[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1521.

[Assistant] The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service (resource consumption) via a crafted URL, as demonstrated by the file:///etc/passwd and file:///dev/zero URLs.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1521?

[Assistant]
[oss-security] 20110916 Re: CVE Request -- Django: v1.3.1, v1.2.7 multiple security flaws

[oss-security] 20110324 CVE Request -- Python (urllib, urllib2): Improper management of ftp:// and file:// URL schemes

[oss-security] 20110328 Re: CVE Request -- Python (urllib, urllib2): Improper management of ftp:// and file:// URL schemes

[oss-security] 20110911 CVE Request -- Django: v1.3.1, v1.2.7 multiple security flaws

[oss-security] 20110913 Re: CVE Request -- Django: v1.3.1, v1.2.7 multiple security flaws


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1521?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1522 mean in the context of cybersecurity?

[Assistant] CVE-2011-1522


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1522.

[Assistant] Multiple SQL injection vulnerabilities in the Doctrine\DBAL\Platforms\AbstractPlatform::modifyLimitQuery function in Doctrine 1.x before 1.2.4 and 2.x before 2.0.3 allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset field.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1522?

[Assistant]
[oss-security] 20110328 Re: CVE Request -- php-doctrine-Doctrine -- SQL injection flaw

[oss-security] 20110325 CVE Request -- php-doctrine-Doctrine -- SQL injection flaw


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1522?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1523 mean in the context of cybersecurity?

[Assistant] CVE-2011-1523


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1523.

[Assistant] Cross-site scripting (XSS) vulnerability in statusmap.c in statusmap.cgi in Nagios 3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the layer parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1523?

[Assistant]
[oss-security] 20110325 CVE Request -- Nagios -- XSS in the network status map CGI script

[oss-security] 20110328 Re: CVE Request -- Nagios -- XSS in the network status map CGI script


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1523?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1524 mean in the context of cybersecurity?

[Assistant] CVE-2011-1524


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1524.

[Assistant] Cross-site scripting (XSS) vulnerability in the management login GUI page in Symantec LiveUpdate Administrator (LUA) before 2.3 allows remote attackers to inject arbitrary web script or HTML via the username field, as demonstrated by injecting an IFRAME element into the event log, a different vulnerability than CVE-2011-0545.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1524?

[Assistant] 20110322 NSOADV-2011-001: Symantec LiveUpdate Administrator CSRF vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1524?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1525 mean in the context of cybersecurity?

[Assistant] CVE-2011-1525


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1525.

[Assistant] Heap-based buffer overflow in rvrender.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted frame in an Internet Video Recording (IVR) file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1525?

[Assistant] 20110321 Heap overflow in RealPlayer 14.0.1.633


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1525?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1526 mean in the context of cybersecurity?

[Assistant] CVE-2011-1526


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1526.

[Assistant] ftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.1 and earlier does not check the krb5_setegid return value, which allows remote authenticated users to bypass intended group access restrictions, and create, overwrite, delete, or read files, via standard FTP commands, related to missing autoconf tests in a configure script.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1526?

[Assistant] 20110705 MITKRB5-SA-2011-005 FTP daemon fails to set effective group ID [CVE-2011-1526]


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1526?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1527 mean in the context of cybersecurity?

[Assistant] CVE-2011-1527


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1527.

[Assistant] The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a kinit operation with incorrect string case for the realm, related to the is_principal_in_realm, krb5_set_error_message, krb5_ldap_get_principal, and process_as_req functions.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1527?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1527?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1528 mean in the context of cybersecurity?

[Assistant] CVE-2011-1528


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1528.

[Assistant] The krb5_ldap_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via unspecified vectors, related to the locked_check_p function.  NOTE: the Berkeley DB vector is covered by CVE-2011-4151.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1528?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1528?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1529 mean in the context of cybersecurity?

[Assistant] CVE-2011-1529


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1529.

[Assistant] The lookup_lockout_policy function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1, when the db2 (aka Berkeley DB) or LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger certain process_as_req errors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1529?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1529?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1530 mean in the context of cybersecurity?

[Assistant] CVE-2011-1530


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1530.

[Assistant] The process_tgs_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.2 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted TGS request that triggers an error other than the KRB5_KDB_NOENTRY error.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1530?

[Assistant] 20111206 MITKRB5-SA-2011-007 KDC null pointer dereference in TGS handling [CVE-2011-1530]


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1530?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1531 mean in the context of cybersecurity?

[Assistant] CVE-2011-1531


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1531.

[Assistant] The webscan component in the Embedded Web Server (EWS) on the HP Photosmart D110 and B110; Photosmart Plus B210; Photosmart Premium C310, Fax All-in-One, and C510; and ENVY 100 D410 printers allows remote attackers to read documents on the scan surface via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1531?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1531?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1532 mean in the context of cybersecurity?

[Assistant] CVE-2011-1532


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1532.

[Assistant] Unspecified vulnerability in the SNMP component on the HP Photosmart D110 and B110; Photosmart Plus B210; Photosmart Premium C310, Fax All-in-One, and C510; and ENVY 100 D410 printers allows remote attackers to obtain sensitive information or modify data via vectors related to the Embedded Web Server (EWS).


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1532?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1532?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1533 mean in the context of cybersecurity?

[Assistant] CVE-2011-1533


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1533.

[Assistant] Cross-site scripting (XSS) vulnerability on the HP Photosmart D110 and B110; Photosmart Plus B210; Photosmart Premium C310, Fax All-in-One, and C510; and ENVY 100 D410 printers allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1533?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1533?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1534 mean in the context of cybersecurity?

[Assistant] CVE-2011-1534


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1534.

[Assistant] Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x allows remote authenticated users to obtain access to processes via unknown vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1534?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1534?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1535 mean in the context of cybersecurity?

[Assistant] CVE-2011-1535


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1535.

[Assistant] Unspecified vulnerability in HP Insight Control for Linux (aka IC-Linux) before 6.3 allows remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via unknown vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1535?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1535?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1536 mean in the context of cybersecurity?

[Assistant] CVE-2011-1536


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1536.

[Assistant] Unspecified vulnerability in HP Performance Insight 5.0, 5.1x. 5.2x, 5.3x, 5.4, 5.41, and 5.41.002 allows remote attackers to obtain sensitive information via unknown vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1536?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1536?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1537 mean in the context of cybersecurity?

[Assistant] CVE-2011-1537


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1537.

[Assistant] Cross-site scripting (XSS) vulnerability in HP Proliant Support Pack (PSP) before 8.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1537?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1537?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1538 mean in the context of cybersecurity?

[Assistant] CVE-2011-1538


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1538.

[Assistant] Open redirect vulnerability in HP Proliant Support Pack (PSP) before 8.7 allows remote authenticated users to redirect other users to arbitrary web sites and conduct phishing attacks via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1538?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1538?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1539 mean in the context of cybersecurity?

[Assistant] CVE-2011-1539


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1539.

[Assistant] Unspecified vulnerability in HP Proliant Support Pack (PSP) before 8.7 allows remote attackers to obtain sensitive information via unknown vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1539?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1539?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1540 mean in the context of cybersecurity?

[Assistant] CVE-2011-1540


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1540.

[Assistant] Unspecified vulnerability in HP System Management Homepage (SMH) before 6.3 allows remote authenticated users to execute arbitrary code via unknown vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1540?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1540?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1541 mean in the context of cybersecurity?

[Assistant] CVE-2011-1541


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1541.

[Assistant] Unspecified vulnerability in HP System Management Homepage (SMH) before 6.3 allows remote attackers to bypass intended access restrictions, and consequently execute arbitrary code, via unknown vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1541?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1541?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1542 mean in the context of cybersecurity?

[Assistant] CVE-2011-1542


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1542.

[Assistant] Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1542?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1542?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1543 mean in the context of cybersecurity?

[Assistant] CVE-2011-1543


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1543.

[Assistant] Cross-site request forgery (CSRF) vulnerability in HP Systems Insight Manager (SIM) before 6.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1543?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1543?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1544 mean in the context of cybersecurity?

[Assistant] CVE-2011-1544


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1544.

[Assistant] Unspecified vulnerability in HP Insight Control Performance Management before 6.3 allows remote authenticated users to gain privileges via unknown vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1544?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1544?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1545 mean in the context of cybersecurity?

[Assistant] CVE-2011-1545


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1545.

[Assistant] Cross-site request forgery (CSRF) vulnerability in HP Insight Control Performance Management before 6.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1545?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1545?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1546 mean in the context of cybersecurity?

[Assistant] CVE-2011-1546


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1546.

[Assistant] Multiple SQL injection vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.3 allow remote attackers to execute arbitrary SQL commands via the s parameter to (1) a_viewusers.php or (2) keysearch.php; and allow remote authenticated administrators to execute arbitrary SQL commands via the (3) id or (4) start parameter to pending.php, or the (5) aid parameter to a_authordetails.php.  NOTE: some of these details are obtained from third party information.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1546?

[Assistant] 20110330 'Andy's PHP Knowledgebase' SQL Injection Vulnerability (CVE-2011-1546)


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1546?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1547 mean in the context of cybersecurity?

[Assistant] CVE-2011-1547


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1547.

[Assistant] Multiple stack consumption vulnerabilities in the kernel in NetBSD 4.0, 5.0 before 5.0.3, and 5.1 before 5.1.1, when IPsec is enabled, allow remote attackers to cause a denial of service (memory corruption and panic) or possibly have unspecified other impact via a crafted (1) IPv4 or (2) IPv6 packet with nested IPComp headers.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1547?

[Assistant] 20110401 BSD derived RFC3173 IPComp encapsulation will expand arbitrarily nested payload


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1547?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1548 mean in the context of cybersecurity?

[Assistant] CVE-2011-1548


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1548.

[Assistant] The default configuration of logrotate on Debian GNU/Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as demonstrated by /var/log/postgresql/.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1548?

[Assistant]
[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110308 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110323 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110314 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1548?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1549 mean in the context of cybersecurity?

[Assistant] CVE-2011-1549


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1549.

[Assistant] The default configuration of logrotate on Gentoo Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as demonstrated by directories under /var/log/ for packages.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1549?

[Assistant]
[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110308 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110323 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110314 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1549?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1550 mean in the context of cybersecurity?

[Assistant] CVE-2011-1550


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1550.

[Assistant] The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as demonstrated by directories for the (1) cobbler, (2) inn, (3) safte-monitor, and (4) uucp packages.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1550?

[Assistant]
[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110308 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110323 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110314 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues

[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1550?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1551 mean in the context of cybersecurity?

[Assistant] CVE-2011-1551


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1551.

[Assistant] SUSE openSUSE Factory assigns ownership of the /var/log/cobbler/ directory tree to the web-service user account, which might allow local users to gain privileges by leveraging access to this account during root filesystem operations by the Cobbler daemon.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1551?

[Assistant] [oss-security] 20110323 Re: CVE Request -- logrotate -- nine issues


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1551?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1552 mean in the context of cybersecurity?

[Assistant] CVE-2011-1552


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1552.

[Assistant] t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a different vulnerability than CVE-2011-0764.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1552?

[Assistant] 20110327 TSSA-2011-01 xpdf : multiple vulnerabilities allow remote code execution


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1552?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1553 mean in the context of cybersecurity?

[Assistant] CVE-2011-1553


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1553.

[Assistant] Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory write, a different vulnerability than CVE-2011-0764.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1553?

[Assistant] 20110327 TSSA-2011-01 xpdf : multiple vulnerabilities allow remote code execution


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1553?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1554 mean in the context of cybersecurity?

[Assistant] CVE-2011-1554


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1554.

[Assistant] Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory read, integer overflow, and invalid pointer dereference, a different vulnerability than CVE-2011-0764.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1554?

[Assistant] 20110327 TSSA-2011-01 xpdf : multiple vulnerabilities allow remote code execution


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1554?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1555 mean in the context of cybersecurity?

[Assistant] CVE-2011-1555


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1555.

[Assistant] SQL injection vulnerability in saa.php in Andy's PHP Knowledgebase (Aphpkb) 0.95.3 and earlier allows remote attackers to execute arbitrary SQL commands via the aid parameter, a different vulnerability than CVE-2011-1546.  NOTE: some of these details are obtained from third party information.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1555?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1555?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1556 mean in the context of cybersecurity?

[Assistant] CVE-2011-1556


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1556.

[Assistant] SQL injection vulnerability in plugins/pdfClasses/pdfgen.php in Andy's PHP Knowledgebase (Aphpkb) 0.95.4 allows remote attackers to execute arbitrary SQL commands via the pdfa parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1556?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1556?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1557 mean in the context of cybersecurity?

[Assistant] CVE-2011-1557


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1557.

[Assistant] SQL injection vulnerability in ICloudCenter ICJobSite 1.1 allows remote attackers to execute arbitrary SQL commands via the pid parameter to an unspecified component, a different vulnerability than CVE-2011-1546.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1557?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1557?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1558 mean in the context of cybersecurity?

[Assistant] CVE-2011-1558


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1558.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in the IBM Web Interface for Content Management (aka WEBi) 1.0.4 before FP3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-1242.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1558?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1558?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1559 mean in the context of cybersecurity?

[Assistant] CVE-2011-1559


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1559.

[Assistant] Unspecified vulnerability in the IBM Web Interface for Content Management (aka WEBi) 1.0.4 before FP3 has unknown impact and attack vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1559?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1559?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1560 mean in the context of cybersecurity?

[Assistant] CVE-2011-1560


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1560.

[Assistant] solid.exe in IBM solidDB before 4.5.181, 6.0.x before 6.0.1067, 6.1.x and 6.3.x before 6.3.47, and 6.5.x before 6.5.0.3 uses a password-hash length specified by the client, which allows remote attackers to bypass authentication via a short length value.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1560?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1560?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1561 mean in the context of cybersecurity?

[Assistant] CVE-2011-1561


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1561.

[Assistant] The LDAP login feature in bos.rte.security 6.1.6.4 in IBM AIX 6.1, when ldap_auth is enabled in ldap.cfg, allows remote attackers to bypass authentication via a login attempt with an arbitrary password.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1561?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1561?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1562 mean in the context of cybersecurity?

[Assistant] CVE-2011-1562


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1562.

[Assistant] Ecava IntegraXor HMI before n 3.60 (Build 4032) allows remote attackers to bypass authentication and execute arbitrary SQL statements via unspecified vectors related to a crafted POST request. NOTE: some sources have reported this issue as SQL injection, but this might not be accurate.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1562?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1562?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1563 mean in the context of cybersecurity?

[Assistant] CVE-2011-1563


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1563.

[Assistant] Multiple stack-based buffer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow remote attackers to execute arbitrary code via (1) a long username in an On_FC_CONNECT_FCS_LOGIN packet, and crafted (2) On_FC_CTAGLIST_FCS_CADDTAG, (3) On_FC_CTAGLIST_FCS_CDELTAG, (4) On_FC_CTAGLIST_FCS_ADDTAGMS, (5) On_FC_RFUSER_FCS_LOGIN, (6) unspecified "On_FC_BINFILE_FCS_*FILE", (7) On_FC_CGETTAG_FCS_GETTELEMETRY, (8) On_FC_CGETTAG_FCS_GETCHANNELTELEMETRY, (9) On_FC_CGETTAG_FCS_SETTELEMETRY, (10) On_FC_CGETTAG_FCS_SETCHANNELTELEMETRY, and (11) On_FC_SCRIPT_FCS_STARTPROG packets to port 910.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1563?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1563?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1564 mean in the context of cybersecurity?

[Assistant] CVE-2011-1564


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1564.

[Assistant] Multiple integer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow remote attackers to execute arbitrary code via crafted (1) On_FC_MISC_FCS_MSGBROADCAST and (2) On_FC_MISC_FCS_MSGSEND packets, which trigger a heap-based buffer overflow.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1564?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1564?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1565 mean in the context of cybersecurity?

[Assistant] CVE-2011-1565


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1565.

[Assistant] Directory traversal vulnerability in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to (1) read (opcode 0x3) or (2) create or write (opcode 0x2) arbitrary files via ..\ (dot dot backslash) sequences to TCP port 12401.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1565?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1565?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1566 mean in the context of cybersecurity?

[Assistant] CVE-2011-1566


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1566.

[Assistant] Directory traversal vulnerability in dc.exe 9.00.00.11059 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to execute arbitrary programs via ..\ (dot dot backslash) sequences in opcodes (1) 0xa and (2) 0x17 to TCP port 12397.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1566?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1566?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1567 mean in the context of cybersecurity?

[Assistant] CVE-2011-1567


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1567.

[Assistant] Multiple stack-based buffer overflows in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted (1) ListAll, (2) Write File, (3) ReadFile, (4) Delete, (5) RenameFile, and (6) FileInfo commands in an 0xd opcode; (7) the Add, (8) ReadFile, (9) Write File, (10) Rename, (11) Delete, and (12) Add commands in an RMS report templates (0x7) opcode; and (13) 0x4 command in an STDREP request (0x8) opcode to TCP port 12401.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1567?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1567?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1568 mean in the context of cybersecurity?

[Assistant] CVE-2011-1568


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1568.

[Assistant] Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated using the RMS Reports Delete command, related to the logging of messages to GSST.LOG.  NOTE: some of these details are obtained from third party information.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1568?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1568?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1569 mean in the context of cybersecurity?

[Assistant] CVE-2011-1569


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1569.

[Assistant] download.aspx in Douran Portal 3.9.7.8 allows remote attackers to obtain source code of arbitrary files under the web root via (1) a trailing ".", (2) a trailing space, or (3) mixed case in the FileNameAttach parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1569?

[Assistant] 20110320 Douran Portal File Download/Source Code Disclosure Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1569?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1570 mean in the context of cybersecurity?

[Assistant] CVE-2011-1570


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1570.

[Assistant] Cross-site scripting (XSS) vulnerability in Liferay Portal Community Edition (CE) 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote authenticated users to inject arbitrary web script or HTML via a message title, a different vulnerability than CVE-2004-2030.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1570?

[Assistant]
[oss-security] 20110408 Re: CVE requests : Liferay 6.0.6

[oss-security] 20110411 Re: CVE requests : Liferay 6.0.6

[oss-security] 20110329 CVE requests : Liferay 6.0.6


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1570?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1571 mean in the context of cybersecurity?

[Assistant] CVE-2011-1571


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1571.

[Assistant] Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1571?

[Assistant]
[oss-security] 20110408 Re: CVE requests : Liferay 6.0.6

[oss-security] 20110411 Re: CVE requests : Liferay 6.0.6

[oss-security] 20110329 CVE requests : Liferay 6.0.6


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1571?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1572 mean in the context of cybersecurity?

[Assistant] CVE-2011-1572


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1572.

[Assistant] Directory traversal vulnerability in the Admin Defined Commands (ADC) feature in gitolite before 1.5.9.1 allows remote attackers to execute arbitrary commands via .. (dot dot) sequences in admin-defined commands.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1572?

[Assistant]
[oss-security] 20110411 Re: CVE id request: gitolite

[oss-security] 20110409 CVE id request: gitolite


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1572?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1573 mean in the context of cybersecurity?

[Assistant] CVE-2011-1573


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1573.

[Assistant] net/sctp/sm_make_chunk.c in the Linux kernel before 2.6.34, when addip_enable and auth_enable are used, does not consider the amount of zero padding during calculation of chunk lengths for (1) INIT and (2) INIT ACK chunks, which allows remote attackers to cause a denial of service (OOPS) via crafted packet data.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1573?

[Assistant]
[oss-security] 20110411 Re: CVE request - kernel: sctp: fix to calc the INIT/INIT-ACK chunk length correctly to set

[oss-security] 20110411 CVE request - kernel: sctp: fix to calc the INIT/INIT-ACK chunk length correctly to set


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1573?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1574 mean in the context of cybersecurity?

[Assistant] CVE-2011-1574


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1574.

[Assistant] Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2 allows remote attackers to execute arbitrary code via a crafted S3M file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1574?

[Assistant]
[oss-security] 20110411 Re: CVE request for libmodplug

[oss-security] 20110411 CVE request for libmodplug


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1574?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1575 mean in the context of cybersecurity?

[Assistant] CVE-2011-1575


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1575.

[Assistant] The STARTTLS implementation in ftp_parser.c in Pure-FTPd before 1.0.30 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted FTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1575?

[Assistant]
[oss-security] 20110411 Re: pure-ftpd STARTTLS command injection / new CVE?

[pure-ftpd] 20110308 Pure-FTPd 1.0.30 has been released

[opensuse-updates] 20110512 openSUSE-SU-2011:0483-1 (moderate): New pure-ftpd version fix STARTTLS issues (CVE-2011-1575).

[oss-security] 20110411 Re: pure-ftpd STARTTLS command injection / new CVE?

[oss-security] 20110411 Re: pure-ftpd STARTTLS command injection / new CVE?

[oss-security] 20110411 pure-ftpd STARTTLS command injection / new CVE?

[pure-ftpd] 20110308 Re: Pure-FTPd 1.0.30 has been released


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1575?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1576 mean in the context of cybersecurity?

[Assistant] CVE-2011-1576


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1576.

[Assistant] The Generic Receive Offload (GRO) implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux 5 and 2.6.32 on Red Hat Enterprise Linux 6, as used in Red Hat Enterprise Virtualization (RHEV) Hypervisor and other products, allows remote attackers to cause a denial of service via crafted VLAN packets that are processed by the napi_reuse_skb function, leading to (1) a memory leak or (2) memory corruption, a different vulnerability than CVE-2011-1478.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1576?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1576?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1577 mean in the context of cybersecurity?

[Assistant] CVE-2011-1577


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1577.

[Assistant] Heap-based buffer overflow in the is_gpt_valid function in fs/partitions/efi.c in the Linux kernel 2.6.38 and earlier allows physically proximate attackers to cause a denial of service (OOPS) or possibly have unspecified other impact via a crafted size of the EFI GUID partition-table header on removable media.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1577?

[Assistant]
[oss-security] 20110413 Re: CVE Request: kernel: fs/partitions: Corrupted GUID partition tables can cause kernel oops

20110413 [PRE-SA-2011-03] Denial-of-service vulnerability in EFI partition handling code of the Linux kernel

[mm-commits] 20110412 + fs-partitions-efic-corrupted-guid-partition-tables-can-cause-kernel-oops.patch added to -mm tree

[oss-security] 20110412 CVE Request: kernel: fs/partitions: Corrupted GUID partition tables can cause kernel oops


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1577?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1578 mean in the context of cybersecurity?

[Assistant] CVE-2011-1578


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1578.

[Assistant] Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.3, when Internet Explorer 6 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an uploaded file accessed with a dangerous extension such as .html at the end of the query string, in conjunction with a modified URI path that has a %2E sequence in place of the . (dot) character.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1578?

[Assistant]
[mediawiki-announce] 20110412 MediaWiki security release 1.16.3

[oss-security] 20110413 Re: CVE request: mediawiki 1.16.3


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1578?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1579 mean in the context of cybersecurity?

[Assistant] CVE-2011-1579


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1579.

[Assistant] The checkCss function in includes/Sanitizer.php in the wikitext parser in MediaWiki before 1.16.3 does not properly validate Cascading Style Sheets (CSS) token sequences, which allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive information by using the \2f\2a and \2a\2f hex strings to surround CSS comments.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1579?

[Assistant]
[mediawiki-announce] 20110412 MediaWiki security release 1.16.3

[oss-security] 20110413 Re: CVE request: mediawiki 1.16.3


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1579?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1580 mean in the context of cybersecurity?

[Assistant] CVE-2011-1580


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1580.

[Assistant] The transwiki import functionality in MediaWiki before 1.16.3 does not properly check privileges, which allows remote authenticated users to perform imports from any wgImportSources wiki via a crafted POST request.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1580?

[Assistant]
[mediawiki-announce] 20110412 MediaWiki security release 1.16.3

[oss-security] 20110413 Re: CVE request: mediawiki 1.16.3


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1580?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1581 mean in the context of cybersecurity?

[Assistant] CVE-2011-1581


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1581.

[Assistant] The bond_select_queue function in drivers/net/bonding/bond_main.c in the Linux kernel before 2.6.39, when a network device with a large number of receive queues is installed but the default tx_queues setting is used, does not properly restrict queue indexes, which allows remote attackers to cause a denial of service (BUG and system crash) or possibly have unspecified other impact by sending network traffic.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1581?

[Assistant]
[oss-security] 20110413 CVE request - kernel: bonding: Incorrect TX queue offset

[oss-security] 20110413 Re: CVE request - kernel: bonding: Incorrect TX queue offset


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1581?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1582 mean in the context of cybersecurity?

[Assistant] CVE-2011-1582


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1582.

[Assistant] Apache Tomcat 7.0.12 and 7.0.13 processes the first request to a servlet without following security constraints that have been configured through annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1088, CVE-2011-1183, and CVE-2011-1419.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1582?

[Assistant]
20110517 [SECURITY] CVE-2011-1582 Apache Tomcat security constraint bypass

[www-announce] 20110517 [SECURITY] CVE-2011-1582 Apache Tomcat security constraint bypass


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1582?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1583 mean in the context of cybersecurity?

[Assistant] CVE-2011-1583


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1583.

[Assistant] Multiple integer overflows in tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allow local users to cause a denial of service and possibly execute arbitrary code via a crafted paravirtualised guest kernel image that triggers (1) a buffer overflow during a decompression loop or (2) an out-of-bounds read in the loader involving unspecified length fields.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1583?

[Assistant]
[Xen-devel] 20110509 Xen security advisory CVE-2011-1583 - pv kernel image validation

[Xen-devel] 20110509 Re: Xen security advisory CVE-2011-1583 - pv kernel image validation


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1583?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1584 mean in the context of cybersecurity?

[Assistant] CVE-2011-1584


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1584.

[Assistant] The updateFile function in inc/core/class.dc.media.php in the Media Manager in Dotclear before 2.2.3 does not properly restrict pathnames, which allows remote authenticated users to upload and execute arbitrary PHP code via the media_path or media_file parameter.  NOTE: some of these details are obtained from third party information.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1584?

[Assistant]
[oss-security] 20110413 CVE request: dotclear before 2.2.3

[oss-security] 20110415 Re: CVE request: dotclear before 2.2.3

[oss-security] 20110415 Re: CVE request: dotclear before 2.2.3

[oss-security] 20110414 Re: CVE request: dotclear before 2.2.3


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1584?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1585 mean in the context of cybersecurity?

[Assistant] CVE-2011-1585


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1585.

[Assistant] The cifs_find_smb_ses function in fs/cifs/connect.c in the Linux kernel before 2.6.36 does not properly determine the associations between users and sessions, which allows local users to bypass CIFS share authentication by leveraging a mount of a share by a different user.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1585?

[Assistant] [oss-security] 20110415 Re: CVE Request: cifs session reuse


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1585?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1586 mean in the context of cybersecurity?

[Assistant] CVE-2011-1586


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1586.

[Assistant] Directory traversal vulnerability in the KGetMetalink::File::isValidNameAttr function in ui/metalinkcreator/metalinker.cpp in KGet in KDE SC 4.6.2 and earlier allows remote attackers to create arbitrary files via a .. (dot dot) in the name attribute of a file element in a metalink file.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-1000.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1586?

[Assistant] [oss-security] 20110415 Re: CVE Request: incomplete fix for CVE-2010-1000 in KDE network


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1586?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1587 mean in the context of cybersecurity?

[Assistant] CVE-2011-1587


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1587.

[Assistant] Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.4, when Internet Explorer 6 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an uploaded file accessed with a dangerous extension such as .html located before a ? (question mark) in a query string, in conjunction with a modified URI path that has a %2E sequence in place of the . (dot) character.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1578.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1587?

[Assistant]
[oss-security] 20110418 Re: CVE request: mediawiki 1.16.4, incomplete fix of CVE-2011-1578

[mediawiki-announce] 20110414 MediaWiki security release 1.16.4


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1587?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1588 mean in the context of cybersecurity?

[Assistant] CVE-2011-1588


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1588.

[Assistant] Thunar before 1.3.1 could crash when copy and pasting a file name with % format characters due to a format string error.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1588?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1588?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1589 mean in the context of cybersecurity?

[Assistant] CVE-2011-1589


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1589.

[Assistant] Directory traversal vulnerability in Path.pm in Mojolicious before 1.16 allows remote attackers to read arbitrary files via a %2f..%2f (encoded slash dot dot slash) in a URI.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1589?

[Assistant]
[oss-security] 20110418 Re: CVE request: Mojolicious directory traversal vulnerability

[oss-security] 20110416 CVE request: Mojolicious directory traversal vulnerability

[oss-security] 20110418 CVE request: Mojolicious


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1589?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1590 mean in the context of cybersecurity?

[Assistant] CVE-2011-1590


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1590.

[Assistant] The X.509if dissector in Wireshark 1.2.x before 1.2.16 and 1.4.x before 1.4.5 does not properly initialize certain global variables, which allows remote attackers to cause a denial of service (application crash) via a crafted .pcap file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1590?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1590?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1591 mean in the context of cybersecurity?

[Assistant] CVE-2011-1591


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1591.

[Assistant] Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allows remote attackers to execute arbitrary code via a crafted .pcap file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1591?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1591?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1592 mean in the context of cybersecurity?

[Assistant] CVE-2011-1592


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1592.

[Assistant] The NFS dissector in epan/dissectors/packet-nfs.c in Wireshark 1.4.x before 1.4.5 on Windows uses an incorrect integer data type during decoding of SETCLIENTID calls, which allows remote attackers to cause a denial of service (application crash) via a crafted .pcap file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1592?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1592?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1593 mean in the context of cybersecurity?

[Assistant] CVE-2011-1593


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1593.

[Assistant] Multiple integer overflows in the next_pidmap function in kernel/pid.c in the Linux kernel before 2.6.38.4 allow local users to cause a denial of service (system crash) via a crafted (1) getdents or (2) readdir system call.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1593?

[Assistant]
[oss-security] 20110419 CVE request -- kernel: proc: signedness issue in next_pidmap()

[linux-kernel] 20110418 Re: Kernel panic (NULL ptr deref?) in find_ge_pid()/next_pidmap() (via sys_getdents or sys_readdir)

[oss-security] 20110420 Re: CVE request -- kernel: proc: signedness issue in next_pidmap()


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1593?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1594 mean in the context of cybersecurity?

[Assistant] CVE-2011-1594


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1594.

[Assistant] Open redirect vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN) Satellite, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url_bounce parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1594?

[Assistant] [Spacewalk-announce-list] 20111222 Spacewalk 1.6 has been released


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1594?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1595 mean in the context of cybersecurity?

[Assistant] CVE-2011-1595


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1595.

[Assistant] Directory traversal vulnerability in the disk_create function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a .. (dot dot) in a pathname.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1595?

[Assistant] [rdesktop-announce] 20110418 rdesktop 1.7.0 released


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1595?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1596 mean in the context of cybersecurity?

[Assistant] CVE-2011-1596


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1596.

[Assistant] N\A


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1596?

[Assistant] N\A


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1596?

[Assistant] REJECTED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1597 mean in the context of cybersecurity?

[Assistant] CVE-2011-1597


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1597.

[Assistant] OpenVAS Manager v2.0.3 allows plugin remote code execution.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1597?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1597?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1598 mean in the context of cybersecurity?

[Assistant] CVE-2011-1598


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1598.

[Assistant] The bcm_release function in net/can/bcm.c in the Linux kernel before 2.6.39-rc6 does not properly validate a socket data structure, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted release operation.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1598?

[Assistant]
[oss-security] 20110421 Re: CVE request: kernel: missing socket check in can/bcm release

[oss-security] 20110421 Re: CVE request: kernel: missing socket check in can/bcm release

[oss-security] 20110425 Re: CVE request: kernel: missing socket check in can/bcm release

[oss-security] 20110421 Re: CVE request: kernel: missing socket check in can/bcm release

[netdev] 20110420 Add missing socket check in can/bcm release.

[oss-security] 20110422 Re: CVE request: kernel: missing socket check in can/bcm release

[oss-security] 20110421 Re: CVE request: kernel: missing socket check in can/bcm release

[oss-security] 20110420 Re: CVE request: kernel: missing socket check in can/bcm release

[oss-security] 20110420 CVE request: kernel: missing socket check in can/bcm release


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1598?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1599 mean in the context of cybersecurity?

[Assistant] CVE-2011-1599


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1599.

[Assistant] manager.c in the Manager Interface in Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 does not properly check for the system privilege, which allows remote authenticated users to execute arbitrary commands via an Originate action that has an Async header in conjunction with an Application header.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1599?

[Assistant] [oss-security] 20110422 Re: CVE Request -- Asterisk Security Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1599?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1602 mean in the context of cybersecurity?

[Assistant] CVE-2011-1602


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1602.

[Assistant] The su utility on Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.0.3 allows local users to gain privileges via unspecified vectors, aka Bug ID CSCtf07426.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1602?

[Assistant] 20110601 Multiple Vulnerabilities in Cisco Unified IP Phones 7900 Series


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1602?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1603 mean in the context of cybersecurity?

[Assistant] CVE-2011-1603


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1603.

[Assistant] Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.2.1 allow local users to gain privileges via unspecified vectors, aka Bug ID CSCtn65815.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1603?

[Assistant] 20110601 Multiple Vulnerabilities in Cisco Unified IP Phones 7900 Series


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1603?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1604 mean in the context of cybersecurity?

[Assistant] CVE-2011-1604


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1604.

[Assistant] Memory leak in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5b)su3, 8.0 before 8.0(3a)su2, and 8.5 before 8.5(1) allows remote attackers to cause a denial of service (memory consumption and process failure) via a malformed SIP message, aka Bug ID CSCti42904.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1604?

[Assistant]
20110502 Re: ZDI-11-143: Cisco Unified CallManager xmldirectorylist.jsp SQL Injection Vulnerability

20110427 Multiple Vulnerabilities in Cisco Unified Communications Manager


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1604?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1605 mean in the context of cybersecurity?

[Assistant] CVE-2011-1605


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1605.

[Assistant] Unspecified vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su2, 7.x before 7.1(5b)su2, 8.0 before 8.0(3), and 8.5 before 8.5(1) allows remote attackers to cause a denial of service (process failure) via a malformed SIP message, aka Bug ID CSCth39586.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1605?

[Assistant]
20110502 Re: ZDI-11-143: Cisco Unified CallManager xmldirectorylist.jsp SQL Injection Vulnerability

20110427 Multiple Vulnerabilities in Cisco Unified Communications Manager


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1605?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1606 mean in the context of cybersecurity?

[Assistant] CVE-2011-1606


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1606.

[Assistant] Unspecified vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su2, 7.x before 7.1(5)su1, 8.0 before 8.0(3), and 8.5 before 8.5(1) allows remote attackers to cause a denial of service (process failure) via a malformed SIP message, aka Bug ID CSCtg62855.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1606?

[Assistant]
20110502 Re: ZDI-11-143: Cisco Unified CallManager xmldirectorylist.jsp SQL Injection Vulnerability

20110427 Multiple Vulnerabilities in Cisco Unified Communications Manager


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1606?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1607 mean in the context of cybersecurity?

[Assistant] CVE-2011-1607


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1607.

[Assistant] Directory traversal vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5b)su3, 8.0 before 8.0(3a)su1, and 8.5 before 8.5(1) allows remote authenticated users to upload files to arbitrary directories via a modified pathname in an upload request, aka Bug ID CSCti81603.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1607?

[Assistant]
20110502 Re: ZDI-11-143: Cisco Unified CallManager xmldirectorylist.jsp SQL Injection Vulnerability

20110427 Multiple Vulnerabilities in Cisco Unified Communications Manager


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1607?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1609 mean in the context of cybersecurity?

[Assistant] CVE-2011-1609


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1609.

[Assistant] SQL injection vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su2, 7.x before 7.1(5)su1, 8.0 before 8.0(3), and 8.5 before 8.5(1) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtg85647.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1609?

[Assistant]
20110502 Re: ZDI-11-143: Cisco Unified CallManager xmldirectorylist.jsp SQL Injection Vulnerability

20110427 Multiple Vulnerabilities in Cisco Unified Communications Manager


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1609?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1610 mean in the context of cybersecurity?

[Assistant] CVE-2011-1610


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1610.

[Assistant] Multiple SQL injection vulnerabilities in xmldirectorylist.jsp in the embedded Apache HTTP Server component in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5)su4, 8.0 before 8.0(3a)su2, and 8.5 before 8.5(1)su1 allow remote attackers to execute arbitrary SQL commands via the (1) f, (2) l, or (3) n parameter, aka Bug ID CSCtj42064.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1610?

[Assistant]
20110428 ZDI-11-143: Cisco Unified CallManager xmldirectorylist.jsp SQL Injection Vulnerability

20110502 Re: ZDI-11-143: Cisco Unified CallManager xmldirectorylist.jsp SQL Injection Vulnerability

20110427 Multiple Vulnerabilities in Cisco Unified Communications Manager


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1610?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1613 mean in the context of cybersecurity?

[Assistant] CVE-2011-1613


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1613.

[Assistant] Unspecified vulnerability in Cisco Wireless LAN Controller (WLC) software 6.0 before 6.0.200.0, 7.0 before 7.0.98.216, and 7.0.1xx before 7.0.112.0 allows remote attackers to cause a denial of service (device reload) via a sequence of ICMP packets, aka Bug ID CSCth74426.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1613?

[Assistant] 20110427 Cisco Wireless LAN Controllers Denial of Service Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1613?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1623 mean in the context of cybersecurity?

[Assistant] CVE-2011-1623


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1623.

[Assistant] Cisco Media Processing Software before 1.2 on Media Experience Engine (MXE) 5600 devices has a default root password, which makes it easier for context-dependent attackers to obtain access via (1) the local console, (2) an SSH session, or (3) a TELNET session, aka Bug ID CSCto77737.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1623?

[Assistant] 20110601 Default Credentials for root Account on the Cisco Media Experience Engine 5600


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1623?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1624 mean in the context of cybersecurity?

[Assistant] CVE-2011-1624