[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1001.

[Assistant] dexdump in Android SDK before 2.3 does not properly perform structural verification, which allows user-assisted remote attackers to cause a denial of service (dexdump crash) and possibly execute arbitrary code via a malformed APK or dex file that calls a method using more arguments than the number of register that have been declared for that method.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1001?

[Assistant] 20110328 Android SDK: Segmentation fault with dexdump / dexDecodeDebugInfo


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1001?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1002 mean in the context of cybersecurity?

[Assistant] CVE-2011-1002


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1002.

[Assistant] avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1002?

[Assistant]
[oss-security] 20110222 Re: [oss-security] CVE request: avahi daemon remote denial of service by sending NULL UDP

[oss-security] 20110218 CVE request: avahi daemon remote denial of service by sending NULL UDP

[oss-security] 20110218 Re: CVE request: avahi daemon remote denial of service by sending NULL UDP


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1002?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1003 mean in the context of cybersecurity?

[Assistant] CVE-2011-1003


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1003.

[Assistant] Double free vulnerability in the vba_read_project_strings function in vba_extract.c in libclamav in ClamAV before 0.97 might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications (VBA) data in a Microsoft Office document.  NOTE: some of these details are obtained from third party information.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1003?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1003?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1004 mean in the context of cybersecurity?

[Assistant] CVE-2011-1004


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1004.

[Assistant] The FileUtils.remove_entry_secure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, 1.8.8dev, 1.9.1 through 1.9.1-430, 1.9.2 through 1.9.2-136, and 1.9.3dev allows local users to delete arbitrary files via a symlink attack.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1004?

[Assistant]
[oss-security] 20110221 Re: CVE request: ruby: FileUtils is vulnerable to symlink race attacks + Exception methods can bypass $SAFE

[oss-security] 20110221 CVE request: ruby: FileUtils is vulnerable to symlink race attacks + Exception methods can bypass $SAFE


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1004?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1005 mean in the context of cybersecurity?

[Assistant] CVE-2011-1005


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1005.

[Assistant] The safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, and 1.8.8dev allows context-dependent attackers to modify strings via the Exception#to_s method, as demonstrated by changing an intended pathname.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1005?

[Assistant]
[oss-security] 20110221 Re: CVE request: ruby: FileUtils is vulnerable to symlink race attacks + Exception methods can bypass $SAFE

[oss-security] 20110221 CVE request: ruby: FileUtils is vulnerable to symlink race attacks + Exception methods can bypass $SAFE


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1005?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1006 mean in the context of cybersecurity?

[Assistant] CVE-2011-1006


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1006.

[Assistant] Heap-based buffer overflow in the parse_cgroup_spec function in tools/tools-common.c in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 allows local users to gain privileges via a crafted controller list on the command line of an application.  NOTE: it is not clear whether this issue crosses privilege boundaries.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1006?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1006?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1007 mean in the context of cybersecurity?

[Assistant] CVE-2011-1007


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1007.

[Assistant] Best Practical Solutions RT before 3.8.9 does not perform certain redirect actions upon a login, which allows physically proximate attackers to obtain credentials by resubmitting the login form via the back button of a web browser on an unattended workstation after an RT logout.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1007?

[Assistant]
[oss-security] 20110224 Re: Re: CVE Request -- rt3 -- two issues: 1) Improper management of form data resubmittion upon user log out 2) SQL queries information leak by user account transition

[oss-security] 20110223 Re: Re: CVE Request -- rt3 -- two issues: 1) Improper management of form data resubmittion upon user log out 2) SQL queries information leak by user account transition

[oss-security] 20110224 Re: Re: CVE Request -- rt3 -- two issues: 1) Improper management of form data resubmittion upon user log out 2) SQL queries information leak by user account transition

[oss-security] 20110222 Re: CVE Request -- rt3 -- two issues: 1) Improper management of form data resubmittion upon user log out 2) SQL queries information leak by user account transition

[oss-security] 20110224 Re: Re: CVE Request -- rt3 -- two issues: 1) Improper management of form data resubmittion upon user log out 2) SQL queries information leak by user account transition

[oss-security] 20110222 Re: CVE Request -- rt3 -- two issues: 1) Improper management of form data resubmittion upon user log out 2) SQL queries information leak by user account transition

[rt-announce] 20110216 RT 3.8.9 Released

[oss-security] 20110222 CVE Request -- rt3 -- two issues: 1) Improper management of form data resubmittion upon user log out 2) SQL queries information leak by user account transition

[mina-dev] 20210225 [jira] [Created] (FTPSERVER-500) Security vulnerability in common/lib/log4j-1.2.17.jar


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1007?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1008 mean in the context of cybersecurity?

[Assistant] CVE-2011-1008


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1008.

[Assistant] Scrips_Overlay.pm in Best Practical Solutions RT before 3.8.9 does not properly restrict access to a TicketObj in a Scrip after a CurrentUser change, which allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by custom-field value information, related to SQL logging.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1008?

[Assistant]
[oss-security] 20110224 Re: Re: CVE Request -- rt3 -- two issues: 1) Improper management of form data resubmittion upon user log out 2) SQL queries information leak by user account transition

[oss-security] 20110223 Re: Re: CVE Request -- rt3 -- two issues: 1) Improper management of form data resubmittion upon user log out 2) SQL queries information leak by user account transition

[oss-security] 20110224 Re: Re: CVE Request -- rt3 -- two issues: 1) Improper management of form data resubmittion upon user log out 2) SQL queries information leak by user account transition

[oss-security] 20110222 Re: CVE Request -- rt3 -- two issues: 1) Improper management of form data resubmittion upon user log out 2) SQL queries information leak by user account transition

[oss-security] 20110224 Re: Re: CVE Request -- rt3 -- two issues: 1) Improper management of form data resubmittion upon user log out 2) SQL queries information leak by user account transition

[oss-security] 20110222 Re: CVE Request -- rt3 -- two issues: 1) Improper management of form data resubmittion upon user log out 2) SQL queries information leak by user account transition

[rt-announce] 20110216 RT 3.8.9 Released

[oss-security] 20110222 CVE Request -- rt3 -- two issues: 1) Improper management of form data resubmittion upon user log out 2) SQL queries information leak by user account transition

[mina-dev] 20210225 [jira] [Created] (FTPSERVER-500) Security vulnerability in common/lib/log4j-1.2.17.jar


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1008?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1009 mean in the context of cybersecurity?

[Assistant] CVE-2011-1009


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1009.

[Assistant] Vanilla Forums 2.0.17.1 through 2.0.17.5 has XSS in /vanilla/index.php via the p parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1009?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1009?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1010 mean in the context of cybersecurity?

[Assistant] CVE-2011-1010


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1010.

[Assistant] Buffer overflow in the mac_partition function in fs/partitions/mac.c in the Linux kernel before 2.6.37.2 allows local users to cause a denial of service (panic) or possibly have unspecified other impact via a malformed Mac OS partition table.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1010?

[Assistant]
20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console

[oss-security] 20110222 CVE request: kernel: fs/partitions: validate map_count in mac partition tables

[oss-security] 20110222 Re: CVE request: kernel: fs/partitions: validate map_count in mac partition tables

20110223 [PRE-SA-2011-01] Multiple Linux kernel vulnerabilities in partition handling code of LDM and MAC partition tables

[oss-security] 20110222 Re: CVE request: kernel: fs/partitions: validate map_count in mac partition tables


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1010?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1011 mean in the context of cybersecurity?

[Assistant] CVE-2011-1011


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1011.

[Assistant] The seunshare_mount function in sandbox/seunshare.c in seunshare in certain Red Hat packages of policycoreutils 2.0.83 and earlier in Red Hat Enterprise Linux (RHEL) 6 and earlier, and Fedora 14 and earlier, mounts a new directory on top of /tmp without assigning root ownership and the sticky bit to this new directory, which allows local users to replace or delete arbitrary /tmp files, and consequently cause a denial of service or possibly gain privileges, by running a setuid application that relies on /tmp, as demonstrated by the ksu application.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1011?

[Assistant] 20110222 Developers should not rely on the stickiness of /tmp on Red Hat Linux


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1011?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1012 mean in the context of cybersecurity?

[Assistant] CVE-2011-1012


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1012.

[Assistant] The ldm_parse_vmdb function in fs/partitions/ldm.c in the Linux kernel before 2.6.38-rc6-git6 does not validate the VBLK size value in the VMDB structure in an LDM partition table, which allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted partition table.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1012?

[Assistant]
[oss-security] 20110223 CVE request: kernel: Corrupted LDM partition table issues

20110223 [PRE-SA-2011-01] Multiple Linux kernel vulnerabilities in partition handling code of LDM and MAC partition tables

[oss-security] 20110223 Re: CVE request: kernel: Corrupted LDM partition table issues

[mm-commits] 20110222 + ldm-corrupted-partition-table-can-cause-kernel-oops.patch added to -mm tree


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1012?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1013 mean in the context of cybersecurity?

[Assistant] CVE-2011-1013


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1013.

[Assistant] Integer signedness error in the drm_modeset_ctl function in (1) drivers/gpu/drm/drm_irq.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.38 and (2) sys/dev/pci/drm/drm_irq.c in the kernel in OpenBSD before 4.9 allows local users to trigger out-of-bounds write operations, and consequently cause a denial of service (system crash) or possibly have unspecified other impact, via a crafted num_crtcs (aka vb_num) structure member in an ioctl argument.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1013?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1013?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1014 mean in the context of cybersecurity?

[Assistant] CVE-2011-1014


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1014.

[Assistant] N\A


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1014?

[Assistant] N\A


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1014?

[Assistant] REJECTED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1015 mean in the context of cybersecurity?

[Assistant] CVE-2011-1015


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1015.

[Assistant] The is_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and 3.0 allows remote attackers to read script source code via an HTTP GET request that lacks a / (slash) character at the beginning of the URI.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1015?

[Assistant]
[oss-security] 20110224 Re: CVE request: Information disclosure in CGIHTTPServer from Python

[oss-security] 20110223 CVE request: Information disclosure in CGIHTTPServer from Python


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1015?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1016 mean in the context of cybersecurity?

[Assistant] CVE-2011-1016


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1016.

[Assistant] The Radeon GPU drivers in the Linux kernel before 2.6.38-rc5 do not properly validate data related to the AA resolve registers, which allows local users to write to arbitrary memory locations associated with (1) Video RAM (aka VRAM) or (2) the Graphics Translation Table (GTT) via crafted values.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1016?

[Assistant]
[oss-security] 20110224 CVE request: kernel: drm/radeon/kms: check AA resolve registers on r300

[oss-security] 20110224 Re: CVE request: kernel: drm/radeon/kms: check AA resolve registers on r300

[oss-security] 20110225 Re: CVE request: kernel: drm/radeon/kms: check AA resolve registers on r300


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1016?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1017 mean in the context of cybersecurity?

[Assistant] CVE-2011-1017


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1017.

[Assistant] Heap-based buffer overflow in the ldm_frag_add function in fs/partitions/ldm.c in the Linux kernel 2.6.37.2 and earlier might allow local users to gain privileges or obtain sensitive information via a crafted LDM partition table.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1017?

[Assistant]
[oss-security] 20110223 Re: CVE request: kernel: fs/partitions: Kernel heap overflow via corrupted LDM partition tables

[oss-security] 20110223 CVE request: kernel: fs/partitions: Kernel heap overflow via corrupted LDM partition tables

20110223 [PRE-SA-2011-01] Multiple Linux kernel vulnerabilities in partition handling code of LDM and MAC partition tables

[oss-security] 20110224 Re: CVE request: kernel: fs/partitions: Kernel heap overflow via corrupted LDM partition tables


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1017?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1018 mean in the context of cybersecurity?

[Assistant] CVE-2011-1018


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1018.

[Assistant] logwatch.pl in Logwatch 7.3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in a log file name, as demonstrated via a crafted username to a Samba server.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1018?

[Assistant]
[oss-security] 20110224 Re: CVE Request -- logwatch: Privilege escalation due improper sanitization of special characters in log file names

[oss-security] 20110224 CVE Request -- logwatch: Privilege escalation due improper sanitization of special characters in log file names

[Logwatch-devel] 20110216 Remote command execution issue with root privileges


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1018?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1019 mean in the context of cybersecurity?

[Assistant] CVE-2011-1019


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1019.

[Assistant] The dev_load function in net/core/dev.c in the Linux kernel before 2.6.38 allows local users to bypass an intended CAP_SYS_MODULE capability requirement and load arbitrary modules by leveraging the CAP_NET_ADMIN capability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1019?

[Assistant] [oss-security] 20110225 Re: CVE request: kernel: CAP_SYS_MODULE bypass via CAP_NET_ADMIN


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1019?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1020 mean in the context of cybersecurity?

[Assistant] CVE-2011-1020


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1020.

[Assistant] The proc filesystem implementation in the Linux kernel 2.6.37 and earlier does not restrict access to the /proc directory tree of a process after this process performs an exec of a setuid program, which allows local users to obtain sensitive information or cause a denial of service via open, lseek, read, and write system calls.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1020?

[Assistant]
[oss-security] 20110224 CVE request: kernel: /proc/$pid/ leaks contents across setuid exec

[linux-kernel] 20110208 Re: [SECURITY] /proc/$pid/ leaks contents across setuid exec

[oss-security] 20110225 Re: CVE request: kernel: /proc/$pid/ leaks contents across setuid exec

[linux-kernel] 20110207 Re: [SECURITY] /proc/$pid/ leaks contents across setuid exec

[linux-kernel] 20110209 Re: [SECURITY] /proc/$pid/ leaks contents across setuid exec

[linux-kernel] 20110207 [SECURITY] /proc/$pid/ leaks contents across setuid exec

[linux-kernel] 20110209 Re: [SECURITY] /proc/$pid/ leaks contents across setuid exec

[linux-kernel] 20110207 Re: [SECURITY] /proc/$pid/ leaks contents across setuid exec

[linux-kernel] 20110208 Re: [SECURITY] /proc/$pid/ leaks contents across setuid exec

20110122 Proc filesystem and SUID-Binaries


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1020?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1021 mean in the context of cybersecurity?

[Assistant] CVE-2011-1021


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1021.

[Assistant] drivers/acpi/debugfs.c in the Linux kernel before 3.0 allows local users to modify arbitrary kernel memory locations by leveraging root privileges to write to the /sys/kernel/debug/acpi/custom_method file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4347.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1021?

[Assistant] [oss-security] 20110225 Re: CVE request: kernel: /sys/kernel/debug/acpi/custom_method can bypass module restrictions


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1021?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1022 mean in the context of cybersecurity?

[Assistant] CVE-2011-1022


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1022.

[Assistant] The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted message.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1022?

[Assistant]
[oss-security] 20110225 Re: CVE request: libcgroup: Failure to verify netlink messages

[libcg-devel] 20101115 Fwd: libcgroup netlink

[oss-security] 20110225 Re: CVE request: libcgroup: Failure to verify netlink messages

[oss-security] 20110225 Re: CVE request: libcgroup: Failure to verify netlink messages

[oss-security] 20110224 CVE request: libcgroup: Failure to verify netlink messages

[oss-security] 20110225 Re: CVE request: libcgroup: Failure to verify netlink messages

[libcg-devel] 20110218 [PATCH 2/2] cgrulesengd: Ignore netlink messages that don't come from the kernel.


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1022?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1023 mean in the context of cybersecurity?

[Assistant] CVE-2011-1023


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1023.

[Assistant] The Reliable Datagram Sockets (RDS) subsystem in the Linux kernel before 2.6.38 does not properly handle congestion map updates, which allows local users to cause a denial of service (BUG_ON and system crash) via vectors involving (1) a loopback (aka loop) transmit operation or (2) an InfiniBand (aka ib) transmit operation.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1023?

[Assistant] [oss-security] 20110303 CVE-2011-1023 kernel: rds: prevent BUG_ON triggering on congestion map updates


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1023?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1024 mean in the context of cybersecurity?

[Assistant] CVE-2011-1024


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1024.

[Assistant] chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicy_forward_updates (aka authentication-failure forwarding) is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a slave server.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1024?

[Assistant]
[openldap-technical] 20100429 ppolicy master/slave issue

[openldap-announce] 20110212 OpenLDAP 2.4.24 available

[oss-security] 20110225 Re: CVE Request -- OpenLDAP -- two issues

[oss-security] 20110224 CVE Request -- OpenLDAP -- two issues


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1024?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1025 mean in the context of cybersecurity?

[Assistant] CVE-2011-1025


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1025.

[Assistant] bind.cpp in back-ndb in OpenLDAP 2.4.x before 2.4.24 does not require authentication for the root Distinguished Name (DN), which allows remote attackers to bypass intended access restrictions via an arbitrary password.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1025?

[Assistant]
[openldap-announce] 20110212 OpenLDAP 2.4.24 available

[oss-security] 20110225 Re: CVE Request -- OpenLDAP -- two issue

[oss-security] 20110224 CVE Request -- OpenLDAP -- two issues


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1025?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1026 mean in the context of cybersecurity?

[Assistant] CVE-2011-1026


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1026.

[Assistant] Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to hijack the authentication of administrators.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1026?

[Assistant]
20110527 [SECURITY] CVE-2011-1026: Apache Archiva Multiple CSRF vulnerability

20110531 [CVE-2011-1026] Apache Archiva Multiple CSRF vulnerabilities


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1026?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1027 mean in the context of cybersecurity?

[Assistant] CVE-2011-1027


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1027.

[Assistant] Off-by-one error in the convert_query_hexchar function in html.c in cgit.cgi in cgit before 0.8.3.5 allows remote attackers to cause a denial of service (infinite loop) via a string composed of a % (percent) character followed by invalid hex characters, as demonstrated by a %gg sequence.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1027?

[Assistant] [oss-security] 20110307 cgit convert_query_hexchar infinite loop (CVE-2011-1027)


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1027?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1028 mean in the context of cybersecurity?

[Assistant] CVE-2011-1028


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1028.

[Assistant] The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smarty_internal_compile_private_special_variable.php file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1028?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1028?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1029 mean in the context of cybersecurity?

[Assistant] CVE-2011-1029


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1029.

[Assistant] Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert (RTC) 2.0.0.x allows remote authenticated users to inject arbitrary web script or HTML via the name of a shared report.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1029?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1029?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1030 mean in the context of cybersecurity?

[Assistant] CVE-2011-1030


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1030.

[Assistant] Cross-site scripting (XSS) vulnerability in the Wikis component in IBM Lotus Connections 3.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "Confirm New Page scene."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1030?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1030?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1031 mean in the context of cybersecurity?

[Assistant] CVE-2011-1031


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1031.

[Assistant] The feh_unique_filename function in utils.c in feh 1.11.2 and earlier might allow local users to create arbitrary files via a symlink attack on a /tmp/feh_ temporary file, a different vulnerability than CVE-2011-0702.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1031?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1031?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1032 mean in the context of cybersecurity?

[Assistant] CVE-2011-1032


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1032.

[Assistant] IBM Lotus Connections 3.0, when IBM WebSphere Application Server 7.0.0.11 is used, does not properly restrict access to the internal login module, which has unspecified impact and attack vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1032?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1032?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1033 mean in the context of cybersecurity?

[Assistant] CVE-2011-1033


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1033.

[Assistant] Stack-based buffer overflow in oninit in IBM Informix Dynamic Server (IDS) 11.50 allows remote attackers to execute arbitrary code via crafted arguments in the USELASTCOMMITTED session environment option in a SQL SET ENVIRONMENT statement.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1033?

[Assistant] 20110207 ZDI-11-050: IBM Informix Dynamic Server SET ENVIRONMENT Remote Code Execution Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1033?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1034 mean in the context of cybersecurity?

[Assistant] CVE-2011-1034


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1034.

[Assistant] Cross-site scripting (XSS) vulnerability in the UI in IBM Rational Build Forge 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the mod parameter to the fullcontrol program.  NOTE: some of these details are obtained from third party information.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1034?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1034?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1035 mean in the context of cybersecurity?

[Assistant] CVE-2011-1035


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1035.

[Assistant] The password reset in PivotX before 2.2.4 allows remote attackers to modify the passwords of arbitrary users via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1035?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1035?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1036 mean in the context of cybersecurity?

[Assistant] CVE-2011-1036


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1036.

[Assistant] The XML Security Database Parser class in the XMLSecDB ActiveX control in the HIPSEngine component in the Management Server before 8.1.0.88, and the client before 1.6.450, in CA Host-Based Intrusion Prevention System (HIPS) 8.1, as used in CA Internet Security Suite (ISS) 2010, allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via vectors involving the SetXml and Save methods.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1036?

[Assistant]
20110223 ZDI-11-093: CA Internet Security Suite HIPS XML Security Database Parser Class Remote Code Execution Vulnerability

20110225 CA20110223-01: Security Notice for CA Host-Based Intrusion Prevention System


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1036?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1038 mean in the context of cybersecurity?

[Assistant] CVE-2011-1038


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1038.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in stconf.nsf in the server in IBM Lotus Sametime 8.0.1 allow remote attackers to inject arbitrary web script or HTML via (1) the messageString parameter in a WebMessage action or (2) the PATH_INFO.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1038?

[Assistant] 20110221 Domino Sametime Multiple Reflected Cross-Site Scripting


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1038?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1042 mean in the context of cybersecurity?

[Assistant] CVE-2011-1042


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1042.

[Assistant] Use-after-free vulnerability in flimflamd in flimflam in Google Chrome OS before 0.9.130.14 Beta allows user-assisted remote attackers to cause a denial of service (daemon crash) by providing the name of a hidden WiFi network that does not respond to connection attempts.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1042?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1042?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1044 mean in the context of cybersecurity?

[Assistant] CVE-2011-1044


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1044.

[Assistant] The ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel before 2.6.37 does not initialize a certain response buffer, which allows local users to obtain potentially sensitive information from kernel memory via vectors that cause this buffer to be only partially filled, a different vulnerability than CVE-2010-4649.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1044?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1044?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1045 mean in the context of cybersecurity?

[Assistant] CVE-2011-1045


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1045.

[Assistant] Unspecified vulnerability in the Rendition Engine (aka P8RE) 4.0.1 through 4.5.1 in IBM FileNet P8 Content Manager (CM) allows remote attackers to gain privileges via unknown vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1045?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1045?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1046 mean in the context of cybersecurity?

[Assistant] CVE-2011-1046


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1046.

[Assistant] IBM FileNet P8 Content Engine (aka P8CE) 4.0.1 through 5.0.0, as used in FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), does not require the PRIVILEGED_WRITE access role for all intended Object Store modifications, which allows remote attackers to change a privileged property of an object via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1046?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1046?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1047 mean in the context of cybersecurity?

[Assistant] CVE-2011-1047


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1047.

[Assistant] Multiple SQL injection vulnerabilities in VastHTML Forum Server (aka ForumPress) plugin 1.6.1 and 1.6.5 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) search_max parameter in a search action to index.php, which is not properly handled by wpf.class.php, (2) id parameter in an editpost action to index.php, which is not properly handled by wpf-post.php, or (3) topic parameter to feed.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1047?

[Assistant]
20110210 HTB22852: SQL Injection in WP Forum Server wordpress plugin

20110210 HTB22851: SQL Injection in WP Forum Server wordpress plugin


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1047?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1048 mean in the context of cybersecurity?

[Assistant] CVE-2011-1048


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1048.

[Assistant] SQL injection vulnerability in product.php in MihanTools 1.33 allows remote attackers to execute arbitrary SQL commands via the id parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1048?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1048?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1049 mean in the context of cybersecurity?

[Assistant] CVE-2011-1049


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1049.

[Assistant] Buffer overflow in the Mach-O input file loader in Hex-Rays IDA Pro 5.7 and 6.0 allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted Macho-O file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1049?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1049?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1050 mean in the context of cybersecurity?

[Assistant] CVE-2011-1050


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1050.

[Assistant] Unspecified vulnerability in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to "converson of string encodings" and "inconsistencies in the handling of UTF8 sequences by the user interface."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1050?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1050?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1051 mean in the context of cybersecurity?

[Assistant] CVE-2011-1051


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1051.

[Assistant] Integer overflow in the COFF/EPOC/EXPLOAD input file loaders in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to memory allocation.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1051?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1051?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1052 mean in the context of cybersecurity?

[Assistant] CVE-2011-1052


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1052.

[Assistant] Integer overflow in the PSX/GEOS input file loaders in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to memory allocation.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1052?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1052?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1053 mean in the context of cybersecurity?

[Assistant] CVE-2011-1053


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1053.

[Assistant] Unspecified vulnerability in the Mach-O input file loader in Hex-Rays IDA Pro 5.7 and 6.0 allows user-assisted remote attackers to cause a denial of service (out-of-memory exception and inability to analyze code) via a crafted Mach-O file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1053?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1053?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1054 mean in the context of cybersecurity?

[Assistant] CVE-2011-1054


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1054.

[Assistant] Unspecified vulnerability in the PEF input file loader in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1054?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1054?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1055 mean in the context of cybersecurity?

[Assistant] CVE-2011-1055


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1055.

[Assistant] SQL injection vulnerability in api/ice_media.cfc in Lingxia I.C.E CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the session.user_id parameter to media.cfm.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1055?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1055?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1056 mean in the context of cybersecurity?

[Assistant] CVE-2011-1056


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1056.

[Assistant] The installer for Metasploit Framework 3.5.1, when running on Windows, uses weak inherited permissions for the Metasploit installation directory, which allows local users to gain privileges by replacing critical files with a Trojan horse.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1056?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1056?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1057 mean in the context of cybersecurity?

[Assistant] CVE-2011-1057


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1057.

[Assistant] N\A


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1057?

[Assistant] N\A


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1057?

[Assistant] REJECTED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1058 mean in the context of cybersecurity?

[Assistant] CVE-2011-1058


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1058.

[Assistant] Cross-site scripting (XSS) vulnerability in the reStructuredText (rst) parser in parser/text_rst.py in MoinMoin before 1.9.3, when docutils is installed or when "format rst" is set, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the refuri attribute.  NOTE: some of these details are obtained from third party information.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1058?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1058?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1059 mean in the context of cybersecurity?

[Assistant] CVE-2011-1059


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1059.

[Assistant] Use-after-free vulnerability in WebCore in WebKit before r77705, as used in Google Chrome before 11.0.672.2 and other products, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors that entice a user to resubmit a form, related to improper handling of provisional items by the HistoryController component, aka rdar problem 8938557.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1059?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1059?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1060 mean in the context of cybersecurity?

[Assistant] CVE-2011-1060


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1060.

[Assistant] SQL injection vulnerability in the member function in classes/member.php in WSN Guest 1.24 allows remote attackers to execute arbitrary SQL commands via the wsnuser cookie to index.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1060?

[Assistant] 20110218 www.eVuln.com : "wsnuser" Cookie SQL Injection vulnerability in WSN Guest


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1060?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1061 mean in the context of cybersecurity?

[Assistant] CVE-2011-1061


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1061.

[Assistant] SQL injection vulnerability in memberlist.php in WSN Guest 1.24 allows remote attackers to execute arbitrary SQL commands via the time parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1061?

[Assistant] 20110221 www.eVuln.com : "time" SQL Injection vulnerability in WSN Guest


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1061?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1062 mean in the context of cybersecurity?

[Assistant] CVE-2011-1062


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1062.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in include/html/header.php in TaskFreak! 0.6.4 allow remote attackers to inject arbitrary web script or HTML via the (1) sContext, (2) sort, (3) dir, and (4) show parameters in a save action to index.php; the (5) dir and (6) show parameters to print_list.php; and the (7) HTTP referer header to rss.php.  NOTE: some of these details are obtained from third party information.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1062?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1062?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1063 mean in the context of cybersecurity?

[Assistant] CVE-2011-1063


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1063.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in Cherry-Design Photopad 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id or (2) data[title] parameters in an edit action to files.php, or (3) id parameter in a view action to gallery.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1063?

[Assistant] 20110215 HTB22828: Multiple XSS vulnerabilities in Photopad


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1063?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1064 mean in the context of cybersecurity?

[Assistant] CVE-2011-1064


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1064.

[Assistant] SQL injection vulnerability in member/list.php in qibosoft Qi Bo CMS 7 allows remote attackers to execute arbitrary SQL commands via the aidDB[] parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1064?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1064?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1065 mean in the context of cybersecurity?

[Assistant] CVE-2011-1065


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1065.

[Assistant] Multiple stack-based buffer overflows in the PIPIWebPlayer ActiveX control (PIWebPlayer.ocx) in PIPI Player 2.8.0.0 allow remote attackers to execute arbitrary code via long arguments to the (1) PlayURL or (2) PlayURLWithLocalPlayer methods.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1065?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1065?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1066 mean in the context of cybersecurity?

[Assistant] CVE-2011-1066


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1066.

[Assistant] Cross-site scripting (XSS) vulnerability in the Messaging module 6.x-2.x before 6.x-2.4 and 6.x-4.x before 6.x-4.0-beta8 for Drupal allows remote attackers with administer messaging permissions to inject arbitrary web script or HTML via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1066?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1066?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1067 mean in the context of cybersecurity?

[Assistant] CVE-2011-1067


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1067.

[Assistant] slapd (aka ns-slapd) in 389 Directory Server before 1.2.8.a2 does not properly manage the c_timelimit field of the connection table element, which allows remote attackers to cause a denial of service (daemon outage) via Simple Paged Results connections, as demonstrated by using multiple processes to replay TCP sessions, a different vulnerability than CVE-2011-0019.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1067?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1067?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1068 mean in the context of cybersecurity?

[Assistant] CVE-2011-1068


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1068.

[Assistant] Microsoft Windows Azure Software Development Kit (SDK) 1.3.x before 1.3.20121.1237, when Full IIS and a Web Role are used with an ASP.NET application, does not properly support the use of cookies for maintaining state, which allows remote attackers to obtain potentially sensitive information by reading an encrypted cookie and performing unspecified other steps.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1068?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1068?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1069 mean in the context of cybersecurity?

[Assistant] CVE-2011-1069


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1069.

[Assistant] PHPShop through 0.8.1 has XSS.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1069?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1069?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1070 mean in the context of cybersecurity?

[Assistant] CVE-2011-1070


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1070.

[Assistant] v86d before 0.1.10 do not verify if received netlink messages are sent by the kernel. This could allow unprivileged users to manipulate the video mode and potentially other consequences.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1070?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1070?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1071 mean in the context of cybersecurity?

[Assistant] CVE-2011-1071


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1071.

[Assistant] The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to execute arbitrary code or cause a denial of service (memory consumption) via a long UTF8 string that is used in an fnmatch call, aka a "stack extension attack," a related issue to CVE-2010-2898, CVE-2010-1917, and CVE-2007-4782, as originally reported for use of this library by Google Chrome.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1071?

[Assistant]
20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console

[oss-security] 20110228 cve request: eglibc memory corruption

[oss-security] 20110228 Re: cve request: eglibc memory corruption

[oss-security] 20110228 Re: cve request: eglibc memory corruption


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1071?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1072 mean in the context of cybersecurity?

[Assistant] CVE-2011-1072


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1072.

[Assistant] The installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the (1) download_dir, (2) cache_dir, (3) tmp_dir, and (4) pear-build-download directories, a different vulnerability than CVE-2007-2519.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1072?

[Assistant]
[oss-security] 20110228 Re: CVE Request: PEAR Installer 1.9.1 <= - Symlink Attack

[oss-security] 20110301 Re: CVE Request: PEAR Installer 1.9.1 <= - Symlink Attack

[oss-security] 20110301 Re: CVE Request: PEAR Installer 1.9.1 <= - Symlink Attack

[oss-security] 20110228 Re: CVE Request: PEAR Installer 1.9.1 <= - Symlink Attack

[oss-security] 20110301 Re: CVE Request: PEAR Installer 1.9.1 <= - Symlink Attack

[oss-security] 20110301 Re: CVE Request: PEAR Installer 1.9.1 <= - Symlink Attack

[oss-security] 20110228 CVE Request: PEAR Installer 1.9.1 <= - Symlink Attack

[oss-security] 20110301 Re: CVE Request: PEAR Installer 1.9.1 <= - Symlink Attack


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1072?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1073 mean in the context of cybersecurity?

[Assistant] CVE-2011-1073


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1073.

[Assistant] crontab.c in crontab in FreeBSD and Apple Mac OS X allows local users to (1) determine the existence of arbitrary files via a symlink attack on a /tmp/crontab.XXXXXXXXXX temporary file and (2) perform MD5 checksum comparisons on arbitrary pairs of files via two symlink attacks on /tmp/crontab.XXXXXXXXXX temporary files.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1073?

[Assistant]
[oss-security] 20110228 Re: CVE request: FreeBSD/OS X crontab information leakage

20110228 FreeBSD crontab information leakage

[oss-security] 20110228 CVE request: FreeBSD/OS X crontab information leakage

20110228 FreeBSD crontab information leakage


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1073?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1074 mean in the context of cybersecurity?

[Assistant] CVE-2011-1074


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1074.

[Assistant] crontab.c in crontab in FreeBSD allows local users to determine the existence of arbitrary directories via a command-line argument composed of a directory name concatenated with a directory traversal sequence that leads to the /etc/crontab pathname.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1074?

[Assistant]
[oss-security] 20110228 Re: CVE request: FreeBSD/OS X crontab information leakage

20110228 FreeBSD crontab information leakage

[oss-security] 20110228 CVE request: FreeBSD/OS X crontab information leakage

20110228 FreeBSD crontab information leakage


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1074?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1075 mean in the context of cybersecurity?

[Assistant] CVE-2011-1075


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1075.

[Assistant] FreeBSD's crontab calculates the MD5 sum of the previous and new cronjob to determine if any changes have been made before copying the new version in. In particular, it uses the MD5File() function, which takes a pathname as an argument, and is called with euid 0. A race condition in this process may lead to an arbitrary MD5 comparison regardless of the read permissions.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1075?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1075?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1076 mean in the context of cybersecurity?

[Assistant] CVE-2011-1076


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1076.

[Assistant] net/dns_resolver/dns_key.c in the Linux kernel before 2.6.38 allows remote DNS servers to cause a denial of service (NULL pointer dereference and OOPS) by not providing a valid response to a DNS query, as demonstrated by an erroneous grand.centrall.org query, which triggers improper handling of error data within a DNS resolver key.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1076?

[Assistant] [oss-security] 20110304 CVE-2011-1076 kernel: DNS: Fix a NULL pointer deref when trying to read an error key


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1076?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1077 mean in the context of cybersecurity?

[Assistant] CVE-2011-1077


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1077.

[Assistant] Multiple cross-site scripting (XSS) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1077?

[Assistant]
20110527 [SECURITY] CVE-2011-1077: Apache Archiva Multiple XSS vulnerability

20110531 [CVE-2011-1077] Apache Archiva Multiple XSS vulnerabilities


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1077?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1078 mean in the context of cybersecurity?

[Assistant] CVE-2011-1078


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1078.

[Assistant] The sco_sock_getsockopt_old function in net/bluetooth/sco.c in the Linux kernel before 2.6.39 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via the SCO_CONNINFO option.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1078?

[Assistant] [oss-security] 20110301 Re: CVE request: kernel: two bluetooth and one ebtables infoleaks/DoSes


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1078?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1079 mean in the context of cybersecurity?

[Assistant] CVE-2011-1079


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1079.

[Assistant] The bnep_sock_ioctl function in net/bluetooth/bnep/sock.c in the Linux kernel before 2.6.39 does not ensure that a certain device field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory, or cause a denial of service (BUG and system crash), via a BNEPCONNADD command.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1079?

[Assistant] [oss-security] 20110301 Re: CVE request: kernel: two bluetooth and one ebtables infoleaks/DoSes


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1079?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1080 mean in the context of cybersecurity?

[Assistant] CVE-2011-1080


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1080.

[Assistant] The do_replace function in net/bridge/netfilter/ebtables.c in the Linux kernel before 2.6.39 does not ensure that a certain name field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory by leveraging the CAP_NET_ADMIN capability to replace a table, and then reading a modprobe command line.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1080?

[Assistant] [oss-security] 20110301 Re: CVE request: kernel: two bluetooth and one ebtables infoleaks/DoSes


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1080?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1081 mean in the context of cybersecurity?

[Assistant] CVE-2011-1081


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1081.

[Assistant] modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service (daemon crash) via a relative Distinguished Name (DN) modification request (aka MODRDN operation) that contains an empty value for the OldDN field.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1081?

[Assistant]
[oss-security] 20110301 Re: CVE Request -- OpenLDAP -- two issues

[oss-security] 20110301 Re: CVE Request -- OpenLDAP -- two issues

[openldap-announce] 20110212 OpenLDAP 2.4.24 available

[oss-security] 20110228 Re: CVE Request -- OpenLDAP -- two issues

[oss-security] 20110228 Re: CVE Request -- OpenLDAP -- two issues


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1081?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1082 mean in the context of cybersecurity?

[Assistant] CVE-2011-1082


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1082.

[Assistant] fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data structures without properly checking for (1) closed loops or (2) deep chains, which allows local users to cause a denial of service (deadlock or stack memory consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1082?

[Assistant]
[oss-security] 20110302 Re: CVE request: kernel: Multiple DoS issues in epoll

[linux-kernel] 20110205 [PATCH] epoll: Prevent deadlock through unsafe ->f_op->poll() calls.

[oss-security] 20110301 CVE request: kernel: Multiple DoS issues in epoll


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1082?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1083 mean in the context of cybersecurity?

[Assistant] CVE-2011-1083


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1083.

[Assistant] The epoll implementation in the Linux kernel 2.6.37.2 and earlier does not properly traverse a tree of epoll file descriptors, which allows local users to cause a denial of service (CPU consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1083?

[Assistant]
[linux-kernel] 20110226 Re: [PATCH] optimize epoll loop detection

[oss-security] 20110302 Re: CVE request: kernel: Multiple DoS issues in epoll

[linux-kernel] 20110228 Re: [PATCH] optimize epoll loop detection

[linux-kernel] 20110225 [PATCH] optimize epoll loop detection

[oss-security] 20110301 CVE request: kernel: Multiple DoS issues in epoll


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1083?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1084 mean in the context of cybersecurity?

[Assistant] CVE-2011-1084


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1084.

[Assistant] A cross-site scripting (XSS) vulnerability in Smoothwall Express 3.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1084?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1084?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1085 mean in the context of cybersecurity?

[Assistant] CVE-2011-1085


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1085.

[Assistant] CSRF vulnerability in Smoothwall Express 3.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1085?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1085?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1086 mean in the context of cybersecurity?

[Assistant] CVE-2011-1086


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1086.

[Assistant] Cross-site scripting (XSS) vulnerability in admin/system.html in Openfiler 2.3 allows remote attackers to inject arbitrary web script or HTML via the device parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1086?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1086?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1087 mean in the context of cybersecurity?

[Assistant] CVE-2011-1087


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1087.

[Assistant] Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .mp3 file that is played during bookmark creation.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1087?

[Assistant]
[oss-security] 20110303 Re: CVE request: VLC bookmark buffer overflow

[oss-security] 20110303 Re: CVE request: VLC bookmark buffer overflow

[oss-security] 20110302 CVE request: VLC bookmark buffer overflow

[oss-security] 20110328 Re: CVE request: VLC bookmark buffer overflow


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1087?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1088 mean in the context of cybersecurity?

[Assistant] CVE-2011-1088


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1088.

[Assistant] Apache Tomcat 7.x before 7.0.10 does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to a web application.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1088?

[Assistant]
20110315 [SECURITY] CVE-2011-1088 Apache Tomcat security constraint bypass

[announce] 20110302 [SECURITY] Tomcat 7 ignores @ServletSecurity annotations

[users] 20110302 Re: @DenyAll does nothing

[users] 20110302 Re: @DenyAll does nothing


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1088?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1089 mean in the context of cybersecurity?

[Assistant] CVE-2011-1089


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1089.

[Assistant] The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does not report an error status for failed attempts to write to the /etc/mtab file, which makes it easier for local users to trigger corruption of this file, as demonstrated by writes from a process with a small RLIMIT_FSIZE value, a different vulnerability than CVE-2010-0296.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1089?

[Assistant]
[oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110303 Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110322 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110322 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110305 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110307 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110401 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110304 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110331 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110304 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110303 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110305 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110331 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE

[oss-security] 20110315 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1089?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1090 mean in the context of cybersecurity?

[Assistant] CVE-2011-1090


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1090.

[Assistant] The __nfs4_proc_set_acl function in fs/nfs/nfs4proc.c in the Linux kernel before 2.6.38 stores NFSv4 ACL data in memory that is allocated by kmalloc but not properly freed, which allows local users to cause a denial of service (panic) via a crafted attempt to set an ACL.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1090?

[Assistant]
[oss-security] 20110307 CVE request - kernel: nfs4: Ensure that ACL pages sent over NFS were not allocated from the slab

20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console

[oss-security] 20110307 Re: CVE request - kernel: nfs4: Ensure that ACL pages sent over NFS were not allocated from the slab


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1090?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1091 mean in the context of cybersecurity?

[Assistant] CVE-2011-1091


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1091.

[Assistant] libymsg.c in the Yahoo! protocol plugin in libpurple in Pidgin 2.6.0 through 2.7.10 allows (1) remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a malformed YMSG notification packet, and allows (2) remote Yahoo! servers to cause a denial of service (NULL pointer dereference and application crash) via a malformed YMSG SMS message.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1091?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1091?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1092 mean in the context of cybersecurity?

[Assistant] CVE-2011-1092


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1092.

[Assistant] Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (crash) and possibly read sensitive memory via a large third argument to the shmop_read function.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1092?

[Assistant]
[oss-security] 20110308 Re: CVE request, php's shm

[oss-security] 20110308 CVE request, php's shm


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1092?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1093 mean in the context of cybersecurity?

[Assistant] CVE-2011-1093


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1093.

[Assistant] The dccp_rcv_state_process function in net/dccp/input.c in the Datagram Congestion Control Protocol (DCCP) implementation in the Linux kernel before 2.6.38 does not properly handle packets for a CLOSED endpoint, which allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by sending a DCCP-Close packet followed by a DCCP-Reset packet.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1093?

[Assistant]
[oss-security] 20110308 CVE request: kernel: dccp: fix oops on Reset after close

[oss-security] 20110308 Re: CVE request: kernel: dccp: fix oops on Reset after close


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1093?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1094 mean in the context of cybersecurity?

[Assistant] CVE-2011-1094


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1094.

[Assistant] kio/kio/tcpslavebase.cpp in KDE KSSL in kdelibs before 4.6.1 does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a certificate issued by a legitimate Certification Authority for an IP address, a different vulnerability than CVE-2009-2702.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1094?

[Assistant]
[oss-security] 20110308 KDE SSL name check issue

[oss-security] 20110308 Re: KDE SSL name check issue


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1094?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1095 mean in the context of cybersecurity?

[Assistant] CVE-2011-1095


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1095.

[Assistant] locale/programs/locale.c in locale in the GNU C Library (aka glibc or libc6) before 2.13 does not quote its output, which might allow local users to gain privileges via a crafted localization environment variable, in conjunction with a program that executes a script that uses the eval function.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2011-1095?

[Assistant]
20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console

[oss-security] 20110308 glibc locale escaping issue

[oss-security] 20110308 Re: glibc locale escaping issue

[oss-security] 20110308 Re: glibc locale escaping issue


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1095?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2011-1096 mean in the context of cybersecurity?

[Assistant] CVE-2011-1096


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1096.

[Assistant] The W3C XML Encryption Standard, as used in the JBoss Web Services (JBossWS) component in JBoss Enterprise Portal Platform before 5.2.2 and other products, when using block ciphers in cipher-block chaining (CBC) mode, allows remote attackers to obtain plaintext data via a chosen-ciphertext attack on SOAP responses, aka "character encoding pattern attack."