rainbutterfly/cve_corpus huggingface dataset:
CVE-2012-0354 
The Threat Detection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.0 through 8.2 before 8.2(5.20), 8.3 before 8.3(2.29), 8.4 before 8.4(3), 8.5 before 8.5(1.6), and 8.6 before 8.6(1.1) allows remote attackers to cause a denial of service (device reload) via (1) IPv4 or (2) IPv6 packets that trigger a shun event, aka Bug ID CSCtw35765.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-15T00:00:00.000Z
CVE-2012-0355 
Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.4 before 8.4(2.11) and 8.5 before 8.5(1.4) allow remote attackers to cause a denial of service (device reload) via (1) IPv4 or (2) IPv6 packets that trigger syslog message 305006, aka Bug ID CSCts39634.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-15T00:00:00.000Z
CVE-2012-0356 
Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 7.0 through 7.2 before 7.2(5.7), 8.0 before 8.0(5.27), 8.1 before 8.1(2.53), 8.2 before 8.2(5.8), 8.3 before 8.3(2.25), 8.4 before 8.4(2.5), and 8.5 before 8.5(1.2) and the Firewall Services Module (FWSM) 3.1 and 3.2 before 3.2(23) and 4.0 and 4.1 before 4.1(8) in Cisco Catalyst 6500 series devices, when multicast routing is enabled, allow remote attackers to cause a denial of service (device reload) via a crafted IPv4 PIM message, aka Bug IDs CSCtr47517 and CSCtu97367.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-15T00:00:00.000Z
CVE-2012-0358 
Buffer overflow in the Cisco Port Forwarder ActiveX control in cscopf.ocx, as distributed through the Clientless VPN feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 through 7.2 before 7.2(5.6), 8.0 before 8.0(5.26), 8.1 before 8.1(2.53), 8.2 before 8.2(5.18), 8.3 before 8.3(2.28), 8.2 before 8.4(2.16), and 8.6 before 8.6(1.1), allows remote attackers to execute arbitrary code via unspecified vectors, aka Bug ID CSCtr00165.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-15T00:00:00.000Z
CVE-2012-0359 
The Cisco Cius with software before 9.2(1) SR2 allows remote attackers to cause a denial of service (device crash or hang) via malformed network traffic, aka Bug ID CSCto71445.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-01T01:00:00.000Z
CVE-2012-0360 
Memory leak in Cisco IOS before 15.1(1)SY, when IKEv2 debugging is enabled, allows remote attackers to cause a denial of service (memory consumption) via crafted packets, aka Bug ID CSCtn22376.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-23T10:00:00.000Z
CVE-2012-0361 
The sccp-protocol component in Cisco IP Communicator (CIPC) 7.0 through 8.6 does not limit the rate of SCCP messages to Cisco Unified Communications Manager (CUCM), which allows remote attackers to cause a denial of service via vectors that trigger (1) on hook and (2) off hook messages, as demonstrated by a Plantronics headset, aka Bug ID CSCti40315.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-02T10:00:00.000Z
CVE-2012-0362 
The extended ACL functionality in Cisco IOS 12.2(58)SE2 and 15.0(1)SE discards all lines that end with a log or time keyword, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by sending network traffic, aka Bug ID CSCts01106.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-02T10:00:00.000Z
CVE-2012-0363 
The web interface on Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allows remote authenticated users to execute arbitrary commands via unspecified vectors, related to a "command injection vulnerability," aka Bug ID CSCtt46871.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-25T02:00:00.000Z
CVE-2012-0364 
Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allow remote attackers to replace the configuration file via an upload request to an unspecified URL, aka Bug ID CSCtw55495.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-25T02:00:00.000Z
CVE-2012-0365 
Directory traversal vulnerability in the Local TFTP file-upload application on Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allows remote authenticated users to upload software to arbitrary directories via unspecified vectors, aka Bug ID CSCtw56009.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-25T02:00:00.000Z
CVE-2012-0366 
Cisco Unity Connection before 7.1.3b(Su2) allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-01T01:00:00.000Z
CVE-2012-0367 
Cisco Unity Connection before 7.1.5b(Su5), 8.0 and 8.5 before 8.5.1(Su3), and 8.6 before 8.6.2 allows remote attackers to cause a denial of service (services crash) via a series of crafted TCP segments, aka Bug ID CSCtq67899.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-01T01:00:00.000Z
CVE-2012-0368 
The administrative management interface on Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allows remote attackers to cause a denial of service (device crash) via a malformed URL in an HTTP request, aka Bug ID CSCts81997.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-01T01:00:00.000Z
CVE-2012-0369 
Cisco Wireless LAN Controller (WLC) devices with software 6.0 and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allow remote attackers to cause a denial of service (device reload) via a sequence of IPv6 packets, aka Bug ID CSCtt07949.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-01T01:00:00.000Z
CVE-2012-0370 
Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0 and 7.1 before 7.1.91.0, when WebAuth is enabled, allow remote attackers to cause a denial of service (device reload) via a sequence of (1) HTTP or (2) HTTPS packets, aka Bug ID CSCtt47435.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-01T01:00:00.000Z
CVE-2012-0371 
Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, when CPU-based ACLs are enabled, allow remote attackers to read or modify the configuration via unspecified vectors, aka Bug ID CSCtu56709.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-01T01:00:00.000Z
CVE-2012-0376 
The voice-sipstack component in Cisco Unified Communications Manager (CUCM) 8.5 allows remote attackers to cause a denial of service (core dump) via vectors involving SIP messages that arrive after an upgrade, aka Bug ID CSCtj87367.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-03T20:00:00.000Z
CVE-2012-0378 
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 through 8.4 allow remote attackers to cause a denial of service (connection limit exceeded) by triggering a large number of stale connections that result in an incorrect value for an MPF connection count, aka Bug ID CSCtv19854.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-03T20:00:00.000Z
CVE-2012-0381 
The IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.2.xSG before 3.2.2SG allows remote attackers to cause a denial of service (device reload) by sending IKE UDP packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCts38429.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-29T10:00:00.000Z
CVE-2012-0382 
The Multicast Source Discovery Protocol (MSDP) implementation in Cisco IOS 12.0, 12.2 through 12.4, and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.1S and 3.1.xSG and 3.2.xSG before 3.2.2SG allows remote attackers to cause a denial of service (device reload) via encapsulated IGMP data in an MSDP packet, aka Bug ID CSCtr28857.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-29T10:00:00.000Z
CVE-2012-0383 
Memory leak in the NAT feature in Cisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service (memory consumption, and device hang or reload) via SIP packets that require translation, related to a "memory starvation vulnerability," aka Bug ID CSCti35326.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-29T10:00:00.000Z
CVE-2012-0384 
Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS before 3.1.2S, 3.2.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.1.xSG and 3.2.xSG before 3.2.2SG, when AAA authorization is enabled, allow remote authenticated users to bypass intended access restrictions and execute commands via a (1) HTTP or (2) HTTPS session, aka Bug ID CSCtr91106.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-29T10:00:00.000Z
CVE-2012-0385 
The Smart Install feature in Cisco IOS 12.2, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (device reload) by sending a malformed Smart Install message over TCP, aka Bug ID CSCtt16051.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-29T10:00:00.000Z
CVE-2012-0386 
The SSHv2 implementation in Cisco IOS 12.2, 12.4, 15.0, 15.1, and 15.2 and IOS XE 2.3.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2S allows remote attackers to cause a denial of service (device reload) via a crafted username in a reverse SSH login attempt, aka Bug ID CSCtr49064.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-29T10:00:00.000Z
CVE-2012-0387 
Memory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted transit HTTP traffic, aka Bug ID CSCtq36153.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-29T10:00:00.000Z
CVE-2012-0388 
Memory leak in the H.323 inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via malformed transit H.323 traffic, aka Bug ID CSCtq45553.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-29T10:00:00.000Z
CVE-2012-0389 
Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4.26 and earlier, 5.x before 5.53, and 6.x before 6.03 allows remote attackers to inject arbitrary web script or HTML via the Username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-24T18:00:00.000Z
CVE-2012-0390 
The DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if there is a specific relationship between a padding length and the ciphertext size, which makes it easier for remote attackers to recover partial plaintext via a timing side-channel attack, a related issue to CVE-2011-4108.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-06T01:00:00.000Z
CVE-2012-0391 
The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data types of properties, which allows remote attackers to execute arbitrary Java code via a crafted parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-08T15:00:00.000Z
CVE-2012-0392 
The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header that triggers Java code execution through a static method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-08T15:00:00.000Z
CVE-2012-0393 
The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attackers to create or overwrite arbitrary files via a crafted parameter that triggers the creation of a Java object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-08T15:00:00.000Z
CVE-2012-0394 
The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when developer mode is used, allows remote attackers to execute arbitrary commands via unspecified vectors.  NOTE: the vendor characterizes this behavior as not "a security vulnerability itself.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-08T15:00:00.000Z
CVE-2012-0395 
Buffer overflow in the server in EMC NetWorker 7.5.x and 7.6.x before 7.6.3 SP1 Cumulative Release build 851 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-01-27T00:00:00.000Z
CVE-2012-0396 
EMC Documentum xPlore 1.0, 1.1 before P07, and 1.2 does not properly enforce the requirement for BROWSE permission, which allows remote authenticated users to determine the existence of an object, or read object metadata, via a search.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-02-06T20:00:00.000Z
CVE-2012-0397 
Buffer overflow in EMC RSA SecurID Software Token Converter before 2.6.1 allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-06T23:00:00.000Z
CVE-2012-0398 
EMC Documentum eRoom before 7.4.4 does not properly validate session cookies, which allows remote attackers to hijack or replay sessions via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-15T00:00:00.000Z
CVE-2012-0399 
Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA enVision 4.x before 4.1 Patch 4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-20T15:00:00.000Z
CVE-2012-0400 
EMC RSA enVision 4.x before 4.1 Patch 4 does not properly restrict the number of failed authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-20T15:00:00.000Z
CVE-2012-0401 
Multiple SQL injection vulnerabilities in EMC RSA enVision 4.x before 4.1 Patch 4 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-20T15:00:00.000Z
CVE-2012-0402 
EMC RSA enVision 4.x before 4.1 Patch 4 uses unspecified hardcoded credentials, which makes it easier for remote attackers to obtain access via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-20T15:00:00.000Z
CVE-2012-0403 
Directory traversal vulnerability in EMC RSA enVision 4.x before 4.1 Patch 4 allows remote authenticated users to have an unspecified impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-20T15:00:00.000Z
CVE-2012-0404 
Cross-site scripting (XSS) vulnerability in EMC Documentum eRoom before 7.4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-03-15T00:00:00.000Z
CVE-2012-0406 
The DPA_Utilities.cProcessAuthenticationData function in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an AUTHENTICATECONNECTION command that (1) lacks a password field or (2) has an empty password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-20T01:00:00.000Z
CVE-2012-0407 
Integer overflow in the DPA_Utilities library in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (infinite loop) via a negative 64-bit value in a certain size field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-04-20T01:00:00.000Z
CVE-2012-0409 
Multiple buffer overflows in EMC AutoStart 5.3.x and 5.4.x before 5.4.3 allow remote attackers to cause a denial of service (agent crash) or possibly execute arbitrary code via crafted packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-01T20:00:00.000Z
CVE-2012-0410 
Directory traversal vulnerability in WebAccess in Novell GroupWise before 8.03 allows remote attackers to read arbitrary files via the User.interface parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-05T14:00:00.000Z
CVE-2012-0411 
Unspecified vulnerability in Novell iPrint Client before 5.82 allows remote attackers to execute arbitrary code via an op-client-interface-version action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-24T18:00:00.000Z
CVE-2012-0414 
Cross-site scripting (XSS) vulnerability in the Spacewalk service in SUSE Manager 1.2 for SUSE Linux Enterprise (SLE) 11 SP1 allows remote attackers to inject arbitrary web script or HTML via an image name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-02T02:00:00.000Z
CVE-2012-0417 
Integer overflow in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-28T10:00:00.000Z
CVE-2012-0418 
Unspecified vulnerability in the client in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 on Windows allows user-assisted remote attackers to execute arbitrary code via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-28T10:00:00.000Z
CVE-2012-0419 
Directory traversal vulnerability in the agent HTTP interfaces in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to read arbitrary files via directory traversal sequences in a request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-28T10:00:00.000Z
CVE-2012-0420 
zypp-refresh-wrapper in SUSE Zypper before 1.3.20 and 1.6.x before 1.6.166 allows local users to create files in arbitrary directories, or possibly have unspecified other impact, via a pathname in the ZYPP_LOCKFILE_ROOT environment variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-02T02:00:00.000Z
CVE-2012-0421 
The SUSE Audit Log Keeper daemon before 0.2.1-0.4.6.1 for SUSE Manager and Spacewalk uses world-readable permissions for /etc/auditlog-keeper.conf, which allows local users to obtain passwords by reading this file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-08T10:00:00.000Z
CVE-2012-0425 
LanItems.ycp in save_y2logs in yast2-network before 2.24.4 in SUSE YaST writes cleartext Wi-Fi credentials to the y2log log file, which allows context-dependent attackers to obtain sensitive information by reading the (1) WIRELESS_WPA_PASSWORD or (2) WIRELESS_CLIENT_KEY_PASSWORD field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-02T02:00:00.000Z
CVE-2012-0426 
Race condition in sap_suse_cluster_connector before 1.0.0-0.8.1 in SUSE Linux Enterprise for SAP Applications 11 SP2 allows local users to have an unspecified impact via vectors related to a tmp/ directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-02T02:00:00.000Z
CVE-2012-0427 
yast2-add-on-creator in SUSE inst-source-utils 2008.11.26 before 2008.11.26-0.9.1 and 2012.9.13 before 2012.9.13-0.8.1 allows local users to gain privileges via a crafted (1) file name or (2) directory name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-02T02:00:00.000Z
CVE-2012-0428 
Cross-site scripting (XSS) vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-25T11:00:00.000Z
CVE-2012-0429 
dhost in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote authenticated users to cause a denial of service (daemon crash) via crafted characters in an HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-25T11:00:00.000Z
CVE-2012-0430 
Unspecified vulnerability in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x before 8.8.7.2 on Windows allows remote attackers to obtain an administrator cookie and bypass authorization checks via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-25T11:00:00.000Z
CVE-2012-0432 
Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an unspecified impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-12-25T11:00:00.000Z
CVE-2012-0433 insecure permissions on files containing confidential data
The install-chef-suse.sh script shipped with crowbar before 2012-10-02 is creating files containing confidential data with insecure permissions, allowing local users to read confidential data.
Problem types: cwe_id: CWE-732
description: CWE-732
Affected products: vendor: SUSE
product: crowbar
Published: 2018-06-08T17:00:00.000Z
CVE-2012-0434 
The server in Crowbar, as used in SUSE Cloud 1.0, uses weak permissions for the production.log file, which has unspecified impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-12-02T02:00:00.000Z
CVE-2012-0435 
SUSE WebYaST before 1.2 0.2.63-0.6.1 allows remote attackers to modify the hosts list, and subsequently conduct man-in-the-middle attacks, via a crafted /host request on TCP port 4984.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-01-26T21:00:00.000Z