100127248
CVE: CVE-2011-0086
Published: 2011-02-09
Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Improper User Input Validation Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://osvdb.org/70818; http://secunia.com/advisories/43255; http://www.securityfocus.com/bid/46141
CVE: CVE-2011-0087
Published: 2011-02-09
Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Insufficient User Input Validation Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://osvdb.org/70819; http://secunia.com/advisories/43255; http://www.securityfocus.com/bid/46148
CVE: CVE-2011-0088
Published: 2011-02-09
Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Window Class Pointer Confusion Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://osvdb.org/70816; http://secunia.com/advisories/43255; http://www.securityfocus.com/bid/46147
CVE: CVE-2011-0089
Published: 2011-02-09
Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Window Class Improper Pointer Validation Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://osvdb.org/70817; http://secunia.com/advisories/43255; http://www.securityfocus.com/bid/46149
CVE: CVE-2011-0090
Published: 2011-02-09
Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://osvdb.org/70814; http://secunia.com/advisories/43255; http://www.securityfocus.com/bid/46150
CVE: CVE-2011-0277
Published: 2011-02-09
Description: Cross-site request forgery (CSRF) vulnerability in HP Power Manager (HPPM) 4.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02711131; http://osvdb.org/70836; http://secunia.com/advisories/43058
CVE: CVE-2011-0921
Published: 2011-02-09
Description: crs.exe in the Cell Manager Service in the client in HP Data Protector does not properly validate credentials associated with the hostname, domain, and username, which allows remote attackers to execute arbitrary code by sending unspecified data over TCP, related to the webreporting client, the applet domain, and the java username.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-hp; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6795&w=2; http://www.securityfocus.com/bid/46234
CVE: CVE-2011-0922
Published: 2011-02-09
Description: The client in HP Data Protector allows remote attackers to execute arbitrary programs via an EXEC_SETUP command that references a UNC share pathname.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-hp; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6795&w=2; http://www.securityfocus.com/archive/1/516272/100/0/threaded
CVE: CVE-2011-0923
Published: 2011-02-09
Description: The client in HP Data Protector does not properly validate EXEC_CMD arguments, which allows remote attackers to execute arbitrary Perl code via a crafted command, related to the "local bin directory."
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-hp; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6795&w=2; http://securityreason.com/securityalert/8261
CVE: CVE-2011-0924
Published: 2011-02-09
Description: The client in HP Data Protector does not verify the contents of files associated with the EXEC_CMD command, which allows remote attackers to execute arbitrary script code by providing this code with a trusted filename, as demonstrated by omni_chk_ds.sh.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-hp; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6795&w=2; http://www.securityfocus.com/archive/1/516258/100/0/threaded