rainbutterfly/cve_corpus huggingface dataset:
CVE-2010-4252 
OpenSSL before 1.0.0c, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values in each round of the protocol.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-06T21:00:00.000Z
CVE-2010-4253 
Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file in an ODF or Microsoft Office document, as demonstrated by a PowerPoint (aka PPT) document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-28T21:13:00.000Z
CVE-2010-4254 
Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and possibly execute arbitrary code, via a crafted method call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-03T20:00:00.000Z
CVE-2010-4255 
The fixup_page_fault function in arch/x86/traps.c in Xen 4.0.1 and earlier on 64-bit platforms, when paravirtualization is enabled, does not verify that kernel mode is used to call the handle_gdt_ldt_mapping_fault function, which allows guest OS users to cause a denial of service (host OS BUG_ON) via a crafted memory access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-25T00:00:00.000Z
CVE-2010-4256 
The pipe_fcntl function in fs/pipe.c in the Linux kernel before 2.6.37 does not properly determine whether a file is a named pipe, which allows local users to cause a denial of service via an F_SETPIPE_SZ fcntl call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-25T18:00:00.000Z
CVE-2010-4257 
SQL injection vulnerability in the do_trackbacks function in wp-includes/comment.php in WordPress before 3.0.2 allows remote authenticated users to execute arbitrary SQL commands via the Send Trackbacks field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-07T01:00:00.000Z
CVE-2010-4258 
The do_exit function in kernel/exit.c in the Linux kernel before 2.6.36.2 does not properly handle a KERNEL_DS get_fs value, which allows local users to bypass intended access_ok restrictions, overwrite arbitrary kernel memory locations, and gain privileges by leveraging a (1) BUG, (2) NULL pointer dereference, or (3) page fault, as demonstrated by vectors involving the clear_child_tid feature and the splice system call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-30T18:00:00.000Z
CVE-2010-4259 
Stack-based buffer overflow in FontForge 20100501 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long CHARSET_REGISTRY header in a BDF font file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-07T01:00:00.000Z
CVE-2010-4260 
Multiple unspecified vulnerabilities in pdf.c in libclamav in ClamAV before 0.96.5 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document, aka (1) "bb #2358" and (2) "bb #2396."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-07T01:00:00.000Z
CVE-2010-4261 
Off-by-one error in the icon_cb function in pe_icons.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-07T01:00:00.000Z
CVE-2010-4262 
Stack-based buffer overflow in Xfig 3.2.4 and 3.2.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a FIG image with a crafted color definition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-17T18:00:00.000Z
CVE-2010-4263 
The igb_receive_skb function in drivers/net/igb/igb_main.c in the Intel Gigabit Ethernet (aka igb) subsystem in the Linux kernel before 2.6.34, when Single Root I/O Virtualization (SR-IOV) and promiscuous mode are enabled but no VLANs are registered, allows remote attackers to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact via a VLAN tagged frame.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-18T17:00:00.000Z
CVE-2010-4264 
It was found in vanilla forums before 2.0.10 a cross-site scripting vulnerability where a filename could contain arbitrary code to execute on the client side.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: n/a
product: vanilla forums
Published: 2021-06-22T13:24:04.000Z
CVE-2010-4265 
The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 through 4.3.0.CP09 allows remote attackers to cause a denial of service (daemon outage) by establishing a bisocket control connection TCP session, and then not sending any application data, related to a missing CVE-2010-3862 patch.  NOTE: this can be considered a duplicate of CVE-2010-3862 because a missing patch should not be assigned a separate CVE identifier.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-30T20:00:00.000Z
CVE-2010-4266 
It was found in vanilla forums before 2.0.10 a potential linkbait vulnerability in dispatcher.
Problem types: cwe_id: CWE-601
description: CWE-601
Affected products: vendor: n/a
product: vanilla forums
Published: 2021-06-22T13:38:24.000Z
CVE-2010-4267 
Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing (HPLIP) 1.6.7, 3.9.8, 3.10.9, and probably other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SNMP response with a large length value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-20T18:00:00.000Z
CVE-2010-4268 
SQL injection vulnerability in the Pulse Infotech Flip Wall (com_flipwall) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-16T23:00:00.000Z
CVE-2010-4269 
SQL injection vulnerability in managechat.php in Collabtive 0.65 allows remote attackers to execute arbitrary SQL commands via the chatstart[USERTOID] cookie in a pull action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-16T23:00:00.000Z
CVE-2010-4270 
Directory traversal vulnerability in the nBill (com_netinvoice) component before 2.0.9 standard edition, 2.0.10 lite edition, and 1.2_10 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors related to (1) administrator/components/com_nbill/admin.nbill.php, (2) components/com_nbill/nbill.php, (3) administrator/components/com_netinvoice/admin.netinvoice.php, or (4) components/com_netinvoice/netinvoice.php, as exploited in the wild in November 2010.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-16T23:00:00.000Z
CVE-2010-4271 
SQL injection vulnerability in ImpressCMS before 1.2.3 RC2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-16T23:00:00.000Z
CVE-2010-4272 
SQL injection vulnerability in the Pulse Infotech Sponsor Wall (com_sponsorwall) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-16T23:00:00.000Z
CVE-2010-4273 
SQL injection vulnerability in imoveis.php in DescargarVista ACC IMoveis 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-16T23:00:00.000Z
CVE-2010-4274 
reset_diragent_keys in the Common agent in IBM Systems Director 6.2.0 has 754 permissions, which allows local users to gain privileges by leveraging system group membership.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-16T23:00:00.000Z
CVE-2010-4275 
Multiple cross-site scripting (XSS) vulnerabilities in Radius Manager 3.8.0 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) name or (2) descr parameter in an (a) update_usergroup or a (b) store_nas action to admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-22T01:00:00.000Z
CVE-2010-4276 
Cross-site scripting (XSS) vulnerability in the lz_tracking_set_sessid function in templates/jscript/jstrack.tpl in LiveZilla 3.2.0.2 allows remote attackers to inject arbitrary web script or HTML via the livezilla parameter in a track action to server.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-30T18:00:00.000Z
CVE-2010-4277 
Cross-site scripting (XSS) vulnerability in lembedded-video.php in the Embedded Video plugin 4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the content parameter to wp-admin/post.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-22T20:00:00.000Z
CVE-2010-4278 
operation/agentes/networkmap.php in Pandora FMS before 3.1.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the layout parameter in an operation/agentes/networkmap action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-02T17:00:00.000Z
CVE-2010-4279 
The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the loginhash_pwd field, which allows remote attackers to bypass authentication by sending a request to index.php with "admin" in the loginhash_user parameter, in conjunction with the md5 hash of "admin" in the loginhash_data parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-02T17:00:00.000Z
CVE-2010-4280 
Multiple SQL injection vulnerabilities in Pandora FMS before 3.1.1 allow remote authenticated users to execute arbitrary SQL commands via (1) the id_group parameter in an operation/agentes/ver_agente action to ajax.php or (2) the group_id parameter in an operation/agentes/estado_agente action to index.php, related to operation/agentes/estado_agente.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-02T17:00:00.000Z
CVE-2010-4281 
Incomplete blacklist vulnerability in the safe_url_extraclean function in ajax.php in Pandora FMS before 3.1.1 allows remote attackers to execute arbitrary PHP code by using a page parameter containing a UNC share pathname, which bypasses the check for the : (colon) character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-02T17:00:00.000Z
CVE-2010-4282 
Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files via (1) the page parameter to ajax.php or (2) the id parameter to general/pandora_help.php, and allow remote attackers to include and execute, create, modify, or delete arbitrary local files via (3) the layout parameter to operation/agentes/networkmap.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-02T17:00:00.000Z
CVE-2010-4283 
PHP remote file inclusion vulnerability in extras/pandora_diag.php in Pandora FMS before 3.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the argv[1] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-02T17:00:00.000Z
CVE-2010-4284 
SQL injection vulnerability in the authentication form in the integrated web server in the Data Management Server (DMS) before 1.4.3 in Samsung Integrated Management System allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-05-09T22:00:00.000Z
CVE-2010-4294 
The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548, VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548 on Windows, VMware Player 2.5.x before 2.5.5 build 246459 and 3.x before 3.1.2 build 301548 on Windows, and VMware Server 2.x on Windows does not properly validate an unspecified size field, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted video file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-06T21:00:00.000Z
CVE-2010-4295 
Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 allows host OS users to gain privileges via vectors involving temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-06T21:00:00.000Z
CVE-2010-4296 
vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 does not properly load libraries, which allows host OS users to gain privileges via vectors involving shared object files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-06T21:00:00.000Z
CVE-2010-4297 
The VMware Tools update functionality in VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548; VMware Player 2.5.x before 2.5.5 build 328052 and 3.1.x before 3.1.2 build 301548; VMware Server 2.0.2; VMware Fusion 2.x before 2.0.8 build 328035 and 3.1.x before 3.1.2 build 332101; VMware ESXi 3.5, 4.0, and 4.1; and VMware ESX 3.0.3, 3.5, 4.0, and 4.1 allows host OS users to gain privileges on the guest OS via unspecified vectors, related to a "command injection" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-06T21:00:00.000Z
CVE-2010-4298 
SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbitrary SQL commands via the downloads_id parameter in a download_now action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-26T19:00:00.000Z
CVE-2010-4299 
Heap-based buffer overflow in ZfHIPCND.exe in Novell Zenworks 7 Handheld Management (ZHM) allows remote attackers to execute arbitrary code via a crafted request to TCP port 2400.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-20T20:00:00.000Z
CVE-2010-4300 
Heap-based buffer overflow in the dissect_ldss_transfer function (epan/dissectors/packet-ldss.c) in the LDSS dissector in Wireshark 1.2.0 through 1.2.12 and 1.4.0 through 1.4.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an LDSS packet with a long digest line that triggers memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-26T18:23:00.000Z
CVE-2010-4301 
epan/dissectors/packet-zbee-zcl.c in the ZigBee ZCL dissector in Wireshark 1.4.0 through 1.4.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted ZCL packet, related to Discover Attributes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-26T18:23:00.000Z
CVE-2010-4302 
/opt/rv/Versions/CurrentVersion/Mcu/Config/Mcu.val in Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is used, uses a weak hashing algorithm for the (1) administrator and (2) operator passwords, which makes it easier for local users to obtain sensitive information by recovering the cleartext values, aka Bug ID CSCti54010.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-22T19:00:00.000Z
CVE-2010-4303 
Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is used, uses world-readable permissions for the /etc/shadow file, which allows local users to discover encrypted passwords by reading this file, aka Bug ID CSCti54043.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-22T19:00:00.000Z
CVE-2010-4304 
The web interface in Cisco Unified Videoconferencing (UVC) System 3545, 5110, 5115, and 5230; Unified Videoconferencing 3527 Primary Rate Interface (PRI) Gateway; Unified Videoconferencing 3522 Basic Rate Interfaces (BRI) Gateway; and Unified Videoconferencing 3515 Multipoint Control Unit (MCU) uses predictable session IDs based on time values, which makes it easier for remote attackers to hijack sessions via a brute-force attack, aka Bug ID CSCti54048.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-22T19:00:00.000Z
CVE-2010-4305 
Cisco Unified Videoconferencing (UVC) System 3545, 5110, 5115, and 5230; Unified Videoconferencing 3527 Primary Rate Interface (PRI) Gateway; Unified Videoconferencing 3522 Basic Rate Interfaces (BRI) Gateway; and Unified Videoconferencing 3515 Multipoint Control Unit (MCU) improperly use cookies for web-interface credentials, which allows remote attackers to obtain sensitive information by reading a (1) cleartext or (2) base64-encoded cleartext cookie, aka Bug ID CSCti54052.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-22T19:00:00.000Z
CVE-2010-4306 
Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0555, CVE-2010-4093, CVE-2010-4187, CVE-2010-4190, CVE-2010-4191, and CVE-2010-4192.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-10T15:00:00.000Z
CVE-2010-4307 
Buffer overflow in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-10T15:00:00.000Z
CVE-2010-4308 
Adobe Shockwave Player before 11.6.1.629 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-4309.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-11T22:00:00.000Z
CVE-2010-4309 
Adobe Shockwave Player before 11.6.1.629 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-4308.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-08-11T22:00:00.000Z
CVE-2010-4311 
Free Simple Software 1.0 stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-26T19:00:00.000Z
CVE-2010-4312 
The default configuration of Apache Tomcat 6.x does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to hijack a session via script access to a cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-26T19:00:00.000Z
CVE-2010-4313 
Unrestricted file upload vulnerability in fileman_file_upload.php in Orbis CMS 1.0.2 allows remote authenticated users to execute arbitrary code by uploading a .php file, and then accessing it via a direct request to the file in uploads/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-02T17:00:00.000Z
CVE-2010-4314 
Remote attackers can use the iPrint web-browser ActiveX plugin in Novell iPrint Client before 5.42 for Windows XP/Vista/Win7 to execute code by overflowing the "name" parameter.
Problem types: description: buffer overflow
Affected products: vendor: n/a
product: Novell iPrint webrowser ActiveX plugin
Published: 2017-03-11T06:46:00.000Z
CVE-2010-4321 
Stack-based buffer overflow in an ActiveX control in ienipp.ocx in Novell iPrint Client 5.52 allows remote attackers to execute arbitrary code via a long argument to (1) the GetDriverSettings2 method, as reachable by (2) the GetDriverSettings method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-30T18:00:00.000Z
CVE-2010-4322 
Cross-site scripting (XSS) vulnerability in gwtTeaming.rpc in Novell Vibe OnPrem 3 BETA allows remote authenticated users to inject arbitrary web script or HTML via the Micro Blog (aka What Are You Working On?) field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T22:00:00.000Z
CVE-2010-4323 
Heap-based buffer overflow in novell-tftp.exe in Novell ZENworks Configuration Manager (ZCM) 10.3.1, 10.3.2, and 11.0, and earlier versions, allows remote attackers to execute arbitrary code via a long TFTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-18T23:00:00.000Z
CVE-2010-4324 
Cross-site scripting (XSS) vulnerability in the Approval Form in the User Application in the Roles Based Provisioning Module 3.7.0 before 370D in Novell Identity Manager (aka IDM) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T18:00:00.000Z
CVE-2010-4325 
Buffer overflow in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP2 allows remote attackers to execute arbitrary code via a crafted TZID variable in a VCALENDAR message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-28T20:29:00.000Z
CVE-2010-4326 
Multiple buffer overflows in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via variables in a VCALENDAR message, as demonstrated by a long (1) REQUEST-STATUS, (2) TZNAME, (3) COMMENT, or (4) RRULE variable in this message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-28T20:29:00.000Z
CVE-2010-4327 
Unspecified vulnerability in the NCP service in Novell eDirectory 8.8.5 before 8.8.5.6 and 8.8.6 before 8.8.6.2 allows remote attackers to cause a denial of service (hang) via a malformed FileSetLock request to port 524.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-10T17:00:00.000Z