rainbutterfly/cve_corpus huggingface dataset:
CVE-2011-3521 
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE, 7, 6 Update 27 and earlier, and 5.0 Update 31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deserialization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-19T21:00:00.000Z
CVE-2011-3522 
Unspecified vulnerability in SysFW 8.0 on certain SPARC T3, Netra SPARC T3, Sun Fire, and Sun Blade based servers allows local users to affect confidentiality, related to Integrated Lights Out Manager CLI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3523 
Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 10.1.3.5.0 and 10.1.3.5.1 allows remote authenticated users to affect integrity, related to WSM Console, a different vulnerability than CVE-2011-2237.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3524 
Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC (JDENET), a different vulnerability than CVE-2011-2325, CVE-2011-2326, and CVE-2011-3509.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2011-3525 
Unspecified vulnerability in the Application Express component in Oracle Database Server 3.2 and 4.0 allows remote authenticated users to affect confidentiality, integrity, and availability, related to APEX developer user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3526 
Unspecified vulnerability in the Siebel Core - UIF Server component in Oracle Siebel CRM 8.0.0 and 8.1.1 allows remote authenticated users to affect confidentiality via unknown vectors related to User Interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3527 
Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Candidate Gateway.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3528 
Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 8.9 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to eProfile.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3529 
Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Talent Acquisition Manager.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3530 
Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 8.9 allows remote authenticated users to affect confidentiality via unknown vectors related to eDevelopment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3531 
Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect availability via unknown vectors related to Web Services Security.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2011-3532 
Unspecified vulnerability in the Oracle Agile Product Supplier Collaboration for Process component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0.2, 6.0.0.3, and 6.0.0.4 allows remote attackers to affect confidentiality via unknown vectors related to Supplier Portal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3533 
Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 8.9 allows remote authenticated users to affect confidentiality and integrity, related to Job Profile Manager (JPM).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3534 
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to Network Status Monitor (statd).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3535 
Unspecified vulnerability in the Solaris component in Oracle Sun Products Suite 8, 9, 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to Remote Quota Server (rquotad).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3536 
Unspecified vulnerability in Oracle Solaris 10 allows local users to affect availability, related to DTrace Software Library (libdtrace).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3537 
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect availability via unknown vectors related to Kernel/Filesystem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3538 
Unspecified vulnerability in the Sun Ray component in Oracle Virtualization 4.0 allows remote attackers to affect integrity, related to Authentication.  NOTE: this identifier was inadvertently used for an Oracle Industry Applications issue involving TMS Help, but that issue has been assigned CVE-2011-2323.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3539 
Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability via unknown vectors related to Zones.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3541 
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows local users to affect availability via unknown vectors related to Outside In Filters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3542 
Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability via unknown vectors related to Kernel/Performance Counter BackEnd Module (pcbe).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3543 
Unspecified vulnerability in Oracle Solaris 11 Express allows remote attackers to affect availability, related to iSCSI DataMover (IDM).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3544 
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Scripting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-19T21:00:00.000Z
CVE-2011-3545 
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-19T21:00:00.000Z
CVE-2011-3546 
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JavaFX 2.0 allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity via unknown vectors related to Deployment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-19T21:00:00.000Z
CVE-2011-3547 
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to Networking.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-19T21:00:00.000Z
CVE-2011-3548 
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability, related to AWT.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-19T21:00:00.000Z
CVE-2011-3549 
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Swing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-19T21:00:00.000Z
CVE-2011-3550 
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability, related to AWT.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-19T21:00:00.000Z
CVE-2011-3551 
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-19T21:00:00.000Z
CVE-2011-3552 
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote attackers to affect integrity via unknown vectors related to Networking.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-19T21:00:00.000Z
CVE-2011-3553 
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JRockit R28.1.4 and earlier allows remote authenticated users to affect confidentiality, related to JAXWS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-19T21:00:00.000Z
CVE-2011-3554 
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-19T21:00:00.000Z
CVE-2011-3555 
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE, and 7 allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity and availability via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-19T21:00:00.000Z
CVE-2011-3556 
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to RMI, a different vulnerability than CVE-2011-3557.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-19T21:00:00.000Z
CVE-2011-3557 
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to RMI, a different vulnerability than CVE-2011-3556.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-19T21:00:00.000Z
CVE-2011-3558 
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to HotSpot.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-19T21:00:00.000Z
CVE-2011-3559 
Unspecified vulnerability in Oracle Communications Server 2.0; GlassFish Enterprise Server 2.1.1, 3.0.1, and 3.1.1; and Sun Java System App Server 8.1 and 8.2 allows remote attackers to affect availability via unknown vectors related to Web Container.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-18T22:00:00.000Z
CVE-2011-3560 
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity, related to JSSE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-19T21:00:00.000Z
CVE-2011-3561 
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JavaFX 2.0 allows remote attackers to affect confidentiality via unknown vectors related to Deployment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-19T21:00:00.000Z
CVE-2011-3562 
Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect integrity via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-17T22:00:00.000Z
CVE-2011-3563 
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote attackers to affect confidentiality and availability via unknown vectors related to Sound.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-15T22:00:00.000Z
CVE-2011-3564 
Unspecified vulnerability in Oracle GlassFish Enterprise Server 2.1.1 allows local users to affect confidentiality via unknown vectors related to Administration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2011-3565 
Unspecified vulnerability in Oracle Communications Unified 7.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Calendar Server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2011-3566 
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4, 10.0.2, 10.3.3, 10.3.4, and 10.3.5 allows remote attackers to affect availability via unknown vectors related to Web Container.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2011-3568 
Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web Services Security.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2011-3569 
Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect confidentiality via unknown vectors related to Web Services Security.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2011-3570 
Unspecified vulnerability in Oracle Communications Unified 7.0 allows local users to affect confidentiality via unknown vectors related to Calendar Server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2011-3571 
Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) component in Oracle Virtualization 3.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Session.  NOTE: this CVE identifier was accidentally used for a Concurrency issue in Java Runtime Environment, but that issue has been reassigned to CVE-2012-0507.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2011-3573 
Unspecified vulnerability in Oracle Communications Unified 7.0 allows remote authenticated users to affect availability via unknown vectors related to Calendar Server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2011-3574 
Unspecified vulnerability in Oracle Communications Unified 7.0 allows local users to affect confidentiality and integrity via unknown vectors related to Calendar Server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-18T22:00:00.000Z
CVE-2011-3575 
Stack-based buffer overflow in the NSFComputeEvaluateExt function in Nnotes.dll in IBM Lotus Domino 8.5.2 allows remote authenticated users to execute arbitrary code via a long tHPRAgentName parameter in an fmHttpPostRequest OpenForm action to WebAdmin.nsf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-17T10:00:00.000Z
CVE-2011-3576 
Cross-site scripting (XSS) vulnerability in IBM Lotus Domino 8.5.2 allows remote attackers to inject arbitrary web script or HTML via the PanelIcon parameter in an fmpgPanelHeader ReadForm action to WebAdmin.nsf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-17T10:00:00.000Z
CVE-2011-3577 
IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.3 does not properly implement Activity Token authentication for Web Services, which has unspecified impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-20T10:00:00.000Z
CVE-2011-3578 
Cross-site scripting (XSS) vulnerability in bug_actiongroup_ext_page.php in MantisBT before 1.2.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter, related to bug_actiongroup_page.php, a different vulnerability than CVE-2011-3357.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-21T16:00:00.000Z
CVE-2011-3579 
server/webmail.php in IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-30T17:00:00.000Z
CVE-2011-3580 
IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to obtain configuration information via a direct request to the /server URI, which triggers a call to the phpinfo function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-30T17:00:00.000Z
CVE-2011-3581 
Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns before 1.6.11 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Resource Record (RR) with an unknown type containing input that is longer than a specified length.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-04T21:00:00.000Z
CVE-2011-3582 
A Cross-site Request Forgery (CSRF) vulnerability exists in Advanced Electron Forums (AEF) through 1.0.9 due to inadequate confirmation for sensitive transactions in the administrator functions.
Problem types: description: CSRF
Affected products: vendor: Electron Inc.
product: Advanced Electron Forums (AEF)
Published: 2020-01-22T15:00:18.000Z
CVE-2011-3583 
It was found that Typo3 Core versions 4.5.0 - 4.5.5 uses prepared statements that, if the parameter values are not properly replaced, could lead to a SQL Injection vulnerability. This issue can only be exploited if two or more parameters are bound to the query and at least two come from user input.
Problem types: description: SQL Injection
Affected products: vendor: TYPO3 Core
product: TYPO3 Core
Published: 2019-11-25T23:21:26.000Z
CVE-2011-3584 
The TYPO3 Core wec_discussion extension before 2.1.1 is vulnerable to SQL Injection due to improper sanitation of user-supplied input.
Problem types: description: SQL Injection
Affected products: vendor: TYPO3 Core
product: wec_discussion
Published: 2019-11-25T23:31:31.000Z
CVE-2011-3585 
Multiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6 allow local users to cause a denial of service (mounting outage) via a SIGKILL signal during a time window when the /etc/mtab~ file exists.
Problem types: description: General Race Condition
Affected products: vendor: Samba
product: Samba
Published: 2019-12-31T19:47:07.000Z
CVE-2011-3587 
Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p_ class in OFS/misc_.py and the use of Python modules.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-10T10:00:00.000Z
CVE-2011-3588 
The SSH configuration in the Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in Red Hat Enterprise Linux, disables the StrictHostKeyChecking option, which allows man-in-the-middle attackers to spoof kdump servers, and obtain sensitive core information, by using an arbitrary SSH key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-15T11:00:00.000Z
CVE-2011-3589 
The Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in Red Hat Enterprise Linux, uses world-readable permissions for vmcore files, which allows local users to obtain sensitive information by inspecting the file content, as demonstrated by a search for a root SSH key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-15T11:00:00.000Z