{ "CVE_data_type" : "CVE", "CVE_data_format" : "MITRE", "CVE_data_version" : "4.0", "CVE_data_numberOfCVEs" : "6624", "CVE_data_timestamp" : "2020-09-12T08:32Z", "CVE_Items" : [ { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0001", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : ".net_framework", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-004", "name" : "MS13-004", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15814", "name" : "oval:org.mitre.oval:def:15814", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Windows Forms (aka WinForms) component in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 4, and 4.5 does not properly initialize memory arrays, which allows remote attackers to obtain sensitive information via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages a pointer to an unmanaged memory location, aka \"System Drawing Information Disclosure Vulnerability.\"" }, { "lang" : "en", "value" : "Per http://technet.microsoft.com/en-us/security/bulletin/ms13-004 Microsoft .NET Framework 3.0 Service Pack 2 is not vulnerable." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:1.0:sp3:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:media_center:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:tablet_pc:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-01-09T18:09Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0002", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : ".net_framework", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-008A.html", "name" : "TA13-008A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-004", "name" : "MS13-004", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3@%3Ccommits.santuario.apache.org%3E", "name" : "[santuario-commits] 20190823 svn commit: r1049214 - in /websites/production/santuario/content: cache/main.pageCache download.html index.html javaindex.html javareleasenotes.html secadv.data/CVE-2019-12400.asc secadv.html", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16343", "name" : "oval:org.mitre.oval:def:16343", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the Windows Forms (aka WinForms) component in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5 allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages improper counting of objects during a memory copy operation, aka \"WinForms Buffer Overflow Vulnerability.\"" }, { "lang" : "en", "value" : "Per http://technet.microsoft.com/en-us/security/bulletin/ms13-004 Microsoft .NET Framework 3.0 Service Pack 2 is not vulnerable." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:1.0:sp3:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:media_center:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:tablet_pc:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-01-09T18:09Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0003", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : ".net_framework", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-008A.html", "name" : "TA13-008A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-004", "name" : "MS13-004", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16381", "name" : "oval:org.mitre.oval:def:16381", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in a System.DirectoryServices.Protocols (S.DS.P) namespace method in Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5 allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages a missing array-size check during a memory copy operation, aka \"S.DS.P Buffer Overflow Vulnerability.\"" }, { "lang" : "en", "value" : "Per http://technet.microsoft.com/en-us/security/bulletin/ms13-004 Microsoft .NET Framework 3.0 Service Pack 2 is not vulnerable." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-01-09T18:09Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0004", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : ".net_framework", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-008A.html", "name" : "TA13-008A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-004", "name" : "MS13-004", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16339", "name" : "oval:org.mitre.oval:def:16339", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate the permissions of objects in memory, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka \"Double Construction Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:1.0:sp3:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:media_center:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:tablet_pc:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-01-09T18:09Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0005", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : ".net_framework", "version" : { "version_data" : [ { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" } ] } }, { "product_name" : "management_odata_iis_extension", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-008A.html", "name" : "TA13-008A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-007", "name" : "MS13-007", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16282", "name" : "oval:org.mitre.oval:def:16282", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The WCF Replace function in the Open Data (aka OData) protocol implementation in Microsoft .NET Framework 3.5, 3.5 SP1, 3.5.1, and 4, and the Management OData IIS Extension on Windows Server 2012, allows remote attackers to cause a denial of service (resource consumption and daemon restart) via crafted values in HTTP requests, aka \"Replace Denial of Service Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:3.5:sp1:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:sp2:professional:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:-:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:-:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:-:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:-:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:sp2:professional:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:management_odata_iis_extension:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-09T18:09Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0006", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "expression_web", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "2", "version_affected" : "=" } ] } }, { "product_name" : "groove_server", "version" : { "version_data" : [ { "version_value" : "2007", "version_affected" : "=" } ] } }, { "product_name" : "office", "version" : { "version_data" : [ { "version_value" : "2003", "version_affected" : "=" }, { "version_value" : "2007", "version_affected" : "=" } ] } }, { "product_name" : "office_compatibility_pack", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "sharepoint_server", "version" : { "version_data" : [ { "version_value" : "2007", "version_affected" : "=" } ] } }, { "product_name" : "word_viewer", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "xml_core_services", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_8", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_rt", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2003", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2012", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-189" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-008A.html", "name" : "TA13-008A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-002", "name" : "MS13-002", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16429", "name" : "oval:org.mitre.oval:def:16429", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka \"MSXML Integer Truncation Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:xml_core_services:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:xml_core_services:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:xml_core_services:6.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:-:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:xml_core_services:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:xml_core_services:6.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:xml_core_services:5.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:expression_web:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:expression_web:2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:groove_server:2007:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:groove_server:2007:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_compatibility_pack:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_compatibility_pack:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_server:2007:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_server:2007:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:word_viewer:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-01-09T18:09Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0007", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "expression_web", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "2", "version_affected" : "=" } ] } }, { "product_name" : "groove_server", "version" : { "version_data" : [ { "version_value" : "2007", "version_affected" : "=" } ] } }, { "product_name" : "office", "version" : { "version_data" : [ { "version_value" : "2003", "version_affected" : "=" }, { "version_value" : "2007", "version_affected" : "=" } ] } }, { "product_name" : "office_compatibility_pack", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "sharepoint_server", "version" : { "version_data" : [ { "version_value" : "2007", "version_affected" : "=" } ] } }, { "product_name" : "word_viewer", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "xml_core_services", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_8", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_rt", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2003", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2012", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-008A.html", "name" : "TA13-008A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-002", "name" : "MS13-002", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15458", "name" : "oval:org.mitre.oval:def:15458", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka \"MSXML XSLT Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:xml_core_services:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:xml_core_services:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:xml_core_services:6.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:-:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:xml_core_services:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:xml_core_services:6.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:xml_core_services:5.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:expression_web:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:expression_web:2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:groove_server:2007:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:groove_server:2007:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_compatibility_pack:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_compatibility_pack:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_server:2007:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_server:2007:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:word_viewer:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-01-09T18:09Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0008", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_8", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_rt", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2012", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.exploit-db.com/exploits/24485", "name" : "24485", "refsource" : "EXPLOIT-DB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/57135", "name" : "57135", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-008A.html", "name" : "TA13-008A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-005", "name" : "MS13-005", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16326", "name" : "oval:org.mitre.oval:def:16326", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle window broadcast messages, which allows local users to gain privileges via a crafted application, aka \"Win32k Improper Message Handling Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:sp1:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-09T18:09Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0009", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "system_center_operations_manager", "version" : { "version_data" : [ { "version_value" : "2007", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-008A.html", "name" : "TA13-008A", "refsource" : "CERT", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-003", "name" : "MS13-003", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15760", "name" : "oval:org.mitre.oval:def:15760", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka \"System Center Operations Manager Web Console XSS Vulnerability,\" a different vulnerability than CVE-2013-0010." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:system_center_operations_manager:2007:r2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:system_center_operations_manager:2007:sp1:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-01-09T18:09Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0010", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "system_center_operations_manager", "version" : { "version_data" : [ { "version_value" : "2007", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-008A.html", "name" : "TA13-008A", "refsource" : "CERT", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-003", "name" : "MS13-003", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16232", "name" : "oval:org.mitre.oval:def:16232", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka \"System Center Operations Manager Web Console XSS Vulnerability,\" a different vulnerability than CVE-2013-0009." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:system_center_operations_manager:2007:r2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:system_center_operations_manager:2007:sp1:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-01-09T18:09Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0011", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-008A.html", "name" : "TA13-008A", "refsource" : "CERT", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-001", "name" : "MS13-001", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16357", "name" : "oval:org.mitre.oval:def:16357", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Print Spooler in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted print job, aka \"Windows Print Spooler Components Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:sp1:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-09T18:09Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0012", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0013", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_8", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_rt", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2012", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-008A.html", "name" : "TA13-008A", "refsource" : "CERT", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-006", "name" : "MS13-006", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16273", "name" : "oval:org.mitre.oval:def:16273", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The SSL provider component in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle encrypted packets, which allows man-in-the-middle attackers to conduct SSLv2 downgrade attacks against (1) SSLv3 sessions or (2) TLS sessions by intercepting handshakes and injecting content, aka \"Microsoft SSL Version 3 and TLS Protocol Security Feature Bypass Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:sp1:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-09T18:09Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0014", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0015", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "internet_explorer", "version" : { "version_data" : [ { "version_value" : "6", "version_affected" : "=" }, { "version_value" : "7", "version_affected" : "=" }, { "version_value" : "8", "version_affected" : "=" }, { "version_value" : "9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-043B.html", "name" : "TA13-043B", "refsource" : "CERT", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009", "name" : "MS13-009", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16371", "name" : "oval:org.mitre.oval:def:16371", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft Internet Explorer 6 through 9 does not properly perform auto-selection of the Shift JIS encoding, which allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site that triggers cross-domain scrolling events, aka \"Shift JIS Character Encoding Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-02-13T12:04Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0016", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0017", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0018", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "internet_explorer", "version" : { "version_data" : [ { "version_value" : "6", "version_affected" : "=" }, { "version_value" : "7", "version_affected" : "=" }, { "version_value" : "8", "version_affected" : "=" }, { "version_value" : "9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-043B.html", "name" : "TA13-043B", "refsource" : "CERT", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009", "name" : "MS13-009", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16438", "name" : "oval:org.mitre.oval:def:16438", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer SetCapture Use After Free Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-02-13T12:04Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0019", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "internet_explorer", "version" : { "version_data" : [ { "version_value" : "7", "version_affected" : "=" }, { "version_value" : "8", "version_affected" : "=" }, { "version_value" : "9", "version_affected" : "=" }, { "version_value" : "10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blog.skylined.nl/20161202001.html", "name" : "http://blog.skylined.nl/20161202001.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-043B.html", "name" : "TA13-043B", "refsource" : "CERT", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009", "name" : "MS13-009", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16465", "name" : "oval:org.mitre.oval:def:16465", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://www.exploit-db.com/exploits/40879/", "name" : "40879", "refsource" : "EXPLOIT-DB", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer COmWindowProxy Use After Free Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-02-13T12:04Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0020", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "internet_explorer", "version" : { "version_data" : [ { "version_value" : "9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-043B.html", "name" : "TA13-043B", "refsource" : "CERT", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009", "name" : "MS13-009", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15875", "name" : "oval:org.mitre.oval:def:15875", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer CMarkup Use After Free Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-02-13T12:04Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0021", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "internet_explorer", "version" : { "version_data" : [ { "version_value" : "6", "version_affected" : "=" }, { "version_value" : "7", "version_affected" : "=" }, { "version_value" : "8", "version_affected" : "=" }, { "version_value" : "9", "version_affected" : "=" }, { "version_value" : "10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-043B.html", "name" : "TA13-043B", "refsource" : "CERT", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009", "name" : "MS13-009", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16483", "name" : "oval:org.mitre.oval:def:16483", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer vtable Use After Free Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-02-13T12:04Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0022", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "internet_explorer", "version" : { "version_data" : [ { "version_value" : "9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-043B.html", "name" : "TA13-043B", "refsource" : "CERT", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009", "name" : "MS13-009", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16069", "name" : "oval:org.mitre.oval:def:16069", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer LsGetTrailInfo Use After Free Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-02-13T12:04Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0023", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "internet_explorer", "version" : { "version_data" : [ { "version_value" : "9", "version_affected" : "=" }, { "version_value" : "10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-043B.html", "name" : "TA13-043B", "refsource" : "CERT", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009", "name" : "MS13-009", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16470", "name" : "oval:org.mitre.oval:def:16470", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer CDispNode Use After Free Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-02-13T12:04Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0024", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "internet_explorer", "version" : { "version_data" : [ { "version_value" : "8", "version_affected" : "=" }, { "version_value" : "9", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-043B.html", "name" : "TA13-043B", "refsource" : "CERT", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009", "name" : "MS13-009", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16126", "name" : "oval:org.mitre.oval:def:16126", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer pasteHTML Use After Free Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-02-13T12:04Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0025", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "internet_explorer", "version" : { "version_data" : [ { "version_value" : "8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-043B.html", "name" : "TA13-043B", "refsource" : "CERT", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009", "name" : "MS13-009", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16294", "name" : "oval:org.mitre.oval:def:16294", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer SLayoutRun Use After Free Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-02-13T12:04Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0026", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "internet_explorer", "version" : { "version_data" : [ { "version_value" : "9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-043B.html", "name" : "TA13-043B", "refsource" : "CERT", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009", "name" : "MS13-009", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16472", "name" : "oval:org.mitre.oval:def:16472", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer InsertElement Use After Free Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-02-13T12:04Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0027", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "internet_explorer", "version" : { "version_data" : [ { "version_value" : "6", "version_affected" : "=" }, { "version_value" : "7", "version_affected" : "=" }, { "version_value" : "8", "version_affected" : "=" }, { "version_value" : "9", "version_affected" : "=" }, { "version_value" : "10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-043B.html", "name" : "TA13-043B", "refsource" : "CERT", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009", "name" : "MS13-009", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16360", "name" : "oval:org.mitre.oval:def:16360", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer CPasteCommand Use After Free Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-02-13T12:04Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0028", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "internet_explorer", "version" : { "version_data" : [ { "version_value" : "6", "version_affected" : "=" }, { "version_value" : "7", "version_affected" : "=" }, { "version_value" : "8", "version_affected" : "=" }, { "version_value" : "9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-043B.html", "name" : "TA13-043B", "refsource" : "CERT", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009", "name" : "MS13-009", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16249", "name" : "oval:org.mitre.oval:def:16249", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer CObjectElement Use After Free Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-02-13T12:04Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0029", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "internet_explorer", "version" : { "version_data" : [ { "version_value" : "6", "version_affected" : "=" }, { "version_value" : "7", "version_affected" : "=" }, { "version_value" : "8", "version_affected" : "=" }, { "version_value" : "9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-043B.html", "name" : "TA13-043B", "refsource" : "CERT", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009", "name" : "MS13-009", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16245", "name" : "oval:org.mitre.oval:def:16245", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer CHTML Use After Free Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-02-13T12:04Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0030", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "internet_explorer", "version" : { "version_data" : [ { "version_value" : "6", "version_affected" : "=" }, { "version_value" : "7", "version_affected" : "=" }, { "version_value" : "8", "version_affected" : "=" }, { "version_value" : "9", "version_affected" : "=" }, { "version_value" : "10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-043B.html", "name" : "TA13-043B", "refsource" : "CERT", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-010", "name" : "MS13-010", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16175", "name" : "oval:org.mitre.oval:def:16175", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Vector Markup Language (VML) implementation in Microsoft Internet Explorer 6 through 10 does not properly allocate buffers, which allows remote attackers to execute arbitrary code via a crafted web site, aka \"VML Memory Corruption Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-13T12:04Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0031", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0032", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0033", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0034", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0035", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0036", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0037", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0038", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0039", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0040", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0041", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0042", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0043", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0044", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0045", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0046", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0047", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0048", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0049", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0050", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0051", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0052", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0053", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0054", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0055", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0056", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0057", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0058", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0059", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0060", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0061", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0062", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0063", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0064", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0065", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0066", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0067", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0068", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0069", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0070", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0071", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0072", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0073", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : ".net_framework", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-043B.html", "name" : "TA13-043B", "refsource" : "CERT", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-015", "name" : "MS13-015", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16475", "name" : "oval:org.mitre.oval:def:16475", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Windows Forms (aka WinForms) component in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly restrict the privileges of a callback function during object creation, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka \"WinForms Callback Elevation Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:-:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:-:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:-:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:-:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:sp2:professional:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-13T12:04Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0074", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "silverlight", "version" : { "version_data" : [ { "version_value" : "5.0.60401.0", "version_affected" : "=" }, { "version_value" : "5.0.60818.0", "version_affected" : "=" }, { "version_value" : "5.0.61118.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/ncas/alerts/TA13-071A", "name" : "TA13-071A", "refsource" : "CERT", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-022", "name" : "MS13-022", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16516", "name" : "oval:org.mitre.oval:def:16516", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16565", "name" : "oval:org.mitre.oval:def:16565", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbitrary code via a crafted Silverlight application, aka \"Silverlight Double Dereference Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:silverlight:5.0.60401.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:silverlight:5.0.60818.0:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:silverlight:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.0.61118.0" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:silverlight:5.0.60401.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:silverlight:5.0.60818.0:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:silverlight:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.0.61118.0" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:silverlight:5.0.60401.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:silverlight:5.0.60818.0:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:silverlight:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.0.61118.0" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-13T00:55Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0075", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_8", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_rt", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2012", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-043B.html", "name" : "TA13-043B", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-018", "name" : "MS13-018", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16373", "name" : "oval:org.mitre.oval:def:16373", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (reboot) via a crafted packet that terminates a TCP connection, aka \"TCP FIN WAIT Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:sp1:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-13T12:04Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0076", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-043B.html", "name" : "TA13-043B", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-019", "name" : "MS13-019", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16478", "name" : "oval:org.mitre.oval:def:16478", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka \"Reference Count Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:sp1:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-13T12:04Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0077", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_server_2003", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-043B.html", "name" : "TA13-043B", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-011", "name" : "MS13-011", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15873", "name" : "oval:org.mitre.oval:def:15873", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Quartz.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to execute arbitrary code via crafted media content in (1) a media file, (2) a media stream, or (3) a Microsoft Office document, aka \"Media Decompression Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-02-13T12:04Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0078", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_defender", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/ncas/alerts/TA13-100A", "name" : "TA13-100A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-034", "name" : "MS13-034", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16293", "name" : "oval:org.mitre.oval:def:16293", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Microsoft Antimalware Client in Windows Defender on Windows 8 and Windows RT uses an incorrect pathname for MsMpEng.exe, which allows local users to gain privileges via a crafted application, aka \"Microsoft Antimalware Improper Pathname Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:windows_defender:*:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-09T22:55Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0079", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "office_filter_pack", "version" : { "version_data" : [ { "version_value" : "2010", "version_affected" : "=" } ] } }, { "product_name" : "visio", "version" : { "version_data" : [ { "version_value" : "2010", "version_affected" : "=" } ] } }, { "product_name" : "visio_viewer", "version" : { "version_data" : [ { "version_value" : "2010", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/851777", "name" : "VU#851777", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.us-cert.gov/ncas/alerts/TA13-071A", "name" : "TA13-071A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1024", "name" : "20130312 Microsoft Office Visio Viewer ActiveX Type Confusion Vulnerability", "refsource" : "IDEFENSE", "tags" : [ ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-023", "name" : "MS13-023", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16300", "name" : "oval:org.mitre.oval:def:16300", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file that triggers incorrect memory allocation, aka \"Visio Viewer Tree Object Type Confusion Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_filter_pack:2010:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_filter_pack:2010:sp1:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:visio:2010:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:visio:2010:sp1:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:visio_viewer:2010:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:visio_viewer:2010:sp1:x86:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-13T00:55Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0080", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "sharepoint_foundation", "version" : { "version_data" : [ { "version_value" : "2010", "version_affected" : "=" } ] } }, { "product_name" : "sharepoint_server", "version" : { "version_data" : [ { "version_value" : "2010", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/ncas/alerts/TA13-071A", "name" : "TA13-071A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-024", "name" : "MS13-024", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16596", "name" : "oval:org.mitre.oval:def:16596", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allow remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka \"Callback Function Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_foundation:2010:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_server:2010:sp1:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-13T00:55Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0081", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "sharepoint_foundation", "version" : { "version_data" : [ { "version_value" : "2010", "version_affected" : "=" }, { "version_value" : "2013", "version_affected" : "=" } ] } }, { "product_name" : "sharepoint_portal_server", "version" : { "version_data" : [ { "version_value" : "2003", "version_affected" : "=" } ] } }, { "product_name" : "sharepoint_server", "version" : { "version_data" : [ { "version_value" : "2007", "version_affected" : "=" }, { "version_value" : "2010", "version_affected" : "=" }, { "version_value" : "2013", "version_affected" : "=" } ] } }, { "product_name" : "sharepoint_services", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/ncas/alerts/TA13-253A", "name" : "TA13-253A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-067", "name" : "MS13-067", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19036", "name" : "oval:org.mitre.oval:def:19036", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft SharePoint Portal Server 2003 SP3 and SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 do not properly process unassigned workflows, which allows remote attackers to cause a denial of service (W3WP process hang) via a crafted URL, aka \"SharePoint Denial of Service Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_foundation:2010:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_foundation:2010:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_foundation:2013:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_portal_server:2003:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_server:2007:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_server:2010:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_server:2013:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_services:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_services:3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-09-11T14:03Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0082", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "office", "version" : { "version_data" : [ { "version_value" : "2003", "version_affected" : "=" }, { "version_value" : "2007", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/ncas/alerts/TA13-317A", "name" : "TA13-317A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-091", "name" : "MS13-091", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19178", "name" : "oval:org.mitre.oval:def:19178", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft Office 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code via a crafted WordPerfect document (.wpd) file, aka \"WPD File Format Memory Corruption Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-11-13T00:55Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0083", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "sharepoint_foundation", "version" : { "version_data" : [ { "version_value" : "2010", "version_affected" : "=" } ] } }, { "product_name" : "sharepoint_server", "version" : { "version_data" : [ { "version_value" : "2010", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/ncas/alerts/TA13-071A", "name" : "TA13-071A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-024", "name" : "MS13-024", "refsource" : "MS", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via crafted content, leading to administrative command execution, aka \"SharePoint XSS Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_foundation:2010:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_server:2010:sp1:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-13T00:55Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0084", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "sharepoint_foundation", "version" : { "version_data" : [ { "version_value" : "2010", "version_affected" : "=" } ] } }, { "product_name" : "sharepoint_server", "version" : { "version_data" : [ { "version_value" : "2010", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/ncas/alerts/TA13-071A", "name" : "TA13-071A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-024", "name" : "MS13-024", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16445", "name" : "oval:org.mitre.oval:def:16445", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka \"SharePoint Directory Traversal Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_foundation:2010:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_server:2010:sp1:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-13T00:55Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0085", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "sharepoint_foundation", "version" : { "version_data" : [ { "version_value" : "2010", "version_affected" : "=" } ] } }, { "product_name" : "sharepoint_server", "version" : { "version_data" : [ { "version_value" : "2010", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/ncas/alerts/TA13-071A", "name" : "TA13-071A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-024", "name" : "MS13-024", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16414", "name" : "oval:org.mitre.oval:def:16414", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to cause a denial of service (W3WP process crash and site outage) via a crafted URL, aka \"Buffer Overflow Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_foundation:2010:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_server:2010:sp1:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-13T00:55Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0086", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "sharepoint_foundation", "version" : { "version_data" : [ { "version_value" : "2010", "version_affected" : "=" } ] } }, { "product_name" : "sharepoint_server", "version" : { "version_data" : [ { "version_value" : "2010", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/ncas/alerts/TA13-071A", "name" : "TA13-071A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-025", "name" : "MS13-025", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16539", "name" : "oval:org.mitre.oval:def:16539", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft OneNote 2010 SP1 does not properly determine buffer sizes during memory allocation, which allows remote attackers to obtain sensitive information via a crafted OneNote file, aka \"Buffer Size Validation Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_foundation:2010:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_server:2010:sp1:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-13T00:55Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0087", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "internet_explorer", "version" : { "version_data" : [ { "version_value" : "6", "version_affected" : "=" }, { "version_value" : "7", "version_affected" : "=" }, { "version_value" : "8", "version_affected" : "=" }, { "version_value" : "9", "version_affected" : "=" }, { "version_value" : "10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/ncas/alerts/TA13-071A", "name" : "TA13-071A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-021", "name" : "MS13-021", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16583", "name" : "oval:org.mitre.oval:def:16583", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer OnResize Use After Free Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-13T00:55Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0088", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "internet_explorer", "version" : { "version_data" : [ { "version_value" : "6", "version_affected" : "=" }, { "version_value" : "7", "version_affected" : "=" }, { "version_value" : "8", "version_affected" : "=" }, { "version_value" : "9", "version_affected" : "=" }, { "version_value" : "10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/ncas/alerts/TA13-071A", "name" : "TA13-071A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-021", "name" : "MS13-021", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16386", "name" : "oval:org.mitre.oval:def:16386", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer saveHistory Use After Free Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-13T00:55Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0089", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "internet_explorer", "version" : { "version_data" : [ { "version_value" : "6", "version_affected" : "=" }, { "version_value" : "7", "version_affected" : "=" }, { "version_value" : "8", "version_affected" : "=" }, { "version_value" : "9", "version_affected" : "=" }, { "version_value" : "10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/ncas/alerts/TA13-071A", "name" : "TA13-071A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-021", "name" : "MS13-021", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16587", "name" : "oval:org.mitre.oval:def:16587", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer CMarkupBehaviorContext Use After Free Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-13T00:55Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0090", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "internet_explorer", "version" : { "version_data" : [ { "version_value" : "6", "version_affected" : "=" }, { "version_value" : "7", "version_affected" : "=" }, { "version_value" : "8", "version_affected" : "=" }, { "version_value" : "9", "version_affected" : "=" }, { "version_value" : "10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blog.skylined.nl/20161216001.html", "name" : "http://blog.skylined.nl/20161216001.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://packetstormsecurity.com/files/140186/Microsoft-Internet-Explorer-9-IEFRAME-CView-EnsureSize-Use-After-Free.html", "name" : "http://packetstormsecurity.com/files/140186/Microsoft-Internet-Explorer-9-IEFRAME-CView-EnsureSize-Use-After-Free.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/ncas/alerts/TA13-071A", "name" : "TA13-071A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-021", "name" : "MS13-021", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16049", "name" : "oval:org.mitre.oval:def:16049", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://www.exploit-db.com/exploits/40935/", "name" : "40935", "refsource" : "EXPLOIT-DB", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer CCaret Use After Free Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-13T00:55Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0091", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "internet_explorer", "version" : { "version_data" : [ { "version_value" : "8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/ncas/alerts/TA13-071A", "name" : "TA13-071A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-021", "name" : "MS13-021", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16526", "name" : "oval:org.mitre.oval:def:16526", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer CElement Use After Free Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-13T00:55Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0092", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "internet_explorer", "version" : { "version_data" : [ { "version_value" : "6", "version_affected" : "=" }, { "version_value" : "7", "version_affected" : "=" }, { "version_value" : "8", "version_affected" : "=" }, { "version_value" : "9", "version_affected" : "=" }, { "version_value" : "10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/ncas/alerts/TA13-071A", "name" : "TA13-071A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-021", "name" : "MS13-021", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16324", "name" : "oval:org.mitre.oval:def:16324", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer GetMarkupPtr Use After Free Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-13T00:55Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0093", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "internet_explorer", "version" : { "version_data" : [ { "version_value" : "6", "version_affected" : "=" }, { "version_value" : "7", "version_affected" : "=" }, { "version_value" : "8", "version_affected" : "=" }, { "version_value" : "9", "version_affected" : "=" }, { "version_value" : "10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/ncas/alerts/TA13-071A", "name" : "TA13-071A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-021", "name" : "MS13-021", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16239", "name" : "oval:org.mitre.oval:def:16239", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer onBeforeCopy Use After Free Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-13T00:55Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0094", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "internet_explorer", "version" : { "version_data" : [ { "version_value" : "6", "version_affected" : "=" }, { "version_value" : "7", "version_affected" : "=" }, { "version_value" : "8", "version_affected" : "=" }, { "version_value" : "9", "version_affected" : "=" }, { "version_value" : "10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/ncas/alerts/TA13-071A", "name" : "TA13-071A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-021", "name" : "MS13-021", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16634", "name" : "oval:org.mitre.oval:def:16634", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer removeChild Use After Free Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-13T00:55Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0095", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "office", "version" : { "version_data" : [ { "version_value" : "2008", "version_affected" : "=" }, { "version_value" : "2011", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/ncas/alerts/TA13-071A", "name" : "TA13-071A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-026", "name" : "MS13-026", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16082", "name" : "oval:org.mitre.oval:def:16082", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Outlook in Microsoft Office for Mac 2008 before 12.3.6 and Office for Mac 2011 before 14.3.2 allows remote attackers to trigger access to a remote URL and consequently confirm the rendering of an HTML e-mail message by including unspecified HTML5 elements and leveraging the installation of a WebKit browser on the victim's machine, aka \"Unintended Content Loading Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2011:*:mac:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-13T00:55Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0096", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_essentials", "version" : { "version_data" : [ { "version_value" : "2011", "version_affected" : "=" }, { "version_value" : "2012", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/ncas/alerts/TA13-134A", "name" : "TA13-134A", "refsource" : "CERT", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-045", "name" : "MS13-045", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16204", "name" : "oval:org.mitre.oval:def:16204", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Writer in Microsoft Windows Essentials 2011 and 2012 allows remote attackers to bypass proxy settings and overwrite arbitrary files via crafted URL parameters, aka \"Windows Essentials Improper URI Handling Vulnerability.\"" }, { "lang" : "en", "value" : "Per: http://technet.microsoft.com/en-us/security/bulletin/ms13-045\r\n\r\n'There is no update available for Windows Essentials 2011. See update FAQ for details.'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:windows_essentials:2011:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:windows_essentials:2012:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-05-15T03:36Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0097", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0098", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0099", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0100", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0107", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "foxitsoftware", "product" : { "product_data" : [ { "product_name" : "foxit_advanced_pdf_editor", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/275219", "name" : "VU#275219", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack-based buffer overflow in Foxit Advanced PDF Editor 3 before 3.04 might allow remote attackers to execute arbitrary code via a crafted document containing instructions that reconstruct a certain security cookie." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:foxitsoftware:foxit_advanced_pdf_editor:3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.6 }, "severity" : "HIGH", "exploitabilityScore" : 4.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-01-26T21:55Z", "lastModifiedDate" : "2013-01-30T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0108", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "honeywell", "product" : { "product_data" : [ { "product_name" : "comfortpoint_open_manager_station", "version" : { "version_data" : [ { "version_value" : "r100", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_buildings_integrator", "version" : { "version_data" : [ { "version_value" : "r310", "version_affected" : "=" }, { "version_value" : "r400.2", "version_affected" : "=" }, { "version_value" : "r410.1", "version_affected" : "=" }, { "version_value" : "r410.2", "version_affected" : "=" } ] } }, { "product_name" : "symmetre", "version" : { "version_data" : [ { "version_value" : "r310", "version_affected" : "=" }, { "version_value" : "r400.2", "version_affected" : "=" }, { "version_value" : "r410.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://ics-cert.us-cert.gov/pdf/ICSA-13-053-02.pdf", "name" : "http://ics-cert.us-cert.gov/pdf/ICSA-13-053-02.pdf", "refsource" : "MISC", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager (aka CPO-M) Station R100; and HMIWeb Browser client packages allows remote attackers to execute arbitrary code via a crafted HTML document." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:honeywell:enterprise_buildings_integrator:r310:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:honeywell:enterprise_buildings_integrator:r400.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:honeywell:enterprise_buildings_integrator:r410.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:honeywell:enterprise_buildings_integrator:r410.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:honeywell:symmetre:r310:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:honeywell:symmetre:r400.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:honeywell:symmetre:r410.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:honeywell:comfortpoint_open_manager_station:r100:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-02-24T11:48Z", "lastModifiedDate" : "2013-02-25T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0109", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "nvidia", "product" : { "product_data" : [ { "product_name" : "display_driver", "version" : { "version_data" : [ { "version_value" : "307.00", "version_affected" : "<=" }, { "version_value" : "310.00", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/957036", "name" : "VU#957036", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.nvidia.com/object/product-security.html", "name" : "http://www.nvidia.com/object/product-security.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The NVIDIA driver before 307.78, and Release 310 before 311.00, in the NVIDIA Display Driver service on Windows does not properly handle exceptions, which allows local users to gain privileges or cause a denial of service (memory overwrite) via a crafted application." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nvidia:display_driver:*:-:*:*:*:windows:*:*", "versionEndIncluding" : "307.00" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nvidia:display_driver:310.00:-:*:*:*:windows:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-08T16:55Z", "lastModifiedDate" : "2013-04-09T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0110", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "nvidia", "product" : { "product_data" : [ { "product_name" : "driver", "version" : { "version_data" : [ { "version_value" : "307.00", "version_affected" : "<=" }, { "version_value" : "310.00", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/957036", "name" : "VU#957036", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.nvidia.com/object/product-security.html", "name" : "http://www.nvidia.com/object/product-security.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "nvSCPAPISvr.exe in the NVIDIA Stereoscopic 3D Driver service, as distributed with the NVIDIA driver before 307.78, and Release 310 before 311.00, on Windows, lacks \" (double quote) characters in the service path, which allows local users to gain privileges via a Trojan horse program." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nvidia:driver:*:-:*:*:*:windows:*:*", "versionEndIncluding" : "307.00" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nvidia:driver:310.00:-:*:*:*:windows:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:S/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.1, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-08T16:55Z", "lastModifiedDate" : "2013-04-09T14:19Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0111", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "nvidia", "product" : { "product_data" : [ { "product_name" : "driver", "version" : { "version_data" : [ { "version_value" : "307.00", "version_affected" : "<=" }, { "version_value" : "310.00", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/957036", "name" : "VU#957036", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.nvidia.com/object/product-security.html", "name" : "http://www.nvidia.com/object/product-security.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "daemonu.exe (aka the NVIDIA Update Service Daemon), as distributed with the NVIDIA driver before 307.78, and Release 310 before 311.00, on Windows, lacks \" (double quote) characters in the service path, which allows local users to gain privileges via a Trojan horse program." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nvidia:driver:*:-:*:*:*:windows:*:*", "versionEndIncluding" : "307.00" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nvidia:driver:310.00:-:*:*:*:windows:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:S/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.1, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-08T16:55Z", "lastModifiedDate" : "2013-04-09T14:24Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0113", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "nuance", "product" : { "product_data" : [ { "product_name" : "pdf_reader", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" } ] } }, { "product_name" : "pdf_reader_plus", "version" : { "version_data" : [ { "version_value" : "7.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/248449", "name" : "VU#248449", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Nuance PDF Reader 7.0 and PDF Viewer Plus 7.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nuance:pdf_reader:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nuance:pdf_reader_plus:7.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-02-24T11:48Z", "lastModifiedDate" : "2013-02-26T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0118", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cs-cart", "product" : { "product_data" : [ { "product_name" : "cs-cart", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-16" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/583564", "name" : "VU#583564", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.kb.cert.org/vuls/id/BLUU-949PQL", "name" : "http://www.kb.cert.org/vuls/id/BLUU-949PQL", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "CS-Cart before 3.0.6, when PayPal Standard Payments is configured, allows remote attackers to set the payment recipient via a modified value of the merchant's e-mail address, as demonstrated by setting the recipient to one's self." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cs-cart:cs-cart:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cs-cart:cs-cart:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cs-cart:cs-cart:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cs-cart:cs-cart:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cs-cart:cs-cart:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.0.5" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-24T11:48Z", "lastModifiedDate" : "2013-02-25T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0120", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "dell", "product" : { "product_data" : [ { "product_name" : "powerconnect_6248p", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/160460", "name" : "VU#160460", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The web interface on Dell PowerConnect 6248P switches allows remote attackers to cause a denial of service (device crash) via a malformed request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:dell:powerconnect_6248p:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-24T11:48Z", "lastModifiedDate" : "2013-02-25T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0122", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "avast", "product" : { "product_data" : [ { "product_name" : "avast!_mobile_security", "version" : { "version_data" : [ { "version_value" : "2.0.4304", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/131263", "name" : "VU#131263", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The avast! Mobile Security application before 2.0.4400 for Android allows attackers to cause a denial of service (application crash) via a crafted application that sends an intent to com.avast.android.mobilesecurity.app.scanner.DeleteFileActivity with zero arguments." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:avast:avast\\!_mobile_security:*:*:*:*:*:android:*:*", "versionEndIncluding" : "2.0.4304" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 1.9 }, "severity" : "LOW", "exploitabilityScore" : 3.4, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-22T03:27Z", "lastModifiedDate" : "2015-01-08T13:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0123", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "askia", "product" : { "product_data" : [ { "product_name" : "askiaweb", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/406596", "name" : "VU#406596", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in the administration interface in ASKIA askiaweb allow remote attackers to execute arbitrary SQL commands via (1) the nHistoryId parameter to WebProd/pages/pgHistory.asp or (2) the OrderBy parameter to WebProd/pages/pgadmin.asp." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:askia:askiaweb:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-21T21:55Z", "lastModifiedDate" : "2013-03-22T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0124", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "askia", "product" : { "product_data" : [ { "product_name" : "askiaweb", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/406596", "name" : "VU#406596", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in ASKIA askiaweb allow remote attackers to inject arbitrary web script or HTML via the (1) Number or (2) UpdatePage parameter to WebProd/cgi-bin/AskiaExt.dll." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:askia:askiaweb:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-21T21:55Z", "lastModifiedDate" : "2013-03-22T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0125", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "c2enterprise", "product" : { "product_data" : [ { "product_name" : "c2_webresource", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/418923", "name" : "VU#418923", "refsource" : "CERT-VN", "tags" : [ "Exploit", "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in fileview.asp in C2 WebResource allows remote attackers to inject arbitrary web script or HTML via the File parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:c2enterprise:c2_webresource:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-04-04T19:55Z", "lastModifiedDate" : "2013-04-05T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0126", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "verizon", "product" : { "product_data" : [ { "product_name" : "fios_actiontec_mi424wr-gen31_router", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "fios_actiontec_mi424wr-gen31_router_firmware", "version" : { "version_data" : [ { "version_value" : "40.19.36", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://infosec42.blogspot.com/2013/03/verizon-fios-router-csrf-cve-2013-0126.html", "name" : "http://infosec42.blogspot.com/2013/03/verizon-fios-router-csrf-cve-2013-0126.html", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.exploit-db.com/exploits/24860/", "name" : "24860", "refsource" : "EXPLOIT-DB", "tags" : [ "Exploit" ] }, { "url" : "http://www.kb.cert.org/vuls/id/278204", "name" : "VU#278204", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in index.cgi on the Verizon FIOS Actiontec MI424WR-GEN3I router with firmware 40.19.36 allow remote attackers to hijack the authentication of administrators for requests that (1) add administrative accounts via the username and user_level parameters or (2) enable remote administration via the is_telnet_primary and is_telnet_secondary parameters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:verizon:fios_actiontec_mi424wr-gen31_router_firmware:40.19.36:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:verizon:fios_actiontec_mi424wr-gen31_router:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-21T20:55Z", "lastModifiedDate" : "2013-10-07T20:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0127", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "lotus_notes", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.0.0", "version_affected" : "=" }, { "version_value" : "8.0.1", "version_affected" : "=" }, { "version_value" : "8.0.2", "version_affected" : "=" }, { "version_value" : "8.0.2.0", "version_affected" : "=" }, { "version_value" : "8.0.2.1", "version_affected" : "=" }, { "version_value" : "8.0.2.2", "version_affected" : "=" }, { "version_value" : "8.0.2.3", "version_affected" : "=" }, { "version_value" : "8.0.2.4", "version_affected" : "=" }, { "version_value" : "8.0.2.5", "version_affected" : "=" }, { "version_value" : "8.0.2.6", "version_affected" : "=" }, { "version_value" : "8.5", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" }, { "version_value" : "8.5.1", "version_affected" : "=" }, { "version_value" : "8.5.1.0", "version_affected" : "=" }, { "version_value" : "8.5.1.1", "version_affected" : "=" }, { "version_value" : "8.5.1.2", "version_affected" : "=" }, { "version_value" : "8.5.1.3", "version_affected" : "=" }, { "version_value" : "8.5.1.4", "version_affected" : "=" }, { "version_value" : "8.5.1.5", "version_affected" : "=" }, { "version_value" : "8.5.2.0", "version_affected" : "=" }, { "version_value" : "8.5.2.1", "version_affected" : "=" }, { "version_value" : "8.5.2.2", "version_affected" : "=" }, { "version_value" : "8.5.2.3", "version_affected" : "=" }, { "version_value" : "8.5.3", "version_affected" : "=" }, { "version_value" : "8.5.3.1", "version_affected" : "=" }, { "version_value" : "8.5.3.2", "version_affected" : "=" }, { "version_value" : "8.5.3.3", "version_affected" : "=" }, { "version_value" : "9.0.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://seclists.org/fulldisclosure/2013/Apr/262", "name" : "20130501 n.runs-SA-2013.005 - IBM Lotus Notes - arbitrary code execution", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/912420", "name" : "VU#912420", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21633819", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21633819", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83775", "name" : "ibm-notes-applet-tags(83775)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 does not block APPLET elements in HTML e-mail, which allows remote attackers to bypass intended restrictions on Java code execution and X-Confirm-Reading-To functionality via a crafted message, aka SPRs JMOY95BLM6 and JMOY95BN49." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:9.0.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-05-01T12:00Z", "lastModifiedDate" : "2017-08-29T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0128", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "tigertext", "product" : { "product_data" : [ { "product_name" : "tigertext", "version" : { "version_data" : [ { "version_value" : "3.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-255" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/704916", "name" : "VU#704916", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Contact Customer Support feature in the TigerText Free Private Texting app before 3.1.402 for iOS sends a log-file e-mail message with unencrypted credentials, which allows remote attackers to obtain sensitive information by sniffing the network or leveraging access to an e-mail endpoint." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tigertext:tigertext:*:-:*:*:*:iphone_os:*:*", "versionEndIncluding" : "3.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-04T19:55Z", "lastModifiedDate" : "2013-04-05T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0129", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "pd-admin", "product" : { "product_data" : [ { "product_name" : "pd-admin", "version" : { "version_data" : [ { "version_value" : "4.16", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/311644", "name" : "VU#311644", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.pdadmin-forum.de/thread.php?threadid=4051", "name" : "http://www.pdadmin-forum.de/thread.php?threadid=4051", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in pd-admin before 4.17 allow remote authenticated users to inject arbitrary web script or HTML via (1) the WebFTP Overview \"Create new directory\" field or (2) the body of an e-mail autoresponder message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pd-admin:pd-admin:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.16" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-04-19T11:44Z", "lastModifiedDate" : "2013-04-22T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0130", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "coreftp", "product" : { "product_data" : [ { "product_name" : "coreftp", "version" : { "version_data" : [ { "version_value" : "2.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.coreftp.com/forums/viewtopic.php?t=222102", "name" : "http://www.coreftp.com/forums/viewtopic.php?t=222102", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/370868", "name" : "VU#370868", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple buffer overflows in Core FTP before 2.2 build 1769 allow remote FTP servers to execute arbitrary code or cause a denial of service (application crash) via a long directory name in a (1) DELE, (2) LIST, or (3) VIEW command." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:coreftp:coreftp:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.2" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-29T17:42Z", "lastModifiedDate" : "2013-03-29T17:42Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0131", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "nvidia", "product" : { "product_data" : [ { "product_name" : "gpu_driver", "version" : { "version_data" : [ { "version_value" : "195.22", "version_affected" : "=" }, { "version_value" : "304.00", "version_affected" : "<=" }, { "version_value" : "310.00", "version_affected" : "=" }, { "version_value" : "313.00", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://nvidia.custhelp.com/app/answers/detail/a_id/3290", "name" : "http://nvidia.custhelp.com/app/answers/detail/a_id/3290", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201304-01.xml", "name" : "GLSA-201304-01", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/771620", "name" : "VU#771620", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.nvidia.com/object/product-security.html", "name" : "http://www.nvidia.com/object/product-security.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the NVIDIA GPU driver before 304.88, 310.x before 310.44, and 313.x before 313.30 for the X Window System on UNIX, when NoScanout mode is enabled, allows remote authenticated users to execute arbitrary code via a large ARGB cursor." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nvidia:gpu_driver:195.22:-:*:*:esx:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nvidia:gpu_driver:195.22:-:*:*:freebsd:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nvidia:gpu_driver:195.22:-:*:*:linux_kernel:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nvidia:gpu_driver:195.22:-:*:*:sunos:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nvidia:gpu_driver:*:-:*:*:esx:*:*:*", "versionEndIncluding" : "304.00" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nvidia:gpu_driver:*:-:*:*:freebsd:*:*:*", "versionEndIncluding" : "304.00" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nvidia:gpu_driver:*:-:*:*:linux_kernel:*:*:*", "versionEndIncluding" : "304.00" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nvidia:gpu_driver:*:-:*:*:sunos:*:*:*", "versionEndIncluding" : "304.00" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nvidia:gpu_driver:310.00:-:*:*:esx:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nvidia:gpu_driver:310.00:-:*:*:freebsd:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nvidia:gpu_driver:310.00:-:*:*:linux_kernel:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nvidia:gpu_driver:310.00:-:*:*:sunos:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nvidia:gpu_driver:313.00:-:*:*:esx:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nvidia:gpu_driver:313.00:-:*:*:freebsd:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nvidia:gpu_driver:313.00:-:*:*:linux_kernel:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nvidia:gpu_driver:313.00:-:*:*:sunos:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:S/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.1 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-08T16:55Z", "lastModifiedDate" : "2013-08-22T06:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0132", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "parallels", "product" : { "product_data" : [ { "product_name" : "parallels_plesk_panel", "version" : { "version_data" : [ { "version_value" : "11.0.9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/310500", "name" : "VU#310500", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The suexec implementation in Parallels Plesk Panel 11.0.9 contains a cgi-wrapper whitelist entry, which allows user-assisted remote attackers to execute arbitrary PHP code via a request containing crafted environment variables." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:parallels:parallels_plesk_panel:11.0.9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-04-18T18:55Z", "lastModifiedDate" : "2013-04-19T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0133", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "parallels", "product" : { "product_data" : [ { "product_name" : "parallels_plesk_panel", "version" : { "version_data" : [ { "version_value" : "11.0.9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/310500", "name" : "VU#310500", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Untrusted search path vulnerability in /usr/local/psa/admin/sbin/wrapper in Parallels Plesk Panel 11.0.9 allows local users to gain privileges via a crafted PATH environment variable." }, { "lang" : "en", "value" : "Per: http://cwe.mitre.org/data/definitions/426.html\r\n\r\n'CWE-426: Untrusted Search Path'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:parallels:parallels_plesk_panel:11.0.9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-18T18:55Z", "lastModifiedDate" : "2013-04-19T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0134", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "airdroid", "product" : { "product_data" : [ { "product_name" : "airdroid", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/557252", "name" : "VU#557252", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the web interface in AirDroid allows remote attackers to inject arbitrary web script or HTML via a crafted text message that is transmitted by a managed phone." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:airdroid:airdroid:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-04-09T03:34Z", "lastModifiedDate" : "2013-04-09T15:22Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0135", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "chatelao", "product" : { "product_data" : [ { "product_name" : "php_address_book", "version" : { "version_data" : [ { "version_value" : "8.2.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/129789/PHP-Address-Book-Cross-Site-Scripting-SQL-Injection.html", "name" : "http://packetstormsecurity.com/files/129789/PHP-Address-Book-Cross-Site-Scripting-SQL-Injection.html", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.acadion.nl/labs/advisory/20130203-phpaddressbook.html", "name" : "http://www.acadion.nl/labs/advisory/20130203-phpaddressbook.html", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.kb.cert.org/vuls/id/183692", "name" : "VU#183692", "refsource" : "CERT-VN", "tags" : [ "Exploit", "US Government Resource" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/99623", "name" : "phpaddressbook-checklogin-auth-bypass(99623)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) addressbook/register/delete_user.php, (2) addressbook/register/edit_user.php, or (3) addressbook/register/edit_user_save.php; the email parameter to (4) addressbook/register/edit_user_save.php, (5) addressbook/register/reset_password.php, (6) addressbook/register/reset_password_save.php, or (7) addressbook/register/user_add_save.php; the username parameter to (8) addressbook/register/checklogin.php or (9) addressbook/register/reset_password_save.php; the (10) lastname, (11) firstname, (12) phone, (13) permissions, or (14) notes parameter to addressbook/register/edit_user_save.php; the (15) q parameter to addressbook/register/admin_index.php; the (16) site parameter to addressbook/register/linktick.php; the (17) password parameter to addressbook/register/reset_password.php; the (18) password_hint parameter to addressbook/register/reset_password_save.php; the (19) var parameter to addressbook/register/traffic.php; or a (20) BasicLogin cookie to addressbook/register/router.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:chatelao:php_address_book:8.2.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-09T03:34Z", "lastModifiedDate" : "2017-08-29T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0136", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mutiny", "product" : { "product_data" : [ { "product_name" : "mutiny", "version" : { "version_data" : [ { "version_value" : "5.0-1.00", "version_affected" : "=" }, { "version_value" : "5.0-1.10", "version_affected" : "<=" } ] } }, { "product_name" : "mutiny_virtual_appliance", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "mutiny_appliance", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/701572", "name" : "VU#701572", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "https://community.rapid7.com/community/metasploit/blog/2013/05/15/new-1day-exploits-mutiny-vulnerabilities", "name" : "https://community.rapid7.com/community/metasploit/blog/2013/05/15/new-1day-exploits-mutiny-vulnerabilities", "refsource" : "MISC", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allow remote authenticated users to upload and execute arbitrary programs, read arbitrary files, or cause a denial of service (file deletion or renaming) via (1) the uploadPath parameter in an UPLOAD operation; the paths[] parameter in a (2) DELETE, (3) CUT, or (4) COPY operation; or the newPath parameter in a (5) CUT or (6) COPY operation." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mutiny:mutiny:5.0-1.00:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mutiny:mutiny:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.0-1.10" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mutiny:mutiny_virtual_appliance:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:mutiny:mutiny_appliance:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 8.5 }, "severity" : "HIGH", "exploitabilityScore" : 6.8, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-06-01T14:21Z", "lastModifiedDate" : "2013-06-03T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0137", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "digital_alert_systems", "product" : { "product_data" : [ { "product_name" : "dasdec_eas", "version" : { "version_data" : [ { "version_value" : "2.0-0", "version_affected" : "=" }, { "version_value" : "2.0-1", "version_affected" : "<=" } ] } } ] } }, { "vendor_name" : "monroe_electronics", "product" : { "product_data" : [ { "product_name" : "r189_one-net_eas", "version" : { "version_data" : [ { "version_value" : "2.0-0", "version_affected" : "=" }, { "version_value" : "2.0-1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-310" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.digitalalertsystems.com/pdf/130604-Monroe-Security-PR.pdf", "name" : "http://www.digitalalertsystems.com/pdf/130604-Monroe-Security-PR.pdf", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/662676", "name" : "VU#662676", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.kb.cert.org/vuls/id/AAMN-98MU7H", "name" : "http://www.kb.cert.org/vuls/id/AAMN-98MU7H", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/AAMN-98MUK2", "name" : "http://www.kb.cert.org/vuls/id/AAMN-98MUK2", "refsource" : "CONFIRM", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.monroe-electronics.com/MONROE_ELECTRONICS_PDF/130604-Monroe-Security-PR.pdf", "name" : "http://www.monroe-electronics.com/MONROE_ELECTRONICS_PDF/130604-Monroe-Security-PR.pdf", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://securityledger.com/2020/01/seven-years-later-scores-of-eas-systems-sit-un-patched-vulnerable/", "name" : "https://securityledger.com/2020/01/seven-years-later-scores-of-eas-systems-sit-un-patched-vulnerable/", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The default configuration of the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device before 2.0-2 contains a known SSH private key, which makes it easier for remote attackers to obtain root access, and spoof alerts, via an SSH session." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:digital_alert_systems:dasdec_eas:2.0-0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:digital_alert_systems:dasdec_eas:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0-1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:monroe_electronics:r189_one-net_eas:2.0-0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:monroe_electronics:r189_one-net_eas:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0-1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-06-30T19:28Z", "lastModifiedDate" : "2020-01-29T18:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0138", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "bitberry_software", "product" : { "product_data" : [ { "product_name" : "bitzipper", "version" : { "version_data" : [ { "version_value" : "2013", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/880916", "name" : "VU#880916", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.kb.cert.org/vuls/id/BLUU-95GP23", "name" : "http://www.kb.cert.org/vuls/id/BLUU-95GP23", "refsource" : "CONFIRM", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "BitZipper 2013 before Update 1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted ZIP archive." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bitberry_software:bitzipper:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2013" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-04-22T03:27Z", "lastModifiedDate" : "2013-04-22T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0139", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "arecont", "product" : { "product_data" : [ { "product_name" : "vision_av1355dn_megadome_camera", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/375180", "name" : "VU#375180", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Arecont Vision AV1355DN MegaDome camera allows remote attackers to cause a denial of service (video-capture outage) via a packet to UDP port 69." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:arecont:vision_av1355dn_megadome_camera:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-18T18:55Z", "lastModifiedDate" : "2013-04-19T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0140", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mcafee", "product" : { "product_data" : [ { "product_name" : "epolicy_orchestrator", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.5", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.5.0", "version_affected" : "=" }, { "version_value" : "3.6.0", "version_affected" : "=" }, { "version_value" : "3.6.1", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.5.0", "version_affected" : "=" }, { "version_value" : "4.5.3", "version_affected" : "=" }, { "version_value" : "4.5.4", "version_affected" : "=" }, { "version_value" : "4.5.5", "version_affected" : "=" }, { "version_value" : "4.5.6", "version_affected" : "<=" }, { "version_value" : "4.6.0", "version_affected" : "=" }, { "version_value" : "4.6.1", "version_affected" : "=" }, { "version_value" : "4.6.2", "version_affected" : "=" }, { "version_value" : "4.6.3", "version_affected" : "=" }, { "version_value" : "4.6.4", "version_affected" : "=" }, { "version_value" : "4.6.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://seclists.org/fulldisclosure/2014/Apr/289", "name" : "20140427 Re: Exploit: McAfee ePolicy 0wner (ePowner ) ââ?¬â?? Release", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/209131", "name" : "VU#209131", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.securityfocus.com/bid/59500", "name" : "59500", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/ncas/alerts/TA13-193A", "name" : "TA13-193A", "refsource" : "CERT", "tags" : [ ] }, { "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10042", "name" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10042", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to execute arbitrary SQL commands via a crafted request over the Agent-Server communication channel." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:2.5:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:2.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:3.0:sp2a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:3.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:3.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:3.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.5.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.9 }, "severity" : "HIGH", "exploitabilityScore" : 5.5, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-05-01T12:00Z", "lastModifiedDate" : "2017-11-16T02:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0141", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mcafee", "product" : { "product_data" : [ { "product_name" : "epolicy_orchestrator", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.5", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.5.0", "version_affected" : "=" }, { "version_value" : "3.6.0", "version_affected" : "=" }, { "version_value" : "3.6.1", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.5.0", "version_affected" : "=" }, { "version_value" : "4.5.3", "version_affected" : "=" }, { "version_value" : "4.5.4", "version_affected" : "=" }, { "version_value" : "4.5.5", "version_affected" : "=" }, { "version_value" : "4.5.6", "version_affected" : "<=" }, { "version_value" : "4.6.0", "version_affected" : "=" }, { "version_value" : "4.6.1", "version_affected" : "=" }, { "version_value" : "4.6.2", "version_affected" : "=" }, { "version_value" : "4.6.3", "version_affected" : "=" }, { "version_value" : "4.6.4", "version_affected" : "=" }, { "version_value" : "4.6.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://seclists.org/fulldisclosure/2014/Apr/289", "name" : "20140427 Re: Exploit: McAfee ePolicy 0wner (ePowner ) ââ?¬â?? Release", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/209131", "name" : "VU#209131", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.us-cert.gov/ncas/alerts/TA13-193A", "name" : "TA13-193A", "refsource" : "CERT", "tags" : [ ] }, { "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10042", "name" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10042", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to upload arbitrary files via a crafted request over the Agent-Server communication channel, as demonstrated by writing to the Software/ directory." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:2.5:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:2.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:3.0:sp2a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:3.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:3.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:3.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.5.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mcafee:epolicy_orchestrator:4.6.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:M/Au:N/C:P/I:P/A:N", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 5.5, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-05-01T12:00Z", "lastModifiedDate" : "2017-11-16T02:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0142", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "qnap", "product" : { "product_data" : [ { "product_name" : "surveillance_station_pro", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "nas", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "viostor_network_video_recorder", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-255" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/927644", "name" : "VU#927644", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "QNAP VioStor NVR devices with firmware 4.0.3, and the Surveillance Station Pro component in QNAP NAS, have a hardcoded guest account, which allows remote attackers to obtain web-server login access via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:qnap:viostor_network_video_recorder:4.0.3:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:qnap:viostor_network_video_recorder:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qnap:surveillance_station_pro:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:qnap:nas:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-06-07T20:55Z", "lastModifiedDate" : "2013-06-10T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0143", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "qnap", "product" : { "product_data" : [ { "product_name" : "surveillance_station_pro", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "nas", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "viostor_network_video_recorder", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/927644", "name" : "VU#927644", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "cgi-bin/pingping.cgi on QNAP VioStor NVR devices with firmware 4.0.3, and in the Surveillance Station Pro component in QNAP NAS, allows remote authenticated users to execute arbitrary commands by leveraging guest access and placing shell metacharacters in the query string." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:qnap:viostor_network_video_recorder:4.0.3:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:qnap:viostor_network_video_recorder:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qnap:surveillance_station_pro:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:qnap:nas:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-06-07T20:55Z", "lastModifiedDate" : "2013-06-10T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0144", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "qnap", "product" : { "product_data" : [ { "product_name" : "viostor_network_video_recorder", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/927644", "name" : "VU#927644", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site request forgery (CSRF) vulnerability in cgi-bin/create_user.cgi on QNAP VioStor NVR devices with firmware 4.0.3 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts via a NEW USER action." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:qnap:viostor_network_video_recorder:4.0.3:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:qnap:viostor_network_video_recorder:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-06-07T20:55Z", "lastModifiedDate" : "2013-06-10T13:19Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0145", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "vercot", "product" : { "product_data" : [ { "product_name" : "serva32", "version" : { "version_data" : [ { "version_value" : "2.1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/127108", "name" : "VU#127108", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the TFTPD service in Serva32 2.1.0 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long string in a read request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:vercot:serva32:2.1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-05-20T14:44Z", "lastModifiedDate" : "2013-05-23T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0148", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "faircom", "product" : { "product_data" : [ { "product_name" : "c-treeace", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-310" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/900031", "name" : "VU#900031", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Data Camouflage (aka FairCom Standard Encryption) algorithm in FairCom c-treeACE does not ensure that a decryption key is needed for accessing database contents, which allows context-dependent attackers to read cleartext database records by copying a database to another system that has a certain default configuration." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:faircom:c-treeace:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 7.1 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-06-16T17:55Z", "lastModifiedDate" : "2017-01-20T02:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0149", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "asa_5500", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.1", "version_affected" : "=" }, { "version_value" : "7.2", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" } ] } }, { "product_name" : "fwsm", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "ios", "version" : { "version_data" : [ { "version_value" : "12.0", "version_affected" : "=" }, { "version_value" : "12.0(1)", "version_affected" : "=" }, { "version_value" : "12.0(1)s", "version_affected" : "=" }, { "version_value" : "12.0(1)st", "version_affected" : "=" }, { "version_value" : "12.0(1)w", "version_affected" : "=" }, { "version_value" : "12.0(1)xa3", "version_affected" : "=" }, { "version_value" : "12.0(1)xb", "version_affected" : "=" }, { "version_value" : "12.0(1)xe", "version_affected" : "=" }, { "version_value" : "12.0(2)", "version_affected" : "=" }, { "version_value" : "12.0(2)xc", "version_affected" : "=" }, { "version_value" : "12.0(2)xd", "version_affected" : "=" }, { "version_value" : "12.0(2)xe", "version_affected" : "=" }, { "version_value" : "12.0(2)xf", "version_affected" : "=" }, { "version_value" : "12.0(2)xg", "version_affected" : "=" }, { "version_value" : "12.0(2a)", "version_affected" : "=" }, { "version_value" : "12.0(2b)", "version_affected" : "=" }, { "version_value" : "12.0(3)", "version_affected" : "=" }, { "version_value" : "12.0(3)t2", "version_affected" : "=" }, { "version_value" : "12.0(3)xe", "version_affected" : "=" }, { "version_value" : "12.0(3.2)", "version_affected" : "=" }, { "version_value" : "12.0(3.3)s", "version_affected" : "=" }, { "version_value" : "12.0(3.4)t", "version_affected" : "=" }, { "version_value" : "12.0(3.6)w5(9.0.5)", "version_affected" : "=" }, { "version_value" : "12.0(3d)", "version_affected" : "=" }, { "version_value" : "12.0(4)", "version_affected" : "=" }, { "version_value" : "12.0(4)s", "version_affected" : "=" }, { "version_value" : "12.0(4)t", "version_affected" : "=" }, { "version_value" : "12.0(4)xe", "version_affected" : "=" }, { "version_value" : "12.0(4)xe1", "version_affected" : "=" }, { "version_value" : "12.0(4)xm", "version_affected" : "=" }, { "version_value" : "12.0(4)xm1", "version_affected" : "=" }, { "version_value" : "12.0(5)", "version_affected" : "=" }, { "version_value" : "12.0(5)s", "version_affected" : "=" }, { "version_value" : "12.0(5)t", "version_affected" : "=" }, { "version_value" : "12.0(5)t1", "version_affected" : "=" }, { "version_value" : "12.0(5)t2", "version_affected" : "=" }, { "version_value" : "12.0(5)wc", "version_affected" : "=" }, { "version_value" : "12.0(5)wc2", "version_affected" : "=" }, { "version_value" : "12.0(5)wc2b", "version_affected" : "=" }, { "version_value" : "12.0(5)wc3", "version_affected" : "=" }, { "version_value" : "12.0(5)wc3b", "version_affected" : "=" }, { "version_value" : "12.0(5)wc5a", "version_affected" : "=" }, { "version_value" : "12.0(05)wc8", "version_affected" : "=" }, { "version_value" : "12.0(5)wc9", "version_affected" : "=" }, { "version_value" : "12.0(5)wc9a", "version_affected" : "=" }, { "version_value" : "12.0(5)wc11", "version_affected" : "=" }, { "version_value" : "12.0(5)wc13", "version_affected" : "=" }, { "version_value" : "12.0(5)wx", "version_affected" : "=" }, { "version_value" : "12.0(5)xe", "version_affected" : "=" }, { "version_value" : "12.0(5)xk", "version_affected" : "=" }, { "version_value" : "12.0(5)xk2", "version_affected" : "=" }, { "version_value" : "12.0(5)xn", "version_affected" : "=" }, { "version_value" : "12.0(5)xn1", "version_affected" : "=" }, { "version_value" : "12.0(5)xs", "version_affected" : "=" }, { "version_value" : "12.0(5)xu", "version_affected" : "=" }, { "version_value" : "12.0(5)yb4", "version_affected" : "=" }, { "version_value" : "12.0(5.1)xp", "version_affected" : "=" }, { "version_value" : "12.0(5.2)xu", "version_affected" : "=" }, { "version_value" : "12.0(5.3)wc1", "version_affected" : "=" }, { "version_value" : "12.0(5.4)wc1", "version_affected" : "=" }, { "version_value" : "12.0(5a)e", "version_affected" : "=" }, { "version_value" : "12.0(6)", "version_affected" : "=" }, { "version_value" : "12.0(6b)", "version_affected" : "=" }, { "version_value" : "12.0(7)db2", "version_affected" : "=" }, { "version_value" : "12.0(7)dc1", "version_affected" : "=" }, { "version_value" : "12.0(7)s1", "version_affected" : "=" }, { "version_value" : "12.0(7)sc", "version_affected" : "=" }, { "version_value" : "12.0(7)t", "version_affected" : "=" }, { "version_value" : "12.0(7)t2", "version_affected" : "=" }, { "version_value" : "12.0(7)t3", "version_affected" : "=" }, { "version_value" : "12.0(7)wx5(15a)", "version_affected" : "=" }, { "version_value" : "12.0(7)xe", "version_affected" : "=" }, { "version_value" : "12.0(7)xe2", "version_affected" : "=" }, { "version_value" : "12.0(7)xf", "version_affected" : "=" }, { "version_value" : "12.0(7)xf1", "version_affected" : "=" }, { "version_value" : "12.0(7)xk", "version_affected" : "=" }, { "version_value" : "12.0(7)xk2", "version_affected" : "=" }, { "version_value" : "12.0(7)xk3", "version_affected" : "=" }, { "version_value" : "12.0(7)xv", "version_affected" : "=" }, { "version_value" : "12.0(7.4)s", "version_affected" : "=" }, { "version_value" : "12.0(7a)", "version_affected" : "=" }, { "version_value" : "12.0(8)", "version_affected" : "=" }, { "version_value" : "12.0(8)s1", "version_affected" : "=" }, { "version_value" : "12.0(8.0.2)s", "version_affected" : "=" }, { "version_value" : "12.0(8.3)sc", "version_affected" : "=" }, { "version_value" : "12.0(8a)", "version_affected" : "=" }, { "version_value" : "12.0(9)", "version_affected" : "=" }, { "version_value" : "12.0(9)s", "version_affected" : "=" }, { "version_value" : "12.0(9)s8", "version_affected" : "=" }, { "version_value" : "12.0(9a)", "version_affected" : "=" }, { "version_value" : "12.0(10)", "version_affected" : "=" }, { "version_value" : "12.0(10)s3b", "version_affected" : "=" }, { "version_value" : "12.0(10)s7", "version_affected" : "=" }, { "version_value" : "12.0(10)s8", "version_affected" : "=" }, { "version_value" : "12.0(10)w5", "version_affected" : "=" }, { "version_value" : "12.0(10)w5(18f)", "version_affected" : "=" }, { "version_value" : "12.0(10)w5(18g)", "version_affected" : "=" }, { "version_value" : "12.0(10a)", "version_affected" : "=" }, { "version_value" : "12.0(11)s6", "version_affected" : "=" }, { "version_value" : "12.0(11)st4", "version_affected" : "=" }, { "version_value" : "12.0(11a)", "version_affected" : "=" }, { "version_value" : "12.0(12)", "version_affected" : "=" }, { "version_value" : "12.0(12)s3", "version_affected" : "=" }, { "version_value" : "12.0(12)s4", "version_affected" : "=" }, { "version_value" : "12.0(12a)", "version_affected" : "=" }, { "version_value" : "12.0(13)s6", "version_affected" : "=" }, { "version_value" : "12.0(13)s8", "version_affected" : "=" }, { "version_value" : "12.0(13)w5(19c)", "version_affected" : "=" }, { "version_value" : "12.0(13)wt6(1)", "version_affected" : "=" }, { "version_value" : "12.0(13a)", "version_affected" : "=" }, { "version_value" : "12.0(14)", "version_affected" : "=" }, { "version_value" : "12.0(14)s7", "version_affected" : "=" }, { "version_value" : "12.0(14)s8", "version_affected" : "=" }, { "version_value" : "12.0(14)st", "version_affected" : "=" }, { "version_value" : "12.0(14)st3", "version_affected" : "=" }, { "version_value" : "12.0(14)w5(20)", "version_affected" : "=" }, { "version_value" : "12.0(14a)", "version_affected" : "=" }, { "version_value" : "12.0(15)s", "version_affected" : "=" }, { "version_value" : "12.0(15)s3", "version_affected" : "=" }, { "version_value" : "12.0(15)s6", "version_affected" : "=" }, { "version_value" : "12.0(15)s7", "version_affected" : "=" }, { "version_value" : "12.0(15)sc", "version_affected" : "=" }, { "version_value" : "12.0(15)sl", "version_affected" : "=" }, { "version_value" : "12.0(15a)", "version_affected" : "=" }, { "version_value" : "12.0(16)s", "version_affected" : "=" }, { "version_value" : "12.0(16)s8", "version_affected" : "=" }, { "version_value" : "12.0(16)s8a", "version_affected" : "=" }, { "version_value" : "12.0(16)s10", "version_affected" : "=" }, { "version_value" : "12.0(16)sc", "version_affected" : "=" }, { "version_value" : "12.0(16)sc3", "version_affected" : "=" }, { "version_value" : "12.0(16)st", "version_affected" : "=" }, { "version_value" : "12.0(16)st1", "version_affected" : "=" }, { "version_value" : "12.0(16)w5(21)", "version_affected" : "=" }, { "version_value" : "12.0(16.06)s", "version_affected" : "=" }, { "version_value" : "12.0(16a)", "version_affected" : "=" }, { "version_value" : "12.0(17)", "version_affected" : "=" }, { "version_value" : "12.0(17)s", "version_affected" : "=" }, { "version_value" : "12.0(17)s4", "version_affected" : "=" }, { "version_value" : "12.0(17)s7", "version_affected" : "=" }, { "version_value" : "12.0(17)sl", "version_affected" : "=" }, { "version_value" : "12.0(17)sl2", "version_affected" : "=" }, { "version_value" : "12.0(17)sl6", "version_affected" : "=" }, { "version_value" : "12.0(17)sl9", "version_affected" : "=" }, { "version_value" : "12.0(17)st1", "version_affected" : "=" }, { "version_value" : "12.0(17)st5", "version_affected" : "=" }, { "version_value" : "12.0(17)st8", "version_affected" : "=" }, { "version_value" : "12.0(17a)", "version_affected" : "=" }, { "version_value" : "12.0(18)s", "version_affected" : "=" }, { "version_value" : "12.0(18)s5", "version_affected" : "=" }, { "version_value" : "12.0(18)s5a", "version_affected" : "=" }, { "version_value" : "12.0(18)s7", "version_affected" : "=" }, { "version_value" : "12.0(18)sl", "version_affected" : "=" }, { "version_value" : "12.0(18)st1", "version_affected" : "=" }, { "version_value" : "12.0(18)w5(22b)", "version_affected" : "=" }, { "version_value" : "12.0(18b)", "version_affected" : "=" }, { "version_value" : "12.0(19)", "version_affected" : "=" }, { "version_value" : "12.0(19)s", "version_affected" : "=" }, { "version_value" : "12.0(19)s2", "version_affected" : "=" }, { "version_value" : "12.0(19)s2a", "version_affected" : "=" }, { "version_value" : "12.0(19)s4", "version_affected" : "=" }, { "version_value" : "12.0(19)sl", "version_affected" : "=" }, { "version_value" : "12.0(19)sl4", "version_affected" : "=" }, { "version_value" : "12.0(19)sp", "version_affected" : "=" }, { "version_value" : "12.0(19)st", "version_affected" : "=" }, { "version_value" : "12.0(19)st2", "version_affected" : "=" }, { "version_value" : "12.0(19)st6", "version_affected" : "=" }, { "version_value" : "12.0(19a)", "version_affected" : "=" }, { "version_value" : "12.0(20)sl", "version_affected" : "=" }, { "version_value" : "12.0(20)sp", "version_affected" : "=" }, { "version_value" : "12.0(20)sp1", "version_affected" : "=" }, { "version_value" : "12.0(20)st2", "version_affected" : "=" }, { "version_value" : "12.0(20)st6", "version_affected" : "=" }, { "version_value" : "12.0(20)st7", "version_affected" : "=" }, { "version_value" : "12.0(20)sx", "version_affected" : "=" }, { "version_value" : "12.0(20)w5(22b)", "version_affected" : "=" }, { "version_value" : "12.0(20.4)sp", "version_affected" : "=" }, { "version_value" : "12.0(20a)", "version_affected" : "=" }, { "version_value" : "12.0(21)s", "version_affected" : "=" }, { "version_value" : "12.0(21)s1", "version_affected" : "=" }, { "version_value" : "12.0(21)s3", "version_affected" : "=" }, { "version_value" : "12.0(21)s4a", "version_affected" : "=" }, { "version_value" : "12.0(21)s5a", "version_affected" : "=" }, { "version_value" : "12.0(21)s6", "version_affected" : "=" }, { "version_value" : "12.0(21)s7", "version_affected" : "=" }, { "version_value" : "12.0(21)sl", "version_affected" : "=" }, { "version_value" : "12.0(21)st", "version_affected" : "=" }, { "version_value" : "12.0(21)st6", "version_affected" : "=" }, { "version_value" : "12.0(21)st7", "version_affected" : "=" }, { "version_value" : "12.0(21)sx", "version_affected" : "=" }, { "version_value" : "12.0(21a)", "version_affected" : "=" }, { "version_value" : "12.0(22)s", "version_affected" : "=" }, { "version_value" : "12.0(22)s4", "version_affected" : "=" }, { "version_value" : "12.0(22)s5", "version_affected" : "=" }, { "version_value" : "12.0(22)sy", "version_affected" : "=" }, { "version_value" : "12.0(23)s2", "version_affected" : "=" }, { "version_value" : "12.0(23)s3", "version_affected" : "=" }, { "version_value" : "12.0(23)s4", "version_affected" : "=" }, { "version_value" : "12.0(23)s5", "version_affected" : "=" }, { "version_value" : "12.0(23)s6", "version_affected" : "=" }, { "version_value" : "12.0(23)sx", "version_affected" : "=" }, { "version_value" : "12.0(23)sz", "version_affected" : "=" }, { "version_value" : "12.0(24)s1", "version_affected" : "=" }, { "version_value" : "12.0(24)s2", "version_affected" : "=" }, { "version_value" : "12.0(24)s4", "version_affected" : "=" }, { "version_value" : "12.0(24)s5", "version_affected" : "=" }, { "version_value" : "12.0(24)s6", "version_affected" : "=" }, { "version_value" : "12.0(24.2)s", "version_affected" : "=" }, { "version_value" : "12.0(25)s1", "version_affected" : "=" }, { "version_value" : "12.0(25)w5(27)", "version_affected" : "=" }, { "version_value" : "12.0(25)w5(27c)", "version_affected" : "=" }, { "version_value" : "12.0(25)w5-27d", "version_affected" : "=" }, { "version_value" : "12.0(25.4)s1", "version_affected" : "=" }, { "version_value" : "12.0(26)", "version_affected" : "=" }, { "version_value" : "12.0(26)s", "version_affected" : "=" }, { "version_value" : "12.0(26)s1", "version_affected" : "=" }, { "version_value" : "12.0(26)s2", "version_affected" : "=" }, { "version_value" : "12.0(26)s6", "version_affected" : "=" }, { "version_value" : "12.0(26)w5(28)", "version_affected" : "=" }, { "version_value" : "12.0(26)w5(28a)", "version_affected" : "=" }, { "version_value" : "12.0(27)", "version_affected" : "=" }, { "version_value" : "12.0(27)s", "version_affected" : "=" }, { "version_value" : "12.0(27)s1", "version_affected" : "=" }, { "version_value" : "12.0(27)sv", "version_affected" : "=" }, { "version_value" : "12.0(27)sv1", "version_affected" : "=" }, { "version_value" : "12.0(27)sv2", "version_affected" : "=" }, { "version_value" : "12.0(28)", "version_affected" : "=" }, { "version_value" : "12.0(28)s3", "version_affected" : "=" }, { "version_value" : "12.0(28)s5", "version_affected" : "=" }, { "version_value" : "12.0(28)w5(31a)", "version_affected" : "=" }, { "version_value" : "12.0(28)w5-30b", "version_affected" : "=" }, { "version_value" : "12.0(28)w5-32a", "version_affected" : "=" }, { "version_value" : "12.0(28c)", "version_affected" : "=" }, { "version_value" : "12.0(28d)", "version_affected" : "=" }, { "version_value" : "12.0(30)s1", "version_affected" : "=" }, { "version_value" : "12.0(30)s2", "version_affected" : "=" }, { "version_value" : "12.0(30)s4", "version_affected" : "=" }, { "version_value" : "12.0(31)s", "version_affected" : "=" }, { "version_value" : "12.0(31)s1", "version_affected" : "=" }, { "version_value" : "12.0(32)s12", "version_affected" : "=" }, { "version_value" : "12.0(32)s13", "version_affected" : "=" }, { "version_value" : "12.0(32)sy8", "version_affected" : "=" }, { "version_value" : "12.0(32)sy9", "version_affected" : "=" }, { "version_value" : "12.0(33)s3", "version_affected" : "=" }, { "version_value" : "12.0(33)s4", "version_affected" : "=" }, { "version_value" : "12.0da", "version_affected" : "=" }, { "version_value" : "12.0db", "version_affected" : "=" }, { "version_value" : "12.0dc", "version_affected" : "=" }, { "version_value" : "12.0ev", "version_affected" : "=" }, { "version_value" : "12.0s", "version_affected" : "=" }, { "version_value" : "12.0sc", "version_affected" : "=" }, { "version_value" : "12.0sl", "version_affected" : "=" }, { "version_value" : "12.0sp", "version_affected" : "=" }, { "version_value" : "12.0st", "version_affected" : "=" }, { "version_value" : "12.0sv", "version_affected" : "=" }, { "version_value" : "12.0sx", "version_affected" : "=" }, { "version_value" : "12.0sy", "version_affected" : "=" }, { "version_value" : "12.0sz", "version_affected" : "=" }, { "version_value" : "12.0t", "version_affected" : "=" }, { "version_value" : "12.0w", "version_affected" : "=" }, { "version_value" : "12.0w5", "version_affected" : "=" }, { "version_value" : "12.0wc", "version_affected" : "=" }, { "version_value" : "12.0wt", "version_affected" : "=" }, { "version_value" : "12.0wx", "version_affected" : "=" }, { "version_value" : "12.0xa", "version_affected" : "=" }, { "version_value" : "12.0xb", "version_affected" : "=" }, { "version_value" : "12.0xc", "version_affected" : "=" }, { "version_value" : "12.0xd", "version_affected" : "=" }, { "version_value" : "12.0xe", "version_affected" : "=" }, { "version_value" : "12.0xf", "version_affected" : "=" }, { "version_value" : "12.0xg", "version_affected" : "=" }, { "version_value" : "12.0xh", "version_affected" : "=" }, { "version_value" : "12.0xi", "version_affected" : "=" }, { "version_value" : "12.0xj", "version_affected" : "=" }, { "version_value" : "12.0xk", "version_affected" : "=" }, { "version_value" : "12.0xl", "version_affected" : "=" }, { "version_value" : "12.0xm", "version_affected" : "=" }, { "version_value" : "12.0xn", "version_affected" : "=" }, { "version_value" : "12.0xp", "version_affected" : "=" }, { "version_value" : "12.0xq", "version_affected" : "=" }, { "version_value" : "12.0xr", "version_affected" : "=" }, { "version_value" : "12.0xs", "version_affected" : "=" }, { "version_value" : "12.0xt", "version_affected" : "=" }, { "version_value" : "12.0xu", "version_affected" : "=" }, { "version_value" : "12.0xv", "version_affected" : "=" }, { "version_value" : "12.0xw", "version_affected" : "=" }, { "version_value" : "12.1", "version_affected" : "=" }, { "version_value" : "12.1(1)", "version_affected" : "=" }, { "version_value" : "12.1(1)db", "version_affected" : "=" }, { "version_value" : "12.1(1)db2", "version_affected" : "=" }, { "version_value" : "12.1(1)dc", "version_affected" : "=" }, { "version_value" : "12.1(1)dc2", "version_affected" : "=" }, { "version_value" : "12.1(1)e5", "version_affected" : "=" }, { "version_value" : "12.1(1)ex", "version_affected" : "=" }, { "version_value" : "12.1(1)t", "version_affected" : "=" }, { "version_value" : "12.1(1.3)t", "version_affected" : "=" }, { "version_value" : "12.1(1a)t1", "version_affected" : "=" }, { "version_value" : "12.1(1c)", "version_affected" : "=" }, { "version_value" : "12.1(2)e1", "version_affected" : "=" }, { "version_value" : "12.1(2)t", "version_affected" : "=" }, { "version_value" : "12.1(2)xf", "version_affected" : "=" }, { "version_value" : "12.1(2)xf4", "version_affected" : "=" }, { "version_value" : "12.1(2)xf5", "version_affected" : "=" }, { "version_value" : "12.1(6)ea2c", "version_affected" : "=" }, { "version_value" : "12.1(6)ey", "version_affected" : "=" }, { "version_value" : "12.1(6)ez1", "version_affected" : "=" }, { "version_value" : "12.1(6)ez2", "version_affected" : "=" }, { "version_value" : "12.1(6.5)", "version_affected" : "=" }, { "version_value" : "12.1(6.5)ec3", "version_affected" : "=" }, { "version_value" : "12.1(6a)", "version_affected" : "=" }, { "version_value" : "12.1(7)", "version_affected" : "=" }, { "version_value" : "12.1(7)cx", "version_affected" : "=" }, { "version_value" : "12.1(7)da2", "version_affected" : "=" }, { "version_value" : "12.1(7)da3", "version_affected" : "=" }, { "version_value" : "12.1(7)ec", "version_affected" : "=" }, { "version_value" : "12.1(7a)e6", "version_affected" : "=" }, { "version_value" : "12.1(7a)ey", "version_affected" : "=" }, { "version_value" : "12.1(7a)ey3", "version_affected" : "=" }, { "version_value" : "12.1(7b)", "version_affected" : "=" }, { "version_value" : "12.1(8)", "version_affected" : "=" }, { "version_value" : "12.1(8)aa1", "version_affected" : "=" }, { "version_value" : "12.1(8)e", "version_affected" : "=" }, { "version_value" : "12.1(8)ea", "version_affected" : "=" }, { "version_value" : "12.1(8)ea1b", "version_affected" : "=" }, { "version_value" : "12.1(8)ea2b", "version_affected" : "=" }, { "version_value" : "12.1(8a)e", "version_affected" : "=" }, { "version_value" : "12.1(8a)ew", "version_affected" : "=" }, { "version_value" : "12.1(8a)ew1", "version_affected" : "=" }, { "version_value" : "12.1(8a)ex", "version_affected" : "=" }, { "version_value" : "12.1(8b)e8", "version_affected" : "=" }, { "version_value" : "12.1(8b)e9", "version_affected" : "=" }, { "version_value" : "12.1(8b)e14", "version_affected" : "=" }, { "version_value" : "12.1(8b)e15", "version_affected" : "=" }, { "version_value" : "12.1(8b)e16", "version_affected" : "=" }, { "version_value" : "12.1(8b)e18", "version_affected" : "=" }, { "version_value" : "12.1(8b)e20", "version_affected" : "=" }, { "version_value" : "12.1(8b)ex4", "version_affected" : "=" }, { "version_value" : "12.1(8c)", "version_affected" : "=" }, { "version_value" : "12.1(9)", "version_affected" : "=" }, { "version_value" : "12.1(9)aa", "version_affected" : "=" }, { "version_value" : "12.1(9)e", "version_affected" : "=" }, { "version_value" : "12.1(9)e3", "version_affected" : "=" }, { "version_value" : "12.1(9)ea", "version_affected" : "=" }, { "version_value" : "12.1(9)ex", "version_affected" : "=" }, { "version_value" : "12.1(9)ex3", "version_affected" : "=" }, { "version_value" : "12.1(9a)", "version_affected" : "=" }, { "version_value" : "12.1(10)", "version_affected" : "=" }, { "version_value" : "12.1(10)aa", "version_affected" : "=" }, { "version_value" : "12.1(10)e", "version_affected" : "=" }, { "version_value" : "12.1(10)e4", "version_affected" : "=" }, { "version_value" : "12.1(10)ec", "version_affected" : "=" }, { "version_value" : "12.1(10)ec1", "version_affected" : "=" }, { "version_value" : "12.1(10)ex", "version_affected" : "=" }, { "version_value" : "12.1(10)ey", "version_affected" : "=" }, { "version_value" : "12.1(10.5)ec", "version_affected" : "=" }, { "version_value" : "12.1(10a)", "version_affected" : "=" }, { "version_value" : "12.1(11)", "version_affected" : "=" }, { "version_value" : "12.1(11)e", "version_affected" : "=" }, { "version_value" : "12.1(11)ea1", "version_affected" : "=" }, { "version_value" : "12.1(11)ec", "version_affected" : "=" }, { "version_value" : "12.1(11.5)e", "version_affected" : "=" }, { "version_value" : "12.1(11a)", "version_affected" : "=" }, { "version_value" : "12.1(11b)", "version_affected" : "=" }, { "version_value" : "12.1(11b)e", "version_affected" : "=" }, { "version_value" : "12.1(11b)e12", "version_affected" : "=" }, { "version_value" : "12.1(11b)e14", "version_affected" : "=" }, { "version_value" : "12.1(12)", "version_affected" : "=" }, { "version_value" : "12.1(12)e", "version_affected" : "=" }, { "version_value" : "12.1(12a)", "version_affected" : "=" }, { "version_value" : "12.1(12b)", "version_affected" : "=" }, { "version_value" : "12.1(12c)", "version_affected" : "=" }, { "version_value" : "12.1(12c)e7", "version_affected" : "=" }, { "version_value" : "12.1(12c)ec", "version_affected" : "=" }, { "version_value" : "12.1(12c)ev01", "version_affected" : "=" }, { "version_value" : "12.1(12c)ew4", "version_affected" : "=" }, { "version_value" : "12.1(13)", "version_affected" : "=" }, { "version_value" : "12.1(13)ay", "version_affected" : "=" }, { "version_value" : "12.1(13)e1", "version_affected" : "=" }, { "version_value" : "12.1(13)e3", "version_affected" : "=" }, { "version_value" : "12.1(13)e7", "version_affected" : "=" }, { "version_value" : "12.1(13)e9", "version_affected" : "=" }, { "version_value" : "12.1(13)e12", "version_affected" : "=" }, { "version_value" : "12.1(13)e13", "version_affected" : "=" }, { "version_value" : "12.1(13)e17", "version_affected" : "=" }, { "version_value" : "12.1(13)ea1", "version_affected" : "=" }, { "version_value" : "12.1(13)ea1c", "version_affected" : "=" }, { "version_value" : "12.1(13)ew", "version_affected" : "=" }, { "version_value" : "12.1(13)ew4", "version_affected" : "=" }, { "version_value" : "12.1(13)ex2", "version_affected" : "=" }, { "version_value" : "12.1(13.4)e", "version_affected" : "=" }, { "version_value" : "12.1(14)", "version_affected" : "=" }, { "version_value" : "12.1(14)e1", "version_affected" : "=" }, { "version_value" : "12.1(14)e4", "version_affected" : "=" }, { "version_value" : "12.1(14)e9", "version_affected" : "=" }, { "version_value" : "12.1(14)e10", "version_affected" : "=" }, { "version_value" : "12.1(14)ea1", "version_affected" : "=" }, { "version_value" : "12.1(14)eb", "version_affected" : "=" }, { "version_value" : "12.1(14.5)", "version_affected" : "=" }, { "version_value" : "12.1(15)bc1", "version_affected" : "=" }, { "version_value" : "12.1(16)", "version_affected" : "=" }, { "version_value" : "12.1(18)", "version_affected" : "=" }, { "version_value" : "12.1(18.4)", "version_affected" : "=" }, { "version_value" : "12.1(19)", "version_affected" : "=" }, { "version_value" : "12.1(19)e", "version_affected" : "=" }, { "version_value" : "12.1(19)e1", "version_affected" : "=" }, { "version_value" : "12.1(19)e6", "version_affected" : "=" }, { "version_value" : "12.1(19)ec", "version_affected" : "=" }, { "version_value" : "12.1(19)ew", "version_affected" : "=" }, { "version_value" : "12.1(19)ew3", "version_affected" : "=" }, { "version_value" : "12.1(19)fc1", "version_affected" : "=" }, { "version_value" : "12.1(19.3)e", "version_affected" : "=" }, { "version_value" : "12.1(20)", "version_affected" : "=" }, { "version_value" : "12.1(20)e", "version_affected" : "=" }, { "version_value" : "12.1(20)e1", "version_affected" : "=" }, { "version_value" : "12.1(20)e2", "version_affected" : "=" }, { "version_value" : "12.1(20)e3", "version_affected" : "=" }, { "version_value" : "12.1(20)e5", "version_affected" : "=" }, { "version_value" : "12.1(20)ea1", "version_affected" : "=" }, { "version_value" : "12.1(20)ea1a", "version_affected" : "=" }, { "version_value" : "12.1(20)ec", "version_affected" : "=" }, { "version_value" : "12.1(20)ec1", "version_affected" : "=" }, { "version_value" : "12.1(20)ec2", "version_affected" : "=" }, { "version_value" : "12.1(20)eo", "version_affected" : "=" }, { "version_value" : "12.1(20)eo1", "version_affected" : "=" }, { "version_value" : "12.1(20)eo3", "version_affected" : "=" }, { "version_value" : "12.1(20)ew", "version_affected" : "=" }, { "version_value" : "12.1(20)ew1", "version_affected" : "=" }, { "version_value" : "12.1(20)ew2", "version_affected" : "=" }, { "version_value" : "12.1(20)ew4", "version_affected" : "=" }, { "version_value" : "12.1aa", "version_affected" : "=" }, { "version_value" : "12.1ax", "version_affected" : "=" }, { "version_value" : "12.1ay", "version_affected" : "=" }, { "version_value" : "12.1az", "version_affected" : "=" }, { "version_value" : "12.1cx", "version_affected" : "=" }, { "version_value" : "12.1da", "version_affected" : "=" }, { "version_value" : "12.1db", "version_affected" : "=" }, { "version_value" : "12.1dc", "version_affected" : "=" }, { "version_value" : "12.1e", "version_affected" : "=" }, { "version_value" : "12.1ea", "version_affected" : "=" }, { "version_value" : "12.1eb", "version_affected" : "=" }, { "version_value" : "12.1ec", "version_affected" : "=" }, { "version_value" : "12.1eo", "version_affected" : "=" }, { "version_value" : "12.1eu", "version_affected" : "=" }, { "version_value" : "12.1ev", "version_affected" : "=" }, { "version_value" : "12.1ew", "version_affected" : "=" }, { "version_value" : "12.1ex", "version_affected" : "=" }, { "version_value" : "12.1ey", "version_affected" : "=" }, { "version_value" : "12.1ez", "version_affected" : "=" }, { "version_value" : "12.1ga", "version_affected" : "=" }, { "version_value" : "12.1gb", "version_affected" : "=" }, { "version_value" : "12.1m", "version_affected" : "=" }, { "version_value" : "12.1s", "version_affected" : "=" }, { "version_value" : "12.1sec", "version_affected" : "=" }, { "version_value" : "12.1t", "version_affected" : "=" }, { "version_value" : "12.1x(l)", "version_affected" : "=" }, { "version_value" : "12.1xa", "version_affected" : "=" }, { "version_value" : "12.1xb", "version_affected" : "=" }, { "version_value" : "12.1xc", "version_affected" : "=" }, { "version_value" : "12.1xd", "version_affected" : "=" }, { "version_value" : "12.1xe", "version_affected" : "=" }, { "version_value" : "12.1xf", "version_affected" : "=" }, { "version_value" : "12.1xg", "version_affected" : "=" }, { "version_value" : "12.1xh", "version_affected" : "=" }, { "version_value" : "12.1xi", "version_affected" : "=" }, { "version_value" : "12.1xj", "version_affected" : "=" }, { "version_value" : "12.1xk", "version_affected" : "=" }, { "version_value" : "12.1xl", "version_affected" : "=" }, { "version_value" : "12.1xm", "version_affected" : "=" }, { "version_value" : "12.1xp", "version_affected" : "=" }, { "version_value" : "12.1xq", "version_affected" : "=" }, { "version_value" : "12.1xr", "version_affected" : "=" }, { "version_value" : "12.1xs", "version_affected" : "=" }, { "version_value" : "12.1xt", "version_affected" : "=" }, { "version_value" : "12.1xu", "version_affected" : "=" }, { "version_value" : "12.1xv", "version_affected" : "=" }, { "version_value" : "12.1xw", "version_affected" : "=" }, { "version_value" : "12.1xx", "version_affected" : "=" }, { "version_value" : "12.1xy", "version_affected" : "=" }, { "version_value" : "12.1xz", "version_affected" : "=" }, { "version_value" : "12.1ya", "version_affected" : "=" }, { "version_value" : "12.1yb", "version_affected" : "=" }, { "version_value" : "12.1yc", "version_affected" : "=" }, { "version_value" : "12.1yd", "version_affected" : "=" }, { "version_value" : "12.1ye", "version_affected" : "=" }, { "version_value" : "12.1yf", "version_affected" : "=" }, { "version_value" : "12.1yh", "version_affected" : "=" }, { "version_value" : "12.1yi", "version_affected" : "=" }, { "version_value" : "12.1yj", "version_affected" : "=" } ] } }, { "product_name" : "ios_xe", "version" : { "version_data" : [ { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.1t", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.4.4", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.5.2", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "3.1.0s", "version_affected" : "=" }, { "version_value" : "3.1.0sg", "version_affected" : "=" }, { "version_value" : "3.1.1s", "version_affected" : "=" }, { "version_value" : "3.1.1sg", "version_affected" : "=" }, { "version_value" : "3.1.2s", "version_affected" : "=" }, { "version_value" : "3.1.3s", "version_affected" : "=" }, { "version_value" : "3.1.4s", "version_affected" : "=" }, { "version_value" : "3.2.00.xo.15.0(2)xo", "version_affected" : "=" }, { "version_value" : "3.2.0s", "version_affected" : "=" }, { "version_value" : "3.2.0sg", "version_affected" : "=" }, { "version_value" : "3.2.0xo", "version_affected" : "=" }, { "version_value" : "3.2.1s", "version_affected" : "=" }, { "version_value" : "3.2.1sg", "version_affected" : "=" }, { "version_value" : "3.2.2s", "version_affected" : "=" }, { "version_value" : "3.2.2sg", "version_affected" : "=" }, { "version_value" : "3.2.3sg", "version_affected" : "=" }, { "version_value" : "3.2.4sg", "version_affected" : "=" }, { "version_value" : "3.3.0s", "version_affected" : "=" }, { "version_value" : "3.3.0sg", "version_affected" : "=" }, { "version_value" : "3.3.1s", "version_affected" : "=" }, { "version_value" : "3.3.1sg", "version_affected" : "=" }, { "version_value" : "3.3.2s", "version_affected" : "=" }, { "version_value" : "3.3.3s", "version_affected" : "=" }, { "version_value" : "3.4.0as", "version_affected" : "=" }, { "version_value" : "3.4.0s", "version_affected" : "=" }, { "version_value" : "3.4.1s", "version_affected" : "=" }, { "version_value" : "3.4.2s", "version_affected" : "=" }, { "version_value" : "3.4.3s", "version_affected" : "=" }, { "version_value" : "3.4.4s", "version_affected" : "=" }, { "version_value" : "3.4.5s", "version_affected" : "=" }, { "version_value" : "3.4.xs", "version_affected" : "=" }, { "version_value" : "3.5.0s", "version_affected" : "=" }, { "version_value" : "3.5.1s", "version_affected" : "=" }, { "version_value" : "3.5.2s", "version_affected" : "=" }, { "version_value" : "3.5.xs", "version_affected" : "=" }, { "version_value" : "3.6.0s", "version_affected" : "=" }, { "version_value" : "3.6.1s", "version_affected" : "=" }, { "version_value" : "3.6.2s", "version_affected" : "=" }, { "version_value" : "3.7.0s", "version_affected" : "=" }, { "version_value" : "3.7.1s", "version_affected" : "=" }, { "version_value" : "3.9.0s", "version_affected" : "=" } ] } }, { "product_name" : "nx-os", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "pix_firewall_software", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.1", "version_affected" : "=" }, { "version_value" : "7.2", "version_affected" : "=" }, { "version_value" : "8.0(2)", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" } ] } }, { "product_name" : "staros", "version" : { "version_data" : [ { "version_value" : "14.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130801-lsaospf", "name" : "20130801 OSPF LSA Manipulation Vulnerability in Multiple Cisco Products", "refsource" : "CISCO", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/229804", "name" : "VU#229804", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488 does not properly validate Link State Advertisement (LSA) type 1 packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a (1) unicast or (2) multicast packet, aka Bug IDs CSCug34485, CSCug34469, CSCug39762, CSCug63304, and CSCug39795." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(1\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(1\\)s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(1\\)st:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(1\\)w:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(1\\)xa3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(1\\)xb:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(1\\)xe:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(2\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(2\\)xc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(2\\)xd:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(2\\)xe:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(2\\)xf:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(2\\)xg:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(2a\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(2b\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(3\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(3\\)t2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(3\\)xe:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(3.2\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(3.3\\)s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(3.4\\)t:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(3.6\\)w5\\(9.0.5\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(3d\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(4\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(4\\)s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(4\\)t:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(4\\)xe:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(4\\)xe1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(4\\)xm:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(4\\)xm1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(5\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)t:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)t1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)t2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)wc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)wc2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)wc2b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)wc3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)wc3b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)wc5a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(05\\)wc8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)wc9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)wc9a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)wc11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)wc13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)wx:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)xe:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)xk:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)xk2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)xn:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)xn1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)xs:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)xu:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(5\\)yb4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(5.1\\)xp:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(5.2\\)xu:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(5.3\\)wc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(5.4\\)wc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(5a\\)e:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(6\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(6b\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(7\\)db2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(7\\)dc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(7\\)s1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(7\\)sc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(7\\)t:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(7\\)t2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(7\\)t3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(7\\)wx5\\(15a\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(7\\)xe:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(7\\)xe2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(7\\)xf:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(7\\)xf1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(7\\)xk:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(7\\)xk2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(7\\)xk3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(7\\)xv:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(7.4\\)s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(7a\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(8\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(8\\)s1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(8.0.2\\)s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(8.3\\)sc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(8a\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(9\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(9\\)s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(9\\)s8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(9a\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(10\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(10\\)s3b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(10\\)s7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(10\\)s8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(10\\)w5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(10\\)w5\\(18f\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(10\\)w5\\(18g\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(10a\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(11\\)s6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(11\\)st4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(11a\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(12\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(12\\)s3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(12\\)s4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(12a\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(13\\)s6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(13\\)s8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(13\\)w5\\(19c\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(13\\)wt6\\(1\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(13a\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(14\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(14\\)s7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(14\\)s8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(14\\)st:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(14\\)st3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(14\\)w5\\(20\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(14a\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(15\\)s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(15\\)s3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(15\\)s6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(15\\)s7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(15\\)sc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(15\\)sl:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(15a\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(16\\)s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(16\\)s8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(16\\)s8a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(16\\)s10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(16\\)sc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(16\\)sc3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(16\\)st:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(16\\)st1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(16\\)w5\\(21\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(16.06\\)s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(16a\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(17\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)s4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)s7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)sl:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)sl2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)sl6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)sl9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)st1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)st5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(17\\)st8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(17a\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(18\\)s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(18\\)s5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(18\\)s5a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(18\\)s7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(18\\)sl:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(18\\)st1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(18\\)w5\\(22b\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(18b\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(19\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(19\\)s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(19\\)s2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(19\\)s2a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(19\\)s4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(19\\)sl:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(19\\)sl4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(19\\)sp:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(19\\)st:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(19\\)st2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(19\\)st6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(19a\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(20\\)sl:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(20\\)sp:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(20\\)sp1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(20\\)st2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(20\\)st6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(20\\)st7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(20\\)sx:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(20\\)w5\\(22b\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(20.4\\)sp:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(20a\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)s1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)s3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)s4a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)s5a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)s6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)s7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)sl:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)st:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)st6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)st7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(21\\)sx:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(21a\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(22\\)s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(22\\)s4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(22\\)s5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(22\\)sy:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(23\\)s2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(23\\)s3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(23\\)s4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(23\\)s5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(23\\)s6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(23\\)sx:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(23\\)sz:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(24\\)s1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(24\\)s2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(24\\)s4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(24\\)s5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(24\\)s6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(24.2\\)s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(25\\)s1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(25\\)w5\\(27\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(25\\)w5\\(27c\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(25\\)w5-27d:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(25.4\\)s1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(26\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(26\\)s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(26\\)s1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(26\\)s2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(26\\)s6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(26\\)w5\\(28\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(26\\)w5\\(28a\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(27\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(27\\)s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(27\\)s1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(27\\)sv:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(27\\)sv1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(27\\)sv2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(28\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(28\\)s3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(28\\)s5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(28\\)w5\\(31a\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(28\\)w5-30b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(28\\)w5-32a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(28c\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(28d\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(30\\)s1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(30\\)s2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(30\\)s4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(31\\)s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(31\\)s1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)s12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)s13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)sy8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(32\\)sy9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(33\\)s3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0\\(33\\)s4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0da:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0db:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0dc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0ev:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0sc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0sl:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0sp:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0sv:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0sx:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0sy:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0sz:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0w:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0w5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0wc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0wt:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0wx:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xa:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xb:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xd:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xe:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xf:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xg:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xh:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xi:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xj:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xk:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xl:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xm:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xn:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xp:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xq:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xr:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xs:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xt:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xu:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xv:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.0xw:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(1\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(1\\)db:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(1\\)db2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(1\\)dc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(1\\)dc2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(1\\)e5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(1\\)ex:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(1\\)t:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(1.3\\)t:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(1a\\)t1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(1c\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(2\\)e1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(2\\)t:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(2\\)xf:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(2\\)xf4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(2\\)xf5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(6\\)ea2c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(6\\)ey:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(6\\)ez1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(6\\)ez2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(6.5\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(6.5\\)ec3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(6a\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(7\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(7\\)cx:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(7\\)da2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(7\\)da3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(7\\)ec:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(7a\\)e6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(7a\\)ey:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(7a\\)ey3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(7b\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(8\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(8\\)aa1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(8\\)e:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(8\\)ea:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(8\\)ea1b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(8\\)ea2b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(8a\\)e:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(8a\\)ew:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(8a\\)ew1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(8a\\)ex:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(8b\\)e8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(8b\\)e9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(8b\\)e14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(8b\\)e15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(8b\\)e16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(8b\\)e18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(8b\\)e20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(8b\\)ex4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(8c\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(9\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(9\\)aa:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(9\\)e:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(9\\)e3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(9\\)ea:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(9\\)ex:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(9\\)ex3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(9a\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(10\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(10\\)aa:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(10\\)e:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(10\\)e4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(10\\)ec:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(10\\)ec1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(10\\)ex:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(10\\)ey:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(10.5\\)ec:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(10a\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(11\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(11\\)e:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(11\\)ea1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(11\\)ec:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(11.5\\)e:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(11a\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(11b\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(11b\\)e:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(11b\\)e12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(11b\\)e14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(12\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(12\\)e:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(12a\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(12b\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(12c\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(12c\\)e7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(12c\\)ec:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(12c\\)ev01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(12c\\)ew4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(13\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)ay:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)e1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)e3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)e7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)e9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)e12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)e13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)e17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)ea1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)ea1c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)ew:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)ew4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(13\\)ex2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(13.4\\)e:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(14\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(14\\)e1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(14\\)e4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(14\\)e9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(14\\)e10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(14\\)ea1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(14\\)eb:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(14.5\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(15\\)bc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(16\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(18\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(18.4\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(19\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(19\\)e:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(19\\)e1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(19\\)e6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(19\\)ec:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(19\\)ew:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(19\\)ew3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(19\\)fc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(19.3\\)e:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(20\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)e:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)e1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)e2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)e3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)e5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)ea1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)ea1a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)ec:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)ec1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)ec2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)eo:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)eo1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)eo3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)ew:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)ew1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)ew2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1\\(20\\)ew4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1aa:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1ax:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1ay:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1az:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1cx:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1da:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1db:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1dc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1ea:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1eb:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1ec:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1eo:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1eu:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1ev:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1ew:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1ex:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1ey:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1ez:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1ga:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1gb:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1m:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1sec:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1x\\(l\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xa:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xb:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xd:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xe:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xf:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xg:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xh:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xi:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xj:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xk:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xl:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xm:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xp:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xq:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xr:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xs:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xt:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xu:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xv:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xw:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xx:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xy:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1xz:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1ya:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1yb:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1yc:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1ye:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1yf:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1yh:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1yi:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios:12.1yj:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:2.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:2.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:2.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:2.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:2.3.1t:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:2.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:2.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:2.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:2.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:2.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:2.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:2.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:2.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.1.0s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.1.0sg:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.1.1s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.1.1sg:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.1.2s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.1.3s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.1.4s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.2.00.xo.15.0\\(2\\)xo:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.2.0s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.2.0sg:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.2.0xo:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.2.1s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.2.1sg:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.2.2s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.2.2sg:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.2.3sg:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.2.4sg:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.3.0s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.3.0sg:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.3.1s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.3.1sg:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.3.2s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.3.3s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.4.0as:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.4.0s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.4.1s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.4.2s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.4.3s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.4.4s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.4.5s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.4.xs:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.5.0s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.5.1s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.5.2s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.5.xs:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.6.0s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.6.1s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.6.2s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.7.0s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.7.1s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xe:3.9.0s:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:asa_5500:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:asa_5500:7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:asa_5500:7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:asa_5500:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:asa_5500:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:asa_5500:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:asa_5500:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:asa_5500:9.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:pix_firewall_software:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:pix_firewall_software:7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:pix_firewall_software:7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:pix_firewall_software:8.0\\(2\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:pix_firewall_software:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:pix_firewall_software:9.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:fwsm:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:nx-os:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:staros:14.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-08-05T13:22Z", "lastModifiedDate" : "2013-08-13T17:18Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0150", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "f5", "product" : { "product_data" : [ { "product_name" : "big-ip_access_policy_manager", "version" : { "version_data" : [ { "version_value" : "10.1.0", "version_affected" : "=" }, { "version_value" : "10.2.4", "version_affected" : "=" }, { "version_value" : "11.0.0", "version_affected" : "=" }, { "version_value" : "11.3.0", "version_affected" : "=" } ] } }, { "product_name" : "firepass", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.1.0", "version_affected" : "=" }, { "version_value" : "7.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/53477", "name" : "53477", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.f5.com/kb/en-us/solutions/public/14000/400/sol14468.html", "name" : "http://support.f5.com/kb/en-us/solutions/public/14000/400/sol14468.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://nealpoole.com/blog/2013/07/code-execution-via-f5-networks-java-applet/", "name" : "https://nealpoole.com/blog/2013/07/code-execution-via-f5-networks-java-applet/", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in an unspecified signed Java applet in the client-side components in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, FirePass 6.0.0 through 6.1.0 and 7.0.0, and other products \"when APM is provisioned,\" allows remote attackers to upload and execute arbitrary files via a .. (dot dot) in the filename parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_access_policy_manager:10.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_access_policy_manager:10.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_access_policy_manager:11.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:f5:big-ip_access_policy_manager:10.1.0:*:*:*:*:*:*:standalone" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:f5:big-ip_access_policy_manager:10.2.4:*:*:*:*:*:*:standalone" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:f5:big-ip_access_policy_manager:11.0.0:*:*:*:*:*:*:standalone" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:f5:big-ip_access_policy_manager:11.3.0:*:*:*:*:*:*:standalone" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:f5:firepass:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:f5:firepass:6.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:f5:firepass:7.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-08-09T20:56Z", "lastModifiedDate" : "2013-08-12T15:57Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0151", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "xen", "product" : { "product_data" : [ { "product_name" : "xen", "version" : { "version_data" : [ { "version_value" : "4.2.0", "version_affected" : "=" }, { "version_value" : "4.2.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://openwall.com/lists/oss-security/2013/01/22/10", "name" : "[oss-security] 20130122 Xen Security Advisory 34 (CVE-2013-0151) - nested virtualization on 32-bit exposes host crash", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/55082", "name" : "55082", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201309-24.xml", "name" : "GLSA-201309-24", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://xenbits.xen.org/gitweb/?p=xen.git;a=commit;h=d60d7082289a74e44b3dc8f67df46c3404ca08bf", "name" : "http://xenbits.xen.org/gitweb/?p=xen.git;a=commit;h=d60d7082289a74e44b3dc8f67df46c3404ca08bf", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The do_hvm_op function in xen/arch/x86/hvm/hvm.c in Xen 4.2.x on the x86_32 platform does not prevent HVM_PARAM_NESTEDHVM (aka nested virtualization) operations, which allows guest OS users to cause a denial of service (long-duration page mappings and host OS crash) by leveraging administrative access to an HVM guest in a domain with a large number of VCPUs." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:xen:xen:4.2.0:-:*:*:*:*:x86:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:xen:xen:4.2.1:-:*:*:*:*:x86:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:H/Au:N/C:N/I:N/A:C", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.2, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-07T05:04Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0152", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "xen", "product" : { "product_data" : [ { "product_name" : "xen", "version" : { "version_data" : [ { "version_value" : "4.2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/55082", "name" : "55082", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201309-24.xml", "name" : "GLSA-201309-24", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/01/23/8", "name" : "[oss-security] 20130123 Xen Security Advisory 35 (CVE-2013-0152) - Nested HVM exposes host to being driven out of memory by guest", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id/1028032", "name" : "1028032", "refsource" : "SECTRACK", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Memory leak in Xen 4.2 and unstable allows local HVM guests to cause a denial of service (host memory consumption) by performing nested virtualization in a way that triggers errors that are not properly handled." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:xen:xen:4.2.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 4.7 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-13T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0153", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "xen", "product" : { "product_data" : [ { "product_name" : "xen", "version" : { "version_data" : [ { "version_value" : "3.3.0", "version_affected" : "=" }, { "version_value" : "4.1.0", "version_affected" : "=" }, { "version_value" : "4.1.1", "version_affected" : "=" }, { "version_value" : "4.1.2", "version_affected" : "=" }, { "version_value" : "4.1.3", "version_affected" : "=" }, { "version_value" : "4.1.4", "version_affected" : "=" }, { "version_value" : "4.2.0", "version_affected" : "=" }, { "version_value" : "4.2.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html", "name" : "SUSE-SU-2014:0446", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html", "name" : "openSUSE-SU-2013:0636", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html", "name" : "openSUSE-SU-2013:0637", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-06/msg00049.html", "name" : "openSUSE-SU-2013:0912", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://osvdb.org/89867", "name" : "89867", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0847.html", "name" : "RHSA-2013:0847", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/51881", "name" : "51881", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/55082", "name" : "55082", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201309-24.xml", "name" : "GLSA-201309-24", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2013/dsa-2636", "name" : "DSA-2636", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/05/7", "name" : "[oss-security] 20130205 Xen Security Advisory 36 (CVE-2013-0153) - interrupt remap entries shared and old ones not cleared on AMD IOMMUs", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/57745", "name" : "57745", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81831", "name" : "xen-amdiommu-dos(81831)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The AMD IOMMU support in Xen 4.2.x, 4.1.x, 3.3, and other versions, when using AMD-Vi for PCI passthrough, uses the same interrupt remapping table for the host and all guests, which allows guests to cause a denial of service by injecting an interrupt into other guests." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:xen:xen:4.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:xen:xen:4.2.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:xen:xen:4.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:xen:xen:4.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:xen:xen:4.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:xen:xen:4.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:xen:xen:4.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:xen:xen:3.3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 4.7 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-14T22:55Z", "lastModifiedDate" : "2017-08-29T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0154", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "xen", "product" : { "product_data" : [ { "product_name" : "xen", "version" : { "version_data" : [ { "version_value" : "4.2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html", "name" : "SUSE-SU-2014:0446", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html", "name" : "openSUSE-SU-2013:0636", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html", "name" : "openSUSE-SU-2013:0637", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://osvdb.org/88913", "name" : "88913", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://seclists.org/oss-sec/2013/q1/att-17/xsa37-4_2.patch", "name" : "http://seclists.org/oss-sec/2013/q1/att-17/xsa37-4_2.patch", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/55082", "name" : "55082", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201309-24.xml", "name" : "GLSA-201309-24", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/01/04/2", "name" : "[oss-security] 20130104 Xen Security Advisory 37 (CVE-2013-0154) - Hypervisor crash due to incorrect ASSERT (debug build only)", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/57159", "name" : "57159", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1027937", "name" : "1027937", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/80977", "name" : "xen-hypercall-dos(80977)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The get_page_type function in xen/arch/x86/mm.c in Xen 4.2, when debugging is enabled, allows local PV or HVM guest administrators to cause a denial of service (assertion failure and hypervisor crash) via unspecified vectors related to a hypercall." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:xen:xen:4.2.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 1.9 }, "severity" : "LOW", "exploitabilityScore" : 3.4, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-12T04:33Z", "lastModifiedDate" : "2017-08-29T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0155", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "rubyonrails", "product" : { "product_data" : [ { "product_name" : "rails", "version" : { "version_data" : [ { "version_value" : "3.2.0", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.2.6", "version_affected" : "=" }, { "version_value" : "3.2.7", "version_affected" : "=" }, { "version_value" : "3.2.8", "version_affected" : "=" }, { "version_value" : "3.2.9", "version_affected" : "=" }, { "version_value" : "3.2.10", "version_affected" : "=" } ] } }, { "product_name" : "ruby_on_rails", "version" : { "version_data" : [ { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "=" }, { "version_value" : "3.0.18", "version_affected" : "=" }, { "version_value" : "3.1.0", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.2rc1", "version_affected" : "=" }, { "version_value" : "3.1.3", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.1.5", "version_affected" : "=" }, { "version_value" : "3.1.6", "version_affected" : "=" }, { "version_value" : "3.1.7", "version_affected" : "=" }, { "version_value" : "3.1.8", "version_affected" : "=" }, { "version_value" : "3.1.9", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "debian_linux", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://ics-cert.us-cert.gov/advisories/ICSA-13-036-01A", "name" : "http://ics-cert.us-cert.gov/advisories/ICSA-13-036-01A", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html", "name" : "APPLE-SA-2013-06-04-1", "refsource" : "APPLE", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-12/msg00079.html", "name" : "openSUSE-SU-2013:1904", "refsource" : "SUSE", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-12/msg00081.html", "name" : "openSUSE-SU-2013:1906", "refsource" : "SUSE", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-12/msg00082.html", "name" : "openSUSE-SU-2013:1907", "refsource" : "SUSE", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2014-01/msg00003.html", "name" : "openSUSE-SU-2014:0009", "refsource" : "SUSE", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0154.html", "name" : "RHSA-2013:0154", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0155.html", "name" : "RHSA-2013:0155", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://support.apple.com/kb/HT5784", "name" : "http://support.apple.com/kb/HT5784", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.debian.org/security/2013/dsa-2609", "name" : "DSA-2609", "refsource" : "DEBIAN", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://groups.google.com/group/rubyonrails-security/msg/bc6f13dafe130ee9?dmode=source&output=gplain", "name" : "[rubyonrails-security] 20130108 Unsafe Query Generation Risk in Ruby on Rails (CVE-2013-0155)", "refsource" : "MLIST", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://puppet.com/security/cve/cve-2013-0155", "name" : "https://puppet.com/security/cve/cve-2013-0155", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Ruby on Rails 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing WHERE clauses via a crafted request, as demonstrated by certain \"[nil]\" values, a related issue to CVE-2012-2660 and CVE-2012-2694." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*", "versionStartIncluding" : "3.2.0", "versionEndExcluding" : "3.2.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:ruby_on_rails:*:*:*:*:*:*:*:*", "versionStartIncluding" : "3.0.0", "versionEndExcluding" : "3.0.19" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:ruby_on_rails:*:*:*:*:*:*:*:*", "versionStartIncluding" : "3.1.0", "versionEndExcluding" : "3.1.10" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-13T22:55Z", "lastModifiedDate" : "2019-08-08T15:42Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0156", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "rubyonrails", "product" : { "product_data" : [ { "product_name" : "rails", "version" : { "version_data" : [ { "version_value" : "3.2.0", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.2.6", "version_affected" : "=" }, { "version_value" : "3.2.7", "version_affected" : "=" }, { "version_value" : "3.2.8", "version_affected" : "=" }, { "version_value" : "3.2.9", "version_affected" : "=" }, { "version_value" : "3.2.10", "version_affected" : "=" } ] } }, { "product_name" : "ruby_on_rails", "version" : { "version_data" : [ { "version_value" : "0.5.0", "version_affected" : "=" }, { "version_value" : "0.5.5", "version_affected" : "=" }, { "version_value" : "0.5.6", "version_affected" : "=" }, { "version_value" : "0.5.7", "version_affected" : "=" }, { "version_value" : "0.6.0", "version_affected" : "=" }, { "version_value" : "0.6.5", "version_affected" : "=" }, { "version_value" : "0.7.0", "version_affected" : "=" }, { "version_value" : "0.8.0", "version_affected" : "=" }, { "version_value" : "0.8.5", "version_affected" : "=" }, { "version_value" : "0.9.0", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.9.4", "version_affected" : "=" }, { "version_value" : "0.9.4.1", "version_affected" : "=" }, { "version_value" : "0.10.0", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "0.11.0", "version_affected" : "=" }, { "version_value" : "0.11.1", "version_affected" : "=" }, { "version_value" : "0.12.0", "version_affected" : "=" }, { "version_value" : "0.12.1", "version_affected" : "=" }, { "version_value" : "0.13.0", "version_affected" : "=" }, { "version_value" : "0.13.1", "version_affected" : "=" }, { "version_value" : "0.14.1", "version_affected" : "=" }, { "version_value" : "0.14.2", "version_affected" : "=" }, { "version_value" : "0.14.3", "version_affected" : "=" }, { "version_value" : "0.14.4", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.2.5", "version_affected" : "=" }, { "version_value" : "1.2.6", "version_affected" : "=" }, { "version_value" : "1.9.3", "version_affected" : "=" }, { "version_value" : "1.9.5", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.3.3", "version_affected" : "=" }, { "version_value" : "2.3.4", "version_affected" : "=" }, { "version_value" : "2.3.9", "version_affected" : "=" }, { "version_value" : "2.3.10", "version_affected" : "=" }, { "version_value" : "2.3.11", "version_affected" : "=" }, { "version_value" : "2.3.12", "version_affected" : "=" }, { "version_value" : "2.3.13", "version_affected" : "=" }, { "version_value" : "2.3.14", "version_affected" : "=" }, { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "=" }, { "version_value" : "3.0.18", "version_affected" : "=" }, { "version_value" : "3.1.0", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.2rc1", "version_affected" : "=" }, { "version_value" : "3.1.3", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.1.5", "version_affected" : "=" }, { "version_value" : "3.1.6", "version_affected" : "=" }, { "version_value" : "3.1.7", "version_affected" : "=" }, { "version_value" : "3.1.8", "version_affected" : "=" }, { "version_value" : "3.1.9", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "debian_linux", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://ics-cert.us-cert.gov/advisories/ICSA-13-036-01A", "name" : "http://ics-cert.us-cert.gov/advisories/ICSA-13-036-01A", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html", "name" : "APPLE-SA-2013-03-14-1", "refsource" : "APPLE", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0153.html", "name" : "RHSA-2013:0153", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0154.html", "name" : "RHSA-2013:0154", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0155.html", "name" : "RHSA-2013:0155", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://weblog.rubyonrails.org/2013/1/28/Rails-3-0-20-and-2-3-16-have-been-released/", "name" : "http://weblog.rubyonrails.org/2013/1/28/Rails-3-0-20-and-2-3-16-have-been-released/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2013/dsa-2604", "name" : "DSA-2604", "refsource" : "DEBIAN", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.fujitsu.com/global/support/software/security/products-f/sw-sv-rcve-ror201301e.html", "name" : "http://www.fujitsu.com/global/support/software/security/products-f/sw-sv-rcve-ror201301e.html", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.insinuator.net/2013/01/rails-yaml/", "name" : "http://www.insinuator.net/2013/01/rails-yaml/", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/380039", "name" : "VU#380039", "refsource" : "CERT-VN", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.kb.cert.org/vuls/id/628463", "name" : "VU#628463", "refsource" : "CERT-VN", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://community.rapid7.com/community/metasploit/blog/2013/01/09/serialization-mischief-in-ruby-land-cve-2013-0156", "name" : "https://community.rapid7.com/community/metasploit/blog/2013/01/09/serialization-mischief-in-ruby-land-cve-2013-0156", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://groups.google.com/group/rubyonrails-security/msg/c1432d0f8c70e89d?dmode=source&output=gplain", "name" : "[rubyonrails-security] 20130108 Multiple vulnerabilities in parameter parsing in Action Pack (CVE-2013-0156)", "refsource" : "MLIST", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://puppet.com/security/cve/cve-2013-0156", "name" : "https://puppet.com/security/cve/cve-2013-0156", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) involving nested XML entity references, by leveraging Action Pack support for (1) YAML type conversion or (2) Symbol type conversion." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*", "versionStartIncluding" : "3.2.0", "versionEndExcluding" : "3.2.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:ruby_on_rails:*:*:*:*:*:*:*:*", "versionEndExcluding" : "2.3.15" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:ruby_on_rails:*:*:*:*:*:*:*:*", "versionStartIncluding" : "3.0.0", "versionEndExcluding" : "3.0.19" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:ruby_on_rails:*:*:*:*:*:*:*:*", "versionStartIncluding" : "3.1.0", "versionEndExcluding" : "3.1.10" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-13T22:55Z", "lastModifiedDate" : "2019-08-08T15:42Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0157", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "kernel", "product" : { "product_data" : [ { "product_name" : "util-linux", "version" : { "version_data" : [ { "version_value" : "2.14.1", "version_affected" : "=" }, { "version_value" : "2.17.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.debian.org/697464", "name" : "http://bugs.debian.org/697464", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://marc.info/?l=oss-security&m=135749410312247&w=2", "name" : "[oss-security] 20130106 Re: CVE request: mount/umount leak information about existence of folders", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://osvdb.org/88953", "name" : "88953", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0517.html", "name" : "RHSA-2013:0517", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:154", "name" : "MDVSA-2013:154", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=892330", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=892330", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kernel:util-linux:2.14.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kernel:util-linux:2.17.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-01-21T18:55Z", "lastModifiedDate" : "2014-01-22T20:26Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0158", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cloudbees", "product" : { "product_data" : [ { "product_name" : "jenkins", "version" : { "version_data" : [ { "version_value" : "1.400", "version_affected" : "=" }, { "version_value" : "1.424", "version_affected" : "=" }, { "version_value" : "1.447", "version_affected" : "=" }, { "version_value" : "1.447.1.1", "version_affected" : "=" }, { "version_value" : "1.447.2.2", "version_affected" : "=" }, { "version_value" : "1.447.3.1", "version_affected" : "=" }, { "version_value" : "1.466.1.2", "version_affected" : "=" }, { "version_value" : "1.466.2.1", "version_affected" : "=" }, { "version_value" : "1.480.3.1", "version_affected" : "<=" } ] } } ] } }, { "vendor_name" : "jenkins", "product" : { "product_data" : [ { "product_name" : "jenkins", "version" : { "version_data" : [ { "version_value" : "1.400", "version_affected" : "=" }, { "version_value" : "1.401", "version_affected" : "=" }, { "version_value" : "1.402", "version_affected" : "=" }, { "version_value" : "1.403", "version_affected" : "=" }, { "version_value" : "1.404", "version_affected" : "=" }, { "version_value" : "1.405", "version_affected" : "=" }, { "version_value" : "1.406", "version_affected" : "=" }, { "version_value" : "1.407", "version_affected" : "=" }, { "version_value" : "1.408", "version_affected" : "=" }, { "version_value" : "1.409", "version_affected" : "=" }, { "version_value" : "1.409.1", "version_affected" : "=" }, { "version_value" : "1.409.2", "version_affected" : "=" }, { "version_value" : "1.409.3", "version_affected" : "=" }, { "version_value" : "1.410", "version_affected" : "=" }, { "version_value" : "1.411", "version_affected" : "=" }, { "version_value" : "1.412", "version_affected" : "=" }, { "version_value" : "1.413", "version_affected" : "=" }, { "version_value" : "1.414", "version_affected" : "=" }, { "version_value" : "1.415", "version_affected" : "=" }, { "version_value" : "1.416", "version_affected" : "=" }, { "version_value" : "1.417", "version_affected" : "=" }, { "version_value" : "1.418", "version_affected" : "=" }, { "version_value" : "1.419", "version_affected" : "=" }, { "version_value" : "1.420", "version_affected" : "=" }, { "version_value" : "1.421", "version_affected" : "=" }, { "version_value" : "1.422", "version_affected" : "=" }, { "version_value" : "1.423", "version_affected" : "=" }, { "version_value" : "1.424", "version_affected" : "=" }, { "version_value" : "1.424.1", "version_affected" : "=" }, { "version_value" : "1.424.2", "version_affected" : "=" }, { "version_value" : "1.424.3", "version_affected" : "=" }, { "version_value" : "1.424.4", "version_affected" : "=" }, { "version_value" : "1.424.5", "version_affected" : "=" }, { "version_value" : "1.424.6", "version_affected" : "=" }, { "version_value" : "1.425", "version_affected" : "=" }, { "version_value" : "1.426", "version_affected" : "=" }, { "version_value" : "1.427", "version_affected" : "=" }, { "version_value" : "1.428", "version_affected" : "=" }, { "version_value" : "1.429", "version_affected" : "=" }, { "version_value" : "1.430", "version_affected" : "=" }, { "version_value" : "1.431", "version_affected" : "=" }, { "version_value" : "1.432", "version_affected" : "=" }, { "version_value" : "1.433", "version_affected" : "=" }, { "version_value" : "1.434", "version_affected" : "=" }, { "version_value" : "1.435", "version_affected" : "=" }, { "version_value" : "1.436", "version_affected" : "=" }, { "version_value" : "1.437", "version_affected" : "=" }, { "version_value" : "1.447.1", "version_affected" : "=" }, { "version_value" : "1.447.2", "version_affected" : "=" }, { "version_value" : "1.466.1", "version_affected" : "=" }, { "version_value" : "1.466.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0220.html", "name" : "RHSA-2013:0220", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-01-04.cb", "name" : "http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-01-04.cb", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/01/07/4", "name" : "[oss-security] 20130107 Re: CVE Request: Jenkins possible remote code execution", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=892795", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=892795", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/jenkinsci/jenkins/commit/3dc13b957b14cec649036e8dd517f0f9cb21fb04", "name" : "https://github.com/jenkinsci/jenkins/commit/3dc13b957b14cec649036e8dd517f0f9cb21fb04", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://github.com/jenkinsci/jenkins/commit/4895eaafca468b7f0f1a3166b2fca7414f0d5da5", "name" : "https://github.com/jenkinsci/jenkins/commit/4895eaafca468b7f0f1a3166b2fca7414f0d5da5", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://github.com/jenkinsci/jenkins/commit/94a8789b699132dd706021a6be1b78bc47f19602", "name" : "https://github.com/jenkinsci/jenkins/commit/94a8789b699132dd706021a6be1b78bc47f19602", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://github.com/jenkinsci/jenkins/commit/a9aff088f327278a8873aef47fa8f80d3c5932fd", "name" : "https://github.com/jenkinsci/jenkins/commit/a9aff088f327278a8873aef47fa8f80d3c5932fd", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://github.com/jenkinsci/jenkins/commit/c3d8e05a1b3d58b6c4dcff97394cb3a79608b4b2", "name" : "https://github.com/jenkinsci/jenkins/commit/c3d8e05a1b3d58b6c4dcff97394cb3a79608b4b2", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-01-04", "name" : "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-01-04", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x before 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote attackers to obtain the master cryptographic key via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cloudbees:jenkins:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.480.3.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.400:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.401:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.402:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.403:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.404:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.405:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.406:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.407:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.408:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.409:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.410:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.411:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.412:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.413:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.414:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.415:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.416:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.417:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.418:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.419:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.420:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.421:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.422:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.423:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.424:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.425:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.426:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.427:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.428:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.429:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.430:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.431:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.432:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.433:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.434:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.435:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.436:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.437:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cloudbees:jenkins:1.466.1.2:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cloudbees:jenkins:1.466.2.1:-:enterprise:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cloudbees:jenkins:1.400:-:lts:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cloudbees:jenkins:1.424:-:lts:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cloudbees:jenkins:1.447:-:lts:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.409.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.409.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.409.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.424.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.424.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.424.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.424.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.424.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.424.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.447.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.447.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:1.466.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.466.2" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cloudbees:jenkins:1.447.1.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cloudbees:jenkins:1.447.2.2:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cloudbees:jenkins:1.447.3.1:-:enterprise:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-24T22:55Z", "lastModifiedDate" : "2018-10-30T16:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0159", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "fedoraproject", "product" : { "product_data" : [ { "product_name" : "fedora", "version" : { "version_data" : [ { "version_value" : "17", "version_affected" : "=" }, { "version_value" : "18", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-59" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=892299", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=892299", "refsource" : "CONFIRM", "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=892815", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=892815", "refsource" : "CONFIRM", "tags" : [ "Issue Tracking", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The fedora-business-cards package before 1-0.1.beta1.fc17 on Fedora 17 and before 1-0.1.beta1.fc18 on Fedora 18 allows local users to cause a denial of service or write to arbitrary files via a symlink attack on /tmp/fedora-business-cards-buffer.svg." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:fedoraproject:fedora:17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:fedoraproject:fedora:18:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.1, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.2 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 3.6 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 4.9, "acInsufInfo" : true, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2018-05-01T19:29Z", "lastModifiedDate" : "2018-06-13T16:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0160", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "=" }, { "version_value" : "3.0.18", "version_affected" : "=" }, { "version_value" : "3.0.19", "version_affected" : "=" }, { "version_value" : "3.0.20", "version_affected" : "=" }, { "version_value" : "3.0.21", "version_affected" : "=" }, { "version_value" : "3.0.22", "version_affected" : "=" }, { "version_value" : "3.0.23", "version_affected" : "=" }, { "version_value" : "3.0.24", "version_affected" : "=" }, { "version_value" : "3.0.25", "version_affected" : "=" }, { "version_value" : "3.0.26", "version_affected" : "=" }, { "version_value" : "3.0.27", "version_affected" : "=" }, { "version_value" : "3.0.28", "version_affected" : "=" }, { "version_value" : "3.0.29", "version_affected" : "=" }, { "version_value" : "3.0.30", "version_affected" : "=" }, { "version_value" : "3.0.31", "version_affected" : "=" }, { "version_value" : "3.0.32", "version_affected" : "=" }, { "version_value" : "3.0.33", "version_affected" : "=" }, { "version_value" : "3.0.34", "version_affected" : "=" }, { "version_value" : "3.0.35", "version_affected" : "=" }, { "version_value" : "3.0.36", "version_affected" : "=" }, { "version_value" : "3.0.37", "version_affected" : "=" }, { "version_value" : "3.0.38", "version_affected" : "=" }, { "version_value" : "3.0.39", "version_affected" : "=" }, { "version_value" : "3.0.40", "version_affected" : "=" }, { "version_value" : "3.0.41", "version_affected" : "=" }, { "version_value" : "3.0.42", "version_affected" : "=" }, { "version_value" : "3.0.43", "version_affected" : "=" }, { "version_value" : "3.0.44", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.3", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.1.5", "version_affected" : "=" }, { "version_value" : "3.1.6", "version_affected" : "=" }, { "version_value" : "3.1.7", "version_affected" : "=" }, { "version_value" : "3.1.8", "version_affected" : "=" }, { "version_value" : "3.1.9", "version_affected" : "=" }, { "version_value" : "3.1.10", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.2.6", "version_affected" : "=" }, { "version_value" : "3.2.7", "version_affected" : "=" }, { "version_value" : "3.2.8", "version_affected" : "=" }, { "version_value" : "3.2.9", "version_affected" : "=" }, { "version_value" : "3.2.10", "version_affected" : "=" }, { "version_value" : "3.2.11", "version_affected" : "=" }, { "version_value" : "3.2.12", "version_affected" : "=" }, { "version_value" : "3.2.13", "version_affected" : "=" }, { "version_value" : "3.2.14", "version_affected" : "=" }, { "version_value" : "3.2.15", "version_affected" : "=" }, { "version_value" : "3.2.16", "version_affected" : "=" }, { "version_value" : "3.2.17", "version_affected" : "=" }, { "version_value" : "3.2.18", "version_affected" : "=" }, { "version_value" : "3.2.19", "version_affected" : "=" }, { "version_value" : "3.2.20", "version_affected" : "=" }, { "version_value" : "3.2.21", "version_affected" : "=" }, { "version_value" : "3.2.22", "version_affected" : "=" }, { "version_value" : "3.2.23", "version_affected" : "=" }, { "version_value" : "3.2.24", "version_affected" : "=" }, { "version_value" : "3.2.25", "version_affected" : "=" }, { "version_value" : "3.2.26", "version_affected" : "=" }, { "version_value" : "3.2.27", "version_affected" : "=" }, { "version_value" : "3.2.28", "version_affected" : "=" }, { "version_value" : "3.2.29", "version_affected" : "=" }, { "version_value" : "3.2.30", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.3.4", "version_affected" : "=" }, { "version_value" : "3.3.5", "version_affected" : "=" }, { "version_value" : "3.3.6", "version_affected" : "=" }, { "version_value" : "3.3.7", "version_affected" : "=" }, { "version_value" : "3.3.8", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.4.3", "version_affected" : "=" }, { "version_value" : "3.4.4", "version_affected" : "=" }, { "version_value" : "3.4.5", "version_affected" : "=" }, { "version_value" : "3.4.6", "version_affected" : "=" }, { "version_value" : "3.4.7", "version_affected" : "=" }, { "version_value" : "3.4.8", "version_affected" : "=" }, { "version_value" : "3.4.9", "version_affected" : "=" }, { "version_value" : "3.4.10", "version_affected" : "=" }, { "version_value" : "3.4.11", "version_affected" : "=" }, { "version_value" : "3.4.12", "version_affected" : "=" }, { "version_value" : "3.4.13", "version_affected" : "=" }, { "version_value" : "3.4.14", "version_affected" : "=" }, { "version_value" : "3.4.15", "version_affected" : "=" }, { "version_value" : "3.4.16", "version_affected" : "=" }, { "version_value" : "3.4.17", "version_affected" : "=" }, { "version_value" : "3.4.18", "version_affected" : "=" }, { "version_value" : "3.4.19", "version_affected" : "=" }, { "version_value" : "3.4.20", "version_affected" : "=" }, { "version_value" : "3.4.21", "version_affected" : "=" }, { "version_value" : "3.4.22", "version_affected" : "=" }, { "version_value" : "3.4.23", "version_affected" : "=" }, { "version_value" : "3.4.24", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "=" }, { "version_value" : "3.6.9", "version_affected" : "=" }, { "version_value" : "3.6.10", "version_affected" : "=" }, { "version_value" : "3.6.11", "version_affected" : "=" }, { "version_value" : "3.7", "version_affected" : "=" }, { "version_value" : "3.7.1", "version_affected" : "=" }, { "version_value" : "3.7.2", "version_affected" : "=" }, { "version_value" : "3.7.3", "version_affected" : "=" }, { "version_value" : "3.7.4", "version_affected" : "=" }, { "version_value" : "3.7.5", "version_affected" : "=" }, { "version_value" : "3.7.6", "version_affected" : "=" }, { "version_value" : "3.7.7", "version_affected" : "=" }, { "version_value" : "3.7.8", "version_affected" : "=" }, { "version_value" : "3.7.9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00004.html", "name" : "openSUSE-SU-2013:0395", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00018.html", "name" : "SUSE-SU-2013:0674", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html", "name" : "openSUSE-SU-2013:0925", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html", "name" : "SUSE-SU-2013:1182", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html", "name" : "openSUSE-SU-2013:1187", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/01/08/3", "name" : "[oss-security] 20130107 Re: /dev/ptmx timing", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-2128-1", "name" : "USN-2128-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-2129-1", "name" : "USN-2129-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=892983", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=892983", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Linux kernel through 3.7.9 allows local users to obtain sensitive information about keystroke timing by using the inotify API on the /dev/ptmx device." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.44:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-18T04:41Z", "lastModifiedDate" : "2017-11-29T02:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0161", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "havalite", "product" : { "product_data" : [ { "product_name" : "havalite", "version" : { "version_data" : [ { "version_value" : "1.1.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2013/01/08/4", "name" : "http://www.openwall.com/lists/oss-security/2013/01/08/4", "refsource" : "MISC", "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Havalite CMS 1.1.7 has a stored XSS vulnerability" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:havalite:havalite:1.1.7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2020-01-29T15:15Z", "lastModifiedDate" : "2020-01-30T21:28Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0162", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ryan_davis", "product" : { "product_data" : [ { "product_name" : "ruby_parser", "version" : { "version_data" : [ { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.0.6", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.0.a1", "version_affected" : "=" }, { "version_value" : "3.0.0.a2", "version_affected" : "=" }, { "version_value" : "3.0.0.a3", "version_affected" : "=" }, { "version_value" : "3.0.0.a4", "version_affected" : "=" }, { "version_value" : "3.0.0.a5", "version_affected" : "=" }, { "version_value" : "3.0.0.a6", "version_affected" : "=" }, { "version_value" : "3.0.0.a7", "version_affected" : "=" }, { "version_value" : "3.0.0.a8", "version_affected" : "=" }, { "version_value" : "3.0.0.a9", "version_affected" : "=" }, { "version_value" : "3.0.0.a10", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.1.0", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0544.html", "name" : "RHSA-2013:0544", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0548.html", "name" : "RHSA-2013:0548", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=892806", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=892806", "refsource" : "MISC", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ryan_davis:ruby_parser:1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ryan_davis:ruby_parser:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ryan_davis:ruby_parser:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ryan_davis:ruby_parser:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ryan_davis:ruby_parser:2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ryan_davis:ruby_parser:2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ryan_davis:ruby_parser:2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ryan_davis:ruby_parser:2.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ryan_davis:ruby_parser:2.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ryan_davis:ruby_parser:2.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ryan_davis:ruby_parser:2.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ryan_davis:ruby_parser:2.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ryan_davis:ruby_parser:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ryan_davis:ruby_parser:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ryan_davis:ruby_parser:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ryan_davis:ruby_parser:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ryan_davis:ruby_parser:3.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ryan_davis:ruby_parser:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.1.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-01T05:40Z", "lastModifiedDate" : "2013-03-01T05:40Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0163", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "openshift", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-668" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://access.redhat.com/security/cve/cve-2013-0163", "name" : "https://access.redhat.com/security/cve/cve-2013-0163", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0163", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0163", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "OpenShift haproxy cartridge: predictable /tmp in set-proxy connection hook which could facilitate DoS" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:openshift:1.0:*:*:*:enterprise:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:openshift:2.0:*:*:*:enterprise:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-12-05T15:15Z", "lastModifiedDate" : "2019-12-14T13:08Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0164", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "openshift", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "<=" } ] } }, { "product_name" : "openshift_origin", "version" : { "version_data" : [ { "version_value" : "1.0.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0220.html", "name" : "RHSA-2013:0220", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=893307", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=893307", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/openshift/origin-server/commit/524465f70a32d0eb6bf047e6a05c76c22d52bfa2", "name" : "https://github.com/openshift/origin-server/commit/524465f70a32d0eb6bf047e6a05c76c22d52bfa2", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://github.com/openshift/origin-server/pull/1136", "name" : "https://github.com/openshift/origin-server/pull/1136", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The lockwrap function in port-proxy/bin/openshift-port-proxy-cfg in Red Hat OpenShift Origin before 1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:openshift:*:-:enterprise:*:*:*:*:*", "versionEndIncluding" : "1.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:openshift_origin:1.0.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 3.6 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-24T22:55Z", "lastModifiedDate" : "2013-02-25T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0165", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "openshift", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0165", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0165", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "cartridges/openshift-origin-cartridge-mongodb-2.2/info/bin/dump.sh in OpenShift does not properly create files in /tmp." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:openshift:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-11-01T19:15Z", "lastModifiedDate" : "2019-11-07T18:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0166", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "openssl", "product" : { "product_data" : [ { "product_name" : "openssl", "version" : { "version_data" : [ { "version_value" : "0.9.1c", "version_affected" : "=" }, { "version_value" : "0.9.2b", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.9.3a", "version_affected" : "=" }, { "version_value" : "0.9.4", "version_affected" : "=" }, { "version_value" : "0.9.5", "version_affected" : "=" }, { "version_value" : "0.9.5a", "version_affected" : "=" }, { "version_value" : "0.9.6", "version_affected" : "=" }, { "version_value" : "0.9.6a", "version_affected" : "=" }, { "version_value" : "0.9.6b", "version_affected" : "=" }, { "version_value" : "0.9.6c", "version_affected" : "=" }, { "version_value" : "0.9.6d", "version_affected" : "=" }, { "version_value" : "0.9.6e", "version_affected" : "=" }, { "version_value" : "0.9.6f", "version_affected" : "=" }, { "version_value" : "0.9.6g", "version_affected" : "=" }, { "version_value" : "0.9.6h", "version_affected" : "=" }, { "version_value" : "0.9.6i", "version_affected" : "=" }, { "version_value" : "0.9.6j", "version_affected" : "=" }, { "version_value" : "0.9.6k", "version_affected" : "=" }, { "version_value" : "0.9.6l", "version_affected" : "=" }, { "version_value" : "0.9.6m", "version_affected" : "=" }, { "version_value" : "0.9.7", "version_affected" : "=" }, { "version_value" : "0.9.7a", "version_affected" : "=" }, { "version_value" : "0.9.7b", "version_affected" : "=" }, { "version_value" : "0.9.7c", "version_affected" : "=" }, { "version_value" : "0.9.7d", "version_affected" : "=" }, { "version_value" : "0.9.7e", "version_affected" : "=" }, { "version_value" : "0.9.7f", "version_affected" : "=" }, { "version_value" : "0.9.7g", "version_affected" : "=" }, { "version_value" : "0.9.7h", "version_affected" : "=" }, { "version_value" : "0.9.7i", "version_affected" : "=" }, { "version_value" : "0.9.7j", "version_affected" : "=" }, { "version_value" : "0.9.7k", "version_affected" : "=" }, { "version_value" : "0.9.7l", "version_affected" : "=" }, { "version_value" : "0.9.7m", "version_affected" : "=" }, { "version_value" : "0.9.8", "version_affected" : "=" }, { "version_value" : "0.9.8a", "version_affected" : "=" }, { "version_value" : "0.9.8b", "version_affected" : "=" }, { "version_value" : "0.9.8c", "version_affected" : "=" }, { "version_value" : "0.9.8d", "version_affected" : "=" }, { "version_value" : "0.9.8e", "version_affected" : "=" }, { "version_value" : "0.9.8f", "version_affected" : "=" }, { "version_value" : "0.9.8g", "version_affected" : "=" }, { "version_value" : "0.9.8h", "version_affected" : "=" }, { "version_value" : "0.9.8i", "version_affected" : "=" }, { "version_value" : "0.9.8j", "version_affected" : "=" }, { "version_value" : "0.9.8k", "version_affected" : "=" }, { "version_value" : "0.9.8l", "version_affected" : "=" }, { "version_value" : "0.9.8m", "version_affected" : "=" }, { "version_value" : "0.9.8n", "version_affected" : "=" }, { "version_value" : "0.9.8o", "version_affected" : "=" }, { "version_value" : "0.9.8p", "version_affected" : "=" }, { "version_value" : "0.9.8q", "version_affected" : "=" }, { "version_value" : "0.9.8r", "version_affected" : "=" }, { "version_value" : "0.9.8s", "version_affected" : "=" }, { "version_value" : "0.9.8t", "version_affected" : "=" }, { "version_value" : "0.9.8u", "version_affected" : "=" }, { "version_value" : "0.9.8v", "version_affected" : "=" }, { "version_value" : "0.9.8w", "version_affected" : "=" }, { "version_value" : "0.9.8x", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.0a", "version_affected" : "=" }, { "version_value" : "1.0.0b", "version_affected" : "=" }, { "version_value" : "1.0.0c", "version_affected" : "=" }, { "version_value" : "1.0.0d", "version_affected" : "=" }, { "version_value" : "1.0.0e", "version_affected" : "=" }, { "version_value" : "1.0.0f", "version_affected" : "=" }, { "version_value" : "1.0.0g", "version_affected" : "=" }, { "version_value" : "1.0.0h", "version_affected" : "=" }, { "version_value" : "1.0.0i", "version_affected" : "=" }, { "version_value" : "1.0.0j", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.1a", "version_affected" : "=" }, { "version_value" : "1.0.1b", "version_affected" : "=" }, { "version_value" : "1.0.1c", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "openssl", "version" : { "version_data" : [ { "version_value" : "0.9.6-15", "version_affected" : "=" }, { "version_value" : "0.9.6b-3", "version_affected" : "=" }, { "version_value" : "0.9.7a-2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-310" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=62e4506a7d4cec1c8e1ff687f6b220f6a62a57c7", "name" : "http://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=62e4506a7d4cec1c8e1ff687f6b220f6a62a57c7", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=66e8211c0b1347970096e04b18aa52567c325200", "name" : "http://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=66e8211c0b1347970096e04b18aa52567c325200", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=ebc71865f0506a293242bd4aec97cdc7a8ef24b0", "name" : "http://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=ebc71865f0506a293242bd4aec97cdc7a8ef24b0", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html", "name" : "APPLE-SA-2013-09-12-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html", "name" : "SUSE-SU-2015:0578", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html", "name" : "openSUSE-SU-2016:0640", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136396549913849&w=2", "name" : "HPSBUX02856", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136432043316835&w=2", "name" : "SSRT101108", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=137545771702053&w=2", "name" : "SSRT101289", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0587.html", "name" : "RHSA-2013:0587", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0782.html", "name" : "RHSA-2013:0782", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0783.html", "name" : "RHSA-2013:0783", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0833.html", "name" : "RHSA-2013:0833", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/53623", "name" : "53623", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/55108", "name" : "55108", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/55139", "name" : "55139", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT5880", "name" : "http://support.apple.com/kb/HT5880", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2013/dsa-2621", "name" : "DSA-2621", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/737740", "name" : "VU#737740", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.openssl.org/news/secadv_20130204.txt", "name" : "http://www.openssl.org/news/secadv_20130204.txt", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.splunk.com/view/SP-CAAAHXG", "name" : "http://www.splunk.com/view/SP-CAAAHXG", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=908052", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=908052", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18754", "name" : "oval:org.mitre.oval:def:18754", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19081", "name" : "oval:org.mitre.oval:def:19081", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19360", "name" : "oval:org.mitre.oval:def:19360", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19487", "name" : "oval:org.mitre.oval:def:19487", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03883001", "name" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03883001", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer dereference and application crash) via an invalid key." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.3a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.5:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.5:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.5a:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.5a:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.6:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.6:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.6:beta3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.6a:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.6a:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.6a:beta3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.7:beta3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.7:beta4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.7:beta5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.7:beta6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.7l:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.7m:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8m:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8r:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8s:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8t:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8u:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8v:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8w:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8x:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:openssl:0.9.6-15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:openssl:0.9.6b-3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:openssl:0.9.7a-2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-08T19:55Z", "lastModifiedDate" : "2018-08-09T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0167", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_virtualization", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=893332", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=893332", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2013-0886.html", "name" : "RHSA-2013:0886", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2013-0907.html", "name" : "RHSA-2013:0907", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become \"unavailable to the managment server\" via guestInfo dictionaries with \"unexpected fields.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:enterprise_virtualization:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:enterprise_virtualization:3.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:L/Au:S/C:N/I:N/A:P", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.7 }, "severity" : "LOW", "exploitabilityScore" : 5.1, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-08-19T23:55Z", "lastModifiedDate" : "2013-08-20T14:22Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0168", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_virtualization_manager", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0211.html", "name" : "RHSA-2013:0211", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57750", "name" : "57750", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id/1028076", "name" : "1028076", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=893355", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=893355", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81834", "name" : "entreprise-movedisk-dos(81834)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The MoveDisk command in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier does not properly check permissions on storage domains, which allows remote authenticated storage admins to cause a denial of service (free space consumption of other storage domains) via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:enterprise_virtualization_manager:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:enterprise_virtualization_manager:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:enterprise_virtualization_manager:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:enterprise_virtualization_manager:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:enterprise_virtualization_manager:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-12T23:55Z", "lastModifiedDate" : "2017-08-29T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0169", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "openssl", "product" : { "product_data" : [ { "product_name" : "openssl", "version" : { "version_data" : [ { "version_value" : "0.9.8", "version_affected" : "=" }, { "version_value" : "0.9.8a", "version_affected" : "=" }, { "version_value" : "0.9.8b", "version_affected" : "=" }, { "version_value" : "0.9.8c", "version_affected" : "=" }, { "version_value" : "0.9.8d", "version_affected" : "=" }, { "version_value" : "0.9.8e", "version_affected" : "=" }, { "version_value" : "0.9.8f", "version_affected" : "=" }, { "version_value" : "0.9.8g", "version_affected" : "=" }, { "version_value" : "0.9.8h", "version_affected" : "=" }, { "version_value" : "0.9.8i", "version_affected" : "=" }, { "version_value" : "0.9.8j", "version_affected" : "=" }, { "version_value" : "0.9.8k", "version_affected" : "=" }, { "version_value" : "0.9.8l", "version_affected" : "=" }, { "version_value" : "0.9.8m", "version_affected" : "=" }, { "version_value" : "0.9.8n", "version_affected" : "=" }, { "version_value" : "0.9.8o", "version_affected" : "=" }, { "version_value" : "0.9.8p", "version_affected" : "=" }, { "version_value" : "0.9.8q", "version_affected" : "=" }, { "version_value" : "0.9.8r", "version_affected" : "=" }, { "version_value" : "0.9.8s", "version_affected" : "=" }, { "version_value" : "0.9.8t", "version_affected" : "=" }, { "version_value" : "0.9.8u", "version_affected" : "=" }, { "version_value" : "0.9.8v", "version_affected" : "=" }, { "version_value" : "0.9.8w", "version_affected" : "=" }, { "version_value" : "0.9.8x", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.0a", "version_affected" : "=" }, { "version_value" : "1.0.0b", "version_affected" : "=" }, { "version_value" : "1.0.0c", "version_affected" : "=" }, { "version_value" : "1.0.0d", "version_affected" : "=" }, { "version_value" : "1.0.0e", "version_affected" : "=" }, { "version_value" : "1.0.0f", "version_affected" : "=" }, { "version_value" : "1.0.0g", "version_affected" : "=" }, { "version_value" : "1.0.0h", "version_affected" : "=" }, { "version_value" : "1.0.0i", "version_affected" : "=" }, { "version_value" : "1.0.0j", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.1a", "version_affected" : "=" }, { "version_value" : "1.0.1b", "version_affected" : "=" }, { "version_value" : "1.0.1c", "version_affected" : "=" }, { "version_value" : "1.0.1d", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "openjdk", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" }, { "version_value" : "1.8.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "polarssl", "product" : { "product_data" : [ { "product_name" : "polarssl", "version" : { "version_data" : [ { "version_value" : "0.10.0", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "0.11.0", "version_affected" : "=" }, { "version_value" : "0.11.1", "version_affected" : "=" }, { "version_value" : "0.12.0", "version_affected" : "=" }, { "version_value" : "0.12.1", "version_affected" : "=" }, { "version_value" : "0.13.1", "version_affected" : "=" }, { "version_value" : "0.14.0", "version_affected" : "=" }, { "version_value" : "0.14.2", "version_affected" : "=" }, { "version_value" : "0.14.3", "version_affected" : "=" }, { "version_value" : "0.99", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-310" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blog.fuseyism.com/index.php/2013/02/20/security-icedtea-2-1-6-2-2-6-2-3-7-for-openjdk-7-released/", "name" : "http://blog.fuseyism.com/index.php/2013/02/20/security-icedtea-2-1-6-2-2-6-2-3-7-for-openjdk-7-released/", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html", "name" : "APPLE-SA-2013-09-12-1", "refsource" : "APPLE", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101366.html", "name" : "FEDORA-2013-4403", "refsource" : "FEDORA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00020.html", "name" : "SUSE-SU-2013:0328", "refsource" : "SUSE", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00000.html", "name" : "openSUSE-SU-2013:0375", "refsource" : "SUSE", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00002.html", "name" : "openSUSE-SU-2013:0378", "refsource" : "SUSE", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00020.html", "name" : "SUSE-SU-2013:0701", "refsource" : "SUSE", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html", "name" : "SUSE-SU-2014:0320", "refsource" : "SUSE", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html", "name" : "SUSE-SU-2015:0578", "refsource" : "SUSE", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html", "name" : "openSUSE-SU-2016:0640", "refsource" : "SUSE", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=136396549913849&w=2", "name" : "HPSBUX02856", "refsource" : "HP", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=136432043316835&w=2", "name" : "SSRT101108", "refsource" : "HP", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=136439120408139&w=2", "name" : "HPSBUX02857", "refsource" : "HP", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://marc.info/?l=bugtraq&m=137545771702053&w=2", "name" : "SSRT101289", "refsource" : "HP", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://openwall.com/lists/oss-security/2013/02/05/24", "name" : "[oss-security] 20130205 Re: CVE request: TLS CBC padding timing flaw in various SSL / TLS implementations", "refsource" : "MLIST", "tags" : [ "Mailing List" ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0587.html", "name" : "RHSA-2013:0587", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0782.html", "name" : "RHSA-2013:0782", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0783.html", "name" : "RHSA-2013:0783", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0833.html", "name" : "RHSA-2013:0833", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1455.html", "name" : "RHSA-2013:1455", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1456.html", "name" : "RHSA-2013:1456", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/53623", "name" : "53623", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/55108", "name" : "55108", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/55139", "name" : "55139", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/55322", "name" : "55322", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/55350", "name" : "55350", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/55351", "name" : "55351", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201406-32.xml", "name" : "GLSA-201406-32", "refsource" : "GENTOO", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://support.apple.com/kb/HT5880", "name" : "http://support.apple.com/kb/HT5880", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.debian.org/security/2013/dsa-2621", "name" : "DSA-2621", "refsource" : "DEBIAN", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.debian.org/security/2013/dsa-2622", "name" : "DSA-2622", "refsource" : "DEBIAN", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.isg.rhul.ac.uk/tls/TLStiming.pdf", "name" : "http://www.isg.rhul.ac.uk/tls/TLStiming.pdf", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/737740", "name" : "VU#737740", "refsource" : "CERT-VN", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:095", "name" : "MDVSA-2013:095", "refsource" : "MANDRIVA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.matrixssl.org/news.html", "name" : "http://www.matrixssl.org/news.html", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.openssl.org/news/secadv_20130204.txt", "name" : "http://www.openssl.org/news/secadv_20130204.txt", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013update-1905892.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013update-1905892.html", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57778", "name" : "57778", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.securitytracker.com/id/1029190", "name" : "1029190", "refsource" : "SECTRACK", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.splunk.com/view/SP-CAAAHXG", "name" : "http://www.splunk.com/view/SP-CAAAHXG", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.ubuntu.com/usn/USN-1735-1", "name" : "USN-1735-1", "refsource" : "UBUNTU", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-051A.html", "name" : "TA13-051A", "refsource" : "CERT", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21644047", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21644047", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-556833.pdf", "name" : "https://cert-portal.siemens.com/productcert/pdf/ssa-556833.pdf", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://lists.debian.org/debian-lts-announce/2018/09/msg00029.html", "name" : "[debian-lts-announce] 20180925 [SECURITY] [DLA 1518-1] polarssl security update", "refsource" : "MLIST", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18841", "name" : "oval:org.mitre.oval:def:18841", "refsource" : "OVAL", "tags" : [ "Tool Signature" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19016", "name" : "oval:org.mitre.oval:def:19016", "refsource" : "OVAL", "tags" : [ "Tool Signature" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19424", "name" : "oval:org.mitre.oval:def:19424", "refsource" : "OVAL", "tags" : [ "Tool Signature" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19540", "name" : "oval:org.mitre.oval:def:19540", "refsource" : "OVAL", "tags" : [ "Tool Signature" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19608", "name" : "oval:org.mitre.oval:def:19608", "refsource" : "OVAL", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://polarssl.org/tech-updates/releases/polarssl-1.2.5-released", "name" : "https://polarssl.org/tech-updates/releases/polarssl-1.2.5-released", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://puppet.com/security/cve/cve-2013-0169", "name" : "https://puppet.com/security/cve/cve-2013-0169", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03883001", "name" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03883001", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0084", "name" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0084", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the \"Lucky Thirteen\" issue." }, { "lang" : "en", "value" : "Per http://www.openssl.org/news/vulnerabilities.html:\nFixed in OpenSSL 1.0.1d (Affected 1.0.1c, 1.0.1b, 1.0.1a, 1.0.1) \nFixed in OpenSSL 1.0.0k (Affected 1.0.0j, 1.0.0i, 1.0.0g, 1.0.0f, 1.0.0e, 1.0.0d, 1.0.0c, 1.0.0b, 1.0.0a, 1.0.0) \nFixed in OpenSSL 0.9.8y (Affected 0.9.8x, 0.9.8w, 0.9.8v, 0.9.8u, 0.9.8t, 0.9.8s, 0.9.8r, 0.9.8q, 0.9.8p, 0.9.8o, 0.9.8n, 0.9.8m, 0.9.8l, 0.9.8k, 0.9.8j, 0.9.8i, 0.9.8h, 0.9.8g, 0.9.8f, 0.9.8d, 0.9.8c, 0.9.8b, 0.9.8a, 0.9.8)\n\nAffected users should upgrade to OpenSSL 1.0.1e, 1.0.0k or 0.9.8y\n(The fix in 1.0.1d wasn't complete, so please use 1.0.1e or later)" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*", "versionStartIncluding" : "0.9.8", "versionEndIncluding" : "0.9.8x" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.0.0", "versionEndIncluding" : "1.0.0j" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.0.1", "versionEndIncluding" : "1.0.1d" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:openjdk:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:openjdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:openjdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:openjdk:1.8.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:polarssl:polarssl:0.10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:polarssl:polarssl:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:polarssl:polarssl:0.11.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:polarssl:polarssl:0.11.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:polarssl:polarssl:0.12.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:polarssl:polarssl:0.12.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:polarssl:polarssl:0.13.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:polarssl:polarssl:0.14.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:polarssl:polarssl:0.14.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:polarssl:polarssl:0.14.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:polarssl:polarssl:0.99:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:polarssl:polarssl:0.99:pre3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:polarssl:polarssl:0.99:pre4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:polarssl:polarssl:0.99:pre5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:polarssl:polarssl:1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:polarssl:polarssl:1.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:polarssl:polarssl:1.1.0:rc0:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:polarssl:polarssl:1.1.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:polarssl:polarssl:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:polarssl:polarssl:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:polarssl:polarssl:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:polarssl:polarssl:1.1.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-08T19:55Z", "lastModifiedDate" : "2019-10-09T23:06Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0170", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "libvirt", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "0.9.6", "version_affected" : "=" }, { "version_value" : "0.9.6.1", "version_affected" : "=" }, { "version_value" : "0.9.6.2", "version_affected" : "=" }, { "version_value" : "0.9.6.3", "version_affected" : "=" }, { "version_value" : "0.10.2", "version_affected" : "=" }, { "version_value" : "0.10.2.1", "version_affected" : "=" }, { "version_value" : "0.10.2.2", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "suse", "product" : { "product_data" : [ { "product_name" : "suse_linux_enterprise_software_development_kit", "version" : { "version_data" : [ { "version_value" : "11.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "canonical", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "12.04", "version_affected" : "=" }, { "version_value" : "12.10", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "fedoraproject", "product" : { "product_data" : [ { "product_name" : "fedora", "version" : { "version_data" : [ { "version_value" : "17", "version_affected" : "=" }, { "version_value" : "18", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "novell", "product" : { "product_data" : [ { "product_name" : "suse_linux", "version" : { "version_data" : [ { "version_value" : "11", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "opensuse", "product" : { "product_data" : [ { "product_name" : "opensuse", "version" : { "version_data" : [ { "version_value" : "12.1", "version_affected" : "=" }, { "version_value" : "12.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://libvirt.org/git/?p=libvirt.git;a=commit;h=46532e3e8ed5f5a736a02f67d6c805492f9ca720", "name" : "http://libvirt.org/git/?p=libvirt.git;a=commit;h=46532e3e8ed5f5a736a02f67d6c805492f9ca720", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://libvirt.org/news.html", "name" : "http://libvirt.org/news.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098326.html", "name" : "FEDORA-2013-1644", "refsource" : "FEDORA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098370.html", "name" : "FEDORA-2013-1642", "refsource" : "FEDORA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098398.html", "name" : "FEDORA-2013-1626", "refsource" : "FEDORA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00001.html", "name" : "openSUSE-SU-2013:0274", "refsource" : "SUSE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00002.html", "name" : "openSUSE-SU-2013:0275", "refsource" : "SUSE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00016.html", "name" : "SUSE-SU-2013:0320", "refsource" : "SUSE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://osvdb.org/89644", "name" : "89644", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0199.html", "name" : "RHSA-2013:0199", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/52001", "name" : "52001", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/52003", "name" : "52003", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://wiki.libvirt.org/page/Maintenance_Releases", "name" : "http://wiki.libvirt.org/page/Maintenance_Releases", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/57578", "name" : "57578", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id/1028047", "name" : "1028047", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1708-1", "name" : "USN-1708-1", "refsource" : "UBUNTU", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=893450", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=893450", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81552", "name" : "libvirt-virnetmessagefree-code-exec(81552)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in the virNetMessageFree function in rpc/virnetserverclient.c in libvirt 1.0.x before 1.0.2, 0.10.2 before 0.10.2.3, 0.9.11 before 0.9.11.9, and 0.9.6 before 0.9.6.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering certain errors during an RPC connection, which causes a message to be freed without being removed from the message queue." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:suse:suse_linux_enterprise_software_development_kit:11.0:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:novell:suse_linux:11:*:desktop:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:novell:suse_linux:11:*:server:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:fedoraproject:fedora:17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:fedoraproject:fedora:18:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:libvirt:*:0.9.11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:libvirt:*:0.9.11.1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:libvirt:*:0.9.11.2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:libvirt:*:0.9.11.3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:libvirt:*:0.9.11.4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:libvirt:*:0.9.11.5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:libvirt:*:0.9.11.6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:libvirt:*:0.9.11.7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:libvirt:*:0.9.11.8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:libvirt:0.9.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:libvirt:0.9.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:libvirt:0.9.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:libvirt:0.9.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:libvirt:0.10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:libvirt:0.10.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:libvirt:0.10.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:libvirt:1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:libvirt:1.0.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-08T20:55Z", "lastModifiedDate" : "2019-04-22T17:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0171", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "theforeman", "product" : { "product_data" : [ { "product_name" : "foreman", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://projects.theforeman.org/issues/2069", "name" : "http://projects.theforeman.org/issues/2069", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://theforeman.org/security.html", "name" : "http://theforeman.org/security.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Foreman before 1.1 allows remote attackers to execute arbitrary code via a crafted YAML object to the (1) fact or (2) report import API." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-05-08T14:29Z", "lastModifiedDate" : "2014-05-08T14:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0172", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "samba", "product" : { "product_data" : [ { "product_name" : "samba", "version" : { "version_data" : [ { "version_value" : "4.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.samba.org/samba/security/CVE-2013-0172", "name" : "http://www.samba.org/samba/security/CVE-2013-0172", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Samba 4.0.x before 4.0.1, in certain Active Directory domain-controller configurations, does not properly interpret Access Control Entries that are based on an objectClass, which allows remote authenticated users to bypass intended restrictions on modifying LDAP directory objects by leveraging (1) objectClass access by a user, (2) objectClass access by a group, or (3) write access to an attribute." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:4.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T21:55Z", "lastModifiedDate" : "2013-01-18T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0173", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "theforeman", "product" : { "product_data" : [ { "product_name" : "foreman", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-310" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://projects.theforeman.org/issues/2069", "name" : "http://projects.theforeman.org/issues/2069", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://theforeman.org/security.html", "name" : "http://theforeman.org/security.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Foreman before 1.1 uses a salt of \"foreman\" to hash root passwords, which makes it easier for attackers to guess the password via a brute force attack." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-05-08T14:29Z", "lastModifiedDate" : "2014-05-08T14:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0174", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "theforeman", "product" : { "product_data" : [ { "product_name" : "foreman", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://projects.theforeman.org/issues/2069", "name" : "http://projects.theforeman.org/issues/2069", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://theforeman.org/security.html", "name" : "http://theforeman.org/security.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The external node classifier (ENC) API in Foreman before 1.1 allows remote attackers to obtain the hashed root password via an API request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-05-08T14:29Z", "lastModifiedDate" : "2014-05-08T14:58Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0175", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "erik_michaels-ober", "product" : { "product_data" : [ { "product_name" : "multi_xml", "version" : { "version_data" : [ { "version_value" : "0.5.2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "grape_project", "product" : { "product_data" : [ { "product_name" : "grape", "version" : { "version_data" : [ { "version_value" : "0.1.0", "version_affected" : "=" }, { "version_value" : "0.1.1", "version_affected" : "=" }, { "version_value" : "0.1.2", "version_affected" : "=" }, { "version_value" : "0.1.3", "version_affected" : "=" }, { "version_value" : "0.1.4", "version_affected" : "=" }, { "version_value" : "0.1.5", "version_affected" : "=" }, { "version_value" : "0.2.0", "version_affected" : "=" }, { "version_value" : "0.2.1", "version_affected" : "=" }, { "version_value" : "0.2.2", "version_affected" : "=" }, { "version_value" : "0.2.3", "version_affected" : "=" }, { "version_value" : "0.2.4", "version_affected" : "=" }, { "version_value" : "0.2.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2013/01/11/9", "name" : "[oss-security] 20130111 Re: CVE request for multi_xml ruby gem (has same problem as CVE-2013-0156)", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://gist.github.com/nate/d7f6d9f4925f413621aa", "name" : "https://gist.github.com/nate/d7f6d9f4925f413621aa", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://github.com/sferik/multi_xml/pull/34", "name" : "https://github.com/sferik/multi_xml/pull/34", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://groups.google.com/forum/?fromgroups=#!topic/ruby-grape/fthDkMgIOa0", "name" : "https://groups.google.com/forum/?fromgroups=#!topic/ruby-grape/fthDkMgIOa0", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://news.ycombinator.com/item?id=5040457", "name" : "https://news.ycombinator.com/item?id=5040457", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "multi_xml gem 0.5.2 for Ruby, as used in Grape before 0.2.6 and possibly other products, does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) involving nested XML entity references, by leveraging support for (1) YAML type conversion or (2) Symbol type conversion, a similar vulnerability to CVE-2013-0156." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:erik_michaels-ober:multi_xml:0.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:erik_michaels-ober:multi_xml:0.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:grape_project:grape:0.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:grape_project:grape:0.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:grape_project:grape:0.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:grape_project:grape:0.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:grape_project:grape:0.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:grape_project:grape:0.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:grape_project:grape:0.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:grape_project:grape:0.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:grape_project:grape:0.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:grape_project:grape:0.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:grape_project:grape:0.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:grape_project:grape:0.2.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-25T23:55Z", "lastModifiedDate" : "2018-08-13T21:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0176", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "libssh", "product" : { "product_data" : [ { "product_name" : "libssh", "version" : { "version_data" : [ { "version_value" : "0.4.7", "version_affected" : "=" }, { "version_value" : "0.4.8", "version_affected" : "=" }, { "version_value" : "0.5.0", "version_affected" : "=" }, { "version_value" : "0.5.1", "version_affected" : "=" }, { "version_value" : "0.5.2", "version_affected" : "=" }, { "version_value" : "0.5.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098065.html", "name" : "FEDORA-2013-1422", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098094.html", "name" : "FEDORA-2013-1407", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/51982", "name" : "51982", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.libssh.org/2013/01/22/libssh-0-5-4-security-release/", "name" : "http://www.libssh.org/2013/01/22/libssh-0-5-4-security-release/", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.ubuntu.com/usn/USN-1707-1", "name" : "USN-1707-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81595", "name" : "libssh-publickeyfromprivatekey-dos(81595)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The publickey_from_privatekey function in libssh before 0.5.4, when no algorithm is matched during negotiations, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a \"Client: Diffie-Hellman Key Exchange Init\" packet." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libssh:libssh:0.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libssh:libssh:0.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libssh:libssh:0.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libssh:libssh:0.5.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libssh:libssh:0.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libssh:libssh:0.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.5.3" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-05T23:55Z", "lastModifiedDate" : "2017-08-29T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0177", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apache", "product" : { "product_data" : [ { "product_name" : "ofbiz", "version" : { "version_data" : [ { "version_value" : "09.04", "version_affected" : "=" }, { "version_value" : "09.04.01", "version_affected" : "=" }, { "version_value" : "10.04", "version_affected" : "=" }, { "version_value" : "10.04.01", "version_affected" : "=" }, { "version_value" : "10.04.02", "version_affected" : "=" }, { "version_value" : "10.04.03", "version_affected" : "=" }, { "version_value" : "10.04.04", "version_affected" : "=" }, { "version_value" : "11.04.01", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://ofbiz.apache.org/download.html#vulnerabilities", "name" : "http://ofbiz.apache.org/download.html#vulnerabilities", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://osvdb.org/89452", "name" : "89452", "refsource" : "OSVDB", "tags" : [ "Broken Link" ] }, { "url" : "http://osvdb.org/89453", "name" : "89453", "refsource" : "OSVDB", "tags" : [ "Broken Link" ] }, { "url" : "http://packetstormsecurity.com/files/119673/Apache-OFBiz-Cross-Site-Scripting.html", "name" : "http://packetstormsecurity.com/files/119673/Apache-OFBiz-Cross-Site-Scripting.html", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://seclists.org/fulldisclosure/2013/Jan/148", "name" : "20130118 [CVE-2013-0177] Cross-Site Scripting (XSS) Vulnerability in Apache OFBiz", "refsource" : "FULLDISC", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/51812", "name" : "51812", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81398", "name" : "apache-ofbiz-xss(81398)", "refsource" : "XF", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://fisheye6.atlassian.com/changelog/ofbiz?cs=1432395", "name" : "https://fisheye6.atlassian.com/changelog/ofbiz?cs=1432395", "refsource" : "CONFIRM", "tags" : [ "Broken Link" ] }, { "url" : "https://fisheye6.atlassian.com/changelog/ofbiz?cs=1432850", "name" : "https://fisheye6.atlassian.com/changelog/ofbiz?cs=1432850", "refsource" : "CONFIRM", "tags" : [ "Broken Link" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in widget/screen/ModelScreenWidget.java in Apache Open For Business Project (aka OFBiz) 10.04.x before 10.04.05, 11.04.01, and possibly 09.04.x allow remote authenticated users to inject arbitrary web script or HTML via the (1) Screenlet.title or (2) Image.alt Widget attribute, as demonstrated by the parentPortalPageId parameter to exampleext/control/ManagePortalPages." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:ofbiz:09.04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:ofbiz:09.04.01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:ofbiz:10.04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:ofbiz:10.04.01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:ofbiz:10.04.02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:ofbiz:10.04.03:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:ofbiz:10.04.04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:ofbiz:11.04.01:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2014-01-30T15:06Z", "lastModifiedDate" : "2018-05-18T12:17Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0178", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redislabs", "product" : { "product_data" : [ { "product_name" : "redis", "version" : { "version_data" : [ { "version_value" : "1.3.6", "version_affected" : "=" }, { "version_value" : "1.3.7", "version_affected" : "=" }, { "version_value" : "1.3.8", "version_affected" : "=" }, { "version_value" : "1.3.9", "version_affected" : "=" }, { "version_value" : "1.3.10", "version_affected" : "=" }, { "version_value" : "1.3.11", "version_affected" : "=" }, { "version_value" : "1.3.12", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.5", "version_affected" : "=" }, { "version_value" : "2.2.6", "version_affected" : "=" }, { "version_value" : "2.2.7", "version_affected" : "=" }, { "version_value" : "2.2.8", "version_affected" : "=" }, { "version_value" : "2.2.9", "version_affected" : "=" }, { "version_value" : "2.2.10", "version_affected" : "=" }, { "version_value" : "2.2.11", "version_affected" : "=" }, { "version_value" : "2.2.12", "version_affected" : "=" }, { "version_value" : "2.2.13", "version_affected" : "=" }, { "version_value" : "2.2.14", "version_affected" : "=" }, { "version_value" : "2.2.15", "version_affected" : "=" }, { "version_value" : "2.2.105", "version_affected" : "=" }, { "version_value" : "2.2.106", "version_affected" : "=" }, { "version_value" : "2.2.107", "version_affected" : "=" }, { "version_value" : "2.2.110", "version_affected" : "=" }, { "version_value" : "2.2.111", "version_affected" : "=" }, { "version_value" : "2.3", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.4.4", "version_affected" : "=" }, { "version_value" : "2.4.5", "version_affected" : "=" }, { "version_value" : "2.4.6", "version_affected" : "=" }, { "version_value" : "2.4.7", "version_affected" : "=" }, { "version_value" : "2.4.8", "version_affected" : "=" }, { "version_value" : "2.4.9", "version_affected" : "=" }, { "version_value" : "2.4.10", "version_affected" : "=" }, { "version_value" : "2.4.11", "version_affected" : "=" }, { "version_value" : "2.4.12", "version_affected" : "=" }, { "version_value" : "2.4.13", "version_affected" : "=" }, { "version_value" : "2.4.14", "version_affected" : "=" }, { "version_value" : "2.4.15", "version_affected" : "=" }, { "version_value" : "2.4.16", "version_affected" : "=" }, { "version_value" : "2.4.17", "version_affected" : "=" }, { "version_value" : "2.4.18", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2013/01/14/5", "name" : "http://www.openwall.com/lists/oss-security/2013/01/14/5", "refsource" : "MISC", "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/01/14/7", "name" : "http://www.openwall.com/lists/oss-security/2013/01/14/7", "refsource" : "MISC", "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0178", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0178", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81329", "name" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81329", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://github.com/antirez/redis/commit/697af434fbeb2e3ba2ba9687cd283ed1a2734fa5", "name" : "https://github.com/antirez/redis/commit/697af434fbeb2e3ba2ba9687cd283ed1a2734fa5", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://security-tracker.debian.org/tracker/CVE-2013-0178", "name" : "https://security-tracker.debian.org/tracker/CVE-2013-0178", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Insecure temporary file vulnerability in Redis before 2.6 related to /tmp/redis-%p.vm." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redislabs:redis:*:*:*:*:*:*:*:*", "versionEndExcluding" : "2.6.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 3.6 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 4.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-11-01T19:15Z", "lastModifiedDate" : "2019-11-06T14:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0179", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "memcached", "product" : { "product_data" : [ { "product_name" : "memcached", "version" : { "version_data" : [ { "version_value" : "1.4.4", "version_affected" : "=" }, { "version_value" : "1.4.5", "version_affected" : "=" }, { "version_value" : "1.4.6", "version_affected" : "=" }, { "version_value" : "1.4.7", "version_affected" : "=" }, { "version_value" : "1.4.8", "version_affected" : "=" }, { "version_value" : "1.4.9", "version_affected" : "=" }, { "version_value" : "1.4.10", "version_affected" : "=" }, { "version_value" : "1.4.11", "version_affected" : "=" }, { "version_value" : "1.4.12", "version_affected" : "=" }, { "version_value" : "1.4.13", "version_affected" : "=" }, { "version_value" : "1.4.14", "version_affected" : "=" }, { "version_value" : "1.4.15", "version_affected" : "=" }, { "version_value" : "1.4.16", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/56183", "name" : "56183", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/01/14/4", "name" : "[oss-security] 20130114 CVE request: memcached DoS when printing out keys to be deleted in verbose mode", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/01/14/6", "name" : "[oss-security] 20130114 Re: CVE request: memcached DoS when printing out keys to be deleted in verbose mode", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/64978", "name" : "64978", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-2080-1", "name" : "USN-2080-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=895054", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=895054", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://code.google.com/p/memcached/issues/attachmentText?id=306&aid=3060004000&name=0001-Fix-buffer-overrun-when-logging-key-to-delete-in-bin.patch&token=3GEzHThBL5cxmUrsYANkW03RrNY%3A1358179503096", "name" : "https://code.google.com/p/memcached/issues/attachmentText?id=306&aid=3060004000&name=0001-Fix-buffer-overrun-when-logging-key-to-delete-in-bin.patch&token=3GEzHThBL5cxmUrsYANkW03RrNY%3A1358179503096", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://code.google.com/p/memcached/issues/detail?id=306", "name" : "https://code.google.com/p/memcached/issues/detail?id=306", "refsource" : "CONFIRM", "tags" : [ "Exploit", "Patch" ] }, { "url" : "https://code.google.com/p/memcached/wiki/ReleaseNotes1417", "name" : "https://code.google.com/p/memcached/wiki/ReleaseNotes1417", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The process_bin_delete function in memcached.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (segmentation fault) via a request to delete a key, which does not account for the lack of a null terminator in the key and triggers a buffer over-read when printing to stderr." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:memcached:memcached:1.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:memcached:memcached:1.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:memcached:memcached:1.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:memcached:memcached:1.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:memcached:memcached:1.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:memcached:memcached:1.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:memcached:memcached:1.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:memcached:memcached:1.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:memcached:memcached:1.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:memcached:memcached:1.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:memcached:memcached:1.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:memcached:memcached:1.4.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:memcached:memcached:1.4.16:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:H/Au:N/C:N/I:N/A:P", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 1.8 }, "severity" : "LOW", "exploitabilityScore" : 3.2, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-01-13T21:55Z", "lastModifiedDate" : "2018-03-25T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0180", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redislabs", "product" : { "product_data" : [ { "product_name" : "redis", "version" : { "version_data" : [ { "version_value" : "2.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2013/01/14/7", "name" : "[oss-security] 20130114 Re: CVE Request -- redis: Two insecure temporary file use flaws", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=894659", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=894659", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redislabs:redis:2.6.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 3.6 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 4.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-11-01T19:15Z", "lastModifiedDate" : "2019-11-06T14:42Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0181", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "thomas_seidl", "product" : { "product_data" : [ { "product_name" : "search_api", "version" : { "version_data" : [ { "version_value" : "7.x-1.0", "version_affected" : "=" }, { "version_value" : "7.x-1.1", "version_affected" : "=" }, { "version_value" : "7.x-1.2", "version_affected" : "=" }, { "version_value" : "7.x-1.3", "version_affected" : "=" }, { "version_value" : "7.x-1.x", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://drupalcode.org/project/search_api.git/commitdiff/35b5728", "name" : "http://drupalcode.org/project/search_api.git/commitdiff/35b5728", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://osvdb.org/89117", "name" : "89117", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/51806", "name" : "51806", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/01/15/3", "name" : "[oss-security] 20130114 Re: CVE request for Drupal contributed modules", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/57231", "name" : "57231", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://drupal.org/node/1884076", "name" : "https://drupal.org/node/1884076", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://drupal.org/node/1884332", "name" : "https://drupal.org/node/1884332", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81153", "name" : "drupal-searchapi-unspecified-xss(81153)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in Views in the Search API (search_api) module 7.x-1.x before 7.x-1.4 for Drupal, when using certain backends and facets, allows remote attackers to inject arbitrary web script or HTML via unspecified input, which is returned in an error message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:thomas_seidl:search_api:7.x-1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:thomas_seidl:search_api:7.x-1.0:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:thomas_seidl:search_api:7.x-1.0:beta10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:thomas_seidl:search_api:7.x-1.0:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:thomas_seidl:search_api:7.x-1.0:beta3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:thomas_seidl:search_api:7.x-1.0:beta4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:thomas_seidl:search_api:7.x-1.0:beta5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:thomas_seidl:search_api:7.x-1.0:beta6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:thomas_seidl:search_api:7.x-1.0:beta7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:thomas_seidl:search_api:7.x-1.0:beta8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:thomas_seidl:search_api:7.x-1.0:beta9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:thomas_seidl:search_api:7.x-1.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:thomas_seidl:search_api:7.x-1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:thomas_seidl:search_api:7.x-1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:thomas_seidl:search_api:7.x-1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:thomas_seidl:search_api:7.x-1.x:dev:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-27T21:55Z", "lastModifiedDate" : "2017-08-29T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0182", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "bart_feenstra", "product" : { "product_data" : [ { "product_name" : "payment", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://drupal.org/node/1871508", "name" : "http://drupal.org/node/1871508", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://drupal.org/node/1883830", "name" : "http://drupal.org/node/1883830", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://drupalcode.org/project/payment.git/commitdiff/62c9186", "name" : "http://drupalcode.org/project/payment.git/commitdiff/62c9186", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/01/15/3", "name" : "[oss-security] 20130114 Re: CVE request for Drupal contributed modules", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://drupal.org/node/1884360", "name" : "https://drupal.org/node/1884360", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Payment module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict access to payments, which allows remote attackers to read arbitrary payments." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:alpha1:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:alpha2:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:alpha3:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:alpha4:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:alpha5:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:alpha6:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:beta1:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:beta2:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bart_feenstra:payment:*:7.x-1.0:beta3:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bart_feenstra:payment:*:7.x-1.1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bart_feenstra:payment:*:7.x-1.2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bart_feenstra:payment:*:7.x-1.x:dev:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-27T21:55Z", "lastModifiedDate" : "2013-03-28T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0183", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "rack_project", "product" : { "product_data" : [ { "product_name" : "rack", "version" : { "version_data" : [ { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.3.4", "version_affected" : "=" }, { "version_value" : "1.3.5", "version_affected" : "=" }, { "version_value" : "1.3.6", "version_affected" : "=" }, { "version_value" : "1.3.7", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html", "name" : "openSUSE-SU-2013:0462", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rack.github.com/", "name" : "http://rack.github.com/", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0544.html", "name" : "RHSA-2013:0544", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0548.html", "name" : "RHSA-2013:0548", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2013/dsa-2783", "name" : "DSA-2783", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=895282", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=895282", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/rack/rack/commit/548b9af2dc0059f4c0c19728624448d84de450ff", "name" : "https://github.com/rack/rack/commit/548b9af2dc0059f4c0c19728624448d84de450ff", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://github.com/rack/rack/commit/f95113402b7239f225282806673e1b6424522b18", "name" : "https://github.com/rack/rack/commit/f95113402b7239f225282806673e1b6424522b18", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://groups.google.com/forum/#!topic/rack-devel/7ZKPNAjgRSs", "name" : "https://groups.google.com/forum/#!topic/rack-devel/7ZKPNAjgRSs", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://groups.google.com/forum/#!topic/rack-devel/-MWPHDeGWtI", "name" : "https://groups.google.com/forum/#!topic/rack-devel/-MWPHDeGWtI", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a long string in a Multipart HTTP packet." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.3.7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.4.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-01T05:40Z", "lastModifiedDate" : "2018-08-13T21:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0184", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "rack_project", "product" : { "product_data" : [ { "product_name" : "rack", "version" : { "version_data" : [ { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.2.6", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.3.4", "version_affected" : "=" }, { "version_value" : "1.3.5", "version_affected" : "=" }, { "version_value" : "1.3.6", "version_affected" : "=" }, { "version_value" : "1.3.7", "version_affected" : "=" }, { "version_value" : "1.3.8", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html", "name" : "openSUSE-SU-2013:0462", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0544.html", "name" : "RHSA-2013:0544", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0548.html", "name" : "RHSA-2013:0548", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2013/dsa-2783", "name" : "DSA-2783", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=895384", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=895384", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Rack::Auth::AbstractRequest in Rack 1.1.x before 1.1.5, 1.2.x before 1.2.7, 1.3.x before 1.3.9, and 1.4.x before 1.4.4 allows remote attackers to cause a denial of service via unknown vectors related to \"symbolized arbitrary strings.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.2.6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.3.8:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.4.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-01T05:40Z", "lastModifiedDate" : "2013-10-31T03:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0185", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "manageiq_enterprise_virtualization_manager", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=895345", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=895345", "refsource" : "CONFIRM", "tags" : [ "Issue Tracking", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site request forgery (CSRF) vulnerability in ManageIQ Enterprise Virtualization Manager (EVM) allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:manageiq_enterprise_virtualization_manager:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2018-05-01T19:29Z", "lastModifiedDate" : "2018-06-13T14:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0186", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "cloudforms", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } }, { "product_name" : "manageiq_enterprise_virtualization_manager", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://access.redhat.com/errata/RHSA-2014:0215", "name" : "https://access.redhat.com/errata/RHSA-2014:0215", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0186", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0186", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ManageIQ EVM allows remote attackers to inject arbitrary web script or HTML via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:cloudforms:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:manageiq_enterprise_virtualization_manager:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-11-01T19:15Z", "lastModifiedDate" : "2019-11-05T21:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0187", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "theforeman", "product" : { "product_data" : [ { "product_name" : "foreman", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://theforeman.org/security.html", "name" : "http://theforeman.org/security.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Foreman before 1.1 allows remote authenticated users to gain privileges via a (1) XMLHttpRequest or (2) AJAX request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-05-08T14:29Z", "lastModifiedDate" : "2014-05-08T15:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0188", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-0189, CVE-2013-0191. Reason: this identifier was intended for one issue, but it was inadvertently associated with multiple issues. Notes: All CVE users should consult CVE-2013-0189 and CVE-2013-0191 to determine which ID is appropriate. All references and descriptions in this candidate have been removed to prevent accidental usage." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2013-10-04T23:55Z", "lastModifiedDate" : "2013-10-04T23:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0189", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "squid-cache", "product" : { "product_data" : [ { "product_name" : "squid", "version" : { "version_data" : [ { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.0.1", "version_affected" : "=" }, { "version_value" : "3.1.0.2", "version_affected" : "=" }, { "version_value" : "3.1.0.3", "version_affected" : "=" }, { "version_value" : "3.1.0.4", "version_affected" : "=" }, { "version_value" : "3.1.0.5", "version_affected" : "=" }, { "version_value" : "3.1.0.6", "version_affected" : "=" }, { "version_value" : "3.1.0.7", "version_affected" : "=" }, { "version_value" : "3.1.0.8", "version_affected" : "=" }, { "version_value" : "3.1.0.9", "version_affected" : "=" }, { "version_value" : "3.1.0.10", "version_affected" : "=" }, { "version_value" : "3.1.0.11", "version_affected" : "=" }, { "version_value" : "3.1.0.12", "version_affected" : "=" }, { "version_value" : "3.1.0.13", "version_affected" : "=" }, { "version_value" : "3.1.0.14", "version_affected" : "=" }, { "version_value" : "3.1.0.15", "version_affected" : "=" }, { "version_value" : "3.1.0.16", "version_affected" : "=" }, { "version_value" : "3.1.0.17", "version_affected" : "=" }, { "version_value" : "3.1.0.18", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.3", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.1.5", "version_affected" : "=" }, { "version_value" : "3.1.5.1", "version_affected" : "=" }, { "version_value" : "3.1.6", "version_affected" : "=" }, { "version_value" : "3.1.7", "version_affected" : "=" }, { "version_value" : "3.1.8", "version_affected" : "=" }, { "version_value" : "3.1.9", "version_affected" : "=" }, { "version_value" : "3.1.10", "version_affected" : "=" }, { "version_value" : "3.1.11", "version_affected" : "=" }, { "version_value" : "3.1.12", "version_affected" : "=" }, { "version_value" : "3.1.13", "version_affected" : "=" }, { "version_value" : "3.1.14", "version_affected" : "=" }, { "version_value" : "3.1.15", "version_affected" : "=" }, { "version_value" : "3.1.22", "version_affected" : "=" }, { "version_value" : "3.2.0.1", "version_affected" : "=" }, { "version_value" : "3.2.0.2", "version_affected" : "=" }, { "version_value" : "3.2.0.3", "version_affected" : "=" }, { "version_value" : "3.2.0.4", "version_affected" : "=" }, { "version_value" : "3.2.0.5", "version_affected" : "=" }, { "version_value" : "3.2.0.6", "version_affected" : "=" }, { "version_value" : "3.2.0.7", "version_affected" : "=" }, { "version_value" : "3.2.0.8", "version_affected" : "=" }, { "version_value" : "3.2.0.9", "version_affected" : "=" }, { "version_value" : "3.2.0.10", "version_affected" : "=" }, { "version_value" : "3.2.0.11", "version_affected" : "=" }, { "version_value" : "3.2.0.12", "version_affected" : "=" }, { "version_value" : "3.2.0.13", "version_affected" : "=" }, { "version_value" : "3.2.0.14", "version_affected" : "=" }, { "version_value" : "3.2.0.15", "version_affected" : "=" }, { "version_value" : "3.2.0.16", "version_affected" : "=" }, { "version_value" : "3.2.0.17", "version_affected" : "=" }, { "version_value" : "3.2.0.18", "version_affected" : "=" }, { "version_value" : "3.2.0.19", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "canonical", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "10.04", "version_affected" : "=" }, { "version_value" : "11.10", "version_affected" : "=" }, { "version_value" : "12.04", "version_affected" : "=" }, { "version_value" : "12.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bazaar.launchpad.net/~squid/squid/3.2/revision/11743", "name" : "http://bazaar.launchpad.net/~squid/squid/3.2/revision/11743", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://bazaar.launchpad.net/~squid/squid/3.2/revision/11744", "name" : "http://bazaar.launchpad.net/~squid/squid/3.2/revision/11744", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/scm-commits/2013-January/934637.html", "name" : "[scm-commits] 20130125 [squid/f17] CVE-2013-0189: Incomplete fix for the CVE-2012-5643", "refsource" : "MLIST", "tags" : [ "Patch" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html", "name" : "SUSE-SU-2016:1996", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html", "name" : "SUSE-SU-2016:2089", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-09/msg00025.html", "name" : "openSUSE-SU-2013:1436", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-09/msg00032.html", "name" : "openSUSE-SU-2013:1443", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/52024", "name" : "52024", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/54839", "name" : "54839", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2013/dsa-2631", "name" : "DSA-2631", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:129", "name" : "MDVSA-2013:129", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/57646", "name" : "57646", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.squid-cache.org/Versions/v3/3.1/changesets/SQUID-2012_1.patch", "name" : "http://www.squid-cache.org/Versions/v3/3.1/changesets/SQUID-2012_1.patch", "refsource" : "MISC", "tags" : [ "Patch" ] }, { "url" : "http://www.squid-cache.org/Versions/v3/3.2/changesets/SQUID-2012_1.patch", "name" : "http://www.squid-cache.org/Versions/v3/3.2/changesets/SQUID-2012_1.patch", "refsource" : "MISC", "tags" : [ "Patch" ] }, { "url" : "http://www.ubuntu.com/usn/USN-1713-1", "name" : "USN-1713-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=887962#c9", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=887962#c9", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=895972", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=895972", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0029", "name" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0029", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "cachemgr.cgi in Squid 3.1.x and 3.2.x, possibly 3.1.22, 3.2.4, and other versions, allows remote attackers to cause a denial of service (resource consumption) via a crafted request. NOTE: this issue is due to an incorrect fix for CVE-2012-5643, possibly involving an incorrect order of arguments or incorrect comparison." }, { "lang" : "en", "value" : "Per http://www.ubuntu.com/usn/USN-1713-1/\r\nA security issue affects these releases of Ubuntu and its derivatives:\r\nUbuntu 12.10\r\nUbuntu 12.04 LTS\r\nUbuntu 11.10\r\nUbuntu 10.04 LTS\r\n" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.22:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.2.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.2.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.2.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.2.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.2.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.2.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.2.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.2.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.2.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.2.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.2.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.2.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.2.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.2.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.2.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:10.04:-:lts:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-08T20:55Z", "lastModifiedDate" : "2016-11-28T19:08Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0190", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.6.23", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0496.html", "name" : "RHSA-2013:0496", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/01/16/6", "name" : "[oss-security] 20130116 [PATCH] xen: Fix stack corruption in xen_failsafe_callback for 32bit PVOPS guests.", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/01/16/8", "name" : "[oss-security] 20130116 Xen Security Advisory 40 (CVE-2013-0190) - Linux stack corruption in xen_failsafe_callback for 32bit PVOPS guests.", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/57433", "name" : "57433", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1725-1", "name" : "USN-1725-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1728-1", "name" : "USN-1728-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=896038", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=896038", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The xen_failsafe_callback function in Xen for the Linux kernel 2.6.23 and other versions, when running a 32-bit PVOPS guest, allows local users to cause a denial of service (guest crash) by triggering an iret fault, leading to use of an incorrect stack pointer and stack corruption." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.6.23" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 4.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-13T01:55Z", "lastModifiedDate" : "2013-03-08T04:11Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0191", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "lucas_clemente_vella", "product" : { "product_data" : [ { "product_name" : "libpam-pgsql", "version" : { "version_data" : [ { "version_value" : "0.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-287" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html", "name" : "SUSE-SU-2016:1996", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html", "name" : "SUSE-SU-2016:2089", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://seclists.org/oss-sec/2013/q1/86", "name" : "[oss-security] 20130115 pam-pgsql NULL password handling issue", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://seclists.org/oss-sec/2013/q1/99", "name" : "[oss-security] 20130116 Re: pam-pgsql NULL password handling issue", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://sourceforge.net/p/pam-pgsql/bugs/13/", "name" : "http://sourceforge.net/p/pam-pgsql/bugs/13/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://sourceforge.net/u/lvella/pam-pgsql/ci/9361f5970e5dd90a747319995b67c2f73b91448c/", "name" : "http://sourceforge.net/u/lvella/pam-pgsql/ci/9361f5970e5dd90a747319995b67c2f73b91448c/", "refsource" : "MISC", "tags" : [ "Exploit", "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/57440", "name" : "57440", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81363", "name" : "libpampgsql-password-sec-bypass(81363)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "libpam-pgsql (aka pam_pgsql) 0.7 does not properly handle a NULL value returned by the password search query, which allows remote attackers to bypass authentication via a crafted password." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lucas_clemente_vella:libpam-pgsql:0.7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-06-03T14:55Z", "lastModifiedDate" : "2017-08-29T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0192", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "simplemachines", "product" : { "product_data" : [ { "product_name" : "simple_machines_forum", "version" : { "version_data" : [ { "version_value" : "2.0.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2013/01/17/5", "name" : "http://www.openwall.com/lists/oss-security/2013/01/17/5", "refsource" : "MISC", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/01/31/1", "name" : "http://www.openwall.com/lists/oss-security/2013/01/31/1", "refsource" : "MISC", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/01/4", "name" : "http://www.openwall.com/lists/oss-security/2013/02/01/4", "refsource" : "MISC", "tags" : [ "Mailing List", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "File Disclosure in SMF (SimpleMachines Forum) <= 2.0.3: Forum admin can read files such as the database config." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:simplemachines:simple_machines_forum:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.3" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2020-02-07T14:15Z", "lastModifiedDate" : "2020-02-10T18:53Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0193", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "matomo", "product" : { "product_data" : [ { "product_name" : "matomo", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.1.1", "version_affected" : "=" }, { "version_value" : "0.1.2", "version_affected" : "=" }, { "version_value" : "0.1.3", "version_affected" : "=" }, { "version_value" : "0.1.4", "version_affected" : "=" }, { "version_value" : "0.1.5", "version_affected" : "=" }, { "version_value" : "0.1.6", "version_affected" : "=" }, { "version_value" : "0.1.7", "version_affected" : "=" }, { "version_value" : "0.1.8", "version_affected" : "=" }, { "version_value" : "0.1.9", "version_affected" : "=" }, { "version_value" : "0.1.10", "version_affected" : "=" }, { "version_value" : "0.2.1", "version_affected" : "=" }, { "version_value" : "0.2.2", "version_affected" : "=" }, { "version_value" : "0.2.3", "version_affected" : "=" }, { "version_value" : "0.2.4", "version_affected" : "=" }, { "version_value" : "0.2.5", "version_affected" : "=" }, { "version_value" : "0.2.6", "version_affected" : "=" }, { "version_value" : "0.2.7", "version_affected" : "=" }, { "version_value" : "0.2.8", "version_affected" : "=" }, { "version_value" : "0.2.9", "version_affected" : "=" }, { "version_value" : "0.2.10", "version_affected" : "=" }, { "version_value" : "0.2.11", "version_affected" : "=" }, { "version_value" : "0.2.12", "version_affected" : "=" }, { "version_value" : "0.2.13", "version_affected" : "=" }, { "version_value" : "0.2.14", "version_affected" : "=" }, { "version_value" : "0.2.16", "version_affected" : "=" }, { "version_value" : "0.2.17", "version_affected" : "=" }, { "version_value" : "0.2.18", "version_affected" : "=" }, { "version_value" : "0.2.19", "version_affected" : "=" }, { "version_value" : "0.2.20", "version_affected" : "=" }, { "version_value" : "0.2.22", "version_affected" : "=" }, { "version_value" : "0.2.23", "version_affected" : "=" }, { "version_value" : "0.2.24", "version_affected" : "=" }, { "version_value" : "0.2.25", "version_affected" : "=" }, { "version_value" : "0.2.26", "version_affected" : "=" }, { "version_value" : "0.2.27", "version_affected" : "=" }, { "version_value" : "0.2.28", "version_affected" : "=" }, { "version_value" : "0.2.29", "version_affected" : "=" }, { "version_value" : "0.2.30", "version_affected" : "=" }, { "version_value" : "0.2.31", "version_affected" : "=" }, { "version_value" : "0.2.32", "version_affected" : "=" }, { "version_value" : "0.2.33", "version_affected" : "=" }, { "version_value" : "0.2.34", "version_affected" : "=" }, { "version_value" : "0.2.35", "version_affected" : "=" }, { "version_value" : "0.2.36", "version_affected" : "=" }, { "version_value" : "0.2.37", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.4.1", "version_affected" : "=" }, { "version_value" : "0.4.2", "version_affected" : "=" }, { "version_value" : "0.4.3", "version_affected" : "=" }, { "version_value" : "0.4.4", "version_affected" : "=" }, { "version_value" : "0.4.5", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.5.1", "version_affected" : "=" }, { "version_value" : "0.5.2", "version_affected" : "=" }, { "version_value" : "0.5.3", "version_affected" : "=" }, { "version_value" : "0.5.4", "version_affected" : "=" }, { "version_value" : "0.5.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.6.2", "version_affected" : "=" }, { "version_value" : "0.6.3", "version_affected" : "=" }, { "version_value" : "0.6.4", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.9", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.6", "version_affected" : "=" }, { "version_value" : "1.7", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.8", "version_affected" : "=" }, { "version_value" : "1.8.1", "version_affected" : "=" }, { "version_value" : "1.8.2", "version_affected" : "=" }, { "version_value" : "1.8.3", "version_affected" : "=" }, { "version_value" : "1.8.4", "version_affected" : "=" }, { "version_value" : "1.9.1", "version_affected" : "=" }, { "version_value" : "1.9.2", "version_affected" : "=" }, { "version_value" : "1.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2013/01/17/15", "name" : "http://www.openwall.com/lists/oss-security/2013/01/17/15", "refsource" : "MISC", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "https://matomo.org/changelog/piwik-1-10/", "name" : "https://matomo.org/changelog/piwik-1-10/", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Third Party Advisory" ] }, { "url" : "https://security-tracker.debian.org/tracker/CVE-2013-0193", "name" : "https://security-tracker.debian.org/tracker/CVE-2013-0193", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site Scripting (XSS) in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0194 and CVE-2013-0195." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:matomo:matomo:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.10.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-11-20T15:15Z", "lastModifiedDate" : "2019-11-21T13:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0194", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "matomo", "product" : { "product_data" : [ { "product_name" : "matomo", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.1.1", "version_affected" : "=" }, { "version_value" : "0.1.2", "version_affected" : "=" }, { "version_value" : "0.1.3", "version_affected" : "=" }, { "version_value" : "0.1.4", "version_affected" : "=" }, { "version_value" : "0.1.5", "version_affected" : "=" }, { "version_value" : "0.1.6", "version_affected" : "=" }, { "version_value" : "0.1.7", "version_affected" : "=" }, { "version_value" : "0.1.8", "version_affected" : "=" }, { "version_value" : "0.1.9", "version_affected" : "=" }, { "version_value" : "0.1.10", "version_affected" : "=" }, { "version_value" : "0.2.1", "version_affected" : "=" }, { "version_value" : "0.2.2", "version_affected" : "=" }, { "version_value" : "0.2.3", "version_affected" : "=" }, { "version_value" : "0.2.4", "version_affected" : "=" }, { "version_value" : "0.2.5", "version_affected" : "=" }, { "version_value" : "0.2.6", "version_affected" : "=" }, { "version_value" : "0.2.7", "version_affected" : "=" }, { "version_value" : "0.2.8", "version_affected" : "=" }, { "version_value" : "0.2.9", "version_affected" : "=" }, { "version_value" : "0.2.10", "version_affected" : "=" }, { "version_value" : "0.2.11", "version_affected" : "=" }, { "version_value" : "0.2.12", "version_affected" : "=" }, { "version_value" : "0.2.13", "version_affected" : "=" }, { "version_value" : "0.2.14", "version_affected" : "=" }, { "version_value" : "0.2.16", "version_affected" : "=" }, { "version_value" : "0.2.17", "version_affected" : "=" }, { "version_value" : "0.2.18", "version_affected" : "=" }, { "version_value" : "0.2.19", "version_affected" : "=" }, { "version_value" : "0.2.20", "version_affected" : "=" }, { "version_value" : "0.2.22", "version_affected" : "=" }, { "version_value" : "0.2.23", "version_affected" : "=" }, { "version_value" : "0.2.24", "version_affected" : "=" }, { "version_value" : "0.2.25", "version_affected" : "=" }, { "version_value" : "0.2.26", "version_affected" : "=" }, { "version_value" : "0.2.27", "version_affected" : "=" }, { "version_value" : "0.2.28", "version_affected" : "=" }, { "version_value" : "0.2.29", "version_affected" : "=" }, { "version_value" : "0.2.30", "version_affected" : "=" }, { "version_value" : "0.2.31", "version_affected" : "=" }, { "version_value" : "0.2.32", "version_affected" : "=" }, { "version_value" : "0.2.33", "version_affected" : "=" }, { "version_value" : "0.2.34", "version_affected" : "=" }, { "version_value" : "0.2.35", "version_affected" : "=" }, { "version_value" : "0.2.36", "version_affected" : "=" }, { "version_value" : "0.2.37", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.4.1", "version_affected" : "=" }, { "version_value" : "0.4.2", "version_affected" : "=" }, { "version_value" : "0.4.3", "version_affected" : "=" }, { "version_value" : "0.4.4", "version_affected" : "=" }, { "version_value" : "0.4.5", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.5.1", "version_affected" : "=" }, { "version_value" : "0.5.2", "version_affected" : "=" }, { "version_value" : "0.5.3", "version_affected" : "=" }, { "version_value" : "0.5.4", "version_affected" : "=" }, { "version_value" : "0.5.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.6.2", "version_affected" : "=" }, { "version_value" : "0.6.3", "version_affected" : "=" }, { "version_value" : "0.6.4", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.9", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.6", "version_affected" : "=" }, { "version_value" : "1.7", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.8", "version_affected" : "=" }, { "version_value" : "1.8.1", "version_affected" : "=" }, { "version_value" : "1.8.2", "version_affected" : "=" }, { "version_value" : "1.8.3", "version_affected" : "=" }, { "version_value" : "1.8.4", "version_affected" : "=" }, { "version_value" : "1.9.1", "version_affected" : "=" }, { "version_value" : "1.9.2", "version_affected" : "=" }, { "version_value" : "1.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2013/01/17/15", "name" : "http://www.openwall.com/lists/oss-security/2013/01/17/15", "refsource" : "MISC", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "https://matomo.org/changelog/piwik-1-10/", "name" : "https://matomo.org/changelog/piwik-1-10/", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Third Party Advisory" ] }, { "url" : "https://security-tracker.debian.org/tracker/CVE-2013-0194", "name" : "https://security-tracker.debian.org/tracker/CVE-2013-0194", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site Scripting (XSS) in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0193 and CVE-2013-0195." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:matomo:matomo:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.10.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-11-20T15:15Z", "lastModifiedDate" : "2019-11-21T13:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0195", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "matomo", "product" : { "product_data" : [ { "product_name" : "matomo", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.1.1", "version_affected" : "=" }, { "version_value" : "0.1.2", "version_affected" : "=" }, { "version_value" : "0.1.3", "version_affected" : "=" }, { "version_value" : "0.1.4", "version_affected" : "=" }, { "version_value" : "0.1.5", "version_affected" : "=" }, { "version_value" : "0.1.6", "version_affected" : "=" }, { "version_value" : "0.1.7", "version_affected" : "=" }, { "version_value" : "0.1.8", "version_affected" : "=" }, { "version_value" : "0.1.9", "version_affected" : "=" }, { "version_value" : "0.1.10", "version_affected" : "=" }, { "version_value" : "0.2.1", "version_affected" : "=" }, { "version_value" : "0.2.2", "version_affected" : "=" }, { "version_value" : "0.2.3", "version_affected" : "=" }, { "version_value" : "0.2.4", "version_affected" : "=" }, { "version_value" : "0.2.5", "version_affected" : "=" }, { "version_value" : "0.2.6", "version_affected" : "=" }, { "version_value" : "0.2.7", "version_affected" : "=" }, { "version_value" : "0.2.8", "version_affected" : "=" }, { "version_value" : "0.2.9", "version_affected" : "=" }, { "version_value" : "0.2.10", "version_affected" : "=" }, { "version_value" : "0.2.11", "version_affected" : "=" }, { "version_value" : "0.2.12", "version_affected" : "=" }, { "version_value" : "0.2.13", "version_affected" : "=" }, { "version_value" : "0.2.14", "version_affected" : "=" }, { "version_value" : "0.2.16", "version_affected" : "=" }, { "version_value" : "0.2.17", "version_affected" : "=" }, { "version_value" : "0.2.18", "version_affected" : "=" }, { "version_value" : "0.2.19", "version_affected" : "=" }, { "version_value" : "0.2.20", "version_affected" : "=" }, { "version_value" : "0.2.22", "version_affected" : "=" }, { "version_value" : "0.2.23", "version_affected" : "=" }, { "version_value" : "0.2.24", "version_affected" : "=" }, { "version_value" : "0.2.25", "version_affected" : "=" }, { "version_value" : "0.2.26", "version_affected" : "=" }, { "version_value" : "0.2.27", "version_affected" : "=" }, { "version_value" : "0.2.28", "version_affected" : "=" }, { "version_value" : "0.2.29", "version_affected" : "=" }, { "version_value" : "0.2.30", "version_affected" : "=" }, { "version_value" : "0.2.31", "version_affected" : "=" }, { "version_value" : "0.2.32", "version_affected" : "=" }, { "version_value" : "0.2.33", "version_affected" : "=" }, { "version_value" : "0.2.34", "version_affected" : "=" }, { "version_value" : "0.2.35", "version_affected" : "=" }, { "version_value" : "0.2.36", "version_affected" : "=" }, { "version_value" : "0.2.37", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.4.1", "version_affected" : "=" }, { "version_value" : "0.4.2", "version_affected" : "=" }, { "version_value" : "0.4.3", "version_affected" : "=" }, { "version_value" : "0.4.4", "version_affected" : "=" }, { "version_value" : "0.4.5", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.5.1", "version_affected" : "=" }, { "version_value" : "0.5.2", "version_affected" : "=" }, { "version_value" : "0.5.3", "version_affected" : "=" }, { "version_value" : "0.5.4", "version_affected" : "=" }, { "version_value" : "0.5.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.6.2", "version_affected" : "=" }, { "version_value" : "0.6.3", "version_affected" : "=" }, { "version_value" : "0.6.4", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.9", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.6", "version_affected" : "=" }, { "version_value" : "1.7", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.8", "version_affected" : "=" }, { "version_value" : "1.8.1", "version_affected" : "=" }, { "version_value" : "1.8.2", "version_affected" : "=" }, { "version_value" : "1.8.3", "version_affected" : "=" }, { "version_value" : "1.8.4", "version_affected" : "=" }, { "version_value" : "1.9.1", "version_affected" : "=" }, { "version_value" : "1.9.2", "version_affected" : "=" }, { "version_value" : "1.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2013/01/17/15", "name" : "http://www.openwall.com/lists/oss-security/2013/01/17/15", "refsource" : "MISC", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "https://matomo.org/changelog/piwik-1-10/", "name" : "https://matomo.org/changelog/piwik-1-10/", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Third Party Advisory" ] }, { "url" : "https://security-tracker.debian.org/tracker/CVE-2013-0195", "name" : "https://security-tracker.debian.org/tracker/CVE-2013-0195", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site Scripting (XSS) in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0193 and CVE-2013-0194." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:matomo:matomo:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.10.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-11-20T15:15Z", "lastModifiedDate" : "2019-11-21T13:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0196", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "openshift", "version" : { "version_data" : [ { "version_value" : "1.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://access.redhat.com/security/cve/cve-2013-0196", "name" : "https://access.redhat.com/security/cve/cve-2013-0196", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0196", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0196", "refsource" : "MISC", "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has no CSRF attack protection mechanism. This can allow an attacker to obtain the credential and the Authorization: header when requesting the REST API via web browser." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:openshift:1.2:*:*:*:enterprise:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-12-30T22:15Z", "lastModifiedDate" : "2020-01-08T17:34Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0197", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mantisbt", "product" : { "product_data" : [ { "product_name" : "mantisbt", "version" : { "version_data" : [ { "version_value" : "1.2.12", "version_affected" : "=" }, { "version_value" : "1.2.13", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://hauntit.blogspot.de/2013/01/en-mantis-bug-tracker-1212-persistent.html", "name" : "http://hauntit.blogspot.de/2013/01/en-mantis-bug-tracker-1212-persistent.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://seclists.org/oss-sec/2013/q1/118", "name" : "[oss-security] 20130118 CVE request: MantisBT before 1.2.13 match_type XSS vulnerability", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://seclists.org/oss-sec/2013/q1/125", "name" : "[oss-security] 20130118 Re: CVE request: MantisBT before 1.2.13 match_type XSS vulnerability", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://seclists.org/oss-sec/2013/q1/140", "name" : "[oss-security] 20130121 Re: CVE request: MantisBT before 1.2.13 match_type XSS vulnerability", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/51853", "name" : "51853", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.mantisbt.org/bugs/view.php?id=15373", "name" : "http://www.mantisbt.org/bugs/view.php?id=15373", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the filter_draw_selection_area2 function in core/filter_api.php in MantisBT 1.2.12 before 1.2.13 allows remote attackers to inject arbitrary web script or HTML via the match_type parameter to bugs/search.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mantisbt:mantisbt:1.2.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mantisbt:mantisbt:1.2.13:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2014-05-15T14:55Z", "lastModifiedDate" : "2014-05-16T12:44Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0198", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "thekelleys", "product" : { "product_data" : [ { "product_name" : "dnsmasq", "version" : { "version_data" : [ { "version_value" : "2.65", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:072", "name" : "MDVSA-2013:072", "refsource" : "MANDRIVA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/01/18/2", "name" : "[oss-security] 20130118 CVE Request -- dnsmasq: Incomplete fix for the CVE-2012-3411 issue", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/01/18/7", "name" : "[oss-security] 20130118 Re: CVE Request -- dnsmasq: Incomplete fix for the CVE-2012-3411 issue", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commitdiff;h=22ce550e5346947a12a781ed0959a7b1165d0dc6", "name" : "http://www.thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commitdiff;h=22ce550e5346947a12a781ed0959a7b1165d0dc6", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=894486", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=894486", "refsource" : "MISC", "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Dnsmasq before 2.66test2, when used with certain libvirt configurations, replies to queries from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via spoofed TCP based DNS queries. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3411." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:thekelleys:dnsmasq:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.65" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-05T21:38Z", "lastModifiedDate" : "2020-05-27T14:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0199", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "freeipa", "version" : { "version_data" : [ { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/89539", "name" : "89539", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.freeipa.org/page/CVE-2013-0199", "name" : "http://www.freeipa.org/page/CVE-2013-0199", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.freeipa.org/page/Releases/3.1.2", "name" : "http://www.freeipa.org/page/Releases/3.1.2", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/57542", "name" : "57542", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81486", "name" : "freeipa-crossrealm-info-disc(81486)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The default LDAP ACIs in FreeIPA 3.0 before 3.1.2 do not restrict access to the (1) ipaNTTrustAuthIncoming and (2) ipaNTTrustAuthOutgoing attributes, which allow remote attackers to obtain the Cross-Realm Kerberos Trust key via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:freeipa:3.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:freeipa:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:freeipa:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:freeipa:3.1.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-05-29T14:19Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0200", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "hp", "product" : { "product_data" : [ { "product_name" : "linux_imaging_and_printing_project", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.7.10", "version_affected" : "=" }, { "version_value" : "3.9.2", "version_affected" : "=" }, { "version_value" : "3.9.4", "version_affected" : "=" }, { "version_value" : "3.9.4b", "version_affected" : "=" }, { "version_value" : "3.9.6", "version_affected" : "=" }, { "version_value" : "3.9.8", "version_affected" : "=" }, { "version_value" : "3.9.10", "version_affected" : "=" }, { "version_value" : "3.9.12", "version_affected" : "=" }, { "version_value" : "3.10.2", "version_affected" : "=" }, { "version_value" : "3.10.5", "version_affected" : "=" }, { "version_value" : "3.10.6", "version_affected" : "=" }, { "version_value" : "3.10.9", "version_affected" : "=" }, { "version_value" : "3.11.1", "version_affected" : "=" }, { "version_value" : "3.11.3", "version_affected" : "=" }, { "version_value" : "3.11.3a", "version_affected" : "=" }, { "version_value" : "3.11.5", "version_affected" : "=" }, { "version_value" : "3.11.7", "version_affected" : "=" }, { "version_value" : "3.11.10", "version_affected" : "=" }, { "version_value" : "3.12.4", "version_affected" : "<=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-59" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://ftp.scientificlinux.org/linux/scientific/6x/SRPMS/vendor/hplip-3.12.4-4.el6.src.rpm", "name" : "ftp://ftp.scientificlinux.org/linux/scientific/6x/SRPMS/vendor/hplip-3.12.4-4.el6.src.rpm", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://hplipopensource.com/hplip-web/release_notes.html", "name" : "http://hplipopensource.com/hplip-web/release_notes.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/55083", "name" : "55083", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2013/dsa-2829", "name" : "DSA-2829", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:088", "name" : "MDVSA-2013:088", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1981-1", "name" : "USN-1981-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=902163", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=902163", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0072", "name" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0072", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "HP Linux Imaging and Printing (HPLIP) through 3.12.4 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/hpcupsfilterc_#.bmp, (2) /tmp/hpcupsfilterk_#.bmp, (3) /tmp/hpcups_job#.out, (4) /tmp/hpijs_#####.out, or (5) /tmp/hpps_job#.out temporary file, a different vulnerability than CVE-2011-2722." }, { "lang" : "en", "value" : "Per https://access.redhat.com/security/cve/CVE-2013-0200\r\n\"This issue has been addressed in Red Hat Enterprise Linux 6 via RHSA-2013:0500.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:linux_imaging_and_printing_project:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:linux_imaging_and_printing_project:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:linux_imaging_and_printing_project:2.7.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.9.4b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.9.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.9.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.9.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.9.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.10.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.10.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.11.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.11.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.11.3a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.11.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.11.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.11.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:linux_imaging_and_printing_project:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.12.4" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 1.9 }, "severity" : "LOW", "exploitabilityScore" : 3.4, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-06T20:55Z", "lastModifiedDate" : "2019-04-22T17:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0201", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "owncloud", "product" : { "product_data" : [ { "product_name" : "owncloud", "version" : { "version_data" : [ { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "=" }, { "version_value" : "4.0.5", "version_affected" : "=" }, { "version_value" : "4.0.6", "version_affected" : "=" }, { "version_value" : "4.0.7", "version_affected" : "=" }, { "version_value" : "4.0.8", "version_affected" : "=" }, { "version_value" : "4.0.9", "version_affected" : "=" }, { "version_value" : "4.0.10", "version_affected" : "<=" }, { "version_value" : "4.5.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/89505", "name" : "89505", "refsource" : "OSVDB", "tags" : [ "Broken Link" ] }, { "url" : "http://osvdb.org/89506", "name" : "89506", "refsource" : "OSVDB", "tags" : [ "Broken Link" ] }, { "url" : "http://osvdb.org/89511", "name" : "89511", "refsource" : "OSVDB", "tags" : [ "Broken Link" ] }, { "url" : "http://owncloud.org/about/security/advisories/oC-SA-2013-001", "name" : "http://owncloud.org/about/security/advisories/oC-SA-2013-001", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81475", "name" : "owncloud-mime-token-xss(81475)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://github.com/owncloud/core/commit/4e2b834", "name" : "https://github.com/owncloud/core/commit/4e2b834", "refsource" : "CONFIRM", "tags" : [ "Exploit", "Patch" ] }, { "url" : "https://github.com/owncloud/core/commit/b8e0309", "name" : "https://github.com/owncloud/core/commit/b8e0309", "refsource" : "CONFIRM", "tags" : [ "Exploit", "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) QUERY_STRING to core/lostpassword/templates/resetpassword.php, (2) mime parameter to apps/files/ajax/mimeicon.php, or (3) token parameter to apps/gallery/sharing.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.0.10" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2014-03-18T17:02Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0202", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "owncloud", "product" : { "product_data" : [ { "product_name" : "owncloud", "version" : { "version_data" : [ { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "=" }, { "version_value" : "4.0.5", "version_affected" : "=" }, { "version_value" : "4.0.6", "version_affected" : "=" }, { "version_value" : "4.0.7", "version_affected" : "=" }, { "version_value" : "4.0.8", "version_affected" : "=" }, { "version_value" : "4.0.9", "version_affected" : "=" }, { "version_value" : "4.0.10", "version_affected" : "=" }, { "version_value" : "4.5.0", "version_affected" : "=" }, { "version_value" : "4.5.1", "version_affected" : "=" }, { "version_value" : "4.5.2", "version_affected" : "=" }, { "version_value" : "4.5.3", "version_affected" : "=" }, { "version_value" : "4.5.4", "version_affected" : "=" }, { "version_value" : "4.5.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81476", "name" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81476", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://owncloud.org/security/advisories/multiple-xss-vulnerabilities-3/", "name" : "https://owncloud.org/security/advisories/multiple-xss-vulnerabilities-3/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in ownCloud 4.5.5, 4.0.10, and earlier allows remote attackers to inject arbitrary web script or HTML via the action parameter to core/ajax/sharing.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*", "versionStartIncluding" : "4.0.0", "versionEndExcluding" : "4.0.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*", "versionStartIncluding" : "4.5.0", "versionEndExcluding" : "4.5.6" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-12-17T18:15Z", "lastModifiedDate" : "2019-12-18T19:39Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0203", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "owncloud", "product" : { "product_data" : [ { "product_name" : "owncloud", "version" : { "version_data" : [ { "version_value" : "4.0.10", "version_affected" : "<=" }, { "version_value" : "4.5.0", "version_affected" : "=" }, { "version_value" : "4.5.1", "version_affected" : "=" }, { "version_value" : "4.5.2", "version_affected" : "=" }, { "version_value" : "4.5.3", "version_affected" : "=" }, { "version_value" : "4.5.4", "version_affected" : "=" }, { "version_value" : "4.5.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81478", "name" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81478", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://owncloud.org/security/advisories/multiple-xss-vulnerabilities-3/", "name" : "https://owncloud.org/security/advisories/multiple-xss-vulnerabilities-3/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) unspecified parameters to apps/calendar/ajax/event/new.php or (2) url parameter to apps/bookmarks/ajax/addBookmark.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.0.10" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*", "versionStartIncluding" : "4.5.0", "versionEndIncluding" : "4.5.5" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-11-22T19:15Z", "lastModifiedDate" : "2019-12-02T20:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0204", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "owncloud", "product" : { "product_data" : [ { "product_name" : "owncloud", "version" : { "version_data" : [ { "version_value" : "4.5.0", "version_affected" : "=" }, { "version_value" : "4.5.1", "version_affected" : "=" }, { "version_value" : "4.5.2", "version_affected" : "=" }, { "version_value" : "4.5.3", "version_affected" : "=" }, { "version_value" : "4.5.4", "version_affected" : "=" }, { "version_value" : "4.5.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://owncloud.org/about/security/advisories/oC-SA-2013-002/", "name" : "http://owncloud.org/about/security/advisories/oC-SA-2013-002/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "settings/personal.php in ownCloud 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via crafted mount point settings." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-06-04T14:55Z", "lastModifiedDate" : "2014-06-04T18:01Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0205", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2013/01/21/5", "name" : "[oss-security] 20130121 Re: CVE request for Drupal contributed modules", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://drupal.org/node/1890212", "name" : "https://drupal.org/node/1890212", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://drupal.org/node/1890216", "name" : "https://drupal.org/node/1890216", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://drupal.org/node/1890222", "name" : "https://drupal.org/node/1890222", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site request forgery (CSRF) vulnerability in the RESTful Web Services (restws) module 7.x-1.x before 7.x-1.2 and 7.x-2.x before 7.x-2.0-alpha4 for Drupal allows remote attackers to hijack the authentication of arbitrary users via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-19T14:55Z", "lastModifiedDate" : "2020-02-26T17:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0206", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "guy_bedford", "product" : { "product_data" : [ { "product_name" : "live_css", "version" : { "version_data" : [ { "version_value" : "6.x-2.0", "version_affected" : "=" }, { "version_value" : "7.x-2.0", "version_affected" : "=" }, { "version_value" : "7.x-2.0-beta1", "version_affected" : "=" }, { "version_value" : "7.x-2.1", "version_affected" : "=" }, { "version_value" : "7.x-2.2", "version_affected" : "=" }, { "version_value" : "7.x-2.3", "version_affected" : "=" }, { "version_value" : "7.x-2.4", "version_affected" : "=" }, { "version_value" : "7.x-2.5", "version_affected" : "=" }, { "version_value" : "7.x-2.6", "version_affected" : "=" }, { "version_value" : "7.x-2.x-dev", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://drupal.org/node/1883976", "name" : "http://drupal.org/node/1883976", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://drupal.org/node/1883978", "name" : "http://drupal.org/node/1883978", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://drupalcode.org/project/live_css.git/commitdiff/cb7005f", "name" : "http://drupalcode.org/project/live_css.git/commitdiff/cb7005f", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://drupalcode.org/project/live_css.git/commitdiff/ef323c8", "name" : "http://drupalcode.org/project/live_css.git/commitdiff/ef323c8", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/01/21/5", "name" : "[oss-security] 20130121 Re: CVE request for Drupal contributed modules", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://drupal.org/node/1890318", "name" : "https://drupal.org/node/1890318", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unrestricted file upload vulnerability in the Live CSS module 6.x-2.x before 6.x-2.1 and 7.x-2.x before 7.x-2.7 for Drupal allows remote authenticated users with the \"administer CSS\" permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory." }, { "lang" : "en", "value" : "CWE-434: Unrestricted Upload of File with Dangerous Type" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:guy_bedford:live_css:6.x-2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:guy_bedford:live_css:7.x-2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:guy_bedford:live_css:7.x-2.0-beta1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:guy_bedford:live_css:7.x-2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:guy_bedford:live_css:7.x-2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:guy_bedford:live_css:7.x-2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:guy_bedford:live_css:7.x-2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:guy_bedford:live_css:7.x-2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:guy_bedford:live_css:7.x-2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:guy_bedford:live_css:7.x-2.x-dev:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 6.8, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-19T14:55Z", "lastModifiedDate" : "2013-03-21T09:26Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0207", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "leighton_whiting", "product" : { "product_data" : [ { "product_name" : "mark_complete", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://drupalcode.org/project/mark_complete.git/commitdiff/a18c7b2", "name" : "http://drupalcode.org/project/mark_complete.git/commitdiff/a18c7b2", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/01/21/5", "name" : "[oss-security] 20130121 Re: CVE request for Drupal contributed modules", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://drupal.org/node/1890538", "name" : "https://drupal.org/node/1890538", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://drupal.org/node/1890566", "name" : "https://drupal.org/node/1890566", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site request forgery (CSRF) vulnerability in the Mark Complete module 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:leighton_whiting:mark_complete:*:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-19T14:55Z", "lastModifiedDate" : "2013-03-21T14:21Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0208", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "openstack", "product" : { "product_data" : [ { "product_name" : "essex", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "folsom", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "canonical", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "11.10", "version_affected" : "=" }, { "version_value" : "12.04", "version_affected" : "=" }, { "version_value" : "12.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/89661", "name" : "89661", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0208.html", "name" : "RHSA-2013:0208", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/51963", "name" : "51963", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/51992", "name" : "51992", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/01/29/9", "name" : "[oss-security] 20130129 [OSSA 2013-001] Boot from volume allows access to random volumes (CVE-2013-0208)", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/57613", "name" : "57613", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1709-1", "name" : "USN-1709-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://bugs.launchpad.net/nova/+bug/1069904", "name" : "https://bugs.launchpad.net/nova/+bug/1069904", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=902629", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=902629", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81697", "name" : "nova-volume-security-bypass(81697)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://github.com/openstack/nova/commit/243d516cea9d3caa5a8267b12d2f577dcb24193b", "name" : "https://github.com/openstack/nova/commit/243d516cea9d3caa5a8267b12d2f577dcb24193b", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://github.com/openstack/nova/commit/317cc0af385536dee43ef2addad50a91357fc1ad", "name" : "https://github.com/openstack/nova/commit/317cc0af385536dee43ef2addad50a91357fc1ad", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova-volumes, allows remote authenticated users to boot from other users' volumes via a volume id in the block_device_mapping parameter." }, { "lang" : "en", "value" : "Per http://www.ubuntu.com/usn/USN-1709-1/\r\nA security issue affects these releases of Ubuntu and its derivatives:\r\nUbuntu 12.10\r\nUbuntu 12.04 LTS\r\nUbuntu 11.10\r\n" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openstack:essex:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openstack:folsom:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-13T16:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0209", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sixapart", "product" : { "product_data" : [ { "product_name" : "movable_type", "version" : { "version_data" : [ { "version_value" : "4.21", "version_affected" : "=" }, { "version_value" : "4.22", "version_affected" : "=" }, { "version_value" : "4.23", "version_affected" : "=" }, { "version_value" : "4.24", "version_affected" : "=" }, { "version_value" : "4.25", "version_affected" : "=" }, { "version_value" : "4.26", "version_affected" : "=" }, { "version_value" : "4.27", "version_affected" : "=" }, { "version_value" : "4.28", "version_affected" : "=" }, { "version_value" : "4.29", "version_affected" : "=" }, { "version_value" : "4.31", "version_affected" : "=" }, { "version_value" : "4.32", "version_affected" : "=" }, { "version_value" : "4.33", "version_affected" : "=" }, { "version_value" : "4.34", "version_affected" : "=" }, { "version_value" : "4.35", "version_affected" : "=" }, { "version_value" : "4.36", "version_affected" : "=" }, { "version_value" : "4.37", "version_affected" : "=" }, { "version_value" : "4.38", "version_affected" : "=" }, { "version_value" : "4.261", "version_affected" : "=" }, { "version_value" : "4.291", "version_affected" : "=" }, { "version_value" : "4.292", "version_affected" : "=" }, { "version_value" : "4.361", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-287" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://openwall.com/lists/oss-security/2013/01/22/3", "name" : "[oss-security] 20130121 Re: CVE request for Movable Type", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.movabletype.org/2013/01/movable_type_438_patch.html", "name" : "http://www.movabletype.org/2013/01/movable_type_438_patch.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.sec-1.com/blog/?p=402", "name" : "http://www.sec-1.com/blog/?p=402", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.sec-1.com/blog/wp-content/uploads/2013/01/movabletype_upgrade_exec.rb_.txt", "name" : "http://www.sec-1.com/blog/wp-content/uploads/2013/01/movabletype_upgrade_exec.rb_.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "lib/MT/Upgrade.pm in mt-upgrade.cgi in Movable Type 4.2x and 4.3x through 4.38 does not require authentication for requests to database-migration functions, which allows remote attackers to conduct eval injection and SQL injection attacks via crafted parameters, as demonstrated by an eval injection attack against the core_drop_meta_for_table function, leading to execution of arbitrary Perl code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.28:*:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.28:*:open_source:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.29:*:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.29:*:open_source:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.261:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.291:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.291:*:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.291:*:open_source:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.292:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.292:*:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.292:*:open_source:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.361:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.36:*:open_source:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.37:*:open_source:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.38:*:open_source:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sixapart:movable_type:4.361:*:open_source:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-23T01:55Z", "lastModifiedDate" : "2013-01-29T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0210", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "theforeman", "product" : { "product_data" : [ { "product_name" : "foreman", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.4.1", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://theforeman.org/security.html", "name" : "http://theforeman.org/security.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The smart proxy Puppet run API in Foreman before 1.2.0 allows remote attackers to execute arbitrary commands via vectors related to escaping and Puppet commands." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:theforeman:foreman:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:theforeman:foreman:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:theforeman:foreman:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:theforeman:foreman:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:theforeman:foreman:0.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-05-08T14:29Z", "lastModifiedDate" : "2014-05-08T15:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0211", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "libarchive", "product" : { "product_data" : [ { "product_name" : "libarchive", "version" : { "version_data" : [ { "version_value" : "3.1.2", "version_affected" : "<=" } ] } } ] } }, { "vendor_name" : "canonical", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "12.04", "version_affected" : "=" }, { "version_value" : "14.04", "version_affected" : "=" }, { "version_value" : "14.10", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "fedoraproject", "product" : { "product_data" : [ { "product_name" : "fedora", "version" : { "version_data" : [ { "version_value" : "17", "version_affected" : "=" }, { "version_value" : "18", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "freebsd", "product" : { "product_data" : [ { "product_name" : "freebsd", "version" : { "version_data" : [ { "version_value" : "9.3", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "opensuse", "product" : { "product_data" : [ { "product_name" : "opensuse", "version" : { "version_data" : [ { "version_value" : "13.1", "version_affected" : "=" }, { "version_value" : "13.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-189" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101687.html", "name" : "FEDORA-2013-4592", "refsource" : "FEDORA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101700.html", "name" : "FEDORA-2013-4576", "refsource" : "FEDORA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101872.html", "name" : "FEDORA-2013-4537", "refsource" : "FEDORA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101876.html", "name" : "FEDORA-2013-4522", "refsource" : "FEDORA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2015-03/msg00065.html", "name" : "openSUSE-SU-2015:0568", "refsource" : "SUSE", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:147", "name" : "MDVSA-2013:147", "refsource" : "MANDRIVA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/58926", "name" : "58926", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id/1035995", "name" : "1035995", "refsource" : "SECTRACK", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.ubuntu.com/usn/USN-2549-1", "name" : "USN-2549-1", "refsource" : "UBUNTU", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=902998", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=902998", "refsource" : "CONFIRM", "tags" : [ "Issue Tracking", "Patch" ] }, { "url" : "https://github.com/libarchive/libarchive/commit/22531545514043e04633e1c015c7540b9de9dbe4", "name" : "https://github.com/libarchive/libarchive/commit/22531545514043e04633e1c015c7540b9de9dbe4", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://www.freebsd.org/security/advisories/FreeBSD-SA-16:23.libarchive.asc", "name" : "FreeBSD-SA-16:23", "refsource" : "FREEBSD", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Integer signedness error in the archive_write_zip_data function in archive_write_set_format_zip.c in libarchive 3.1.2 and earlier, when running on 64-bit machines, allows context-dependent attackers to cause a denial of service (crash) via unspecified vectors, which triggers an improper conversion between unsigned and signed types, leading to a buffer overflow." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:x64:*:*", "versionEndIncluding" : "3.1.2" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:fedoraproject:fedora:17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:fedoraproject:fedora:18:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:9.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-09-30T22:55Z", "lastModifiedDate" : "2018-10-30T16:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0212", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "openstack", "product" : { "product_data" : [ { "product_name" : "image_registry_and_delivery_service_(glance)", "version" : { "version_data" : [ { "version_value" : "2012.1", "version_affected" : "=" }, { "version_value" : "2012.2", "version_affected" : "=" }, { "version_value" : "2012.2.1", "version_affected" : "=" }, { "version_value" : "2012.2.2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "canonical", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "11.10", "version_affected" : "=" }, { "version_value" : "12.04", "version_affected" : "=" }, { "version_value" : "12.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0209.html", "name" : "RHSA-2013:0209", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/51957", "name" : "51957", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/51990", "name" : "51990", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://ubuntu.com/usn/usn-1710-1", "name" : "USN-1710-1", "refsource" : "UBUNTU", "tags" : [ "Patch" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/01/29/10", "name" : "[oss-security] 20130129 [OSSA 2013-002] Backend password leak in Glance error message (CVE-2013-0212)", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://bugs.launchpad.net/glance/+bug/1098962", "name" : "https://bugs.launchpad.net/glance/+bug/1098962", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=902964", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=902964", "refsource" : "MISC", "tags" : [ "Patch" ] }, { "url" : "https://github.com/openstack/glance/commit/37d4d96bf88c2bf3e7e9511b5e321cf4bed364b7", "name" : "https://github.com/openstack/glance/commit/37d4d96bf88c2bf3e7e9511b5e321cf4bed364b7", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://github.com/openstack/glance/commit/96a470be64adcef97f235ca96ed3c59ed954a4c1", "name" : "https://github.com/openstack/glance/commit/96a470be64adcef97f235ca96ed3c59ed954a4c1", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://github.com/openstack/glance/commit/e96273112b5b5da58d970796b7cfce04c5030a89", "name" : "https://github.com/openstack/glance/commit/e96273112b5b5da58d970796b7cfce04c5030a89", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://launchpad.net/glance/+milestone/2012.2.3", "name" : "https://launchpad.net/glance/+milestone/2012.2.3", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://lists.launchpad.net/openstack/msg20517.html", "name" : "[openstack] 20130129 [OSSA 2013-002] Backend password leak in Glance error message (CVE-2013-0212)", "refsource" : "MLIST", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "store/swift.py in OpenStack Glance Essex (2012.1), Folsom (2012.2) before 2012.2.3, and Grizzly, when in Swift single tenant mode, logs the Swift endpoint's user name and password in cleartext when the endpoint is misconfigured or unusable, allows remote authenticated users to obtain sensitive information by reading the error messages." }, { "lang" : "en", "value" : "Per http://www.ubuntu.com/usn/usn-1710-1/\nA security issue affects these releases of Ubuntu and its derivatives:\nUbuntu 12.10, Ubuntu 12.04 LTS, Ubuntu 11.10" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openstack:image_registry_and_delivery_service_\\(glance\\):2012.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openstack:image_registry_and_delivery_service_\\(glance\\):2012.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openstack:image_registry_and_delivery_service_\\(glance\\):2012.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openstack:image_registry_and_delivery_service_\\(glance\\):2012.2.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-24T21:55Z", "lastModifiedDate" : "2015-02-09T19:23Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0213", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "samba", "product" : { "product_data" : [ { "product_name" : "samba", "version" : { "version_data" : [ { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.2a", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.14a", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "=" }, { "version_value" : "3.0.18", "version_affected" : "=" }, { "version_value" : "3.0.19", "version_affected" : "=" }, { "version_value" : "3.0.20", "version_affected" : "=" }, { "version_value" : "3.0.20a", "version_affected" : "=" }, { "version_value" : "3.0.20b", "version_affected" : "=" }, { "version_value" : "3.0.21", "version_affected" : "=" }, { "version_value" : "3.0.21a", "version_affected" : "=" }, { "version_value" : "3.0.21b", "version_affected" : "=" }, { "version_value" : "3.0.21c", "version_affected" : "=" }, { "version_value" : "3.0.22", "version_affected" : "=" }, { "version_value" : "3.0.23", "version_affected" : "=" }, { "version_value" : "3.0.23a", "version_affected" : "=" }, { "version_value" : "3.0.23b", "version_affected" : "=" }, { "version_value" : "3.0.23c", "version_affected" : "=" }, { "version_value" : "3.0.23d", "version_affected" : "=" }, { "version_value" : "3.0.24", "version_affected" : "=" }, { "version_value" : "3.0.25", "version_affected" : "=" }, { "version_value" : "3.0.25a", "version_affected" : "=" }, { "version_value" : "3.0.25b", "version_affected" : "=" }, { "version_value" : "3.0.25c", "version_affected" : "=" }, { "version_value" : "3.0.26", "version_affected" : "=" }, { "version_value" : "3.0.26a", "version_affected" : "=" }, { "version_value" : "3.0.27", "version_affected" : "=" }, { "version_value" : "3.0.28", "version_affected" : "=" }, { "version_value" : "3.0.29", "version_affected" : "=" }, { "version_value" : "3.0.30", "version_affected" : "=" }, { "version_value" : "3.0.31", "version_affected" : "=" }, { "version_value" : "3.0.32", "version_affected" : "=" }, { "version_value" : "3.0.33", "version_affected" : "=" }, { "version_value" : "3.0.34", "version_affected" : "=" }, { "version_value" : "3.0.35", "version_affected" : "=" }, { "version_value" : "3.0.36", "version_affected" : "=" }, { "version_value" : "3.0.37", "version_affected" : "=" }, { "version_value" : "3.1.0", "version_affected" : "=" }, { "version_value" : "3.2.0", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.2.6", "version_affected" : "=" }, { "version_value" : "3.2.7", "version_affected" : "=" }, { "version_value" : "3.2.8", "version_affected" : "=" }, { "version_value" : "3.2.9", "version_affected" : "=" }, { "version_value" : "3.2.10", "version_affected" : "=" }, { "version_value" : "3.2.11", "version_affected" : "=" }, { "version_value" : "3.2.12", "version_affected" : "=" }, { "version_value" : "3.2.13", "version_affected" : "=" }, { "version_value" : "3.2.14", "version_affected" : "=" }, { "version_value" : "3.2.15", "version_affected" : "=" }, { "version_value" : "3.3.0", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.3.4", "version_affected" : "=" }, { "version_value" : "3.3.5", "version_affected" : "=" }, { "version_value" : "3.3.6", "version_affected" : "=" }, { "version_value" : "3.3.7", "version_affected" : "=" }, { "version_value" : "3.3.8", "version_affected" : "=" }, { "version_value" : "3.3.9", "version_affected" : "=" }, { "version_value" : "3.3.10", "version_affected" : "=" }, { "version_value" : "3.3.11", "version_affected" : "=" }, { "version_value" : "3.3.12", "version_affected" : "=" }, { "version_value" : "3.3.13", "version_affected" : "=" }, { "version_value" : "3.3.14", "version_affected" : "=" }, { "version_value" : "3.3.15", "version_affected" : "=" }, { "version_value" : "3.3.16", "version_affected" : "=" }, { "version_value" : "3.4.0", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.4.3", "version_affected" : "=" }, { "version_value" : "3.4.4", "version_affected" : "=" }, { "version_value" : "3.4.5", "version_affected" : "=" }, { "version_value" : "3.4.6", "version_affected" : "=" }, { "version_value" : "3.4.7", "version_affected" : "=" }, { "version_value" : "3.4.8", "version_affected" : "=" }, { "version_value" : "3.4.9", "version_affected" : "=" }, { "version_value" : "3.4.10", "version_affected" : "=" }, { "version_value" : "3.4.11", "version_affected" : "=" }, { "version_value" : "3.4.12", "version_affected" : "=" }, { "version_value" : "3.4.13", "version_affected" : "=" }, { "version_value" : "3.4.14", "version_affected" : "=" }, { "version_value" : "3.4.15", "version_affected" : "=" }, { "version_value" : "3.4.16", "version_affected" : "=" }, { "version_value" : "3.4.17", "version_affected" : "=" }, { "version_value" : "3.5.0", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "=" }, { "version_value" : "3.5.8", "version_affected" : "=" }, { "version_value" : "3.5.9", "version_affected" : "=" }, { "version_value" : "3.5.10", "version_affected" : "=" }, { "version_value" : "3.5.11", "version_affected" : "=" }, { "version_value" : "3.5.12", "version_affected" : "=" }, { "version_value" : "3.5.13", "version_affected" : "=" }, { "version_value" : "3.5.14", "version_affected" : "=" }, { "version_value" : "3.5.15", "version_affected" : "=" }, { "version_value" : "3.5.16", "version_affected" : "=" }, { "version_value" : "3.5.17", "version_affected" : "=" }, { "version_value" : "3.5.18", "version_affected" : "=" }, { "version_value" : "3.5.19", "version_affected" : "=" }, { "version_value" : "3.5.20", "version_affected" : "=" }, { "version_value" : "3.6.0", "version_affected" : "=" }, { "version_value" : "3.6.1", "version_affected" : "=" }, { "version_value" : "3.6.2", "version_affected" : "=" }, { "version_value" : "3.6.3", "version_affected" : "=" }, { "version_value" : "3.6.4", "version_affected" : "=" }, { "version_value" : "3.6.5", "version_affected" : "=" }, { "version_value" : "3.6.6", "version_affected" : "=" }, { "version_value" : "3.6.7", "version_affected" : "=" }, { "version_value" : "3.6.8", "version_affected" : "=" }, { "version_value" : "3.6.9", "version_affected" : "=" }, { "version_value" : "3.6.10", "version_affected" : "=" }, { "version_value" : "3.6.11", "version_affected" : "=" }, { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00019.html", "name" : "SUSE-SU-2013:0326", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00042.html", "name" : "SUSE-SU-2013:0519", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-02/msg00029.html", "name" : "openSUSE-SU-2013:0277", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-02/msg00033.html", "name" : "openSUSE-SU-2013:0281", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1310.html", "name" : "RHSA-2013:1310", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1542.html", "name" : "RHSA-2013:1542", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2014-0305.html", "name" : "RHSA-2014:0305", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2013/dsa-2617", "name" : "DSA-2617", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.samba.org/samba/security/CVE-2013-0213", "name" : "http://www.samba.org/samba/security/CVE-2013-0213", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57631", "name" : "57631", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-2922-1", "name" : "USN-2922-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993", "name" : "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to conduct clickjacking attacks via a (1) FRAME or (2) IFRAME element." }, { "lang" : "en", "value" : "Per: http://capec.mitre.org/data/definitions/103.html\r\n\r\n\"CAPEC-103: Clickjacking\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.2:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.4:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.14:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.14a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.20:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.20:b:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.20a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.20b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.21:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.21:b:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.21:c:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.21a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.21b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.21c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.23:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.23:b:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.23:c:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.23:d:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.23a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.23b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.23c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.23d:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.25:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.25:b:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.25:c:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.25:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.25:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.25:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.25:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.25:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.25a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.25b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.25c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.26:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.26a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.27:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.28:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.20:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.6.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.6.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.6.11:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:4.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:4.0.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-02-02T20:55Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0214", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "samba", "product" : { "product_data" : [ { "product_name" : "samba", "version" : { "version_data" : [ { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.2a", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.14a", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "=" }, { "version_value" : "3.0.18", "version_affected" : "=" }, { "version_value" : "3.0.19", "version_affected" : "=" }, { "version_value" : "3.0.20", "version_affected" : "=" }, { "version_value" : "3.0.20a", "version_affected" : "=" }, { "version_value" : "3.0.20b", "version_affected" : "=" }, { "version_value" : "3.0.21", "version_affected" : "=" }, { "version_value" : "3.0.21a", "version_affected" : "=" }, { "version_value" : "3.0.21b", "version_affected" : "=" }, { "version_value" : "3.0.21c", "version_affected" : "=" }, { "version_value" : "3.0.22", "version_affected" : "=" }, { "version_value" : "3.0.23", "version_affected" : "=" }, { "version_value" : "3.0.23a", "version_affected" : "=" }, { "version_value" : "3.0.23b", "version_affected" : "=" }, { "version_value" : "3.0.23c", "version_affected" : "=" }, { "version_value" : "3.0.23d", "version_affected" : "=" }, { "version_value" : "3.0.24", "version_affected" : "=" }, { "version_value" : "3.0.25", "version_affected" : "=" }, { "version_value" : "3.0.25a", "version_affected" : "=" }, { "version_value" : "3.0.25b", "version_affected" : "=" }, { "version_value" : "3.0.25c", "version_affected" : "=" }, { "version_value" : "3.0.26", "version_affected" : "=" }, { "version_value" : "3.0.26a", "version_affected" : "=" }, { "version_value" : "3.0.27", "version_affected" : "=" }, { "version_value" : "3.0.28", "version_affected" : "=" }, { "version_value" : "3.0.29", "version_affected" : "=" }, { "version_value" : "3.0.30", "version_affected" : "=" }, { "version_value" : "3.0.31", "version_affected" : "=" }, { "version_value" : "3.0.32", "version_affected" : "=" }, { "version_value" : "3.0.33", "version_affected" : "=" }, { "version_value" : "3.0.34", "version_affected" : "=" }, { "version_value" : "3.0.35", "version_affected" : "=" }, { "version_value" : "3.0.36", "version_affected" : "=" }, { "version_value" : "3.0.37", "version_affected" : "=" }, { "version_value" : "3.1.0", "version_affected" : "=" }, { "version_value" : "3.2.0", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.2.6", "version_affected" : "=" }, { "version_value" : "3.2.7", "version_affected" : "=" }, { "version_value" : "3.2.8", "version_affected" : "=" }, { "version_value" : "3.2.9", "version_affected" : "=" }, { "version_value" : "3.2.10", "version_affected" : "=" }, { "version_value" : "3.2.11", "version_affected" : "=" }, { "version_value" : "3.2.12", "version_affected" : "=" }, { "version_value" : "3.2.13", "version_affected" : "=" }, { "version_value" : "3.2.14", "version_affected" : "=" }, { "version_value" : "3.2.15", "version_affected" : "=" }, { "version_value" : "3.3.0", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.3.4", "version_affected" : "=" }, { "version_value" : "3.3.5", "version_affected" : "=" }, { "version_value" : "3.3.6", "version_affected" : "=" }, { "version_value" : "3.3.7", "version_affected" : "=" }, { "version_value" : "3.3.8", "version_affected" : "=" }, { "version_value" : "3.3.9", "version_affected" : "=" }, { "version_value" : "3.3.10", "version_affected" : "=" }, { "version_value" : "3.3.11", "version_affected" : "=" }, { "version_value" : "3.3.12", "version_affected" : "=" }, { "version_value" : "3.3.13", "version_affected" : "=" }, { "version_value" : "3.3.14", "version_affected" : "=" }, { "version_value" : "3.3.15", "version_affected" : "=" }, { "version_value" : "3.3.16", "version_affected" : "=" }, { "version_value" : "3.4.0", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.4.3", "version_affected" : "=" }, { "version_value" : "3.4.4", "version_affected" : "=" }, { "version_value" : "3.4.5", "version_affected" : "=" }, { "version_value" : "3.4.6", "version_affected" : "=" }, { "version_value" : "3.4.7", "version_affected" : "=" }, { "version_value" : "3.4.8", "version_affected" : "=" }, { "version_value" : "3.4.9", "version_affected" : "=" }, { "version_value" : "3.4.10", "version_affected" : "=" }, { "version_value" : "3.4.11", "version_affected" : "=" }, { "version_value" : "3.4.12", "version_affected" : "=" }, { "version_value" : "3.4.13", "version_affected" : "=" }, { "version_value" : "3.4.14", "version_affected" : "=" }, { "version_value" : "3.4.15", "version_affected" : "=" }, { "version_value" : "3.4.16", "version_affected" : "=" }, { "version_value" : "3.4.17", "version_affected" : "=" }, { "version_value" : "3.5.0", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "=" }, { "version_value" : "3.5.8", "version_affected" : "=" }, { "version_value" : "3.5.9", "version_affected" : "=" }, { "version_value" : "3.5.10", "version_affected" : "=" }, { "version_value" : "3.5.11", "version_affected" : "=" }, { "version_value" : "3.5.12", "version_affected" : "=" }, { "version_value" : "3.5.13", "version_affected" : "=" }, { "version_value" : "3.5.14", "version_affected" : "=" }, { "version_value" : "3.5.15", "version_affected" : "=" }, { "version_value" : "3.5.16", "version_affected" : "=" }, { "version_value" : "3.5.17", "version_affected" : "=" }, { "version_value" : "3.5.18", "version_affected" : "=" }, { "version_value" : "3.5.19", "version_affected" : "=" }, { "version_value" : "3.5.20", "version_affected" : "=" }, { "version_value" : "3.6.0", "version_affected" : "=" }, { "version_value" : "3.6.1", "version_affected" : "=" }, { "version_value" : "3.6.2", "version_affected" : "=" }, { "version_value" : "3.6.3", "version_affected" : "=" }, { "version_value" : "3.6.4", "version_affected" : "=" }, { "version_value" : "3.6.5", "version_affected" : "=" }, { "version_value" : "3.6.6", "version_affected" : "=" }, { "version_value" : "3.6.7", "version_affected" : "=" }, { "version_value" : "3.6.8", "version_affected" : "=" }, { "version_value" : "3.6.9", "version_affected" : "=" }, { "version_value" : "3.6.10", "version_affected" : "=" }, { "version_value" : "3.6.11", "version_affected" : "=" }, { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00019.html", "name" : "SUSE-SU-2013:0326", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00042.html", "name" : "SUSE-SU-2013:0519", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-02/msg00029.html", "name" : "openSUSE-SU-2013:0277", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-02/msg00033.html", "name" : "openSUSE-SU-2013:0281", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://osvdb.org/89627", "name" : "89627", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1310.html", "name" : "RHSA-2013:1310", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1542.html", "name" : "RHSA-2013:1542", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2014-0305.html", "name" : "RHSA-2014:0305", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2013/dsa-2617", "name" : "DSA-2617", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.samba.org/samba/security/CVE-2013-0214", "name" : "http://www.samba.org/samba/security/CVE-2013-0214", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57631", "name" : "57631", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-2922-1", "name" : "USN-2922-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993", "name" : "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site request forgery (CSRF) vulnerability in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to hijack the authentication of arbitrary users by leveraging knowledge of a password and composing requests that perform SWAT actions." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.6.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.6.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.6.11:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:4.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:4.0.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.2:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.4:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.14:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.14a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.20:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.20:b:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.20a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.20b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.21:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.21:b:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.21:c:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.21a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.21b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.21c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.23:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.23:b:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.23:c:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.23:d:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.23a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.23b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.23c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.23d:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.25:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.25:b:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.25:c:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.25:pre1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.25:pre2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.25:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.25:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.25:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.25a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.25b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.25c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.26:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.26a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.27:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.28:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.2.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.3.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.4.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.5.20:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T20:55Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0215", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "xen", "product" : { "product_data" : [ { "product_name" : "xen", "version" : { "version_data" : [ { "version_value" : "4.1.0", "version_affected" : "=" }, { "version_value" : "4.1.1", "version_affected" : "=" }, { "version_value" : "4.1.2", "version_affected" : "=" }, { "version_value" : "4.1.3", "version_affected" : "=" }, { "version_value" : "4.1.4", "version_affected" : "=" }, { "version_value" : "4.2.0", "version_affected" : "=" }, { "version_value" : "4.2.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://openwall.com/lists/oss-security/2013/02/05/10", "name" : "[oss-security] 20130205 Xen Security Advisory 38 (CVE-2013-0215) - oxenstored incorrect handling of certain Xenbus ring states", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/55082", "name" : "55082", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201309-24.xml", "name" : "GLSA-201309-24", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://xenbits.xen.org/gitweb/?p=xen.git;a=commit;h=40f9c5e0a6d15b4ca1f6d4ed3a46f0871520eab5", "name" : "http://xenbits.xen.org/gitweb/?p=xen.git;a=commit;h=40f9c5e0a6d15b4ca1f6d4ed3a46f0871520eab5", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://xenbits.xen.org/gitweb/?p=xen.git;a=commit;h=61401264eb00fae4ee4efc8e9a5067449283207b", "name" : "http://xenbits.xen.org/gitweb/?p=xen.git;a=commit;h=61401264eb00fae4ee4efc8e9a5067449283207b", "refsource" : "CONFIRM", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "oxenstored in Xen 4.1.x, Xen 4.2.x, and xen-unstable does not properly consider the state of the Xenstore ring during read operations, which allows guest OS users to cause a denial of service (daemon crash and host-control outage, or memory consumption) or obtain sensitive control-plane data by leveraging guest administrative access." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:xen:xen:4.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:xen:xen:4.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:xen:xen:4.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:xen:xen:4.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:xen:xen:4.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:xen:xen:4.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:xen:xen:4.2.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:M/Au:N/C:P/I:N/A:P", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 5.5, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-07T05:04Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0216", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "=" }, { "version_value" : "3.0.18", "version_affected" : "=" }, { "version_value" : "3.0.19", "version_affected" : "=" }, { "version_value" : "3.0.20", "version_affected" : "=" }, { "version_value" : "3.0.21", "version_affected" : "=" }, { "version_value" : "3.0.22", "version_affected" : "=" }, { "version_value" : "3.0.23", "version_affected" : "=" }, { "version_value" : "3.0.24", "version_affected" : "=" }, { "version_value" : "3.0.25", "version_affected" : "=" }, { "version_value" : "3.0.26", "version_affected" : "=" }, { "version_value" : "3.0.27", "version_affected" : "=" }, { "version_value" : "3.0.28", "version_affected" : "=" }, { "version_value" : "3.0.29", "version_affected" : "=" }, { "version_value" : "3.0.30", "version_affected" : "=" }, { "version_value" : "3.0.31", "version_affected" : "=" }, { "version_value" : "3.0.32", "version_affected" : "=" }, { "version_value" : "3.0.33", "version_affected" : "=" }, { "version_value" : "3.0.34", "version_affected" : "=" }, { "version_value" : "3.0.35", "version_affected" : "=" }, { "version_value" : "3.0.36", "version_affected" : "=" }, { "version_value" : "3.0.37", "version_affected" : "=" }, { "version_value" : "3.0.38", "version_affected" : "=" }, { "version_value" : "3.0.39", "version_affected" : "=" }, { "version_value" : "3.0.40", "version_affected" : "=" }, { "version_value" : "3.0.41", "version_affected" : "=" }, { "version_value" : "3.0.42", "version_affected" : "=" }, { "version_value" : "3.0.43", "version_affected" : "=" }, { "version_value" : "3.0.44", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.3", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.1.5", "version_affected" : "=" }, { "version_value" : "3.1.6", "version_affected" : "=" }, { "version_value" : "3.1.7", "version_affected" : "=" }, { "version_value" : "3.1.8", "version_affected" : "=" }, { "version_value" : "3.1.9", "version_affected" : "=" }, { "version_value" : "3.1.10", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.2.6", "version_affected" : "=" }, { "version_value" : "3.2.7", "version_affected" : "=" }, { "version_value" : "3.2.8", "version_affected" : "=" }, { "version_value" : "3.2.9", "version_affected" : "=" }, { "version_value" : "3.2.10", "version_affected" : "=" }, { "version_value" : "3.2.11", "version_affected" : "=" }, { "version_value" : "3.2.12", "version_affected" : "=" }, { "version_value" : "3.2.13", "version_affected" : "=" }, { "version_value" : "3.2.14", "version_affected" : "=" }, { "version_value" : "3.2.15", "version_affected" : "=" }, { "version_value" : "3.2.16", "version_affected" : "=" }, { "version_value" : "3.2.17", "version_affected" : "=" }, { "version_value" : "3.2.18", "version_affected" : "=" }, { "version_value" : "3.2.19", "version_affected" : "=" }, { "version_value" : "3.2.20", "version_affected" : "=" }, { "version_value" : "3.2.21", "version_affected" : "=" }, { "version_value" : "3.2.22", "version_affected" : "=" }, { "version_value" : "3.2.23", "version_affected" : "=" }, { "version_value" : "3.2.24", "version_affected" : "=" }, { "version_value" : "3.2.25", "version_affected" : "=" }, { "version_value" : "3.2.26", "version_affected" : "=" }, { "version_value" : "3.2.27", "version_affected" : "=" }, { "version_value" : "3.2.28", "version_affected" : "=" }, { "version_value" : "3.2.29", "version_affected" : "=" }, { "version_value" : "3.2.30", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.3.4", "version_affected" : "=" }, { "version_value" : "3.3.5", "version_affected" : "=" }, { "version_value" : "3.3.6", "version_affected" : "=" }, { "version_value" : "3.3.7", "version_affected" : "=" }, { "version_value" : "3.3.8", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.4.3", "version_affected" : "=" }, { "version_value" : "3.4.4", "version_affected" : "=" }, { "version_value" : "3.4.5", "version_affected" : "=" }, { "version_value" : "3.4.6", "version_affected" : "=" }, { "version_value" : "3.4.7", "version_affected" : "=" }, { "version_value" : "3.4.8", "version_affected" : "=" }, { "version_value" : "3.4.9", "version_affected" : "=" }, { "version_value" : "3.4.10", "version_affected" : "=" }, { "version_value" : "3.4.11", "version_affected" : "=" }, { "version_value" : "3.4.12", "version_affected" : "=" }, { "version_value" : "3.4.13", "version_affected" : "=" }, { "version_value" : "3.4.14", "version_affected" : "=" }, { "version_value" : "3.4.15", "version_affected" : "=" }, { "version_value" : "3.4.16", "version_affected" : "=" }, { "version_value" : "3.4.17", "version_affected" : "=" }, { "version_value" : "3.4.18", "version_affected" : "=" }, { "version_value" : "3.4.19", "version_affected" : "=" }, { "version_value" : "3.4.20", "version_affected" : "=" }, { "version_value" : "3.4.21", "version_affected" : "=" }, { "version_value" : "3.4.22", "version_affected" : "=" }, { "version_value" : "3.4.23", "version_affected" : "=" }, { "version_value" : "3.4.24", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "=" }, { "version_value" : "3.6.9", "version_affected" : "=" }, { "version_value" : "3.6.10", "version_affected" : "=" }, { "version_value" : "3.6.11", "version_affected" : "=" }, { "version_value" : "3.7", "version_affected" : "=" }, { "version_value" : "3.7.1", "version_affected" : "=" }, { "version_value" : "3.7.2", "version_affected" : "=" }, { "version_value" : "3.7.3", "version_affected" : "=" }, { "version_value" : "3.7.4", "version_affected" : "=" }, { "version_value" : "3.7.5", "version_affected" : "=" }, { "version_value" : "3.7.6", "version_affected" : "=" }, { "version_value" : "3.7.7", "version_affected" : "=" }, { "version_value" : "3.7.8", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=48856286b64e4b66ec62b94e504d0b29c1ade664", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=48856286b64e4b66ec62b94e504d0b29c1ade664", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00004.html", "name" : "openSUSE-SU-2013:0395", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00018.html", "name" : "SUSE-SU-2013:0674", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html", "name" : "openSUSE-SU-2013:0925", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.8", "name" : "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.8", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:176", "name" : "MDVSA-2013:176", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/05/12", "name" : "[oss-security] 20130205 Xen Security Advisory 39 (CVE-2013-0216,CVE-2013-0217) - Linux netback DoS via malicious guest ring.", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=910883", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=910883", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://github.com/torvalds/linux/commit/48856286b64e4b66ec62b94e504d0b29c1ade664", "name" : "https://github.com/torvalds/linux/commit/48856286b64e4b66ec62b94e504d0b29c1ade664", "refsource" : "CONFIRM", "tags" : [ "Exploit", "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Xen netback functionality in the Linux kernel before 3.7.8 allows guest OS users to cause a denial of service (loop) by triggering ring pointer corruption." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.44:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.7.8" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:M/Au:S/C:N/I:N/A:C", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 5.2 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.4, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-18T04:41Z", "lastModifiedDate" : "2013-08-22T06:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0217", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "=" }, { "version_value" : "3.0.18", "version_affected" : "=" }, { "version_value" : "3.0.19", "version_affected" : "=" }, { "version_value" : "3.0.20", "version_affected" : "=" }, { "version_value" : "3.0.21", "version_affected" : "=" }, { "version_value" : "3.0.22", "version_affected" : "=" }, { "version_value" : "3.0.23", "version_affected" : "=" }, { "version_value" : "3.0.24", "version_affected" : "=" }, { "version_value" : "3.0.25", "version_affected" : "=" }, { "version_value" : "3.0.26", "version_affected" : "=" }, { "version_value" : "3.0.27", "version_affected" : "=" }, { "version_value" : "3.0.28", "version_affected" : "=" }, { "version_value" : "3.0.29", "version_affected" : "=" }, { "version_value" : "3.0.30", "version_affected" : "=" }, { "version_value" : "3.0.31", "version_affected" : "=" }, { "version_value" : "3.0.32", "version_affected" : "=" }, { "version_value" : "3.0.33", "version_affected" : "=" }, { "version_value" : "3.0.34", "version_affected" : "=" }, { "version_value" : "3.0.35", "version_affected" : "=" }, { "version_value" : "3.0.36", "version_affected" : "=" }, { "version_value" : "3.0.37", "version_affected" : "=" }, { "version_value" : "3.0.38", "version_affected" : "=" }, { "version_value" : "3.0.39", "version_affected" : "=" }, { "version_value" : "3.0.40", "version_affected" : "=" }, { "version_value" : "3.0.41", "version_affected" : "=" }, { "version_value" : "3.0.42", "version_affected" : "=" }, { "version_value" : "3.0.43", "version_affected" : "=" }, { "version_value" : "3.0.44", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.3", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.1.5", "version_affected" : "=" }, { "version_value" : "3.1.6", "version_affected" : "=" }, { "version_value" : "3.1.7", "version_affected" : "=" }, { "version_value" : "3.1.8", "version_affected" : "=" }, { "version_value" : "3.1.9", "version_affected" : "=" }, { "version_value" : "3.1.10", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.2.6", "version_affected" : "=" }, { "version_value" : "3.2.7", "version_affected" : "=" }, { "version_value" : "3.2.8", "version_affected" : "=" }, { "version_value" : "3.2.9", "version_affected" : "=" }, { "version_value" : "3.2.10", "version_affected" : "=" }, { "version_value" : "3.2.11", "version_affected" : "=" }, { "version_value" : "3.2.12", "version_affected" : "=" }, { "version_value" : "3.2.13", "version_affected" : "=" }, { "version_value" : "3.2.14", "version_affected" : "=" }, { "version_value" : "3.2.15", "version_affected" : "=" }, { "version_value" : "3.2.16", "version_affected" : "=" }, { "version_value" : "3.2.17", "version_affected" : "=" }, { "version_value" : "3.2.18", "version_affected" : "=" }, { "version_value" : "3.2.19", "version_affected" : "=" }, { "version_value" : "3.2.20", "version_affected" : "=" }, { "version_value" : "3.2.21", "version_affected" : "=" }, { "version_value" : "3.2.22", "version_affected" : "=" }, { "version_value" : "3.2.23", "version_affected" : "=" }, { "version_value" : "3.2.24", "version_affected" : "=" }, { "version_value" : "3.2.25", "version_affected" : "=" }, { "version_value" : "3.2.26", "version_affected" : "=" }, { "version_value" : "3.2.27", "version_affected" : "=" }, { "version_value" : "3.2.28", "version_affected" : "=" }, { "version_value" : "3.2.29", "version_affected" : "=" }, { "version_value" : "3.2.30", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.3.4", "version_affected" : "=" }, { "version_value" : "3.3.5", "version_affected" : "=" }, { "version_value" : "3.3.6", "version_affected" : "=" }, { "version_value" : "3.3.7", "version_affected" : "=" }, { "version_value" : "3.3.8", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.4.3", "version_affected" : "=" }, { "version_value" : "3.4.4", "version_affected" : "=" }, { "version_value" : "3.4.5", "version_affected" : "=" }, { "version_value" : "3.4.6", "version_affected" : "=" }, { "version_value" : "3.4.7", "version_affected" : "=" }, { "version_value" : "3.4.8", "version_affected" : "=" }, { "version_value" : "3.4.9", "version_affected" : "=" }, { "version_value" : "3.4.10", "version_affected" : "=" }, { "version_value" : "3.4.11", "version_affected" : "=" }, { "version_value" : "3.4.12", "version_affected" : "=" }, { "version_value" : "3.4.13", "version_affected" : "=" }, { "version_value" : "3.4.14", "version_affected" : "=" }, { "version_value" : "3.4.15", "version_affected" : "=" }, { "version_value" : "3.4.16", "version_affected" : "=" }, { "version_value" : "3.4.17", "version_affected" : "=" }, { "version_value" : "3.4.18", "version_affected" : "=" }, { "version_value" : "3.4.19", "version_affected" : "=" }, { "version_value" : "3.4.20", "version_affected" : "=" }, { "version_value" : "3.4.21", "version_affected" : "=" }, { "version_value" : "3.4.22", "version_affected" : "=" }, { "version_value" : "3.4.23", "version_affected" : "=" }, { "version_value" : "3.4.24", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "=" }, { "version_value" : "3.6.9", "version_affected" : "=" }, { "version_value" : "3.6.10", "version_affected" : "=" }, { "version_value" : "3.6.11", "version_affected" : "=" }, { "version_value" : "3.7", "version_affected" : "=" }, { "version_value" : "3.7.1", "version_affected" : "=" }, { "version_value" : "3.7.2", "version_affected" : "=" }, { "version_value" : "3.7.3", "version_affected" : "=" }, { "version_value" : "3.7.4", "version_affected" : "=" }, { "version_value" : "3.7.5", "version_affected" : "=" }, { "version_value" : "3.7.6", "version_affected" : "=" }, { "version_value" : "3.7.7", "version_affected" : "=" }, { "version_value" : "3.7.8", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=7d5145d8eb2b9791533ffe4dc003b129b9696c48", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=7d5145d8eb2b9791533ffe4dc003b129b9696c48", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.8", "name" : "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.8", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:176", "name" : "MDVSA-2013:176", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/05/12", "name" : "[oss-security] 20130205 Xen Security Advisory 39 (CVE-2013-0216,CVE-2013-0217) - Linux netback DoS via malicious guest ring.", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=910883", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=910883", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://github.com/torvalds/linux/commit/7d5145d8eb2b9791533ffe4dc003b129b9696c48", "name" : "https://github.com/torvalds/linux/commit/7d5145d8eb2b9791533ffe4dc003b129b9696c48", "refsource" : "CONFIRM", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Memory leak in drivers/net/xen-netback/netback.c in the Xen netback functionality in the Linux kernel before 3.7.8 allows guest OS users to cause a denial of service (memory consumption) by triggering certain error conditions." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.44:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.7.8" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:M/Au:S/C:N/I:N/A:C", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 5.2 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.4, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-18T04:41Z", "lastModifiedDate" : "2013-08-22T06:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0218", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "jboss_enterprise_application_platform", "version" : { "version_data" : [ { "version_value" : "5.1.2", "version_affected" : "=" }, { "version_value" : "5.2.0", "version_affected" : "=" } ] } }, { "product_name" : "jboss_enterprise_web_platform", "version" : { "version_data" : [ { "version_value" : "5.1.2", "version_affected" : "=" }, { "version_value" : "5.2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0206.html", "name" : "RHSA-2013:0206", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0207.html", "name" : "RHSA-2013:0207", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0833.html", "name" : "RHSA-2013:0833", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/52041", "name" : "52041", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/89698", "name" : "89698", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/57652", "name" : "57652", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=903073", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=903073", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81725", "name" : "jboss-eap-info-disc(81725)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The GUI installer in JBoss Enterprise Application Platform (EAP) and Enterprise Web Platform (EWP) 5.2.0 and possibly 5.1.2 uses world-readable permissions for the auto-install XML file, which allows local users to obtain the administrator password and the sucker password by reading this file." }, { "lang" : "en", "value" : "Per http://rhn.redhat.com/errata/RHSA-2013-0206.html \r\n\"An update for JBoss Enterprise Application Platform 5.2.0 which fixes one\r\nsecurity issue is now available from the Red Hat Customer Portal.\"\r\n\r\nPer http://rhn.redhat.com/errata/RHSA-2013-0207.html\r\n\"An update for JBoss Enterprise Web Platform 5.2.0 which fixes one security\r\nissue is now available from the Red Hat Customer Portal.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:jboss_enterprise_web_platform:5.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:jboss_enterprise_web_platform:5.2.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-05T23:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0219", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "fedoraproject", "product" : { "product_data" : [ { "product_name" : "sssd", "version" : { "version_data" : [ { "version_value" : "0.2.1", "version_affected" : "=" }, { "version_value" : "0.3.0", "version_affected" : "=" }, { "version_value" : "0.3.1", "version_affected" : "=" }, { "version_value" : "0.3.2", "version_affected" : "=" }, { "version_value" : "0.3.3", "version_affected" : "=" }, { "version_value" : "0.4.0", "version_affected" : "=" }, { "version_value" : "0.4.1", "version_affected" : "=" }, { "version_value" : "0.5.0", "version_affected" : "=" }, { "version_value" : "0.6.0", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.7.0", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.99.0", "version_affected" : "=" }, { "version_value" : "0.99.1", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.99", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.91", "version_affected" : "=" }, { "version_value" : "1.1.92", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.2.91", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.5.4", "version_affected" : "=" }, { "version_value" : "1.5.5", "version_affected" : "=" }, { "version_value" : "1.5.6", "version_affected" : "=" }, { "version_value" : "1.5.6.1", "version_affected" : "=" }, { "version_value" : "1.5.7", "version_affected" : "=" }, { "version_value" : "1.5.8", "version_affected" : "=" }, { "version_value" : "1.5.9", "version_affected" : "=" }, { "version_value" : "1.5.10", "version_affected" : "=" }, { "version_value" : "1.5.11", "version_affected" : "=" }, { "version_value" : "1.5.12", "version_affected" : "=" }, { "version_value" : "1.5.13", "version_affected" : "=" }, { "version_value" : "1.5.14", "version_affected" : "=" }, { "version_value" : "1.5.15", "version_affected" : "=" }, { "version_value" : "1.5.16", "version_affected" : "=" }, { "version_value" : "1.5.17", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.6.1", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "1.6.3", "version_affected" : "=" }, { "version_value" : "1.6.4", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" }, { "version_value" : "1.8.0", "version_affected" : "=" }, { "version_value" : "1.8.1", "version_affected" : "=" }, { "version_value" : "1.8.2", "version_affected" : "=" }, { "version_value" : "1.8.3", "version_affected" : "=" }, { "version_value" : "1.8.4", "version_affected" : "=" }, { "version_value" : "1.8.5", "version_affected" : "=" }, { "version_value" : "1.8.6", "version_affected" : "=" }, { "version_value" : "1.9.0", "version_affected" : "=" }, { "version_value" : "1.9.1", "version_affected" : "=" }, { "version_value" : "1.9.2", "version_affected" : "=" }, { "version_value" : "1.9.3", "version_affected" : "<=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "5", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://git.fedorahosted.org/cgit/sssd.git/commit/?id=020bf88fd1c5bdac8fc671b37c7118f5378c7047", "name" : "http://git.fedorahosted.org/cgit/sssd.git/commit/?id=020bf88fd1c5bdac8fc671b37c7118f5378c7047", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://git.fedorahosted.org/cgit/sssd.git/commit/?id=3843b284cd3e8f88327772ebebc7249990fd87b9", "name" : "http://git.fedorahosted.org/cgit/sssd.git/commit/?id=3843b284cd3e8f88327772ebebc7249990fd87b9", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://git.fedorahosted.org/cgit/sssd.git/commit/?id=94cbf1cfb0f88c967f1fb0a4cf23723148868e4a", "name" : "http://git.fedorahosted.org/cgit/sssd.git/commit/?id=94cbf1cfb0f88c967f1fb0a4cf23723148868e4a", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://git.fedorahosted.org/cgit/sssd.git/commit/?id=e864d914a44a37016736554e9257c06b18c57d37", "name" : "http://git.fedorahosted.org/cgit/sssd.git/commit/?id=e864d914a44a37016736554e9257c06b18c57d37", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098434.html", "name" : "FEDORA-2013-1795", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098613.html", "name" : "FEDORA-2013-1826", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0508.html", "name" : "RHSA-2013:0508", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1319.html", "name" : "RHSA-2013:1319", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/51928", "name" : "51928", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/52315", "name" : "52315", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57539", "name" : "57539", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=884254", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=884254", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://fedorahosted.org/sssd/ticket/1782", "name" : "https://fedorahosted.org/sssd/ticket/1782", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.4", "name" : "https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.4", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on another user's files." }, { "lang" : "en", "value" : "Per https://access.redhat.com/security/cve/CVE-2013-0219\r\n\r\nThis issue affects the version of sssd shipped with Red Hat Enterprise Linux 5 and 6.\r\n" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.99.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.99.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.0.99:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.1.91:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.1.92:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.2.91:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.8.0:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.8.0:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.8.0:beta3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.8.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.8.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.8.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.8.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.9.3" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 3.7 }, "severity" : "LOW", "exploitabilityScore" : 1.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-24T19:55Z", "lastModifiedDate" : "2019-04-22T17:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0220", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "fedoraproject", "product" : { "product_data" : [ { "product_name" : "sssd", "version" : { "version_data" : [ { "version_value" : "0.2.1", "version_affected" : "=" }, { "version_value" : "0.3.0", "version_affected" : "=" }, { "version_value" : "0.3.1", "version_affected" : "=" }, { "version_value" : "0.3.2", "version_affected" : "=" }, { "version_value" : "0.3.3", "version_affected" : "=" }, { "version_value" : "0.4.0", "version_affected" : "=" }, { "version_value" : "0.4.1", "version_affected" : "=" }, { "version_value" : "0.5.0", "version_affected" : "=" }, { "version_value" : "0.6.0", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.7.0", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.99.0", "version_affected" : "=" }, { "version_value" : "0.99.1", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.99", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.91", "version_affected" : "=" }, { "version_value" : "1.1.92", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.2.91", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.5.4", "version_affected" : "=" }, { "version_value" : "1.5.5", "version_affected" : "=" }, { "version_value" : "1.5.6", "version_affected" : "=" }, { "version_value" : "1.5.6.1", "version_affected" : "=" }, { "version_value" : "1.5.7", "version_affected" : "=" }, { "version_value" : "1.5.8", "version_affected" : "=" }, { "version_value" : "1.5.9", "version_affected" : "=" }, { "version_value" : "1.5.10", "version_affected" : "=" }, { "version_value" : "1.5.11", "version_affected" : "=" }, { "version_value" : "1.5.12", "version_affected" : "=" }, { "version_value" : "1.5.13", "version_affected" : "=" }, { "version_value" : "1.5.14", "version_affected" : "=" }, { "version_value" : "1.5.15", "version_affected" : "=" }, { "version_value" : "1.5.16", "version_affected" : "=" }, { "version_value" : "1.5.17", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.6.1", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "1.6.3", "version_affected" : "=" }, { "version_value" : "1.6.4", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" }, { "version_value" : "1.8.0", "version_affected" : "=" }, { "version_value" : "1.8.1", "version_affected" : "=" }, { "version_value" : "1.8.2", "version_affected" : "=" }, { "version_value" : "1.8.3", "version_affected" : "=" }, { "version_value" : "1.8.4", "version_affected" : "=" }, { "version_value" : "1.8.5", "version_affected" : "=" }, { "version_value" : "1.8.6", "version_affected" : "=" }, { "version_value" : "1.9.0", "version_affected" : "=" }, { "version_value" : "1.9.1", "version_affected" : "=" }, { "version_value" : "1.9.2", "version_affected" : "=" }, { "version_value" : "1.9.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://git.fedorahosted.org/cgit/sssd.git/commit/?id=2bd514cfde1938b1e245af11c9b548d58d49b325", "name" : "http://git.fedorahosted.org/cgit/sssd.git/commit/?id=2bd514cfde1938b1e245af11c9b548d58d49b325", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://git.fedorahosted.org/cgit/sssd.git/commit/?id=30e2585dd46b62aa3a4abdf6de3f40a20e1743ab", "name" : "http://git.fedorahosted.org/cgit/sssd.git/commit/?id=30e2585dd46b62aa3a4abdf6de3f40a20e1743ab", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098434.html", "name" : "FEDORA-2013-1795", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098613.html", "name" : "FEDORA-2013-1826", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0508.html", "name" : "RHSA-2013:0508", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/51928", "name" : "51928", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/52315", "name" : "52315", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57539", "name" : "57539", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=884601", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=884601", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://fedorahosted.org/sssd/ticket/1781", "name" : "https://fedorahosted.org/sssd/ticket/1781", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.4", "name" : "https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.4", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The (1) sss_autofs_cmd_getautomntent and (2) sss_autofs_cmd_getautomntbyname function in responder/autofs/autofssrv_cmd.c and the (3) ssh_cmd_parse_request function in responder/ssh/sshsrv_cmd.c in System Security Services Daemon (SSSD) before 1.9.4 allow remote attackers to cause a denial of service (out-of-bounds read, crash, and restart) via a crafted SSSD packet." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.99.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.99.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.0.99:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.1.91:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.1.92:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.2.91:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.5.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.8.0:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.8.0:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.8.0:beta3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.8.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.8.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.8.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.8.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.9.3" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-24T19:55Z", "lastModifiedDate" : "2013-02-27T19:50Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0221", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gnu", "product" : { "product_data" : [ { "product_name" : "coreutils", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "opensuse", "product" : { "product_data" : [ { "product_name" : "opensuse", "version" : { "version_data" : [ { "version_value" : "12.1", "version_affected" : "=" }, { "version_value" : "12.2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1652.html", "name" : "RHSA-2013:1652", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://bugzilla.novell.com/show_bug.cgi?id=798538", "name" : "https://bugzilla.novell.com/show_bug.cgi?id=798538", "refsource" : "CONFIRM", "tags" : [ "Exploit" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=903464", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=903464", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://build.opensuse.org/request/show/149348#diff_headline_coreutils-i18n-patch_diff_action_0_submit_0_19", "name" : "https://build.opensuse.org/request/show/149348#diff_headline_coreutils-i18n-patch_diff_action_0_submit_0_19", "refsource" : "CONFIRM", "tags" : [ "Exploit", "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the sort command, when using the (1) -d or (2) -M switch, which triggers a stack-based buffer overflow in the alloca function." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-11-23T18:55Z", "lastModifiedDate" : "2019-04-22T17:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0222", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gnu", "product" : { "product_data" : [ { "product_name" : "coreutils", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "opensuse", "product" : { "product_data" : [ { "product_name" : "opensuse", "version" : { "version_data" : [ { "version_value" : "11.4", "version_affected" : "=" }, { "version_value" : "12.1", "version_affected" : "=" }, { "version_value" : "12.2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1652.html", "name" : "RHSA-2013:1652", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "https://bugzilla.novell.com/show_bug.cgi?id=796243", "name" : "https://bugzilla.novell.com/show_bug.cgi?id=796243", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=903465", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=903465", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://build.opensuse.org/request/show/149348#diff_headline_coreutils-i18n-patch_diff_action_0_submit_0_19", "name" : "https://build.opensuse.org/request/show/149348#diff_headline_coreutils-i18n-patch_diff_action_0_submit_0_19", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the uniq command, which triggers a stack-based buffer overflow in the alloca function." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-11-23T18:55Z", "lastModifiedDate" : "2019-04-22T17:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0223", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gnu", "product" : { "product_data" : [ { "product_name" : "coreutils", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "opensuse", "product" : { "product_data" : [ { "product_name" : "opensuse", "version" : { "version_data" : [ { "version_value" : "11.4", "version_affected" : "=" }, { "version_value" : "12.1", "version_affected" : "=" }, { "version_value" : "12.2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1652.html", "name" : "RHSA-2013:1652", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "https://bugzilla.novell.com/show_bug.cgi?id=798541", "name" : "https://bugzilla.novell.com/show_bug.cgi?id=798541", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=903466", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=903466", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://build.opensuse.org/request/show/149348#diff_headline_coreutils-i18n-patch_diff_action_0_submit_0_19", "name" : "https://build.opensuse.org/request/show/149348#diff_headline_coreutils-i18n-patch_diff_action_0_submit_0_19", "refsource" : "CONFIRM", "tags" : [ "Exploit", "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the join command, when using the -i switch, which triggers a stack-based buffer overflow in the alloca function." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 1.9 }, "severity" : "LOW", "exploitabilityScore" : 3.4, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-11-23T18:55Z", "lastModifiedDate" : "2019-04-22T17:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0224", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "video_project", "product" : { "product_data" : [ { "product_name" : "video", "version" : { "version_data" : [ { "version_value" : "7.x-2.0", "version_affected" : "=" }, { "version_value" : "7.x-2.1", "version_affected" : "=" }, { "version_value" : "7.x-2.2", "version_affected" : "=" }, { "version_value" : "7.x-2.3", "version_affected" : "=" }, { "version_value" : "7.x-2.4", "version_affected" : "=" }, { "version_value" : "7.x-2.5", "version_affected" : "=" }, { "version_value" : "7.x-2.6", "version_affected" : "=" }, { "version_value" : "7.x-2.7", "version_affected" : "=" }, { "version_value" : "7.x-2.8", "version_affected" : "=" }, { "version_value" : "7.x-2.x", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-16" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2013/01/25/4", "name" : "[oss-security] 20130124 Re: CVE request for Drupal contributed modules", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://drupal.org/node/1895234", "name" : "https://drupal.org/node/1895234", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://drupal.org/node/1896714", "name" : "https://drupal.org/node/1896714", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Video module 7.x-2.x before 7.x-2.9 for Drupal, when using the FFmpeg transcoder, allows local users to execute arbitrary PHP code by modifying a temporary PHP file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:video_project:video:7.x-2.0:alpha1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:video_project:video:7.x-2.0:alpha2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:video_project:video:7.x-2.0:alpha3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:video_project:video:7.x-2.0:alpha4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:video_project:video:7.x-2.0:alpha5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:video_project:video:7.x-2.0:alpha6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:video_project:video:7.x-2.1:alpha1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:video_project:video:7.x-2.1:alpha2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:video_project:video:7.x-2.1:alpha3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:video_project:video:7.x-2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:video_project:video:7.x-2.2:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:video_project:video:7.x-2.2:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:video_project:video:7.x-2.2:beta3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:video_project:video:7.x-2.2:beta4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:video_project:video:7.x-2.2:beta5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:video_project:video:7.x-2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:video_project:video:7.x-2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:video_project:video:7.x-2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:video_project:video:7.x-2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:video_project:video:7.x-2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:video_project:video:7.x-2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:video_project:video:7.x-2.x:dev:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-19T14:55Z", "lastModifiedDate" : "2013-03-21T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0225", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "user_relationships_project", "product" : { "product_data" : [ { "product_name" : "user_relationships", "version" : { "version_data" : [ { "version_value" : "6.x-1.0", "version_affected" : "=" }, { "version_value" : "6.x-1.1", "version_affected" : "=" }, { "version_value" : "6.x-1.2", "version_affected" : "=" }, { "version_value" : "6.x-1.3", "version_affected" : "=" }, { "version_value" : "6.x-1.x", "version_affected" : "=" }, { "version_value" : "7.x-1.0", "version_affected" : "=" }, { "version_value" : "7.x-1.x", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://drupalcode.org/project/user_relationships.git/commitdiff/17e94b9", "name" : "http://drupalcode.org/project/user_relationships.git/commitdiff/17e94b9", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://drupalcode.org/project/user_relationships.git/commitdiff/b9a4739", "name" : "http://drupalcode.org/project/user_relationships.git/commitdiff/b9a4739", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/01/25/4", "name" : "[oss-security] 20130124 Re: CVE request for Drupal contributed modules", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://drupal.org/node/1896272", "name" : "https://drupal.org/node/1896272", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://drupal.org/node/1896276", "name" : "https://drupal.org/node/1896276", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://drupal.org/node/1896720", "name" : "https://drupal.org/node/1896720", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the User Relationships module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.0-alpha5 for Drupal allows remote authenticated users with the \"administer user relationships\" permission to inject arbitrary web script or HTML via a relationship name." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:user_relationships_project:user_relationships:6.x-1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:user_relationships_project:user_relationships:6.x-1.0:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:user_relationships_project:user_relationships:6.x-1.0:beta10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:user_relationships_project:user_relationships:6.x-1.0:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:user_relationships_project:user_relationships:6.x-1.0:beta3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:user_relationships_project:user_relationships:6.x-1.0:beta4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:user_relationships_project:user_relationships:6.x-1.0:beta5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:user_relationships_project:user_relationships:6.x-1.0:beta6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:user_relationships_project:user_relationships:6.x-1.0:beta7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:user_relationships_project:user_relationships:6.x-1.0:beta8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:user_relationships_project:user_relationships:6.x-1.0:beta9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:user_relationships_project:user_relationships:6.x-1.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:user_relationships_project:user_relationships:6.x-1.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:user_relationships_project:user_relationships:6.x-1.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:user_relationships_project:user_relationships:6.x-1.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:user_relationships_project:user_relationships:6.x-1.0:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:user_relationships_project:user_relationships:6.x-1.0:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:user_relationships_project:user_relationships:6.x-1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:user_relationships_project:user_relationships:6.x-1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:user_relationships_project:user_relationships:6.x-1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:user_relationships_project:user_relationships:6.x-1.x:dev:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:user_relationships_project:user_relationships:7.x-1.0:alpha1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:user_relationships_project:user_relationships:7.x-1.0:alpha2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:user_relationships_project:user_relationships:7.x-1.0:alpha3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:user_relationships_project:user_relationships:7.x-1.0:alpha4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:user_relationships_project:user_relationships:7.x-1.x:dev:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-19T14:55Z", "lastModifiedDate" : "2013-03-21T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0226", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "zugec_ivan", "product" : { "product_data" : [ { "product_name" : "keyboard_shortcut_utility", "version" : { "version_data" : [ { "version_value" : "7.x-1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2013/01/25/4", "name" : "[oss-security] 20130124 Re: CVE request for Drupal contributed modules", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://drupal.org/node/1896752", "name" : "https://drupal.org/node/1896752", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Keyboard Shortcut Utility module 7.x-1.x before 7.x-1.1 for Drupal does not properly check node restrictions, which allows (1) remote authenticated users with the \"view shortcuts\" permission to read nodes or (2) remote authenticated users with the \"admin shortcuts\" permission to read, edit, or delete nodes via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zugec_ivan:keyboard_shortcut_utility:7.x-1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 6.8, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-19T14:55Z", "lastModifiedDate" : "2013-03-21T14:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0227", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mathijs_koenraadt", "product" : { "product_data" : [ { "product_name" : "search_api_sorts", "version" : { "version_data" : [ { "version_value" : "7.x-1.0", "version_affected" : "=" }, { "version_value" : "7.x-1.1", "version_affected" : "=" }, { "version_value" : "7.x-1.2", "version_affected" : "=" }, { "version_value" : "7.x-1.3", "version_affected" : "=" }, { "version_value" : "7.x-1.x", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://drupalcode.org/project/search_api_sorts.git/commitdiff/f6cbf47", "name" : "http://drupalcode.org/project/search_api_sorts.git/commitdiff/f6cbf47", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/01/25/4", "name" : "[oss-security] 20130124 Re: CVE request for Drupal contributed modules", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://drupal.org/node/1896756", "name" : "https://drupal.org/node/1896756", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://drupal.org/node/1896782", "name" : "https://drupal.org/node/1896782", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the Search API Sorts module 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users with certain roles to inject arbitrary web script or HTML via unspecified field labels." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mathijs_koenraadt:search_api_sorts:7.x-1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mathijs_koenraadt:search_api_sorts:7.x-1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mathijs_koenraadt:search_api_sorts:7.x-1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mathijs_koenraadt:search_api_sorts:7.x-1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mathijs_koenraadt:search_api_sorts:7.x-1.x:dev:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-19T14:55Z", "lastModifiedDate" : "2013-03-21T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0228", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "=" }, { "version_value" : "3.0.18", "version_affected" : "=" }, { "version_value" : "3.0.19", "version_affected" : "=" }, { "version_value" : "3.0.20", "version_affected" : "=" }, { "version_value" : "3.0.21", "version_affected" : "=" }, { "version_value" : "3.0.22", "version_affected" : "=" }, { "version_value" : "3.0.23", "version_affected" : "=" }, { "version_value" : "3.0.24", "version_affected" : "=" }, { "version_value" : "3.0.25", "version_affected" : "=" }, { "version_value" : "3.0.26", "version_affected" : "=" }, { "version_value" : "3.0.27", "version_affected" : "=" }, { "version_value" : "3.0.28", "version_affected" : "=" }, { "version_value" : "3.0.29", "version_affected" : "=" }, { "version_value" : "3.0.30", "version_affected" : "=" }, { "version_value" : "3.0.31", "version_affected" : "=" }, { "version_value" : "3.0.32", "version_affected" : "=" }, { "version_value" : "3.0.33", "version_affected" : "=" }, { "version_value" : "3.0.34", "version_affected" : "=" }, { "version_value" : "3.0.35", "version_affected" : "=" }, { "version_value" : "3.0.36", "version_affected" : "=" }, { "version_value" : "3.0.37", "version_affected" : "=" }, { "version_value" : "3.0.38", "version_affected" : "=" }, { "version_value" : "3.0.39", "version_affected" : "=" }, { "version_value" : "3.0.40", "version_affected" : "=" }, { "version_value" : "3.0.41", "version_affected" : "=" }, { "version_value" : "3.0.42", "version_affected" : "=" }, { "version_value" : "3.0.43", "version_affected" : "=" }, { "version_value" : "3.0.44", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.3", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.1.5", "version_affected" : "=" }, { "version_value" : "3.1.6", "version_affected" : "=" }, { "version_value" : "3.1.7", "version_affected" : "=" }, { "version_value" : "3.1.8", "version_affected" : "=" }, { "version_value" : "3.1.9", "version_affected" : "=" }, { "version_value" : "3.1.10", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.2.6", "version_affected" : "=" }, { "version_value" : "3.2.7", "version_affected" : "=" }, { "version_value" : "3.2.8", "version_affected" : "=" }, { "version_value" : "3.2.9", "version_affected" : "=" }, { "version_value" : "3.2.10", "version_affected" : "=" }, { "version_value" : "3.2.11", "version_affected" : "=" }, { "version_value" : "3.2.12", "version_affected" : "=" }, { "version_value" : "3.2.13", "version_affected" : "=" }, { "version_value" : "3.2.14", "version_affected" : "=" }, { "version_value" : "3.2.15", "version_affected" : "=" }, { "version_value" : "3.2.16", "version_affected" : "=" }, { "version_value" : "3.2.17", "version_affected" : "=" }, { "version_value" : "3.2.18", "version_affected" : "=" }, { "version_value" : "3.2.19", "version_affected" : "=" }, { "version_value" : "3.2.20", "version_affected" : "=" }, { "version_value" : "3.2.21", "version_affected" : "=" }, { "version_value" : "3.2.22", "version_affected" : "=" }, { "version_value" : "3.2.23", "version_affected" : "=" }, { "version_value" : "3.2.24", "version_affected" : "=" }, { "version_value" : "3.2.25", "version_affected" : "=" }, { "version_value" : "3.2.26", "version_affected" : "=" }, { "version_value" : "3.2.27", "version_affected" : "=" }, { "version_value" : "3.2.28", "version_affected" : "=" }, { "version_value" : "3.2.29", "version_affected" : "=" }, { "version_value" : "3.2.30", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.3.4", "version_affected" : "=" }, { "version_value" : "3.3.5", "version_affected" : "=" }, { "version_value" : "3.3.6", "version_affected" : "=" }, { "version_value" : "3.3.7", "version_affected" : "=" }, { "version_value" : "3.3.8", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.4.3", "version_affected" : "=" }, { "version_value" : "3.4.4", "version_affected" : "=" }, { "version_value" : "3.4.5", "version_affected" : "=" }, { "version_value" : "3.4.6", "version_affected" : "=" }, { "version_value" : "3.4.7", "version_affected" : "=" }, { "version_value" : "3.4.8", "version_affected" : "=" }, { "version_value" : "3.4.9", "version_affected" : "=" }, { "version_value" : "3.4.10", "version_affected" : "=" }, { "version_value" : "3.4.11", "version_affected" : "=" }, { "version_value" : "3.4.12", "version_affected" : "=" }, { "version_value" : "3.4.13", "version_affected" : "=" }, { "version_value" : "3.4.14", "version_affected" : "=" }, { "version_value" : "3.4.15", "version_affected" : "=" }, { "version_value" : "3.4.16", "version_affected" : "=" }, { "version_value" : "3.4.17", "version_affected" : "=" }, { "version_value" : "3.4.18", "version_affected" : "=" }, { "version_value" : "3.4.19", "version_affected" : "=" }, { "version_value" : "3.4.20", "version_affected" : "=" }, { "version_value" : "3.4.21", "version_affected" : "=" }, { "version_value" : "3.4.22", "version_affected" : "=" }, { "version_value" : "3.4.23", "version_affected" : "=" }, { "version_value" : "3.4.24", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "=" }, { "version_value" : "3.6.9", "version_affected" : "=" }, { "version_value" : "3.6.10", "version_affected" : "=" }, { "version_value" : "3.6.11", "version_affected" : "=" }, { "version_value" : "3.7", "version_affected" : "=" }, { "version_value" : "3.7.1", "version_affected" : "=" }, { "version_value" : "3.7.2", "version_affected" : "=" }, { "version_value" : "3.7.3", "version_affected" : "=" }, { "version_value" : "3.7.4", "version_affected" : "=" }, { "version_value" : "3.7.5", "version_affected" : "=" }, { "version_value" : "3.7.6", "version_affected" : "=" }, { "version_value" : "3.7.7", "version_affected" : "=" }, { "version_value" : "3.7.8", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-189" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=13d2b4d11d69a92574a55bfd985cfb0ca77aebdc", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=13d2b4d11d69a92574a55bfd985cfb0ca77aebdc", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.9", "name" : "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.9", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:176", "name" : "MDVSA-2013:176", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/13/10", "name" : "[oss-security] 20130213 Xen Security Advisory 42 (CVE-2013-0228) - Linux kernel hits general protection if %ds is corrupt for 32-bit PVOPS.", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1795-1", "name" : "USN-1795-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1796-1", "name" : "USN-1796-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1797-1", "name" : "USN-1797-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1805-1", "name" : "USN-1805-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1808-1", "name" : "USN-1808-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=906309", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=906309", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://github.com/torvalds/linux/commit/13d2b4d11d69a92574a55bfd985cfb0ca77aebdc", "name" : "https://github.com/torvalds/linux/commit/13d2b4d11d69a92574a55bfd985cfb0ca77aebdc", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The xen_iret function in arch/x86/xen/xen-asm_32.S in the Linux kernel before 3.7.9 on 32-bit Xen paravirt_ops platforms does not properly handle an invalid value in the DS segment register, which allows guest OS users to gain guest OS privileges via a crafted application." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.44:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.7.8" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.2 }, "severity" : "MEDIUM", "exploitabilityScore" : 1.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-01T12:37Z", "lastModifiedDate" : "2013-08-22T06:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0229", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "miniupnp_project", "product" : { "product_data" : [ { "product_name" : "miniupnpd", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play", "name" : "https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf", "name" : "https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb", "name" : "https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1.4 allows remote attackers to cause a denial of service (service crash) via a crafted request that triggers a buffer over-read." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:miniupnp_project:miniupnpd:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:miniupnp_project:miniupnpd:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:miniupnp_project:miniupnpd:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:miniupnp_project:miniupnpd:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.3" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-31T21:55Z", "lastModifiedDate" : "2015-10-08T14:34Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0230", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "miniupnp_project", "product" : { "product_data" : [ { "product_name" : "miniupnpd", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/57608", "name" : "57608", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play", "name" : "https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf", "name" : "https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb", "name" : "https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://www.exploit-db.com/exploits/36839/", "name" : "36839", "refsource" : "EXPLOIT-DB", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to execute arbitrary code via a long quoted method." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:miniupnp_project:miniupnpd:1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-31T21:55Z", "lastModifiedDate" : "2016-12-08T03:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0231", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.6.18", "version_affected" : "=" }, { "version_value" : "3.8", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "xen", "product" : { "product_data" : [ { "product_name" : "xen", "version" : { "version_data" : [ { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.1.3", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.2.0", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00004.html", "name" : "openSUSE-SU-2013:0395", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00018.html", "name" : "SUSE-SU-2013:0674", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html", "name" : "openSUSE-SU-2013:0925", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://osvdb.org/89903", "name" : "89903", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/52059", "name" : "52059", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2013/dsa-2632", "name" : "DSA-2632", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/05/9", "name" : "[oss-security] 20130205 Xen Security Advisory 43 (CVE-2013-0231) - Linux pciback DoS via not rate limited log messages.", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/57740", "name" : "57740", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81923", "name" : "xen-pcibackenablemsi-dos(81923)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The pciback_enable_msi function in the PCI backend driver (drivers/xen/pciback/conf_space_capability_msi.c) in Xen for the Linux kernel 2.6.18 and 3.8 allows guest OS users with PCI device access to cause a denial of service via a large number of kernel log messages. NOTE: some of these details are obtained from third party information." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:xen:xen:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:xen:xen:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:xen:xen:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:xen:xen:3.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:xen:xen:3.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:xen:xen:3.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:xen:xen:3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:xen:xen:3.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:xen:xen:3.2.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 4.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-13T01:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0232", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "zoneminder", "product" : { "product_data" : [ { "product_name" : "zoneminder", "version" : { "version_data" : [ { "version_value" : "1.24.0", "version_affected" : "=" }, { "version_value" : "1.24.1", "version_affected" : "=" }, { "version_value" : "1.24.2", "version_affected" : "=" }, { "version_value" : "1.24.3", "version_affected" : "=" }, { "version_value" : "1.24.4", "version_affected" : "=" }, { "version_value" : "1.25.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=698910", "name" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=698910", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://itsecuritysolutions.org/2013-01-22-ZoneMinder-Video-Server-arbitrary-command-execution-vulnerability/", "name" : "http://itsecuritysolutions.org/2013-01-22-ZoneMinder-Video-Server-arbitrary-command-execution-vulnerability/", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.debian.org/security/2013/dsa-2640", "name" : "DSA-2640", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.exploit-db.com/exploits/24310", "name" : "24310", "refsource" : "EXPLOIT-DB", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/01/28/2", "name" : "[oss-security] 20130128 Re: CVE Request: zoneminder: arbitrary command execution vulnerability", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.osvdb.org/89529", "name" : "89529", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.zoneminder.com/forums/viewtopic.php?f=29&t=20771", "name" : "http://www.zoneminder.com/forums/viewtopic.php?f=29&t=20771", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "includes/functions.php in ZoneMinder Video Server 1.24.0, 1.25.0, and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) runState parameter in the packageControl function; or (2) key or (3) command parameter in the setDeviceStatusX10 function." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zoneminder:zoneminder:1.24.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zoneminder:zoneminder:1.24.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zoneminder:zoneminder:1.24.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zoneminder:zoneminder:1.24.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zoneminder:zoneminder:1.24.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zoneminder:zoneminder:1.25.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-20T15:55Z", "lastModifiedDate" : "2013-08-29T06:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0233", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "plataformatec", "product" : { "product_data" : [ { "product_name" : "devise", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "opensuse", "product" : { "product_data" : [ { "product_name" : "opensuse", "version" : { "version_data" : [ { "version_value" : "12.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blog.plataformatec.com.br/2013/01/security-announcement-devise-v2-2-3-v2-1-3-v2-0-5-and-v1-5-3-released/", "name" : "http://blog.plataformatec.com.br/2013/01/security-announcement-devise-v2-2-3-v2-1-3-v2-0-5-and-v1-5-3-released/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-03/msg00000.html", "name" : "openSUSE-SU-2013:0374", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.metasploit.com/modules/auxiliary/admin/http/rails_devise_pass_reset", "name" : "http://www.metasploit.com/modules/auxiliary/admin/http/rails_devise_pass_reset", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/01/29/3", "name" : "[oss-security] 20130128 Re: CVE request for 'devise' ruby gem", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.phenoelit.org/blog/archives/2013/02/05/mysql_madness_and_rails/index.html", "name" : "http://www.phenoelit.org/blog/archives/2013/02/05/mysql_madness_and_rails/index.html", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/57577", "name" : "57577", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://github.com/Snorby/snorby/issues/261", "name" : "https://github.com/Snorby/snorby/issues/261", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before 1.5.4 for Ruby, when using certain databases, does not properly perform type conversion when performing database queries, which might allow remote attackers to cause incorrect results to be returned and bypass security checks via unknown vectors, as demonstrated by resetting passwords of arbitrary accounts." }, { "lang" : "en", "value" : "Per http://lists.opensuse.org/opensuse-updates/2013-03/msg00000.html\r\n\"Affected Products:\r\nopenSUSE 12.2\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:plataformatec:devise:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:plataformatec:devise:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:plataformatec:devise:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:plataformatec:devise:1.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:plataformatec:devise:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:plataformatec:devise:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:plataformatec:devise:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:plataformatec:devise:2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:plataformatec:devise:2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:plataformatec:devise:2.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:plataformatec:devise:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:plataformatec:devise:2.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:plataformatec:devise:2.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:plataformatec:devise:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:plataformatec:devise:2.2.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-25T23:55Z", "lastModifiedDate" : "2018-10-30T16:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0234", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "elgg", "product" : { "product_data" : [ { "product_name" : "elgg", "version" : { "version_data" : [ { "version_value" : "1.7.0", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.7.4", "version_affected" : "=" }, { "version_value" : "1.7.5", "version_affected" : "=" }, { "version_value" : "1.7.6", "version_affected" : "=" }, { "version_value" : "1.7.7", "version_affected" : "=" }, { "version_value" : "1.7.8", "version_affected" : "=" }, { "version_value" : "1.7.9", "version_affected" : "=" }, { "version_value" : "1.7.10", "version_affected" : "=" }, { "version_value" : "1.7.11", "version_affected" : "=" }, { "version_value" : "1.7.12", "version_affected" : "=" }, { "version_value" : "1.7.13", "version_affected" : "=" }, { "version_value" : "1.7.14", "version_affected" : "=" }, { "version_value" : "1.7.15", "version_affected" : "=" }, { "version_value" : "1.7.16", "version_affected" : "<=" }, { "version_value" : "1.7.18", "version_affected" : "=" }, { "version_value" : "1.8.0.1", "version_affected" : "=" }, { "version_value" : "1.8.1", "version_affected" : "=" }, { "version_value" : "1.8.3", "version_affected" : "=" }, { "version_value" : "1.8.4", "version_affected" : "=" }, { "version_value" : "1.8.5", "version_affected" : "=" }, { "version_value" : "1.8.6", "version_affected" : "=" }, { "version_value" : "1.8.7", "version_affected" : "=" }, { "version_value" : "1.8.8", "version_affected" : "=" }, { "version_value" : "1.8.9", "version_affected" : "=" }, { "version_value" : "1.8.10", "version_affected" : "=" }, { "version_value" : "1.8.11", "version_affected" : "=" }, { "version_value" : "1.8.12", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blog.elgg.org/pg/blog/cash/read/223/elgg-1813-and-1717", "name" : "http://blog.elgg.org/pg/blog/cash/read/223/elgg-1813-and-1717", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://packetstormsecurity.com/files/119903/Elgg-Twitter-Widget-Cross-Site-Scripting.html", "name" : "http://packetstormsecurity.com/files/119903/Elgg-Twitter-Widget-Cross-Site-Scripting.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://seclists.org/fulldisclosure/2013/Jan/251", "name" : "20130129 XSS in Elgg 1.8.12, 1.7.16 (core module \"Twitter widget\")", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/52007", "name" : "52007", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/01/29/4", "name" : "[oss-security] 20130128 Re: CVE Request: XSS in Elgg 1.8.12, 1.7.16 (core module \"Twitter widget\")", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/57569", "name" : "57569", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://github.com/Elgg/Elgg/commit/19dc507c2fccb378be2a44a762edf6c1e7afa334#L0R11", "name" : "https://github.com/Elgg/Elgg/commit/19dc507c2fccb378be2a44a762edf6c1e7afa334#L0R11", "refsource" : "CONFIRM", "tags" : [ "Exploit", "Patch" ] }, { "url" : "https://github.com/Elgg/Elgg/commit/a74a88501c41e89c8bcd7fc650ae2f8cc0a5003d#L2L21", "name" : "https://github.com/Elgg/Elgg/commit/a74a88501c41e89c8bcd7fc650ae2f8cc0a5003d#L2L21", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the Twitter widget in Elgg before 1.7.17 and 1.8.x before 1.8.13 allows remote attackers to inject arbitrary web script or HTML via the params[twitter_username] parameter to action/widgets/save." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:1.8.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:1.8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:1.8.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:1.8.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:1.8.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:1.8.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:1.8.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:1.8.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:1.8.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:1.8.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:1.8.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:1.8.12:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:1.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:1.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:1.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:1.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:1.7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:1.7.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:1.7.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:1.7.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:1.7.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:1.7.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:1.7.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:1.7.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:1.7.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:1.7.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:1.7.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.7.16" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elgg:elgg:1.7.18:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2014-02-02T20:55Z", "lastModifiedDate" : "2014-02-21T18:08Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0235", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "wordpress", "product" : { "product_data" : [ { "product_name" : "wordpress", "version" : { "version_data" : [ { "version_value" : "0.71", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.2.5", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.1.1", "version_affected" : "=" }, { "version_value" : "1.5.1.2", "version_affected" : "=" }, { "version_value" : "1.5.1.3", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.0.6", "version_affected" : "=" }, { "version_value" : "2.0.7", "version_affected" : "=" }, { "version_value" : "2.0.8", "version_affected" : "=" }, { "version_value" : "2.0.9", "version_affected" : "=" }, { "version_value" : "2.0.10", "version_affected" : "=" }, { "version_value" : "2.0.11", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.1.3", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.3", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.3.3", "version_affected" : "=" }, { "version_value" : "2.5", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.6", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.7", "version_affected" : "=" }, { "version_value" : "2.7.1", "version_affected" : "=" }, { "version_value" : "2.8", "version_affected" : "=" }, { "version_value" : "2.8.1", "version_affected" : "=" }, { "version_value" : "2.8.2", "version_affected" : "=" }, { "version_value" : "2.8.3", "version_affected" : "=" }, { "version_value" : "2.8.4", "version_affected" : "=" }, { "version_value" : "2.8.5", "version_affected" : "=" }, { "version_value" : "2.8.5.1", "version_affected" : "=" }, { "version_value" : "2.8.5.2", "version_affected" : "=" }, { "version_value" : "2.8.6", "version_affected" : "=" }, { "version_value" : "2.9", "version_affected" : "=" }, { "version_value" : "2.9.1", "version_affected" : "=" }, { "version_value" : "2.9.1.1", "version_affected" : "=" }, { "version_value" : "2.9.2", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.4.0", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.5.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://codex.wordpress.org/Version_3.5.1", "name" : "http://codex.wordpress.org/Version_3.5.1", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://core.trac.wordpress.org/changeset/23330", "name" : "http://core.trac.wordpress.org/changeset/23330", "refsource" : "CONFIRM", "tags" : [ "Exploit", "Patch" ] }, { "url" : "http://wordpress.org/news/2013/01/wordpress-3-5-1/", "name" : "http://wordpress.org/news/2013/01/wordpress-3-5-1/", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.acunetix.com/blog/web-security-zone/wordpress-pingback-vulnerability/", "name" : "http://www.acunetix.com/blog/web-security-zone/wordpress-pingback-vulnerability/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=904120", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=904120", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The XMLRPC API in WordPress before 3.5.1 allows remote attackers to send HTTP requests to intranet servers, and conduct port-scanning attacks, by specifying a crafted source URL for a pingback, related to a Server-Side Request Forgery (SSRF) issue." }, { "lang" : "en", "value" : "Per: http://cwe.mitre.org/data/definitions/918.html\r\n\r\n'CWE-918: Server-Side Request Forgery (SSRF)'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.2.5:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8.4:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:3.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:3.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:3.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:3.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:3.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.5.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-07-08T20:55Z", "lastModifiedDate" : "2013-07-08T20:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0236", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "wordpress", "product" : { "product_data" : [ { "product_name" : "wordpress", "version" : { "version_data" : [ { "version_value" : "0.71", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.2.5", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.1.1", "version_affected" : "=" }, { "version_value" : "1.5.1.2", "version_affected" : "=" }, { "version_value" : "1.5.1.3", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.0.6", "version_affected" : "=" }, { "version_value" : "2.0.7", "version_affected" : "=" }, { "version_value" : "2.0.8", "version_affected" : "=" }, { "version_value" : "2.0.9", "version_affected" : "=" }, { "version_value" : "2.0.10", "version_affected" : "=" }, { "version_value" : "2.0.11", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.1.3", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.3", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.3.3", "version_affected" : "=" }, { "version_value" : "2.5", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.6", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.7", "version_affected" : "=" }, { "version_value" : "2.7.1", "version_affected" : "=" }, { "version_value" : "2.8", "version_affected" : "=" }, { "version_value" : "2.8.1", "version_affected" : "=" }, { "version_value" : "2.8.2", "version_affected" : "=" }, { "version_value" : "2.8.3", "version_affected" : "=" }, { "version_value" : "2.8.4", "version_affected" : "=" }, { "version_value" : "2.8.5", "version_affected" : "=" }, { "version_value" : "2.8.5.1", "version_affected" : "=" }, { "version_value" : "2.8.5.2", "version_affected" : "=" }, { "version_value" : "2.8.6", "version_affected" : "=" }, { "version_value" : "2.9", "version_affected" : "=" }, { "version_value" : "2.9.1", "version_affected" : "=" }, { "version_value" : "2.9.1.1", "version_affected" : "=" }, { "version_value" : "2.9.2", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.4.0", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.5.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://codex.wordpress.org/Version_3.5.1", "name" : "http://codex.wordpress.org/Version_3.5.1", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://core.trac.wordpress.org/changeset/23317", "name" : "http://core.trac.wordpress.org/changeset/23317", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://core.trac.wordpress.org/changeset/23322", "name" : "http://core.trac.wordpress.org/changeset/23322", "refsource" : "CONFIRM", "tags" : [ "Exploit", "Patch" ] }, { "url" : "http://wordpress.org/news/2013/01/wordpress-3-5-1/", "name" : "http://wordpress.org/news/2013/01/wordpress-3-5-1/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=904121", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=904121", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.1 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) gallery shortcodes or (2) the content of a post." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.2.5:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8.4:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:3.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:3.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:3.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:3.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:3.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.5.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-07-08T20:55Z", "lastModifiedDate" : "2013-07-08T20:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0237", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "moxiecode", "product" : { "product_data" : [ { "product_name" : "plupload", "version" : { "version_data" : [ { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.3", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.5.4", "version_affected" : "<=" } ] } } ] } }, { "vendor_name" : "wordpress", "product" : { "product_data" : [ { "product_name" : "wordpress", "version" : { "version_data" : [ { "version_value" : "0.71", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.2.5", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.1.1", "version_affected" : "=" }, { "version_value" : "1.5.1.2", "version_affected" : "=" }, { "version_value" : "1.5.1.3", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.0.6", "version_affected" : "=" }, { "version_value" : "2.0.7", "version_affected" : "=" }, { "version_value" : "2.0.8", "version_affected" : "=" }, { "version_value" : "2.0.9", "version_affected" : "=" }, { "version_value" : "2.0.10", "version_affected" : "=" }, { "version_value" : "2.0.11", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.1.3", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.3", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.3.3", "version_affected" : "=" }, { "version_value" : "2.5", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.6", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.7", "version_affected" : "=" }, { "version_value" : "2.7.1", "version_affected" : "=" }, { "version_value" : "2.8", "version_affected" : "=" }, { "version_value" : "2.8.1", "version_affected" : "=" }, { "version_value" : "2.8.2", "version_affected" : "=" }, { "version_value" : "2.8.3", "version_affected" : "=" }, { "version_value" : "2.8.4", "version_affected" : "=" }, { "version_value" : "2.8.5", "version_affected" : "=" }, { "version_value" : "2.8.5.1", "version_affected" : "=" }, { "version_value" : "2.8.5.2", "version_affected" : "=" }, { "version_value" : "2.8.6", "version_affected" : "=" }, { "version_value" : "2.9", "version_affected" : "=" }, { "version_value" : "2.9.1", "version_affected" : "=" }, { "version_value" : "2.9.1.1", "version_affected" : "=" }, { "version_value" : "2.9.2", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.4.0", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.5.0", "version_affected" : "<=" } ] } } ] } }, { "vendor_name" : "fedoraproject", "product" : { "product_data" : [ { "product_name" : "fedora", "version" : { "version_data" : [ { "version_value" : "16", "version_affected" : "=" }, { "version_value" : "17", "version_affected" : "=" }, { "version_value" : "18", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://codex.wordpress.org/Version_3.5.1", "name" : "http://codex.wordpress.org/Version_3.5.1", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://wordpress.org/news/2013/01/wordpress-3-5-1/", "name" : "http://wordpress.org/news/2013/01/wordpress-3-5-1/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=904122", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=904122", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://github.com/moxiecode/plupload/commit/2d746ee9083c184f1234d8fed311e89bdd1b39e5", "name" : "https://github.com/moxiecode/plupload/commit/2d746ee9083c184f1234d8fed311e89bdd1b39e5", "refsource" : "CONFIRM", "tags" : [ "Exploit", "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in Plupload.as in Moxiecode plupload before 1.5.5, as used in WordPress before 3.5.1 and other products, allows remote attackers to inject arbitrary web script or HTML via the id parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:moxiecode:plupload:1.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:moxiecode:plupload:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:moxiecode:plupload:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:moxiecode:plupload:1.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:moxiecode:plupload:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:moxiecode:plupload:1.5.0:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:moxiecode:plupload:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:moxiecode:plupload:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:moxiecode:plupload:1.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:moxiecode:plupload:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.5.4" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.2.5:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:1.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8.4:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.8.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:2.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:3.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:3.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:3.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:3.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:3.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.5.0" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:fedoraproject:fedora:16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:fedoraproject:fedora:17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:fedoraproject:fedora:18:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-07-08T20:55Z", "lastModifiedDate" : "2013-07-08T20:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0238", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ircd-hybrid", "product" : { "product_data" : [ { "product_name" : "ircd-hybrid", "version" : { "version_data" : [ { "version_value" : "7.2.0", "version_affected" : "=" }, { "version_value" : "7.2.1", "version_affected" : "=" }, { "version_value" : "7.2.2", "version_affected" : "=" }, { "version_value" : "7.2.3", "version_affected" : "=" }, { "version_value" : "7.3.0", "version_affected" : "=" }, { "version_value" : "7.3.1", "version_affected" : "=" }, { "version_value" : "8.0.0", "version_affected" : "=" }, { "version_value" : "8.0.1", "version_affected" : "=" }, { "version_value" : "8.0.2", "version_affected" : "=" }, { "version_value" : "8.0.3", "version_affected" : "=" }, { "version_value" : "8.0.4", "version_affected" : "=" }, { "version_value" : "8.0.5", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699267", "name" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699267", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://osvdb.org/89623", "name" : "89623", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/51948", "name" : "51948", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/52106", "name" : "52106", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://svn.ircd-hybrid.org:8000/viewcvs.cgi/ircd-hybrid/trunk/src/hostmask.c?r1=1786&r2=1785&pathrev=1786", "name" : "http://svn.ircd-hybrid.org:8000/viewcvs.cgi/ircd-hybrid/trunk/src/hostmask.c?r1=1786&r2=1785&pathrev=1786", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2013/dsa-2618", "name" : "DSA-2618", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.exploit-db.com/exploits/24951", "name" : "24951", "refsource" : "EXPLOIT-DB", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:093", "name" : "MDVSA-2013:093", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/01/29/8", "name" : "[oss-security] 20130129 ircd-hybrid: Denial of service vulnerability in hostmask.c:try_parse_v4_netmask()", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/57610", "name" : "57610", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81695", "name" : "ircdhybrid-tryparsev4netmask-dos(81695)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0055", "name" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0055", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The try_parse_v4_netmask function in hostmask.c in IRCD-Hybrid before 8.0.6 does not properly validate masks, which allows remote attackers to cause a denial of service (crash) via a mask that causes a negative number to be parsed." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-hybrid:ircd-hybrid:7.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-hybrid:ircd-hybrid:7.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-hybrid:ircd-hybrid:7.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-hybrid:ircd-hybrid:7.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-hybrid:ircd-hybrid:7.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-hybrid:ircd-hybrid:7.3.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-hybrid:ircd-hybrid:7.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-hybrid:ircd-hybrid:8.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-hybrid:ircd-hybrid:8.0.0:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-hybrid:ircd-hybrid:8.0.0:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-hybrid:ircd-hybrid:8.0.0:beta3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-hybrid:ircd-hybrid:8.0.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-hybrid:ircd-hybrid:8.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-hybrid:ircd-hybrid:8.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-hybrid:ircd-hybrid:8.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-hybrid:ircd-hybrid:8.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-hybrid:ircd-hybrid:*:*:*:*:*:*:*:*", "versionEndIncluding" : "8.0.5" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-13T01:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0239", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apache", "product" : { "product_data" : [ { "product_name" : "cxf", "version" : { "version_data" : [ { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.4.4", "version_affected" : "=" }, { "version_value" : "2.4.5", "version_affected" : "=" }, { "version_value" : "2.4.6", "version_affected" : "=" }, { "version_value" : "2.4.7", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.5.2", "version_affected" : "=" }, { "version_value" : "2.5.3", "version_affected" : "=" }, { "version_value" : "2.5.4", "version_affected" : "=" }, { "version_value" : "2.5.5", "version_affected" : "=" }, { "version_value" : "2.5.6", "version_affected" : "=" }, { "version_value" : "2.5.7", "version_affected" : "=" }, { "version_value" : "2.5.8", "version_affected" : "<=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.7.0", "version_affected" : "=" }, { "version_value" : "2.7.1", "version_affected" : "=" }, { "version_value" : "2.7.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-287" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://cxf.apache.org/cve-2013-0239.html", "name" : "http://cxf.apache.org/cve-2013-0239.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://osvdb.org/90078", "name" : "90078", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://packetstormsecurity.com/files/120214/Apache-CXF-WS-Security-UsernameToken-Bypass.html", "name" : "http://packetstormsecurity.com/files/120214/Apache-CXF-WS-Security-UsernameToken-Bypass.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0749.html", "name" : "RHSA-2013:0749", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://seclists.org/fulldisclosure/2013/Feb/39", "name" : "20130208 New security advisories for Apache CXF", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/51988", "name" : "51988", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://svn.apache.org/viewvc?view=revision&revision=1438424", "name" : "http://svn.apache.org/viewvc?view=revision&revision=1438424", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/57876", "name" : "57876", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81981", "name" : "apachecxf-username-tokens-sec-bypass(81981)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E", "name" : "[cxf-commits] 20200319 svn commit: r1058035 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c@%3Ccommits.cxf.apache.org%3E", "name" : "[cxf-commits] 20200116 svn commit: r1055336 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-12423.txt.asc security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E", "name" : "[cxf-commits] 20200401 svn commit: r1058573 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2020-1954.txt.asc security-advisories.html", "refsource" : "MLIST", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Apache CXF before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3, when the plaintext UsernameToken WS-SecurityPolicy is enabled, allows remote attackers to bypass authentication via a security header of a SOAP request containing a UsernameToken element that lacks a password child element." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:cxf:2.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:cxf:2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:cxf:2.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:cxf:2.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:cxf:2.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:cxf:2.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:cxf:2.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:cxf:2.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:cxf:2.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:cxf:2.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:cxf:2.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:cxf:2.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:cxf:2.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:cxf:2.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:cxf:2.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:cxf:2.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:cxf:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.5.8" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:cxf:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:cxf:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:cxf:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:cxf:2.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:cxf:2.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:cxf:2.6.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:cxf:2.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:cxf:2.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:cxf:2.7.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-12T23:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0240", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gnome", "product" : { "product_data" : [ { "product_name" : "gnome_online_accounts", "version" : { "version_data" : [ { "version_value" : "3.4.0", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.6.0", "version_affected" : "=" }, { "version_value" : "3.6.1", "version_affected" : "=" }, { "version_value" : "3.6.2", "version_affected" : "=" }, { "version_value" : "3.7.1", "version_affected" : "=" }, { "version_value" : "3.7.2", "version_affected" : "=" }, { "version_value" : "3.7.3", "version_affected" : "=" }, { "version_value" : "3.7.4", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "canonical", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "11.10", "version_affected" : "=" }, { "version_value" : "12.04", "version_affected" : "=" }, { "version_value" : "12.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-310" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-updates/2013-02/msg00046.html", "name" : "openSUSE-SU-2013:0301", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/51976", "name" : "51976", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/52791", "name" : "52791", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://ubuntu.com/usn/usn-1779-1", "name" : "USN-1779-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=693214", "name" : "https://bugzilla.gnome.org/show_bug.cgi?id=693214", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=894352", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=894352", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://git.gnome.org/browse/gnome-online-accounts/commit/?h=gnome-3-6&id=ecad8142e9ac519b9fc74b96dcb5531052bbffe1", "name" : "https://git.gnome.org/browse/gnome-online-accounts/commit/?h=gnome-3-6&id=ecad8142e9ac519b9fc74b96dcb5531052bbffe1", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://git.gnome.org/browse/gnome-online-accounts/commit/?id=bc10fdb68f75f8be84eb698ada08743b9c7c248f", "name" : "https://git.gnome.org/browse/gnome-online-accounts/commit/?id=bc10fdb68f75f8be84eb698ada08743b9c7c248f", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://git.gnome.org/browse/gnome-online-accounts/commit/?id=edde7c63326242a60a075341d3fea0be0bc4d80e", "name" : "https://git.gnome.org/browse/gnome-online-accounts/commit/?id=edde7c63326242a60a075341d3fea0be0bc4d80e", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://mail.gnome.org/archives/gnome-announce-list/2013-March/msg00007.html", "name" : "[gnome-announce-list] 20130304 GNOME Online Accounts 3.6.3 released", "refsource" : "MLIST", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Gnome Online Accounts (GOA) 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, does not properly validate SSL certificates when creating accounts such as Windows Live and Facebook accounts, which allows man-in-the-middle attackers to obtain sensitive information such as credentials by sniffing the network." }, { "lang" : "en", "value" : "Per http://www.ubuntu.com/usn/usn-1779-1/\r\n\"A security issue affects these releases of Ubuntu and its derivatives:\r\n Ubuntu 12.10\r\n Ubuntu 12.04 LTS\r\n Ubuntu 11.10\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:gnome_online_accounts:3.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:gnome_online_accounts:3.4.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:gnome_online_accounts:3.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:gnome_online_accounts:3.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:gnome_online_accounts:3.6.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:gnome_online_accounts:3.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:gnome_online_accounts:3.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:gnome_online_accounts:3.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:gnome_online_accounts:3.7.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-02T03:22Z", "lastModifiedDate" : "2013-04-02T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0241", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "canonical", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "11.10", "version_affected" : "=" }, { "version_value" : "12.04", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "qxl_graphics_driver_project", "product" : { "product_data" : [ { "product_name" : "xf86-video-qxl", "version" : { "version_data" : [ { "version_value" : "0.1.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux_desktop", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_linux_server", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_linux_workstation", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0218.html", "name" : "RHSA-2013:0218", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/52021", "name" : "52021", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:138", "name" : "MDVSA-2013:138", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/01/30/3", "name" : "[oss-security] 20130130 CVE request -- qxl: synchronous io guest DoS", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/01/30/4", "name" : "[oss-security] 20130130 Re: CVE request -- qxl: synchronous io guest DoS", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1714-1", "name" : "USN-1714-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=906032", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=906032", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81704", "name" : "qxl-virtual-spice-dos(81704)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0036", "name" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0036", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The QXL display driver in QXL Virtual GPU 0.1.0 allows local users to cause a denial of service (guest crash or hang) via a SPICE connection that prevents other threads from obtaining the qemu_mutex mutex. NOTE: some of these details are obtained from third party information." }, { "lang" : "en", "value" : "Per https://rhn.redhat.com/errata/RHSA-2013-0218.html\r\nAffected Products: \t\r\nRed Hat Enterprise Linux Desktop (v. 6)\r\nRed Hat Enterprise Linux Server (v. 6)\r\nRed Hat Enterprise Linux Workstation (v. 6)\r\n\r\nPer http://www.ubuntu.com/usn/USN-1714-1/\r\nA security issue affects these releases of Ubuntu and its derivatives:\r\nUbuntu 12.04 LTS\r\nUbuntu 11.10\r\n" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:qxl_graphics_driver_project:xf86-video-qxl:0.1.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-13T01:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0242", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gnu", "product" : { "product_data" : [ { "product_name" : "glibc", "version" : { "version_data" : [ { "version_value" : "2.17", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/89747", "name" : "89747", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0769.html", "name" : "RHSA-2013:0769", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1605.html", "name" : "RHSA-2013:1605", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/51951", "name" : "51951", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/55113", "name" : "55113", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://sourceware.org/bugzilla/show_bug.cgi?id=15078", "name" : "http://sourceware.org/bugzilla/show_bug.cgi?id=15078", "refsource" : "MISC", "tags" : [ "Patch" ] }, { "url" : "http://sourceware.org/ml/libc-alpha/2013-01/msg00967.html", "name" : "[libc-alpha] 20130129 [PATCH] Fix buffer overrun in regexp matcher", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:163", "name" : "MDVSA-2013:163", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/01/30/5", "name" : "[oss-security] 20130130 Re: CVE Request -- glibc: DoS due to a buffer overrun in regexp matcher by processing multibyte characters", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/57638", "name" : "57638", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id/1028063", "name" : "1028063", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1991-1", "name" : "USN-1991-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vmware.com/security/advisories/VMSA-2014-0008.html", "name" : "http://www.vmware.com/security/advisories/VMSA-2014-0008.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81707", "name" : "glibc-extendbuffers-dos(81707)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://security.gentoo.org/glsa/201503-04", "name" : "GLSA-201503-04", "refsource" : "GENTOO", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the extend_buffers function in the regular expression matcher (posix/regexec.c) in glibc, possibly 2.17 and earlier, allows context-dependent attackers to cause a denial of service (memory corruption and crash) via crafted multibyte characters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.17:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-08T20:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0243", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "haskell", "product" : { "product_data" : [ { "product_name" : "hs-tls", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.1.1", "version_affected" : "=" }, { "version_value" : "0.1.2", "version_affected" : "=" }, { "version_value" : "0.1.3", "version_affected" : "=" }, { "version_value" : "0.1.4", "version_affected" : "=" }, { "version_value" : "0.1.5", "version_affected" : "=" }, { "version_value" : "0.1.6", "version_affected" : "=" }, { "version_value" : "0.1.7", "version_affected" : "=" }, { "version_value" : "0.1.8", "version_affected" : "=" }, { "version_value" : "0.1.9", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.2.1", "version_affected" : "=" }, { "version_value" : "0.2.2", "version_affected" : "=" }, { "version_value" : "0.2.3", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.3.1", "version_affected" : "=" }, { "version_value" : "0.3.2", "version_affected" : "=" }, { "version_value" : "0.3.3", "version_affected" : "=" }, { "version_value" : "0.4.0", "version_affected" : "=" }, { "version_value" : "0.4.1", "version_affected" : "=" }, { "version_value" : "0.4.2", "version_affected" : "=" }, { "version_value" : "0.4.2.1", "version_affected" : "=" }, { "version_value" : "0.4.3", "version_affected" : "=" }, { "version_value" : "0.4.4", "version_affected" : "=" }, { "version_value" : "0.4.5", "version_affected" : "=" }, { "version_value" : "0.4.6", "version_affected" : "=" }, { "version_value" : "0.5.0", "version_affected" : "=" }, { "version_value" : "0.5.1", "version_affected" : "=" }, { "version_value" : "0.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2013/01/30/6", "name" : "http://www.openwall.com/lists/oss-security/2013/01/30/6", "refsource" : "MISC", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "https://access.redhat.com/security/cve/cve-2013-0243", "name" : "https://access.redhat.com/security/cve/cve-2013-0243", "refsource" : "MISC", "tags" : [ "Broken Link" ] }, { "url" : "https://security-tracker.debian.org/tracker/CVE-2013-0243", "name" : "https://security-tracker.debian.org/tracker/CVE-2013-0243", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "haskell-tls-extra before 0.6.1 has Basic Constraints attribute vulnerability may lead to Man in the Middle attacks on TLS connections" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:haskell:hs-tls:*:*:*:*:*:*:*:*", "versionEndExcluding" : "0.6.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 4.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-12-05T16:15Z", "lastModifiedDate" : "2019-12-17T21:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0244", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "drupal", "product" : { "product_data" : [ { "product_name" : "drupal", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" }, { "version_value" : "6.2", "version_affected" : "=" }, { "version_value" : "6.3", "version_affected" : "=" }, { "version_value" : "6.4", "version_affected" : "=" }, { "version_value" : "6.5", "version_affected" : "=" }, { "version_value" : "6.6", "version_affected" : "=" }, { "version_value" : "6.7", "version_affected" : "=" }, { "version_value" : "6.8", "version_affected" : "=" }, { "version_value" : "6.9", "version_affected" : "=" }, { "version_value" : "6.10", "version_affected" : "=" }, { "version_value" : "6.11", "version_affected" : "=" }, { "version_value" : "6.12", "version_affected" : "=" }, { "version_value" : "6.13", "version_affected" : "=" }, { "version_value" : "6.14", "version_affected" : "=" }, { "version_value" : "6.15", "version_affected" : "=" }, { "version_value" : "6.16", "version_affected" : "=" }, { "version_value" : "6.17", "version_affected" : "=" }, { "version_value" : "6.18", "version_affected" : "=" }, { "version_value" : "6.19", "version_affected" : "=" }, { "version_value" : "6.20", "version_affected" : "=" }, { "version_value" : "6.21", "version_affected" : "=" }, { "version_value" : "6.22", "version_affected" : "=" }, { "version_value" : "6.23", "version_affected" : "=" }, { "version_value" : "6.24", "version_affected" : "=" }, { "version_value" : "6.25", "version_affected" : "=" }, { "version_value" : "6.26", "version_affected" : "=" }, { "version_value" : "6.27", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.1", "version_affected" : "=" }, { "version_value" : "7.2", "version_affected" : "=" }, { "version_value" : "7.3", "version_affected" : "=" }, { "version_value" : "7.4", "version_affected" : "=" }, { "version_value" : "7.5", "version_affected" : "=" }, { "version_value" : "7.6", "version_affected" : "=" }, { "version_value" : "7.7", "version_affected" : "=" }, { "version_value" : "7.8", "version_affected" : "=" }, { "version_value" : "7.9", "version_affected" : "=" }, { "version_value" : "7.10", "version_affected" : "=" }, { "version_value" : "7.11", "version_affected" : "=" }, { "version_value" : "7.12", "version_affected" : "=" }, { "version_value" : "7.13", "version_affected" : "=" }, { "version_value" : "7.14", "version_affected" : "=" }, { "version_value" : "7.15", "version_affected" : "=" }, { "version_value" : "7.16", "version_affected" : "=" }, { "version_value" : "7.17", "version_affected" : "=" }, { "version_value" : "7.18", "version_affected" : "=" }, { "version_value" : "7.x-dev", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/89306", "name" : "89306", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://packetstormsecurity.com/files/119598/Drupal-Core-6.x-7.x-Cross-Site-Scripting-Access-Bypass.html", "name" : "http://packetstormsecurity.com/files/119598/Drupal-Core-6.x-7.x-Cross-Site-Scripting-Access-Bypass.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://seclists.org/fulldisclosure/2013/Jan/120", "name" : "20130116 [Security-news] SA-CORE-2013-001 - Drupal core - Multiple vulnerabilities", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://seclists.org/oss-sec/2013/q1/211", "name" : "[oss-security] 20130130 Re: CVE", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2013/dsa-2776", "name" : "DSA-2776", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "https://drupal.org/SA-CORE-2013-001", "name" : "https://drupal.org/SA-CORE-2013-001", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in Drupal 6.x before 6.28 and 7.x before 7.19, when running with older versions of jQuery that are vulnerable to CVE-2011-4969, allows remote attackers to inject arbitrary web script or HTML via vectors involving unspecified Javascript functions that are used to select DOM elements." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:alpha1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:alpha2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:alpha3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:alpha4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:alpha5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:alpha6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:alpha7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:beta3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:dev:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.x-dev:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.0:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.0:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.0:beta3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.0:beta4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.0:dev:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.27:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2014-01-19T17:16Z", "lastModifiedDate" : "2014-03-08T05:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0245", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "drupal", "product" : { "product_data" : [ { "product_name" : "drupal", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" }, { "version_value" : "6.2", "version_affected" : "=" }, { "version_value" : "6.3", "version_affected" : "=" }, { "version_value" : "6.4", "version_affected" : "=" }, { "version_value" : "6.5", "version_affected" : "=" }, { "version_value" : "6.6", "version_affected" : "=" }, { "version_value" : "6.7", "version_affected" : "=" }, { "version_value" : "6.8", "version_affected" : "=" }, { "version_value" : "6.9", "version_affected" : "=" }, { "version_value" : "6.10", "version_affected" : "=" }, { "version_value" : "6.11", "version_affected" : "=" }, { "version_value" : "6.12", "version_affected" : "=" }, { "version_value" : "6.13", "version_affected" : "=" }, { "version_value" : "6.14", "version_affected" : "=" }, { "version_value" : "6.15", "version_affected" : "=" }, { "version_value" : "6.16", "version_affected" : "=" }, { "version_value" : "6.17", "version_affected" : "=" }, { "version_value" : "6.18", "version_affected" : "=" }, { "version_value" : "6.19", "version_affected" : "=" }, { "version_value" : "6.20", "version_affected" : "=" }, { "version_value" : "6.21", "version_affected" : "=" }, { "version_value" : "6.22", "version_affected" : "=" }, { "version_value" : "6.23", "version_affected" : "=" }, { "version_value" : "6.24", "version_affected" : "=" }, { "version_value" : "6.25", "version_affected" : "=" }, { "version_value" : "6.26", "version_affected" : "=" }, { "version_value" : "6.27", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.1", "version_affected" : "=" }, { "version_value" : "7.2", "version_affected" : "=" }, { "version_value" : "7.3", "version_affected" : "=" }, { "version_value" : "7.4", "version_affected" : "=" }, { "version_value" : "7.5", "version_affected" : "=" }, { "version_value" : "7.6", "version_affected" : "=" }, { "version_value" : "7.7", "version_affected" : "=" }, { "version_value" : "7.8", "version_affected" : "=" }, { "version_value" : "7.9", "version_affected" : "=" }, { "version_value" : "7.10", "version_affected" : "=" }, { "version_value" : "7.11", "version_affected" : "=" }, { "version_value" : "7.12", "version_affected" : "=" }, { "version_value" : "7.13", "version_affected" : "=" }, { "version_value" : "7.14", "version_affected" : "=" }, { "version_value" : "7.15", "version_affected" : "=" }, { "version_value" : "7.16", "version_affected" : "=" }, { "version_value" : "7.17", "version_affected" : "=" }, { "version_value" : "7.18", "version_affected" : "=" }, { "version_value" : "7.x-dev", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/89305", "name" : "89305", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://packetstormsecurity.com/files/119598/Drupal-Core-6.x-7.x-Cross-Site-Scripting-Access-Bypass.html", "name" : "http://packetstormsecurity.com/files/119598/Drupal-Core-6.x-7.x-Cross-Site-Scripting-Access-Bypass.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://seclists.org/fulldisclosure/2013/Jan/120", "name" : "20130116 [Security-news] SA-CORE-2013-001 - Drupal core - Multiple vulnerabilities", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://seclists.org/oss-sec/2013/q1/211", "name" : "[oss-security] 20130130 Re: CVE", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/51717", "name" : "51717", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2013/dsa-2776", "name" : "DSA-2776", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "https://drupal.org/SA-CORE-2013-001", "name" : "https://drupal.org/SA-CORE-2013-001", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81380", "name" : "drupal-book-title-security-bypass(81380)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The printer friendly version functionality in the Book module in Drupal 6.x before 6.28 and 7.x before 7.19 does not properly restrict access to node that are part of a book outline, which allows remote authenticated users with the \"access printer-friendly version\" permission to read node titles and possibly node content via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.0:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.0:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.0:beta3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.0:beta4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.0:dev:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:6.27:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:alpha1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:alpha2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:alpha3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:alpha4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:alpha5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:alpha6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:alpha7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:beta3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:dev:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.x-dev:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-07-16T18:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0246", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "drupal", "product" : { "product_data" : [ { "product_name" : "drupal", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.1", "version_affected" : "=" }, { "version_value" : "7.2", "version_affected" : "=" }, { "version_value" : "7.3", "version_affected" : "=" }, { "version_value" : "7.4", "version_affected" : "=" }, { "version_value" : "7.5", "version_affected" : "=" }, { "version_value" : "7.6", "version_affected" : "=" }, { "version_value" : "7.7", "version_affected" : "=" }, { "version_value" : "7.8", "version_affected" : "=" }, { "version_value" : "7.9", "version_affected" : "=" }, { "version_value" : "7.10", "version_affected" : "=" }, { "version_value" : "7.11", "version_affected" : "=" }, { "version_value" : "7.12", "version_affected" : "=" }, { "version_value" : "7.13", "version_affected" : "=" }, { "version_value" : "7.14", "version_affected" : "=" }, { "version_value" : "7.15", "version_affected" : "=" }, { "version_value" : "7.16", "version_affected" : "=" }, { "version_value" : "7.17", "version_affected" : "=" }, { "version_value" : "7.18", "version_affected" : "=" }, { "version_value" : "7.x-dev", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/119598/Drupal-Core-6.x-7.x-Cross-Site-Scripting-Access-Bypass.html", "name" : "http://packetstormsecurity.com/files/119598/Drupal-Core-6.x-7.x-Cross-Site-Scripting-Access-Bypass.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://seclists.org/fulldisclosure/2013/Jan/120", "name" : "20130116 [Security-news] SA-CORE-2013-001 - Drupal core - Multiple vulnerabilities", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://seclists.org/oss-sec/2013/q1/211", "name" : "[oss-security] 20130130 Re: CVE", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/51717", "name" : "51717", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://drupal.org/SA-CORE-2013-001", "name" : "https://drupal.org/SA-CORE-2013-001", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Image module in Drupal 7.x before 7.19, when a private file system is used, does not properly restrict access to derivative images, which allows remote attackers to read derivative images of otherwise restricted images via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:alpha1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:alpha2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:alpha3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:alpha4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:alpha5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:alpha6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:alpha7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:beta3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:dev:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.x-dev:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-07-16T18:55Z", "lastModifiedDate" : "2013-07-16T18:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0247", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "openstack", "product" : { "product_data" : [ { "product_name" : "keystone", "version" : { "version_data" : [ { "version_value" : "2012.1", "version_affected" : "=" }, { "version_value" : "2012.1.1", "version_affected" : "=" }, { "version_value" : "2012.1.2", "version_affected" : "=" }, { "version_value" : "2012.1.3", "version_affected" : "=" }, { "version_value" : "2012.2", "version_affected" : "=" }, { "version_value" : "2012.2.1", "version_affected" : "=" }, { "version_value" : "2012.2.2", "version_affected" : "=" }, { "version_value" : "2012.2.3", "version_affected" : "=" }, { "version_value" : "2013.1", "version_affected" : "=" }, { "version_value" : "2013.1.1", "version_affected" : "=" }, { "version_value" : "2013.1.2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "canonical", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "12.04", "version_affected" : "=" }, { "version_value" : "12.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098906.html", "name" : "FEDORA-2013-2168", "refsource" : "FEDORA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0253.html", "name" : "RHSA-2013:0253", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57747", "name" : "57747", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.ubuntu.com/usn/USN-1715-1", "name" : "USN-1715-1", "refsource" : "UBUNTU", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://bugs.launchpad.net/keystone/+bug/1098307", "name" : "https://bugs.launchpad.net/keystone/+bug/1098307", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=906171", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=906171", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2 and earlier allows remote attackers to cause a denial of service (disk consumption) via many invalid token requests that trigger excessive generation of log entries." }, { "lang" : "en", "value" : "Per http://www.ubuntu.com/usn/USN-1715-1/\r\nA security issue affects these releases of Ubuntu and its derivatives:\r\nUbuntu 12.10 Ubuntu 12.04 LTS" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openstack:keystone:*:*:*:*:*:*:*:*", "versionStartIncluding" : "2012.1", "versionEndIncluding" : "2012.1.3" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openstack:keystone:*:*:*:*:*:*:*:*", "versionStartIncluding" : "2012.2", "versionEndIncluding" : "2012.2.3" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openstack:keystone:*:*:*:*:*:*:*:*", "versionStartIncluding" : "2013.1", "versionEndIncluding" : "2013.1.2" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-24T19:55Z", "lastModifiedDate" : "2018-11-15T17:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0248", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apache", "product" : { "product_data" : [ { "product_name" : "commons_fileupload", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/bugtraq/2013-03/0035.html", "name" : "20130306 [SECURITY] CVE-2013-0248 Apache Commons FileUpload - Insecure examples", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=144050155601375&w=2", "name" : "HPSBMU03409", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html", "name" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.osvdb.org/90906", "name" : "90906", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/58326", "name" : "58326", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:commons_fileupload:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:commons_fileupload:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:commons_fileupload:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:commons_fileupload:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:commons_fileupload:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:commons_fileupload:1.2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 3.3 }, "severity" : "LOW", "exploitabilityScore" : 3.4, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-15T20:55Z", "lastModifiedDate" : "2017-10-20T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0249", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "haxx", "product" : { "product_data" : [ { "product_name" : "curl", "version" : { "version_data" : [ { "version_value" : "7.26.0", "version_affected" : "=" }, { "version_value" : "7.27.0", "version_affected" : "=" }, { "version_value" : "7.28.0", "version_affected" : "=" }, { "version_value" : "7.28.1", "version_affected" : "=" } ] } }, { "product_name" : "libcurl", "version" : { "version_data" : [ { "version_value" : "7.26.0", "version_affected" : "=" }, { "version_value" : "7.27.0", "version_affected" : "=" }, { "version_value" : "7.28.0", "version_affected" : "=" }, { "version_value" : "7.28.1", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "canonical", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "12.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blog.volema.com/curl-rce.html", "name" : "http://blog.volema.com/curl-rce.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://curl.haxx.se/docs/adv_20130206.html", "name" : "http://curl.haxx.se/docs/adv_20130206.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html", "name" : "APPLE-SA-2013-10-22-3", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2013-February/099140.html", "name" : "FEDORA-2013-2098", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://nakedsecurity.sophos.com/2013/02/10/anatomy-of-a-vulnerability-curl-web-download-toolkit-holed-by-authentication-bug/", "name" : "http://nakedsecurity.sophos.com/2013/02/10/anatomy-of-a-vulnerability-curl-web-download-toolkit-holed-by-authentication-bug/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://packetstormsecurity.com/files/120147/cURL-Buffer-Overflow.html", "name" : "http://packetstormsecurity.com/files/120147/cURL-Buffer-Overflow.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://packetstormsecurity.com/files/120170/Slackware-Security-Advisory-curl-Updates.html", "name" : "http://packetstormsecurity.com/files/120170/Slackware-Security-Advisory-curl-Updates.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.exploit-db.com/exploits/24487", "name" : "24487", "refsource" : "EXPLOIT-DB", "tags" : [ "Exploit" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.osvdb.org/89988", "name" : "89988", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/57842", "name" : "57842", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id/1028093", "name" : "1028093", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1721-1", "name" : "USN-1721-1", "refsource" : "UBUNTU", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7.26.0 through 7.28.1, when negotiating SASL DIGEST-MD5 authentication, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the realm parameter in a (1) POP3, (2) SMTP or (3) IMAP message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:haxx:curl:7.26.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:haxx:curl:7.27.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:haxx:curl:7.28.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:haxx:curl:7.28.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:haxx:libcurl:7.26.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:haxx:libcurl:7.27.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:haxx:libcurl:7.28.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:haxx:libcurl:7.28.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-08T22:55Z", "lastModifiedDate" : "2016-12-08T03:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0250", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "corosync", "product" : { "product_data" : [ { "product_name" : "corosync", "version" : { "version_data" : [ { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://seclists.org/oss-sec/2013/q1/212", "name" : "[oss-security] 20130201 CVE Request -- Corosync (X < 2.0.3): Remote DoS due improper HMAC initialization and improper junk filtering when different encryption keys used", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://seclists.org/oss-sec/2013/q1/213", "name" : "[oss-security] 20130201 Re: CVE Request -- Corosync (X < 2.0.3): Remote DoS due improper HMAC initialization and improper junk filtering when different encryption keys used", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://seclists.org/oss-sec/2013/q1/214", "name" : "[oss-security] 20130201 Re: Re: CVE Request -- Corosync (X < 2.0.3): Remote DoS due improper HMAC initialization and improper junk filtering when different encryption keys used", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/52037", "name" : "52037", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "https://github.com/corosync/corosync/commit/b3f456a8ceefac6e9f2e9acc2ea0c159d412b595", "name" : "https://github.com/corosync/corosync/commit/b3f456a8ceefac6e9f2e9acc2ea0c159d412b595", "refsource" : "CONFIRM", "tags" : [ "Exploit", "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The init_nss_hash function in exec/totemcrypto.c in Corosync 2.0 before 2.3 does not properly initialize the HMAC key, which allows remote attackers to cause a denial of service (crash) via a crafted packet." }, { "lang" : "en", "value" : "Per: http://cwe.mitre.org/data/definitions/665.html\n\n\"CWE-665: Improper Initialization\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:corosync:corosync:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:corosync:corosync:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:corosync:corosync:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:corosync:corosync:2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:corosync:corosync:2.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:corosync:corosync:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:corosync:corosync:2.2.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-06-06T14:55Z", "lastModifiedDate" : "2014-06-09T13:34Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0251", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "latd", "version" : { "version_data" : [ { "version_value" : "1.25", "version_affected" : "=" }, { "version_value" : "1.26", "version_affected" : "=" }, { "version_value" : "1.27", "version_affected" : "=" }, { "version_value" : "1.28", "version_affected" : "=" }, { "version_value" : "1.29", "version_affected" : "=" }, { "version_value" : "1.30", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699625", "name" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699625", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/04/3", "name" : "[oss-security] 20130203 Re: CVE id request: latd", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/05/2", "name" : "[oss-security] 20130205 Re: CVE id request: latd", "refsource" : "MLIST", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack-based buffer overflow in llogincircuit.cc in latd 1.25 through 1.30 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the llogin version." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:latd:1.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:latd:1.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:latd:1.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:latd:1.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:latd:1.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:latd:1.30:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-19T14:55Z", "lastModifiedDate" : "2013-03-21T12:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0252", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "boost", "product" : { "product_data" : [ { "product_name" : "boost", "version" : { "version_data" : [ { "version_value" : "1.48.0", "version_affected" : "=" }, { "version_value" : "1.49.0", "version_affected" : "=" }, { "version_value" : "1.50.0", "version_affected" : "=" }, { "version_value" : "1.51.0", "version_affected" : "=" }, { "version_value" : "1.52.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699649", "name" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699649", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699650", "name" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699650", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2013-February/099103.html", "name" : "FEDORA-2013-2420", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2013-February/099122.html", "name" : "FEDORA-2013-2448", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://www.boost.org/users/news/boost_locale_security_notice.html", "name" : "http://www.boost.org/users/news/boost_locale_security_notice.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:065", "name" : "MDVSA-2013:065", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/04/2", "name" : "[oss-security] 20130203 Re: CVE id request: boost", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/57675", "name" : "57675", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1727-1", "name" : "USN-1727-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=907481", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=907481", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://svn.boost.org/trac/boost/ticket/7743", "name" : "https://svn.boost.org/trac/boost/ticket/7743", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequences, which might allow remote attackers to bypass input validation protection mechanisms via crafted trailing bytes." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:boost:boost:1.48.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:boost:boost:1.49.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:boost:boost:1.50.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:boost:boost:1.51.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:boost:boost:1.52.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-12T22:55Z", "lastModifiedDate" : "2013-12-05T05:22Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0253", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apache", "product" : { "product_data" : [ { "product_name" : "maven", "version" : { "version_data" : [ { "version_value" : "3.0.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-16" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0700.html", "name" : "RHSA-2013:0700", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=917084", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=917084", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8@%3Ccommits.pulsar.apache.org%3E", "name" : "[pulsar-commits] 20190416 [GitHub] [pulsar] one70six opened a new issue #4057: Security Vulnerabilities - Black Duck Scan - Pulsar v.2.3.1", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://maven.apache.org/security.html", "name" : "https://maven.apache.org/security.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The default configuration of Apache Maven 3.0.4, when using Maven Wagon 2.1, disables SSL certificate checks, which allows remote attackers to spoof servers via a man-in-the-middle (MITM) attack." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:maven:3.0.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:apache:maven_wagon:2.1:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-09T20:55Z", "lastModifiedDate" : "2019-04-16T18:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0254", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "digia", "product" : { "product_data" : [ { "product_name" : "qt", "version" : { "version_data" : [ { "version_value" : "1.41", "version_affected" : "=" }, { "version_value" : "1.42", "version_affected" : "=" }, { "version_value" : "1.43", "version_affected" : "=" }, { "version_value" : "1.44", "version_affected" : "=" }, { "version_value" : "1.45", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "3.3.0", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.3.4", "version_affected" : "=" }, { "version_value" : "3.3.5", "version_affected" : "=" }, { "version_value" : "3.3.6", "version_affected" : "=" }, { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.1.0", "version_affected" : "=" }, { "version_value" : "4.1.1", "version_affected" : "=" }, { "version_value" : "4.1.2", "version_affected" : "=" }, { "version_value" : "4.1.3", "version_affected" : "=" }, { "version_value" : "4.1.4", "version_affected" : "=" }, { "version_value" : "4.1.5", "version_affected" : "=" }, { "version_value" : "4.2.0", "version_affected" : "=" }, { "version_value" : "4.2.1", "version_affected" : "=" }, { "version_value" : "4.2.3", "version_affected" : "=" }, { "version_value" : "4.3.0", "version_affected" : "=" }, { "version_value" : "4.3.1", "version_affected" : "=" }, { "version_value" : "4.3.2", "version_affected" : "=" }, { "version_value" : "4.3.3", "version_affected" : "=" }, { "version_value" : "4.3.4", "version_affected" : "=" }, { "version_value" : "4.3.5", "version_affected" : "=" }, { "version_value" : "4.4.0", "version_affected" : "=" }, { "version_value" : "4.4.1", "version_affected" : "=" }, { "version_value" : "4.4.2", "version_affected" : "=" }, { "version_value" : "4.4.3", "version_affected" : "=" }, { "version_value" : "4.5.0", "version_affected" : "=" }, { "version_value" : "4.5.1", "version_affected" : "=" }, { "version_value" : "4.5.2", "version_affected" : "=" }, { "version_value" : "4.5.3", "version_affected" : "=" }, { "version_value" : "4.6.0", "version_affected" : "=" }, { "version_value" : "4.6.1", "version_affected" : "=" }, { "version_value" : "4.6.2", "version_affected" : "=" }, { "version_value" : "4.6.3", "version_affected" : "=" }, { "version_value" : "4.6.4", "version_affected" : "=" }, { "version_value" : "4.6.5", "version_affected" : "=" }, { "version_value" : "4.7.0", "version_affected" : "=" }, { "version_value" : "4.7.1", "version_affected" : "=" }, { "version_value" : "4.7.2", "version_affected" : "=" }, { "version_value" : "4.7.3", "version_affected" : "=" }, { "version_value" : "4.7.4", "version_affected" : "=" }, { "version_value" : "4.7.5", "version_affected" : "=" }, { "version_value" : "4.7.6", "version_affected" : "=" }, { "version_value" : "4.8.0", "version_affected" : "=" }, { "version_value" : "4.8.1", "version_affected" : "=" }, { "version_value" : "4.8.2", "version_affected" : "=" }, { "version_value" : "4.8.3", "version_affected" : "=" }, { "version_value" : "4.8.4", "version_affected" : "=" }, { "version_value" : "4.8.5", "version_affected" : "=" }, { "version_value" : "5.0.0", "version_affected" : "=" }, { "version_value" : "5.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-updates/2013-03/msg00014.html", "name" : "openSUSE-SU-2013:0403", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-03/msg00015.html", "name" : "openSUSE-SU-2013:0404", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-03/msg00019.html", "name" : "openSUSE-SU-2013:0411", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.qt-project.org/pipermail/announce/2013-February/000023.html", "name" : "[qt-announce] 20130205 [Announce] [CVE-2013-0254] Qt Project Security Advisory: System V shared memory segments created world-writeable", "refsource" : "MLIST", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0669.html", "name" : "RHSA-2013:0669", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=907425", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=907425", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0 uses weak permissions (world-readable and world-writable) for shared memory segments, which allows local users to read sensitive information or modify critical program data, as demonstrated by reading a pixmap being sent to an X server." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:1.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:1.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:1.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:1.44:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:1.45:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:2.0.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:3.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:3.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:3.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:3.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:3.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:3.3.6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.1.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.2.3:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.3.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.4.3:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.5.3:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.6.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.7.6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.8.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.8.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:4.8.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digia:qt:5.0.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.6 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-06T12:05Z", "lastModifiedDate" : "2013-05-15T03:34Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0255", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "postgresql", "product" : { "product_data" : [ { "product_name" : "postgresql", "version" : { "version_data" : [ { "version_value" : "8.3", "version_affected" : "=" }, { "version_value" : "8.3.1", "version_affected" : "=" }, { "version_value" : "8.3.2", "version_affected" : "=" }, { "version_value" : "8.3.3", "version_affected" : "=" }, { "version_value" : "8.3.4", "version_affected" : "=" }, { "version_value" : "8.3.5", "version_affected" : "=" }, { "version_value" : "8.3.6", "version_affected" : "=" }, { "version_value" : "8.3.7", "version_affected" : "=" }, { "version_value" : "8.3.8", "version_affected" : "=" }, { "version_value" : "8.3.9", "version_affected" : "=" }, { "version_value" : "8.3.10", "version_affected" : "=" }, { "version_value" : "8.3.11", "version_affected" : "=" }, { "version_value" : "8.3.12", "version_affected" : "=" }, { "version_value" : "8.3.13", "version_affected" : "=" }, { "version_value" : "8.3.14", "version_affected" : "=" }, { "version_value" : "8.3.15", "version_affected" : "=" }, { "version_value" : "8.3.16", "version_affected" : "=" }, { "version_value" : "8.3.17", "version_affected" : "=" }, { "version_value" : "8.3.18", "version_affected" : "=" }, { "version_value" : "8.3.19", "version_affected" : "=" }, { "version_value" : "8.3.20", "version_affected" : "=" }, { "version_value" : "8.3.21", "version_affected" : "=" }, { "version_value" : "8.3.22", "version_affected" : "=" }, { "version_value" : "8.4", "version_affected" : "=" }, { "version_value" : "8.4.1", "version_affected" : "=" }, { "version_value" : "8.4.2", "version_affected" : "=" }, { "version_value" : "8.4.3", "version_affected" : "=" }, { "version_value" : "8.4.4", "version_affected" : "=" }, { "version_value" : "8.4.5", "version_affected" : "=" }, { "version_value" : "8.4.6", "version_affected" : "=" }, { "version_value" : "8.4.7", "version_affected" : "=" }, { "version_value" : "8.4.8", "version_affected" : "=" }, { "version_value" : "8.4.9", "version_affected" : "=" }, { "version_value" : "8.4.10", "version_affected" : "=" }, { "version_value" : "8.4.11", "version_affected" : "=" }, { "version_value" : "8.4.12", "version_affected" : "=" }, { "version_value" : "8.4.13", "version_affected" : "=" }, { "version_value" : "8.4.14", "version_affected" : "=" }, { "version_value" : "8.4.15", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.0.1", "version_affected" : "=" }, { "version_value" : "9.0.2", "version_affected" : "=" }, { "version_value" : "9.0.3", "version_affected" : "=" }, { "version_value" : "9.0.4", "version_affected" : "=" }, { "version_value" : "9.0.5", "version_affected" : "=" }, { "version_value" : "9.0.6", "version_affected" : "=" }, { "version_value" : "9.0.7", "version_affected" : "=" }, { "version_value" : "9.0.8", "version_affected" : "=" }, { "version_value" : "9.0.9", "version_affected" : "=" }, { "version_value" : "9.0.10", "version_affected" : "=" }, { "version_value" : "9.0.11", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.1.4", "version_affected" : "=" }, { "version_value" : "9.1.5", "version_affected" : "=" }, { "version_value" : "9.1.6", "version_affected" : "=" }, { "version_value" : "9.1.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098586.html", "name" : "FEDORA-2013-2123", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-02/msg00059.html", "name" : "openSUSE-SU-2013:0318", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-02/msg00060.html", "name" : "openSUSE-SU-2013:0319", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://osvdb.org/89935", "name" : "89935", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1475.html", "name" : "RHSA-2013:1475", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/51923", "name" : "51923", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/52819", "name" : "52819", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1028092", "name" : "1028092", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2013/dsa-2630", "name" : "DSA-2630", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:142", "name" : "MDVSA-2013:142", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html", "name" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.postgresql.org/docs/8.3/static/release-8-3-23.html", "name" : "http://www.postgresql.org/docs/8.3/static/release-8-3-23.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.postgresql.org/docs/8.4/static/release-8-4-16.html", "name" : "http://www.postgresql.org/docs/8.4/static/release-8-4-16.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.postgresql.org/docs/9.0/static/release-9-0-12.html", "name" : "http://www.postgresql.org/docs/9.0/static/release-9-0-12.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.postgresql.org/docs/9.1/static/release-9-1-8.html", "name" : "http://www.postgresql.org/docs/9.1/static/release-9-1-8.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.postgresql.org/docs/9.2/static/release-9-2-3.html", "name" : "http://www.postgresql.org/docs/9.2/static/release-9-2-3.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/57844", "name" : "57844", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1717-1", "name" : "USN-1717-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://blogs.oracle.com/sunsecurity/entry/cve_2013_0255_array_index", "name" : "https://blogs.oracle.com/sunsecurity/entry/cve_2013_0255_array_index", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=907892", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=907892", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81917", "name" : "postgresql-enumrecv-dos(81917)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PostgreSQL 9.2.x before 9.2.3, 9.1.x before 9.1.8, 9.0.x before 9.0.12, 8.4.x before 8.4.16, and 8.3.x before 8.3.23 does not properly declare the enum_recv function in backend/utils/adt/enum.c, which causes it to be invoked with incorrect arguments and allows remote authenticated users to cause a denial of service (server crash) or read sensitive process memory via a crafted SQL command, which triggers an array index error and an out-of-bounds read." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.3.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.3.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.3.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.3.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.3.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.3.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.3.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.3.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.3.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.3.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.3.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.3.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.3.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.3.22:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.4.15:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:9.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:9.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:9.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:9.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:9.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:9.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:9.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:9.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:9.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:9.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:9.0.11:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:9.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:9.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:9.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:9.1.7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:9.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:9.2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-13T01:55Z", "lastModifiedDate" : "2017-10-20T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0256", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "dave_thomas", "product" : { "product_data" : [ { "product_name" : "rdoc", "version" : { "version_data" : [ { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "3.12", "version_affected" : "=" }, { "version_value" : "4.0.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "ruby-lang", "product" : { "product_data" : [ { "product_name" : "ruby", "version" : { "version_data" : [ { "version_value" : "1.9", "version_affected" : "=" }, { "version_value" : "1.9.1", "version_affected" : "=" }, { "version_value" : "1.9.2", "version_affected" : "=" }, { "version_value" : "1.9.3", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blog.segment7.net/2013/02/06/rdoc-xss-vulnerability-cve-2013-0256-releases-3-9-5-3-12-1-4-0-0-rc-2", "name" : "http://blog.segment7.net/2013/02/06/rdoc-xss-vulnerability-cve-2013-0256-releases-3-9-5-3-12-1-4-0-0-rc-2", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00015.html", "name" : "SUSE-SU-2013:0647", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-02/msg00048.html", "name" : "openSUSE-SU-2013:0303", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0548.html", "name" : "RHSA-2013:0548", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0686.html", "name" : "RHSA-2013:0686", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0701.html", "name" : "RHSA-2013:0701", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0728.html", "name" : "RHSA-2013:0728", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/52774", "name" : "52774", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.ruby-lang.org/en/news/2013/02/06/rdoc-xss-cve-2013-0256/", "name" : "http://www.ruby-lang.org/en/news/2013/02/06/rdoc-xss-cve-2013-0256/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.ubuntu.com/usn/USN-1733-1", "name" : "USN-1733-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=907820", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=907820", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/rdoc/rdoc/commit/ffa87887ee0517793df7541629a470e331f9fe60", "name" : "https://github.com/rdoc/rdoc/commit/ffa87887ee0517793df7541629a470e331f9fe60", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL." }, { "lang" : "en", "value" : "Per http://www.ruby-lang.org/en/news/2013/02/06/rdoc-xss-cve-2013-0256/\r\nAffected versions\r\nAll ruby 1.9 versions prior to ruby 1.9.3 patchlevel 383\r\nAll ruby 2.0 versions prior to ruby 2.0.0 rc2 or prior to trunk revision 39102\r\n" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dave_thomas:rdoc:2.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dave_thomas:rdoc:3.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dave_thomas:rdoc:4.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ruby-lang:ruby:1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ruby-lang:ruby:1.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ruby-lang:ruby:1.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ruby-lang:ruby:1.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ruby-lang:ruby:1.9.3:p0:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ruby-lang:ruby:1.9.3:p125:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ruby-lang:ruby:1.9.3:p194:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ruby-lang:ruby:1.9.3:p286:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ruby-lang:ruby:1.9.3:p383:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ruby-lang:ruby:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ruby-lang:ruby:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ruby-lang:ruby:2.0.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ruby-lang:ruby:2.0.0:rc2:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-01T05:40Z", "lastModifiedDate" : "2013-06-05T03:40Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0257", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "david_alkire", "product" : { "product_data" : [ { "product_name" : "email2image", "version" : { "version_data" : [ { "version_value" : "6.x-1.x", "version_affected" : "=" }, { "version_value" : "6.x-2.x", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://drupal.org/node/1903264", "name" : "http://drupal.org/node/1903264", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/05/1", "name" : "[oss-security] 20130204 Re: CVE request for Drupal contributed modules", "refsource" : "MLIST", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The email2image module 6.x-1.x and 6.x-2.x for Drupal does not properly restrict access to nodes, which allows remote attackers to read images of user email addresses and email fields." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:david_alkire:email2image:6.x-1.x:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:david_alkire:email2image:6.x-2.x:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-27T21:55Z", "lastModifiedDate" : "2013-03-28T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0258", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "google_authenticator_login_project", "product" : { "product_data" : [ { "product_name" : "ga_login", "version" : { "version_data" : [ { "version_value" : "7.x-1.0", "version_affected" : "=" }, { "version_value" : "7.x-1.1", "version_affected" : "=" }, { "version_value" : "7.x-1.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-287" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://drupal.org/node/1902102", "name" : "http://drupal.org/node/1902102", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://drupal.org/node/1903282", "name" : "http://drupal.org/node/1903282", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://drupalcode.org/project/ga_login.git/commitdiff/50b032d", "name" : "http://drupalcode.org/project/ga_login.git/commitdiff/50b032d", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/05/1", "name" : "[oss-security] 20130204 Re: CVE request for Drupal contributed modules", "refsource" : "MLIST", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Google Authenticator login (ga_login) module 7.x before 7.x-1.3 for Drupal, when multi-factor authentication is enabled, allows remote attackers to bypass authentication for accounts without an associated Google Authenticator token by logging in with the username." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google_authenticator_login_project:ga_login:7.x-1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google_authenticator_login_project:ga_login:7.x-1.0:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google_authenticator_login_project:ga_login:7.x-1.0:dev:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google_authenticator_login_project:ga_login:7.x-1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google_authenticator_login_project:ga_login:7.x-1.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-27T21:55Z", "lastModifiedDate" : "2013-04-05T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0259", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "boxes_project", "product" : { "product_data" : [ { "product_name" : "boxes", "version" : { "version_data" : [ { "version_value" : "7.x-1.0", "version_affected" : "=" }, { "version_value" : "7.x-1.x", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://drupal.org/node/1897016", "name" : "http://drupal.org/node/1897016", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://drupal.org/node/1903300", "name" : "http://drupal.org/node/1903300", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://drupalcode.org/project/boxes.git/commitdiff/456ff8e", "name" : "http://drupalcode.org/project/boxes.git/commitdiff/456ff8e", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/05/1", "name" : "[oss-security] 20130204 Re: CVE request for Drupal contributed modules", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/57642", "name" : "57642", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the Boxes module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with administer or edit boxes permissions to inject arbitrary web script or HTML via the subject parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:boxes_project:boxes:7.x-1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:boxes_project:boxes:7.x-1.0:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:boxes_project:boxes:7.x-1.0:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:boxes_project:boxes:7.x-1.0:beta3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:boxes_project:boxes:7.x-1.0:beta4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:boxes_project:boxes:7.x-1.0:beta5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:boxes_project:boxes:7.x-1.0:beta6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:boxes_project:boxes:7.x-1.0:beta7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:boxes_project:boxes:7.x-1.0:beta8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:boxes_project:boxes:7.x-1.x:dev:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-27T21:55Z", "lastModifiedDate" : "2013-07-03T04:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0260", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "elliot_pahl", "product" : { "product_data" : [ { "product_name" : "drush_debian_packaging", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://drupal.org/node/1903324", "name" : "http://drupal.org/node/1903324", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/05/1", "name" : "[oss-security] 20130204 Re: CVE request for Drupal contributed modules", "refsource" : "MLIST", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Drush Debian Packaging module for Drupal allows local users to obtain database credentials via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:elliot_pahl:drush_debian_packaging:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-27T21:55Z", "lastModifiedDate" : "2013-03-28T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0261", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "openstack", "product" : { "product_data" : [ { "product_name" : "essex", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "folsom", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0595.html", "name" : "RHSA-2013:0595", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=908101", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=908101", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "(1) installer/basedefs.py and (2) modules/ospluginutils.py in PackStack allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp." }, { "lang" : "en", "value" : "Per http://rhn.redhat.com/errata/RHSA-2013-0595.html these are the affected products:\r\n\r\nRed Hat OpenStack Essex\r\nRed Hat OpenStack Folsom" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openstack:essex:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openstack:folsom:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-08T21:55Z", "lastModifiedDate" : "2013-03-18T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0262", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "rack_project", "product" : { "product_data" : [ { "product_name" : "rack", "version" : { "version_data" : [ { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.3", "version_affected" : "=" }, { "version_value" : "1.4.4", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html", "name" : "openSUSE-SU-2013:0462", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rack.github.com/", "name" : "http://rack.github.com/", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/52033", "name" : "52033", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=909071", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=909071", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=909072", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=909072", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://gist.github.com/rentzsch/4736940", "name" : "https://gist.github.com/rentzsch/4736940", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/rack/rack/blob/master/lib/rack/file.rb#L56", "name" : "https://github.com/rack/rack/blob/master/lib/rack/file.rb#L56", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/rack/rack/commit/6f237e4c9fab649d3750482514f0fde76c56ab30", "name" : "https://github.com/rack/rack/commit/6f237e4c9fab649d3750482514f0fde76c56ab30", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://groups.google.com/forum/#!msg/rack-devel/bf937jPZxJM/1s6x95vIhmAJ", "name" : "https://groups.google.com/forum/#!msg/rack-devel/bf937jPZxJM/1s6x95vIhmAJ", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://groups.google.com/forum/#!msg/rack-devel/mZsuRonD7G8/DpZIOmMLbOgJ", "name" : "https://groups.google.com/forum/#!msg/rack-devel/mZsuRonD7G8/DpZIOmMLbOgJ", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted PATH_INFO environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka \"symlink path traversals.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.5.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-08T20:55Z", "lastModifiedDate" : "2018-08-13T21:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0263", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "rack_project", "product" : { "product_data" : [ { "product_name" : "rack", "version" : { "version_data" : [ { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.2.6", "version_affected" : "=" }, { "version_value" : "1.2.7", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.3.4", "version_affected" : "=" }, { "version_value" : "1.3.5", "version_affected" : "=" }, { "version_value" : "1.3.6", "version_affected" : "=" }, { "version_value" : "1.3.7", "version_affected" : "=" }, { "version_value" : "1.3.8", "version_affected" : "=" }, { "version_value" : "1.3.9", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.3", "version_affected" : "=" }, { "version_value" : "1.4.4", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html", "name" : "openSUSE-SU-2013:0462", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rack.github.com/", "name" : "http://rack.github.com/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0686.html", "name" : "RHSA-2013:0686", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/52033", "name" : "52033", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/52134", "name" : "52134", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/52774", "name" : "52774", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2013/dsa-2783", "name" : "DSA-2783", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.osvdb.org/89939", "name" : "89939", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=909071", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=909071", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://gist.github.com/codahale/f9f3781f7b54985bee94", "name" : "https://gist.github.com/codahale/f9f3781f7b54985bee94", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/rack/rack/commit/0cd7e9aa397f8ebb3b8481d67dbac8b4863a7f07", "name" : "https://github.com/rack/rack/commit/0cd7e9aa397f8ebb3b8481d67dbac8b4863a7f07", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://github.com/rack/rack/commit/9a81b961457805f6d1a5c275d053068440421e11", "name" : "https://github.com/rack/rack/commit/9a81b961457805f6d1a5c275d053068440421e11", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://groups.google.com/d/msg/rack-devel/xKrHVWeNvDM/4ZGA576CnK4J", "name" : "https://groups.google.com/d/msg/rack-devel/xKrHVWeNvDM/4ZGA576CnK4J", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://groups.google.com/forum/#!msg/rack-devel/bf937jPZxJM/1s6x95vIhmAJ", "name" : "https://groups.google.com/forum/#!msg/rack-devel/bf937jPZxJM/1s6x95vIhmAJ", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://groups.google.com/forum/#!msg/rack-devel/hz-liLb9fKE/8jvVWU6xYiYJ", "name" : "https://groups.google.com/forum/#!msg/rack-devel/hz-liLb9fKE/8jvVWU6xYiYJ", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://groups.google.com/forum/#!msg/rack-devel/mZsuRonD7G8/DpZIOmMLbOgJ", "name" : "https://groups.google.com/forum/#!msg/rack-devel/mZsuRonD7G8/DpZIOmMLbOgJ", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://groups.google.com/forum/#!msg/rack-devel/RnQxm6i13C4/xfakH81yWvgJ", "name" : "https://groups.google.com/forum/#!msg/rack-devel/RnQxm6i13C4/xfakH81yWvgJ", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://puppet.com/security/cve/cve-2013-0263", "name" : "https://puppet.com/security/cve/cve-2013-0263", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://twitter.com/coda/statuses/299732877745197056", "name" : "https://twitter.com/coda/statuses/299732877745197056", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5, 1.3.x before 1.3.10, 1.2.x before 1.2.8, and 1.1.x before 1.1.6 allows remote attackers to guess the session cookie, gain privileges, and execute arbitrary code via a timing attack involving an HMAC comparison function that does not run in constant time." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.5.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.4.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.3.9:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.2.7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rack_project:rack:1.1.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-08T20:55Z", "lastModifiedDate" : "2018-08-13T21:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0264", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "mrg_management_console", "version" : { "version_data" : [ { "version_value" : "r5310", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-295" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://access.redhat.com/security/cve/cve-2013-0264", "name" : "https://access.redhat.com/security/cve/cve-2013-0264", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0264", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0264", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An import error was introduced in Cumin in the code refactoring in r5310. Server certificate validation is always disabled when connecting to Aviary servers, even if the installed packages on a system support it." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:mrg_management_console:r5310:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-12-30T22:15Z", "lastModifiedDate" : "2020-01-10T15:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0265", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "bitbucket", "product" : { "product_data" : [ { "product_name" : "xnbd", "version" : { "version_data" : [ { "version_value" : "0.1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2013/02/06/2", "name" : "[oss-security] 20130206 CVE request: Insecure default log file path in xNBD", "refsource" : "MLIST", "tags" : [ "Exploit", "Patch" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/07/5", "name" : "[oss-security] 20130206 Re: CVE request: Insecure default log file path in xNBD", "refsource" : "MLIST", "tags" : [ "Exploit" ] }, { "url" : "http://www.osvdb.org/90008", "name" : "90008", "refsource" : "OSVDB", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The redirect_stderr function in xnbd_common.c in xnbd-server and xndb-wrapper in xNBD 0.1.0 allow local users to overwrite arbitrary files via a symlink attack on /tmp/xnbd.log." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bitbucket:xnbd:0.1.0:pre:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-13T01:55Z", "lastModifiedDate" : "2013-02-13T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0266", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "openstack", "product" : { "product_data" : [ { "product_name" : "essex", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "folsom", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-362" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0595.html", "name" : "RHSA-2013:0595", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=908581", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=908581", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/puppetlabs/puppetlabs-cinder/commit/7da792fbd40c0e6eae1ee093aa00e0b177bd2ebc", "name" : "https://github.com/puppetlabs/puppetlabs-cinder/commit/7da792fbd40c0e6eae1ee093aa00e0b177bd2ebc", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "manifests/base.pp in the puppetlabs-cinder module, as used in PackStack, uses world-readable permissions for the (1) cinder.conf and (2) api-paste.ini configuration files, which allows local users to read OpenStack administrative passwords by reading the files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openstack:essex:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openstack:folsom:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-08T21:55Z", "lastModifiedDate" : "2013-03-18T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0267", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apache", "product" : { "product_data" : [ { "product_name" : "vcl", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.3", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" }, { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/apache/vcl/commit/56c0f040056d6ad8693b20cfd3351367c2ffeabc#diff-2567a5ec9705eb7ac2c984033e06189d", "name" : "https://github.com/apache/vcl/commit/56c0f040056d6ad8693b20cfd3351367c2ffeabc#diff-2567a5ec9705eb7ac2c984033e06189d", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://lists.apache.org/thread.html/632da9e45fce333f21782f1fe10b1d8e77a63811a34fe8e286dedc99@%3Ccommits.vcl.apache.org%3E", "name" : "[vcl-commits] 20190729 svn commit: r1863947 - /vcl/site/trunk/content/security.mdtext", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://lists.apache.org/thread.html/944592973c91cd106a42095271c3f6c7ab9c8d70077b8c6a8d4d92d0@%3Ccommits.vcl.apache.org%3E", "name" : "[vcl-commits] 20190729 svn commit: r1048217 - in /websites/staging/vcl/trunk/content: ./ security.html", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/201305.mbox/%3C1658214.8zndv4WEi7@treebeard%3E", "name" : "[www-announce] 20130506 Apache VCL improper input validation", "refsource" : "MLIST", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Privileges portion of the web GUI and the XMLRPC API in Apache VCL 2.3.x before 2.3.2, 2.2.x before 2.2.2 and 2.1 allow remote authenticated users with nodeAdmin, manageGroup, resourceGrant, or userGrant permissions to gain privileges, cause a denial of service, or conduct cross-site scripting (XSS) attacks by leveraging improper data validation." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:vcl:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:vcl:*:*:*:*:*:*:*:*", "versionStartIncluding" : "2.2", "versionEndIncluding" : "2.2.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:vcl:*:*:*:*:*:*:*:*", "versionStartIncluding" : "2.3", "versionEndExcluding" : "2.3.2" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2018-02-21T15:29Z", "lastModifiedDate" : "2019-07-29T17:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0268", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "=" }, { "version_value" : "3.0.18", "version_affected" : "=" }, { "version_value" : "3.0.19", "version_affected" : "=" }, { "version_value" : "3.0.20", "version_affected" : "=" }, { "version_value" : "3.0.21", "version_affected" : "=" }, { "version_value" : "3.0.22", "version_affected" : "=" }, { "version_value" : "3.0.23", "version_affected" : "=" }, { "version_value" : "3.0.24", "version_affected" : "=" }, { "version_value" : "3.0.25", "version_affected" : "=" }, { "version_value" : "3.0.26", "version_affected" : "=" }, { "version_value" : "3.0.27", "version_affected" : "=" }, { "version_value" : "3.0.28", "version_affected" : "=" }, { "version_value" : "3.0.29", "version_affected" : "=" }, { "version_value" : "3.0.30", "version_affected" : "=" }, { "version_value" : "3.0.31", "version_affected" : "=" }, { "version_value" : "3.0.32", "version_affected" : "=" }, { "version_value" : "3.0.33", "version_affected" : "=" }, { "version_value" : "3.0.34", "version_affected" : "=" }, { "version_value" : "3.0.35", "version_affected" : "=" }, { "version_value" : "3.0.36", "version_affected" : "=" }, { "version_value" : "3.0.37", "version_affected" : "=" }, { "version_value" : "3.0.38", "version_affected" : "=" }, { "version_value" : "3.0.39", "version_affected" : "=" }, { "version_value" : "3.0.40", "version_affected" : "=" }, { "version_value" : "3.0.41", "version_affected" : "=" }, { "version_value" : "3.0.42", "version_affected" : "=" }, { "version_value" : "3.0.43", "version_affected" : "=" }, { "version_value" : "3.0.44", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.3", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.1.5", "version_affected" : "=" }, { "version_value" : "3.1.6", "version_affected" : "=" }, { "version_value" : "3.1.7", "version_affected" : "=" }, { "version_value" : "3.1.8", "version_affected" : "=" }, { "version_value" : "3.1.9", "version_affected" : "=" }, { "version_value" : "3.1.10", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.2.6", "version_affected" : "=" }, { "version_value" : "3.2.7", "version_affected" : "=" }, { "version_value" : "3.2.8", "version_affected" : "=" }, { "version_value" : "3.2.9", "version_affected" : "=" }, { "version_value" : "3.2.10", "version_affected" : "=" }, { "version_value" : "3.2.11", "version_affected" : "=" }, { "version_value" : "3.2.12", "version_affected" : "=" }, { "version_value" : "3.2.13", "version_affected" : "=" }, { "version_value" : "3.2.14", "version_affected" : "=" }, { "version_value" : "3.2.15", "version_affected" : "=" }, { "version_value" : "3.2.16", "version_affected" : "=" }, { "version_value" : "3.2.17", "version_affected" : "=" }, { "version_value" : "3.2.18", "version_affected" : "=" }, { "version_value" : "3.2.19", "version_affected" : "=" }, { "version_value" : "3.2.20", "version_affected" : "=" }, { "version_value" : "3.2.21", "version_affected" : "=" }, { "version_value" : "3.2.22", "version_affected" : "=" }, { "version_value" : "3.2.23", "version_affected" : "=" }, { "version_value" : "3.2.24", "version_affected" : "=" }, { "version_value" : "3.2.25", "version_affected" : "=" }, { "version_value" : "3.2.26", "version_affected" : "=" }, { "version_value" : "3.2.27", "version_affected" : "=" }, { "version_value" : "3.2.28", "version_affected" : "=" }, { "version_value" : "3.2.29", "version_affected" : "=" }, { "version_value" : "3.2.30", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.3.4", "version_affected" : "=" }, { "version_value" : "3.3.5", "version_affected" : "=" }, { "version_value" : "3.3.6", "version_affected" : "=" }, { "version_value" : "3.3.7", "version_affected" : "=" }, { "version_value" : "3.3.8", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.4.3", "version_affected" : "=" }, { "version_value" : "3.4.4", "version_affected" : "=" }, { "version_value" : "3.4.5", "version_affected" : "=" }, { "version_value" : "3.4.6", "version_affected" : "=" }, { "version_value" : "3.4.7", "version_affected" : "=" }, { "version_value" : "3.4.8", "version_affected" : "=" }, { "version_value" : "3.4.9", "version_affected" : "=" }, { "version_value" : "3.4.10", "version_affected" : "=" }, { "version_value" : "3.4.11", "version_affected" : "=" }, { "version_value" : "3.4.12", "version_affected" : "=" }, { "version_value" : "3.4.13", "version_affected" : "=" }, { "version_value" : "3.4.14", "version_affected" : "=" }, { "version_value" : "3.4.15", "version_affected" : "=" }, { "version_value" : "3.4.16", "version_affected" : "=" }, { "version_value" : "3.4.17", "version_affected" : "=" }, { "version_value" : "3.4.18", "version_affected" : "=" }, { "version_value" : "3.4.19", "version_affected" : "=" }, { "version_value" : "3.4.20", "version_affected" : "=" }, { "version_value" : "3.4.21", "version_affected" : "=" }, { "version_value" : "3.4.22", "version_affected" : "=" }, { "version_value" : "3.4.23", "version_affected" : "=" }, { "version_value" : "3.4.24", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "=" }, { "version_value" : "3.6.9", "version_affected" : "=" }, { "version_value" : "3.6.10", "version_affected" : "=" }, { "version_value" : "3.6.11", "version_affected" : "=" }, { "version_value" : "3.7", "version_affected" : "=" }, { "version_value" : "3.7.1", "version_affected" : "=" }, { "version_value" : "3.7.2", "version_affected" : "=" }, { "version_value" : "3.7.3", "version_affected" : "=" }, { "version_value" : "3.7.4", "version_affected" : "=" }, { "version_value" : "3.7.5", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c903f0456bc69176912dee6dd25c6a66ee1aed00", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c903f0456bc69176912dee6dd25c6a66ee1aed00", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00018.html", "name" : "SUSE-SU-2013:0674", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html", "name" : "openSUSE-SU-2013:1187", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.6", "name" : "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.6", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/07/12", "name" : "[oss-security] 20130207 Re: CVE request -- Linux kernel: x86/msr: /dev/cpu/*/msr local privilege escalation", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=908693", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=908693", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://github.com/torvalds/linux/commit/c903f0456bc69176912dee6dd25c6a66ee1aed00", "name" : "https://github.com/torvalds/linux/commit/c903f0456bc69176912dee6dd25c6a66ee1aed00", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The msr_open function in arch/x86/kernel/msr.c in the Linux kernel before 3.7.6 allows local users to bypass intended capability restrictions by executing a crafted application as root, as demonstrated by msr32.c." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.44:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.7.5" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.2 }, "severity" : "MEDIUM", "exploitabilityScore" : 1.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-18T04:41Z", "lastModifiedDate" : "2013-08-22T06:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0269", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "rubygems", "product" : { "product_data" : [ { "product_name" : "json_gem", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.5.4", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.6.1", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "1.6.3", "version_affected" : "=" }, { "version_value" : "1.6.4", "version_affected" : "=" }, { "version_value" : "1.6.5", "version_affected" : "=" }, { "version_value" : "1.6.6", "version_affected" : "=" }, { "version_value" : "1.6.7", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.7.4", "version_affected" : "=" }, { "version_value" : "1.7.5", "version_affected" : "=" }, { "version_value" : "1.7.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2013/Oct/msg00006.html", "name" : "APPLE-SA-2013-10-22-5", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00001.html", "name" : "SUSE-SU-2013:0609", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00015.html", "name" : "SUSE-SU-2013:0647", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-04/msg00034.html", "name" : "openSUSE-SU-2013:0603", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0686.html", "name" : "RHSA-2013:0686", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0701.html", "name" : "RHSA-2013:0701", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1028.html", "name" : "RHSA-2013:1028", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1147.html", "name" : "RHSA-2013:1147", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/52075", "name" : "52075", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/52774", "name" : "52774", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/52902", "name" : "52902", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://spreecommerce.com/blog/multiple-security-vulnerabilities-fixed", "name" : "http://spreecommerce.com/blog/multiple-security-vulnerabilities-fixed", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://weblog.rubyonrails.org/2013/2/11/SEC-ANN-Rails-3-2-12-3-1-11-and-2-3-17-have-been-released/", "name" : "http://weblog.rubyonrails.org/2013/2/11/SEC-ANN-Rails-3-2-12-3-1-11-and-2-3-17-have-been-released/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/11/7", "name" : "[oss-security] 20130211 Denial of Service and Unsafe Object Creation Vulnerability in JSON [CVE-2013-0269]", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/11/8", "name" : "[oss-security] 20130211 Patch update for [CVE-2013-0269]", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.osvdb.org/90074", "name" : "90074", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/57899", "name" : "57899", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2013&m=slackware-security.426862", "name" : "SSA:2013-075-01", "refsource" : "SLACKWARE", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1733-1", "name" : "USN-1733-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.zweitag.de/en/blog/ruby-on-rails-vulnerable-to-mass-assignment-and-sql-injection", "name" : "http://www.zweitag.de/en/blog/ruby-on-rails-vulnerable-to-mass-assignment-and-sql-injection", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82010", "name" : "json-ruby-security-bypass(82010)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://groups.google.com/group/rubyonrails-security/msg/d8e0db6e08c81428?dmode=source&output=gplain", "name" : "[rubyonrails-security] 20130211 Denial of Service and Unsafe Object Creation Vulnerability in JSON [CVE-2013-0269]", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://puppet.com/security/cve/cve-2013-0269", "name" : "https://puppet.com/security/cve/cve-2013-0269", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain internal objects, as demonstrated by conducting a SQL injection attack against Ruby on Rails, aka \"Unsafe Object Creation Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubygems:json_gem:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubygems:json_gem:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubygems:json_gem:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubygems:json_gem:1.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubygems:json_gem:1.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubygems:json_gem:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubygems:json_gem:1.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubygems:json_gem:1.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubygems:json_gem:1.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubygems:json_gem:1.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubygems:json_gem:1.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubygems:json_gem:1.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubygems:json_gem:1.6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubygems:json_gem:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubygems:json_gem:1.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubygems:json_gem:1.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubygems:json_gem:1.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubygems:json_gem:1.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubygems:json_gem:1.7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubygems:json_gem:1.7.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-13T01:55Z", "lastModifiedDate" : "2017-12-09T02:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0270", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "openstack", "product" : { "product_data" : [ { "product_name" : "keystone", "version" : { "version_data" : [ { "version_value" : "2012.1", "version_affected" : "=" }, { "version_value" : "2012.1.1", "version_affected" : "=" }, { "version_value" : "2012.1.2", "version_affected" : "=" }, { "version_value" : "2012.1.3", "version_affected" : "=" }, { "version_value" : "2012.2", "version_affected" : "=" }, { "version_value" : "2012.2.1", "version_affected" : "=" }, { "version_value" : "2012.2.2", "version_affected" : "=" }, { "version_value" : "2012.2.3", "version_affected" : "=" }, { "version_value" : "2012.2.4", "version_affected" : "=" }, { "version_value" : "2013.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0708.html", "name" : "RHSA-2013:0708", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://bugs.launchpad.net/keystone/+bug/1099025", "name" : "https://bugs.launchpad.net/keystone/+bug/1099025", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=909012", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=909012", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://github.com/openstack/keystone/commit/7691276b869a86c2b75631d5bede9f61e030d9d8", "name" : "https://github.com/openstack/keystone/commit/7691276b869a86c2b75631d5bede9f61e030d9d8", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://github.com/openstack/keystone/commit/82c87e5638ebaf9f166a9b07a0155291276d6fdc", "name" : "https://github.com/openstack/keystone/commit/82c87e5638ebaf9f166a9b07a0155291276d6fdc", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://launchpad.net/keystone/grizzly/2013.1", "name" : "https://launchpad.net/keystone/grizzly/2013.1", "refsource" : "CONFIRM", "tags" : [ "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "OpenStack Keystone Grizzly before 2013.1, Folsom, and possibly earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a large HTTP request, as demonstrated by a long tenant_name when requesting a token." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openstack:keystone:*:*:*:*:*:*:*:*", "versionStartIncluding" : "2012.1", "versionEndIncluding" : "2012.1.3" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openstack:keystone:*:*:*:*:*:*:*:*", "versionStartIncluding" : "2012.2", "versionEndIncluding" : "2012.2.4" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openstack:keystone:2013.1:milestone1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openstack:keystone:2013.1:milestone2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openstack:keystone:2013.1:milestone3:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-12T22:55Z", "lastModifiedDate" : "2018-11-16T14:38Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0271", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "pidgin", "product" : { "product_data" : [ { "product_name" : "pidgin", "version" : { "version_data" : [ { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.5.2", "version_affected" : "=" }, { "version_value" : "2.5.3", "version_affected" : "=" }, { "version_value" : "2.5.4", "version_affected" : "=" }, { "version_value" : "2.5.5", "version_affected" : "=" }, { "version_value" : "2.5.6", "version_affected" : "=" }, { "version_value" : "2.5.7", "version_affected" : "=" }, { "version_value" : "2.5.8", "version_affected" : "=" }, { "version_value" : "2.5.9", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.7.0", "version_affected" : "=" }, { "version_value" : "2.7.1", "version_affected" : "=" }, { "version_value" : "2.7.2", "version_affected" : "=" }, { "version_value" : "2.7.3", "version_affected" : "=" }, { "version_value" : "2.7.4", "version_affected" : "=" }, { "version_value" : "2.7.5", "version_affected" : "=" }, { "version_value" : "2.7.6", "version_affected" : "=" }, { "version_value" : "2.7.7", "version_affected" : "=" }, { "version_value" : "2.7.8", "version_affected" : "=" }, { "version_value" : "2.7.9", "version_affected" : "=" }, { "version_value" : "2.7.10", "version_affected" : "=" }, { "version_value" : "2.7.11", "version_affected" : "=" }, { "version_value" : "2.8.0", "version_affected" : "=" }, { "version_value" : "2.9.0", "version_affected" : "=" }, { "version_value" : "2.10.0", "version_affected" : "=" }, { "version_value" : "2.10.1", "version_affected" : "=" }, { "version_value" : "2.10.2", "version_affected" : "=" }, { "version_value" : "2.10.3", "version_affected" : "=" }, { "version_value" : "2.10.4", "version_affected" : "=" }, { "version_value" : "2.10.5", "version_affected" : "=" }, { "version_value" : "2.10.6", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://hg.pidgin.im/pidgin/main/rev/a8aef1d340f2", "name" : "http://hg.pidgin.im/pidgin/main/rev/a8aef1d340f2", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00003.html", "name" : "SUSE-SU-2013:0388", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00006.html", "name" : "openSUSE-SU-2013:0405", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.pidgin.im/news/security/?id=65", "name" : "http://www.pidgin.im/news/security/?id=65", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.ubuntu.com/usn/USN-1746-1", "name" : "USN-1746-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18386", "name" : "oval:org.mitre.oval:def:18386", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted (1) mxit or (2) mxit/imagestrips pathname." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.10.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.10.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.10.6" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-16T21:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0272", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "pidgin", "product" : { "product_data" : [ { "product_name" : "pidgin", "version" : { "version_data" : [ { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.5.2", "version_affected" : "=" }, { "version_value" : "2.5.3", "version_affected" : "=" }, { "version_value" : "2.5.4", "version_affected" : "=" }, { "version_value" : "2.5.5", "version_affected" : "=" }, { "version_value" : "2.5.6", "version_affected" : "=" }, { "version_value" : "2.5.7", "version_affected" : "=" }, { "version_value" : "2.5.8", "version_affected" : "=" }, { "version_value" : "2.5.9", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.7.0", "version_affected" : "=" }, { "version_value" : "2.7.1", "version_affected" : "=" }, { "version_value" : "2.7.2", "version_affected" : "=" }, { "version_value" : "2.7.3", "version_affected" : "=" }, { "version_value" : "2.7.4", "version_affected" : "=" }, { "version_value" : "2.7.5", "version_affected" : "=" }, { "version_value" : "2.7.6", "version_affected" : "=" }, { "version_value" : "2.7.7", "version_affected" : "=" }, { "version_value" : "2.7.8", "version_affected" : "=" }, { "version_value" : "2.7.9", "version_affected" : "=" }, { "version_value" : "2.7.10", "version_affected" : "=" }, { "version_value" : "2.7.11", "version_affected" : "=" }, { "version_value" : "2.8.0", "version_affected" : "=" }, { "version_value" : "2.9.0", "version_affected" : "=" }, { "version_value" : "2.10.0", "version_affected" : "=" }, { "version_value" : "2.10.1", "version_affected" : "=" }, { "version_value" : "2.10.2", "version_affected" : "=" }, { "version_value" : "2.10.3", "version_affected" : "=" }, { "version_value" : "2.10.4", "version_affected" : "=" }, { "version_value" : "2.10.5", "version_affected" : "=" }, { "version_value" : "2.10.6", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://hg.pidgin.im/pidgin/main/rev/879db2a9a59c", "name" : "http://hg.pidgin.im/pidgin/main/rev/879db2a9a59c", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00003.html", "name" : "SUSE-SU-2013:0388", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00006.html", "name" : "openSUSE-SU-2013:0405", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00007.html", "name" : "openSUSE-SU-2013:0407", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.pidgin.im/news/security/?id=66", "name" : "http://www.pidgin.im/news/security/?id=66", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57951", "name" : "57951", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1746-1", "name" : "USN-1746-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17474", "name" : "oval:org.mitre.oval:def:17474", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.10.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.10.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.10.6" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-16T21:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0273", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "pidgin", "product" : { "product_data" : [ { "product_name" : "pidgin", "version" : { "version_data" : [ { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.5.2", "version_affected" : "=" }, { "version_value" : "2.5.3", "version_affected" : "=" }, { "version_value" : "2.5.4", "version_affected" : "=" }, { "version_value" : "2.5.5", "version_affected" : "=" }, { "version_value" : "2.5.6", "version_affected" : "=" }, { "version_value" : "2.5.7", "version_affected" : "=" }, { "version_value" : "2.5.8", "version_affected" : "=" }, { "version_value" : "2.5.9", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.7.0", "version_affected" : "=" }, { "version_value" : "2.7.1", "version_affected" : "=" }, { "version_value" : "2.7.2", "version_affected" : "=" }, { "version_value" : "2.7.3", "version_affected" : "=" }, { "version_value" : "2.7.4", "version_affected" : "=" }, { "version_value" : "2.7.5", "version_affected" : "=" }, { "version_value" : "2.7.6", "version_affected" : "=" }, { "version_value" : "2.7.7", "version_affected" : "=" }, { "version_value" : "2.7.8", "version_affected" : "=" }, { "version_value" : "2.7.9", "version_affected" : "=" }, { "version_value" : "2.7.10", "version_affected" : "=" }, { "version_value" : "2.7.11", "version_affected" : "=" }, { "version_value" : "2.8.0", "version_affected" : "=" }, { "version_value" : "2.9.0", "version_affected" : "=" }, { "version_value" : "2.10.0", "version_affected" : "=" }, { "version_value" : "2.10.1", "version_affected" : "=" }, { "version_value" : "2.10.2", "version_affected" : "=" }, { "version_value" : "2.10.3", "version_affected" : "=" }, { "version_value" : "2.10.4", "version_affected" : "=" }, { "version_value" : "2.10.5", "version_affected" : "=" }, { "version_value" : "2.10.6", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://hg.pidgin.im/pidgin/main/rev/c31cf8de31cd", "name" : "http://hg.pidgin.im/pidgin/main/rev/c31cf8de31cd", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00003.html", "name" : "SUSE-SU-2013:0388", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00006.html", "name" : "openSUSE-SU-2013:0405", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00007.html", "name" : "openSUSE-SU-2013:0407", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.pidgin.im/news/security/?id=67", "name" : "http://www.pidgin.im/news/security/?id=67", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.ubuntu.com/usn/USN-1746-1", "name" : "USN-1746-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18340", "name" : "oval:org.mitre.oval:def:18340", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "sametime.c in the Sametime protocol plugin in libpurple in Pidgin before 2.10.7 does not properly terminate long user IDs, which allows remote servers to cause a denial of service (application crash) via a crafted packet." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.10.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.10.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.10.6" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-16T21:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0274", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "pidgin", "product" : { "product_data" : [ { "product_name" : "pidgin", "version" : { "version_data" : [ { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.5.2", "version_affected" : "=" }, { "version_value" : "2.5.3", "version_affected" : "=" }, { "version_value" : "2.5.4", "version_affected" : "=" }, { "version_value" : "2.5.5", "version_affected" : "=" }, { "version_value" : "2.5.6", "version_affected" : "=" }, { "version_value" : "2.5.7", "version_affected" : "=" }, { "version_value" : "2.5.8", "version_affected" : "=" }, { "version_value" : "2.5.9", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.7.0", "version_affected" : "=" }, { "version_value" : "2.7.1", "version_affected" : "=" }, { "version_value" : "2.7.2", "version_affected" : "=" }, { "version_value" : "2.7.3", "version_affected" : "=" }, { "version_value" : "2.7.4", "version_affected" : "=" }, { "version_value" : "2.7.5", "version_affected" : "=" }, { "version_value" : "2.7.6", "version_affected" : "=" }, { "version_value" : "2.7.7", "version_affected" : "=" }, { "version_value" : "2.7.8", "version_affected" : "=" }, { "version_value" : "2.7.9", "version_affected" : "=" }, { "version_value" : "2.7.10", "version_affected" : "=" }, { "version_value" : "2.7.11", "version_affected" : "=" }, { "version_value" : "2.8.0", "version_affected" : "=" }, { "version_value" : "2.9.0", "version_affected" : "=" }, { "version_value" : "2.10.0", "version_affected" : "=" }, { "version_value" : "2.10.1", "version_affected" : "=" }, { "version_value" : "2.10.2", "version_affected" : "=" }, { "version_value" : "2.10.3", "version_affected" : "=" }, { "version_value" : "2.10.4", "version_affected" : "=" }, { "version_value" : "2.10.5", "version_affected" : "=" }, { "version_value" : "2.10.6", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://hg.pidgin.im/pidgin/main/rev/ad7e7fb98db3", "name" : "http://hg.pidgin.im/pidgin/main/rev/ad7e7fb98db3", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00003.html", "name" : "SUSE-SU-2013:0388", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00006.html", "name" : "openSUSE-SU-2013:0405", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00007.html", "name" : "openSUSE-SU-2013:0407", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.pidgin.im/news/security/?id=68", "name" : "http://www.pidgin.im/news/security/?id=68", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.ubuntu.com/usn/USN-1746-1", "name" : "USN-1746-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18221", "name" : "oval:org.mitre.oval:def:18221", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "upnp.c in libpurple in Pidgin before 2.10.7 does not properly terminate long strings in UPnP responses, which allows remote attackers to cause a denial of service (application crash) by leveraging access to the local network." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.7.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.10.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.10.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.10.6" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.9 }, "severity" : "LOW", "exploitabilityScore" : 5.5, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-16T21:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0275", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ganglia", "product" : { "product_data" : [ { "product_name" : "ganglia-web", "version" : { "version_data" : [ { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.1.3", "version_affected" : "=" }, { "version_value" : "2.1.5", "version_affected" : "=" }, { "version_value" : "2.1.6", "version_affected" : "=" }, { "version_value" : "2.1.7", "version_affected" : "=" }, { "version_value" : "2.1.8", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "3.3.0", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.5.0", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://ganglia.info/?p=566", "name" : "http://ganglia.info/?p=566", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/08/6", "name" : "[oss-security] 20130208 Re: CVE request: XSS flaws fixed in ganglia", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/58204", "name" : "58204", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=892823", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=892823", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/ganglia/ganglia-web/commit/31d348947419058c43b8dfcd062e2988abd5058e", "name" : "https://github.com/ganglia/ganglia-web/commit/31d348947419058c43b8dfcd062e2988abd5058e", "refsource" : "CONFIRM", "tags" : [ "Exploit", "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in Ganglia Web before 3.5.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ganglia:ganglia-web:2.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ganglia:ganglia-web:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ganglia:ganglia-web:2.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ganglia:ganglia-web:2.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ganglia:ganglia-web:2.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ganglia:ganglia-web:2.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ganglia:ganglia-web:2.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ganglia:ganglia-web:2.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ganglia:ganglia-web:2.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ganglia:ganglia-web:3.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ganglia:ganglia-web:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ganglia:ganglia-web:3.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ganglia:ganglia-web:3.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ganglia:ganglia-web:3.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ganglia:ganglia-web:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ganglia:ganglia-web:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ganglia:ganglia-web:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ganglia:ganglia-web:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ganglia:ganglia-web:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.5.5" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-14T03:12Z", "lastModifiedDate" : "2013-03-19T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0276", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "rubyonrails", "product" : { "product_data" : [ { "product_name" : "rails", "version" : { "version_data" : [ { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.3.3", "version_affected" : "=" }, { "version_value" : "2.3.4", "version_affected" : "=" }, { "version_value" : "2.3.9", "version_affected" : "=" }, { "version_value" : "2.3.10", "version_affected" : "=" }, { "version_value" : "2.3.11", "version_affected" : "=" }, { "version_value" : "2.3.12", "version_affected" : "=" }, { "version_value" : "2.3.13", "version_affected" : "=" }, { "version_value" : "2.3.14", "version_affected" : "=" }, { "version_value" : "2.3.15", "version_affected" : "=" }, { "version_value" : "2.3.16", "version_affected" : "=" }, { "version_value" : "3.1.0", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.3", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.1.5", "version_affected" : "=" }, { "version_value" : "3.1.6", "version_affected" : "=" }, { "version_value" : "3.1.7", "version_affected" : "=" }, { "version_value" : "3.1.8", "version_affected" : "=" }, { "version_value" : "3.1.9", "version_affected" : "=" }, { "version_value" : "3.1.10", "version_affected" : "=" }, { "version_value" : "3.2.0", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.2.6", "version_affected" : "=" }, { "version_value" : "3.2.7", "version_affected" : "=" }, { "version_value" : "3.2.8", "version_affected" : "=" }, { "version_value" : "3.2.9", "version_affected" : "=" }, { "version_value" : "3.2.10", "version_affected" : "=" }, { "version_value" : "3.2.11", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html", "name" : "APPLE-SA-2013-06-04-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html", "name" : "openSUSE-SU-2013:0462", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0686.html", "name" : "RHSA-2013:0686", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/52112", "name" : "52112", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/52774", "name" : "52774", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT5784", "name" : "http://support.apple.com/kb/HT5784", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://weblog.rubyonrails.org/2013/2/11/SEC-ANN-Rails-3-2-12-3-1-11-and-2-3-17-have-been-released/", "name" : "http://weblog.rubyonrails.org/2013/2/11/SEC-ANN-Rails-3-2-12-3-1-11-and-2-3-17-have-been-released/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2013/dsa-2620", "name" : "DSA-2620", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/11/5", "name" : "[oss-security] 20130211 Circumvention of attr_protected [CVE-2013-0276]", "refsource" : "MLIST", "tags" : [ "Patch" ] }, { "url" : "http://www.osvdb.org/90072", "name" : "90072", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/57896", "name" : "57896", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://groups.google.com/group/rubyonrails-security/msg/bb44b98a73ef1a06?dmode=source&output=gplain", "name" : "[rubyonrails-security] 20130211 Circumvention of attr_protected [CVE-2013-0276]", "refsource" : "MLIST", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ActiveRecord in Ruby on Rails before 2.3.17, 3.1.x before 3.1.11, and 3.2.x before 3.2.12 allows remote attackers to bypass the attr_protected protection mechanism and modify protected model attributes via a crafted request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.2.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.2.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.2.2:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.2.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.2.3:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.2.4:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.2.11:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.1.0:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.1.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.1.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.1.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.1.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.1.0:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.1.0:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.1.0:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.1.0:rc8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.1.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.1.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.1.1:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.1.2:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.1.2:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.1.4:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.1.5:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.1.10:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.16:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-13T01:55Z", "lastModifiedDate" : "2019-08-08T15:42Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0277", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "rubyonrails", "product" : { "product_data" : [ { "product_name" : "rails", "version" : { "version_data" : [ { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.3.3", "version_affected" : "=" }, { "version_value" : "2.3.4", "version_affected" : "=" }, { "version_value" : "2.3.9", "version_affected" : "=" }, { "version_value" : "2.3.10", "version_affected" : "=" }, { "version_value" : "2.3.11", "version_affected" : "=" }, { "version_value" : "2.3.12", "version_affected" : "=" }, { "version_value" : "2.3.13", "version_affected" : "=" }, { "version_value" : "2.3.14", "version_affected" : "=" }, { "version_value" : "2.3.15", "version_affected" : "=" }, { "version_value" : "2.3.16", "version_affected" : "=" }, { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "=" }, { "version_value" : "3.0.18", "version_affected" : "=" }, { "version_value" : "3.0.19", "version_affected" : "=" }, { "version_value" : "3.0.20", "version_affected" : "=" } ] } }, { "product_name" : "ruby_on_rails", "version" : { "version_data" : [ { "version_value" : "3.0.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html", "name" : "APPLE-SA-2013-06-04-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html", "name" : "openSUSE-SU-2013:0462", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/52112", "name" : "52112", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1028109", "name" : "1028109", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT5784", "name" : "http://support.apple.com/kb/HT5784", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://weblog.rubyonrails.org/2013/2/11/SEC-ANN-Rails-3-2-12-3-1-11-and-2-3-17-have-been-released/", "name" : "http://weblog.rubyonrails.org/2013/2/11/SEC-ANN-Rails-3-2-12-3-1-11-and-2-3-17-have-been-released/", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2013/dsa-2620", "name" : "DSA-2620", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/11/6", "name" : "[oss-security] 20130211 Serialized Attributes YAML Vulnerability with Rails 2.3 and 3.0 [CVE-2013-0277]", "refsource" : "MLIST", "tags" : [ "Patch" ] }, { "url" : "http://www.osvdb.org/90073", "name" : "90073", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "https://groups.google.com/group/rubyonrails-security/msg/302ec7ce90f13837?dmode=source&output=gplain", "name" : "[rubyonrails-security] 20130211 Serialized Attributes YAML Vulnerability with Rails 2.3 and 3.0 [CVE-2013-0277]", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://puppet.com/security/cve/cve-2013-0277", "name" : "https://puppet.com/security/cve/cve-2013-0277", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ActiveRecord in Ruby on Rails before 2.3.17 and 3.x before 3.1.0 allows remote attackers to cause a denial of service or execute arbitrary code via crafted serialized attributes that cause the +serialize+ helper to deserialize arbitrary YAML." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.0:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.0:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.0:beta3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.0:beta4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.0:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.1:pre:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.2:pre:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.4:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.5:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.6:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.6:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.7:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.7:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.8:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.8:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.8:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.8:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.9:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.9:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.9:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.9:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.9:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.10:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.12:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.13:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:ruby_on_rails:3.0.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.16:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-13T01:55Z", "lastModifiedDate" : "2019-08-08T15:42Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0278", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-1664, CVE-2013-1665. Reason: This candidate is a duplicate of CVE-2013-1664 and/or CVE-2013-1665. Notes: All CVE users should reference CVE-2013-1664 and/or CVE-2013-1665 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2013-04-03T00:55Z", "lastModifiedDate" : "2013-04-03T00:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0279", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-1664, CVE-2013-1665. Reason: This candidate is a duplicate of CVE-2013-1664 and/or CVE-2013-1665. Notes: All CVE users should reference CVE-2013-1664 and/or CVE-2013-1665 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2013-04-03T00:55Z", "lastModifiedDate" : "2013-04-03T00:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0280", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-1664, CVE-2013-1665. Reason: This candidate is a duplicate of CVE-2013-1664 and/or CVE-2013-1665. Notes: All CVE users should reference CVE-2013-1664 and/or CVE-2013-1665 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2013-04-03T00:55Z", "lastModifiedDate" : "2013-04-03T00:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0281", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "clusterlabs", "product" : { "product_data" : [ { "product_name" : "pacemaker", "version" : { "version_data" : [ { "version_value" : "1.1.10", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1635.html", "name" : "RHSA-2013:1635", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=891922", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=891922", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://github.com/ClusterLabs/pacemaker/commit/564f7cc2a51dcd2f28ab12a13394f31be5aa3c93", "name" : "https://github.com/ClusterLabs/pacemaker/commit/564f7cc2a51dcd2f28ab12a13394f31be5aa3c93", "refsource" : "CONFIRM", "tags" : [ "Exploit", "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Pacemaker 1.1.10, when remote Cluster Information Base (CIB) configuration or resource management is enabled, does not limit the duration of connections to the blocking sockets, which allows remote attackers to cause a denial of service (connection blocking)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clusterlabs:pacemaker:1.1.10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-11-23T11:55Z", "lastModifiedDate" : "2019-04-22T17:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0282", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "openstack", "product" : { "product_data" : [ { "product_name" : "keystone", "version" : { "version_data" : [ { "version_value" : "2012.1", "version_affected" : "=" }, { "version_value" : "2012.1.1", "version_affected" : "=" }, { "version_value" : "2012.1.2", "version_affected" : "=" }, { "version_value" : "2012.1.3", "version_affected" : "=" }, { "version_value" : "2012.2", "version_affected" : "=" }, { "version_value" : "2012.2.1", "version_affected" : "=" }, { "version_value" : "2012.2.2", "version_affected" : "=" }, { "version_value" : "2012.2.3", "version_affected" : "=" }, { "version_value" : "2012.2.4", "version_affected" : "=" }, { "version_value" : "2013.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-287" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2013/02/19/3", "name" : "[oss-security] 20130219 [OSSA 2013-005] Keystone EC2-style authentication accepts disabled user/tenants (CVE-2013-0282)", "refsource" : "MLIST", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://bugs.launchpad.net/keystone/+bug/1121494", "name" : "https://bugs.launchpad.net/keystone/+bug/1121494", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://launchpad.net/keystone/+milestone/2012.2.4", "name" : "https://launchpad.net/keystone/+milestone/2012.2.4", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://launchpad.net/keystone/grizzly/2013.1", "name" : "https://launchpad.net/keystone/grizzly/2013.1", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://review.openstack.org/#/c/22319/", "name" : "https://review.openstack.org/#/c/22319/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://review.openstack.org/#/c/22320/", "name" : "https://review.openstack.org/#/c/22320/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://review.openstack.org/#/c/22321/", "name" : "https://review.openstack.org/#/c/22321/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "OpenStack Keystone Grizzly before 2013.1, Folsom 2012.1.3 and earlier, and Essex does not properly check if the (1) user, (2) tenant, or (3) domain is enabled when using EC2-style authentication, which allows context-dependent attackers to bypass access restrictions." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openstack:keystone:*:*:*:*:*:*:*:*", "versionStartIncluding" : "2012.1", "versionEndIncluding" : "2012.1.3" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openstack:keystone:*:*:*:*:*:*:*:*", "versionStartIncluding" : "2012.2", "versionEndIncluding" : "2012.2.4" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openstack:keystone:2013.1:milestone1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openstack:keystone:2013.1:milestone2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openstack:keystone:2013.1:milestone3:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-12T22:55Z", "lastModifiedDate" : "2018-11-16T14:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0283", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "theforeman", "product" : { "product_data" : [ { "product_name" : "katello", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://access.redhat.com/security/cve/cve-2013-0283", "name" : "https://access.redhat.com/security/cve/cve-2013-0283", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0283", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0283", "refsource" : "MISC", "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Katello: Username in Notification page has cross site scripting" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:theforeman:katello:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-12-05T17:15Z", "lastModifiedDate" : "2019-12-09T19:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0284", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "newrelic", "product" : { "product_data" : [ { "product_name" : "ruby_agent", "version" : { "version_data" : [ { "version_value" : "3.2.0", "version_affected" : "=" }, { "version_value" : "3.3.0", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.2.1", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.3.4", "version_affected" : "=" }, { "version_value" : "3.3.4.1", "version_affected" : "=" }, { "version_value" : "3.3.5", "version_affected" : "=" }, { "version_value" : "3.4.0", "version_affected" : "=" }, { "version_value" : "3.4.0.1", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.4.2.1", "version_affected" : "=" }, { "version_value" : "3.5.0", "version_affected" : "=" }, { "version_value" : "3.5.0.1", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.1.14", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://seclists.org/oss-sec/2013/q1/304", "name" : "[oss-security] 20130213 Some rubygems related CVEs", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://newrelic.com/docs/ruby/ruby-agent-security-notification", "name" : "https://newrelic.com/docs/ruby/ruby-agent-security-notification", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Ruby agent 3.2.0 through 3.5.2 serializes sensitive data when communicating with servers operated by New Relic, which allows remote attackers to obtain sensitive information (database credentials and SQL statements) by sniffing the network and deserializing the data." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:newrelic:ruby_agent:3.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:newrelic:ruby_agent:3.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:newrelic:ruby_agent:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:newrelic:ruby_agent:3.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:newrelic:ruby_agent:3.3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:newrelic:ruby_agent:3.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:newrelic:ruby_agent:3.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:newrelic:ruby_agent:3.3.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:newrelic:ruby_agent:3.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:newrelic:ruby_agent:3.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:newrelic:ruby_agent:3.4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:newrelic:ruby_agent:3.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:newrelic:ruby_agent:3.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:newrelic:ruby_agent:3.4.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:newrelic:ruby_agent:3.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:newrelic:ruby_agent:3.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:newrelic:ruby_agent:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:newrelic:ruby_agent:3.5.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:newrelic:ruby_agent:3.5.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-09T20:55Z", "lastModifiedDate" : "2013-04-10T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0285", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "nori_gem_project", "product" : { "product_data" : [ { "product_name" : "nori_gem", "version" : { "version_data" : [ { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://seclists.org/oss-sec/2013/q1/304", "name" : "[oss-security] 20130213 Some rubygems related CVEs", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://support.cloud.engineyard.com/entries/22915701-january-14-2013-security-vulnerabilities-httparty-extlib-crack-nori-update-these-gems-immediately", "name" : "https://support.cloud.engineyard.com/entries/22915701-january-14-2013-security-vulnerabilities-httparty-extlib-crack-nori-update-these-gems-immediately", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The nori gem 2.0.x before 2.0.2, 1.1.x before 1.1.4, and 1.0.x before 1.0.3 for Ruby does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) involving nested XML entity references, by leveraging Action Pack support for (1) YAML type conversion or (2) Symbol type conversion, a similar vulnerability to CVE-2013-0156." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nori_gem_project:nori_gem:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nori_gem_project:nori_gem:2.0.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nori_gem_project:nori_gem:1.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nori_gem_project:nori_gem:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nori_gem_project:nori_gem:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nori_gem_project:nori_gem:1.1.3:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nori_gem_project:nori_gem:1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nori_gem_project:nori_gem:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nori_gem_project:nori_gem:1.0.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-09T20:55Z", "lastModifiedDate" : "2013-04-16T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0286", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "pinboard_project", "product" : { "product_data" : [ { "product_name" : "pinboard", "version" : { "version_data" : [ { "version_value" : "1.0.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2013/02/14/4", "name" : "http://www.openwall.com/lists/oss-security/2013/02/14/4", "refsource" : "MISC", "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Pinboard 1.0.6 theme for Wordpress has XSS." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pinboard_project:pinboard:1.0.6:*:*:*:*:wordpress:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2020-01-27T15:15Z", "lastModifiedDate" : "2020-01-29T14:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0287", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "fedoraproject", "product" : { "product_data" : [ { "product_name" : "sssd", "version" : { "version_data" : [ { "version_value" : "1.9.0", "version_affected" : "=" }, { "version_value" : "1.9.1", "version_affected" : "=" }, { "version_value" : "1.9.2", "version_affected" : "=" }, { "version_value" : "1.9.3", "version_affected" : "=" }, { "version_value" : "1.9.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=910938", "name" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=910938", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://git.fedorahosted.org/cgit/sssd.git/patch/?id=26590d31f492dbbd36be6d0bde46a4bd3b221edb", "name" : "http://git.fedorahosted.org/cgit/sssd.git/patch/?id=26590d31f492dbbd36be6d0bde46a4bd3b221edb", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://git.fedorahosted.org/cgit/sssd.git/patch/?id=6569d57e3bc168e6e83d70333b48c5cb43aa04c4", "name" : "http://git.fedorahosted.org/cgit/sssd.git/patch/?id=6569d57e3bc168e6e83d70333b48c5cb43aa04c4", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://git.fedorahosted.org/cgit/sssd.git/patch/?id=6837eee3f7f81c0ee454d3718d67d7f3cc6b48ef", "name" : "http://git.fedorahosted.org/cgit/sssd.git/patch/?id=6837eee3f7f81c0ee454d3718d67d7f3cc6b48ef", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://git.fedorahosted.org/cgit/sssd.git/patch/?id=754b09b5444e6da88ed58d6deaed8b815e268b6b", "name" : "http://git.fedorahosted.org/cgit/sssd.git/patch/?id=754b09b5444e6da88ed58d6deaed8b815e268b6b", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://git.fedorahosted.org/cgit/sssd.git/patch/?id=7619be9f6bf649665fcbeee9e6b120f9f9cba2a5", "name" : "http://git.fedorahosted.org/cgit/sssd.git/patch/?id=7619be9f6bf649665fcbeee9e6b120f9f9cba2a5", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://git.fedorahosted.org/cgit/sssd.git/patch/?id=8b8019fe3dd1564fba657e219ec20ff816c7ffdb", "name" : "http://git.fedorahosted.org/cgit/sssd.git/patch/?id=8b8019fe3dd1564fba657e219ec20ff816c7ffdb", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://git.fedorahosted.org/cgit/sssd.git/patch/?id=b63830b142053f99bfe954d4be5a2b0f68ce3a93", "name" : "http://git.fedorahosted.org/cgit/sssd.git/patch/?id=b63830b142053f99bfe954d4be5a2b0f68ce3a93", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://git.fedorahosted.org/cgit/sssd.git/patch/?id=c0bca1722d6f9dfb654ad78397be70f79ff39af1", "name" : "http://git.fedorahosted.org/cgit/sssd.git/patch/?id=c0bca1722d6f9dfb654ad78397be70f79ff39af1", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-03/msg00115.html", "name" : "openSUSE-SU-2013:0559", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0663.html", "name" : "RHSA-2013:0663", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/52704", "name" : "52704", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/52722", "name" : "52722", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1028317", "name" : "1028317", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/58593", "name" : "58593", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://lists.fedorahosted.org/pipermail/sssd-devel/2013-March/014066.html", "name" : "[sssd-devel] 20130319 [SSSD] A security bug in SSSD 1.9 (CVE-2013-0287)", "refsource" : "MLIST", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simple_deny_groups option, which allows remote authenticated users to bypass intended access restrictions." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:1.9.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 6.8, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-21T16:55Z", "lastModifiedDate" : "2013-05-15T03:34Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0288", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "arthurdejong", "product" : { "product_data" : [ { "product_name" : "nss-pam-ldapd", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.2.1", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.4.1", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.6.0", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.6.2", "version_affected" : "=" }, { "version_value" : "0.6.3", "version_affected" : "=" }, { "version_value" : "0.6.4", "version_affected" : "=" }, { "version_value" : "0.6.5", "version_affected" : "=" }, { "version_value" : "0.6.6", "version_affected" : "=" }, { "version_value" : "0.6.7", "version_affected" : "=" }, { "version_value" : "0.6.7.1", "version_affected" : "=" }, { "version_value" : "0.6.7.2", "version_affected" : "=" }, { "version_value" : "0.6.8", "version_affected" : "=" }, { "version_value" : "0.6.9", "version_affected" : "=" }, { "version_value" : "0.6.10", "version_affected" : "=" }, { "version_value" : "0.6.11", "version_affected" : "=" }, { "version_value" : "0.6.12", "version_affected" : "=" }, { "version_value" : "0.7.0", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.7.2", "version_affected" : "=" }, { "version_value" : "0.7.3", "version_affected" : "=" }, { "version_value" : "0.7.4", "version_affected" : "=" }, { "version_value" : "0.7.5", "version_affected" : "=" }, { "version_value" : "0.7.6", "version_affected" : "=" }, { "version_value" : "0.7.7", "version_affected" : "=" }, { "version_value" : "0.7.8", "version_affected" : "=" }, { "version_value" : "0.7.9", "version_affected" : "=" }, { "version_value" : "0.7.10", "version_affected" : "=" }, { "version_value" : "0.7.11", "version_affected" : "=" }, { "version_value" : "0.7.12", "version_affected" : "=" }, { "version_value" : "0.7.13", "version_affected" : "=" }, { "version_value" : "0.7.14", "version_affected" : "=" }, { "version_value" : "0.7.15", "version_affected" : "=" }, { "version_value" : "0.7.16", "version_affected" : "=" }, { "version_value" : "0.7.17", "version_affected" : "<=" }, { "version_value" : "0.8.0", "version_affected" : "=" }, { "version_value" : "0.8.1", "version_affected" : "=" }, { "version_value" : "0.8.2", "version_affected" : "=" }, { "version_value" : "0.8.3", "version_affected" : "=" }, { "version_value" : "0.8.4", "version_affected" : "=" }, { "version_value" : "0.8.5", "version_affected" : "=" }, { "version_value" : "0.8.6", "version_affected" : "=" }, { "version_value" : "0.8.7", "version_affected" : "=" }, { "version_value" : "0.8.8", "version_affected" : "=" }, { "version_value" : "0.8.9", "version_affected" : "=" }, { "version_value" : "0.8.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://arthurdejong.org/git/nss-pam-ldapd/commit/?id=7867b93f9a7c76b96f1571cddc1de0811134bb81", "name" : "http://arthurdejong.org/git/nss-pam-ldapd/commit/?id=7867b93f9a7c76b96f1571cddc1de0811134bb81", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://arthurdejong.org/git/nss-pam-ldapd/commit/?id=abf03bc54032beeff95b1b8634cc005137e11f32", "name" : "http://arthurdejong.org/git/nss-pam-ldapd/commit/?id=abf03bc54032beeff95b1b8634cc005137e11f32", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://arthurdejong.org/git/nss-pam-ldapd/commit/?id=f266f05f20afe73e89c3946a7bd60bd7c5948e1b", "name" : "http://arthurdejong.org/git/nss-pam-ldapd/commit/?id=f266f05f20afe73e89c3946a7bd60bd7c5948e1b", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690319", "name" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690319", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://lists.arthurdejong.org/nss-pam-ldapd-announce/2013/msg00001.html", "name" : "[nss-pam-ldapd-announce] 20130218 nss-pam-ldapd security advisory (CVE-2013-0288)", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2013-February/099438.html", "name" : "FEDORA-2013-2754", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-03/msg00087.html", "name" : "openSUSE-SU-2013:0522", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-03/msg00091.html", "name" : "openSUSE-SU-2013:0524", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0590.html", "name" : "RHSA-2013:0590", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/52212", "name" : "52212", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/52242", "name" : "52242", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2012/dsa-2628", "name" : "DSA-2628", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:106", "name" : "MDVSA-2013:106", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/18/2", "name" : "[oss-security] 20130218 CVE-2013-0288 nss-pam-ldapd: FD_SET array index error, leading to stack-based buffer overflow", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/58007", "name" : "58007", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0288", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0288", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82175", "name" : "nsspamldapd-fdsetsize-bo(82175)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0071", "name" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0071", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "nss-pam-ldapd before 0.7.18 and 0.8.x before 0.8.11 allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code by performing a name lookup on an application with a large number of open file descriptors, which triggers a stack-based buffer overflow related to incorrect use of the FD_SET macro." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.8.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.8.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.8.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.8.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.8.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.8.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.8.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.8.10:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.6.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.6.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.6.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.6.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.6.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.6.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.7.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.7.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.7.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.7.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.7.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.7.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.7.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.7.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.7.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.7.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:0.7.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arthurdejong:nss-pam-ldapd:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.7.17" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-05T21:38Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0289", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oswald_buddenhagen", "product" : { "product_data" : [ { "product_name" : "isync", "version" : { "version_data" : [ { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-310" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2013-March/099544.html", "name" : "FEDORA-2013-2795", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2013-March/099547.html", "name" : "FEDORA-2013-2758", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/55190", "name" : "55190", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201310-02.xml", "name" : "GLSA-201310-02", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://sourceforge.net/p/isync/isync/ci/914ede18664980925628a9ed2a73ad05f85aeedb", "name" : "http://sourceforge.net/p/isync/isync/ci/914ede18664980925628a9ed2a73ad05f85aeedb", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://sourceforge.net/projects/isync/files/isync/1.0.6/", "name" : "http://sourceforge.net/projects/isync/files/isync/1.0.6/", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/20/9", "name" : "[oss-security] 20130220 isync/mbsync security advisory: missing SSL subject verification (CVE-2013-0289)", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/57423", "name" : "57423", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82232", "name" : "isync-ssl-info-disc(82232)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Isync 0.4 before 1.0.6, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oswald_buddenhagen:isync:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oswald_buddenhagen:isync:0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oswald_buddenhagen:isync:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oswald_buddenhagen:isync:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oswald_buddenhagen:isync:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oswald_buddenhagen:isync:1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oswald_buddenhagen:isync:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oswald_buddenhagen:isync:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oswald_buddenhagen:isync:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oswald_buddenhagen:isync:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oswald_buddenhagen:isync:1.0.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-05-23T14:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0290", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "=" }, { "version_value" : "3.0.18", "version_affected" : "=" }, { "version_value" : "3.0.19", "version_affected" : "=" }, { "version_value" : "3.0.20", "version_affected" : "=" }, { "version_value" : "3.0.21", "version_affected" : "=" }, { "version_value" : "3.0.22", "version_affected" : "=" }, { "version_value" : "3.0.23", "version_affected" : "=" }, { "version_value" : "3.0.24", "version_affected" : "=" }, { "version_value" : "3.0.25", "version_affected" : "=" }, { "version_value" : "3.0.26", "version_affected" : "=" }, { "version_value" : "3.0.27", "version_affected" : "=" }, { "version_value" : "3.0.28", "version_affected" : "=" }, { "version_value" : "3.0.29", "version_affected" : "=" }, { "version_value" : "3.0.30", "version_affected" : "=" }, { "version_value" : "3.0.31", "version_affected" : "=" }, { "version_value" : "3.0.32", "version_affected" : "=" }, { "version_value" : "3.0.33", "version_affected" : "=" }, { "version_value" : "3.0.34", "version_affected" : "=" }, { "version_value" : "3.0.35", "version_affected" : "=" }, { "version_value" : "3.0.36", "version_affected" : "=" }, { "version_value" : "3.0.37", "version_affected" : "=" }, { "version_value" : "3.0.38", "version_affected" : "=" }, { "version_value" : "3.0.39", "version_affected" : "=" }, { "version_value" : "3.0.40", "version_affected" : "=" }, { "version_value" : "3.0.41", "version_affected" : "=" }, { "version_value" : "3.0.42", "version_affected" : "=" }, { "version_value" : "3.0.43", "version_affected" : "=" }, { "version_value" : "3.0.44", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.3", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.1.5", "version_affected" : "=" }, { "version_value" : "3.1.6", "version_affected" : "=" }, { "version_value" : "3.1.7", "version_affected" : "=" }, { "version_value" : "3.1.8", "version_affected" : "=" }, { "version_value" : "3.1.9", "version_affected" : "=" }, { "version_value" : "3.1.10", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.2.6", "version_affected" : "=" }, { "version_value" : "3.2.7", "version_affected" : "=" }, { "version_value" : "3.2.8", "version_affected" : "=" }, { "version_value" : "3.2.9", "version_affected" : "=" }, { "version_value" : "3.2.10", "version_affected" : "=" }, { "version_value" : "3.2.11", "version_affected" : "=" }, { "version_value" : "3.2.12", "version_affected" : "=" }, { "version_value" : "3.2.13", "version_affected" : "=" }, { "version_value" : "3.2.14", "version_affected" : "=" }, { "version_value" : "3.2.15", "version_affected" : "=" }, { "version_value" : "3.2.16", "version_affected" : "=" }, { "version_value" : "3.2.17", "version_affected" : "=" }, { "version_value" : "3.2.18", "version_affected" : "=" }, { "version_value" : "3.2.19", "version_affected" : "=" }, { "version_value" : "3.2.20", "version_affected" : "=" }, { "version_value" : "3.2.21", "version_affected" : "=" }, { "version_value" : "3.2.22", "version_affected" : "=" }, { "version_value" : "3.2.23", "version_affected" : "=" }, { "version_value" : "3.2.24", "version_affected" : "=" }, { "version_value" : "3.2.25", "version_affected" : "=" }, { "version_value" : "3.2.26", "version_affected" : "=" }, { "version_value" : "3.2.27", "version_affected" : "=" }, { "version_value" : "3.2.28", "version_affected" : "=" }, { "version_value" : "3.2.29", "version_affected" : "=" }, { "version_value" : "3.2.30", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.3.4", "version_affected" : "=" }, { "version_value" : "3.3.5", "version_affected" : "=" }, { "version_value" : "3.3.6", "version_affected" : "=" }, { "version_value" : "3.3.7", "version_affected" : "=" }, { "version_value" : "3.3.8", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.4.3", "version_affected" : "=" }, { "version_value" : "3.4.4", "version_affected" : "=" }, { "version_value" : "3.4.5", "version_affected" : "=" }, { "version_value" : "3.4.6", "version_affected" : "=" }, { "version_value" : "3.4.7", "version_affected" : "=" }, { "version_value" : "3.4.8", "version_affected" : "=" }, { "version_value" : "3.4.9", "version_affected" : "=" }, { "version_value" : "3.4.10", "version_affected" : "=" }, { "version_value" : "3.4.11", "version_affected" : "=" }, { "version_value" : "3.4.12", "version_affected" : "=" }, { "version_value" : "3.4.13", "version_affected" : "=" }, { "version_value" : "3.4.14", "version_affected" : "=" }, { "version_value" : "3.4.15", "version_affected" : "=" }, { "version_value" : "3.4.16", "version_affected" : "=" }, { "version_value" : "3.4.17", "version_affected" : "=" }, { "version_value" : "3.4.18", "version_affected" : "=" }, { "version_value" : "3.4.19", "version_affected" : "=" }, { "version_value" : "3.4.20", "version_affected" : "=" }, { "version_value" : "3.4.21", "version_affected" : "=" }, { "version_value" : "3.4.22", "version_affected" : "=" }, { "version_value" : "3.4.23", "version_affected" : "=" }, { "version_value" : "3.4.24", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "=" }, { "version_value" : "3.6.9", "version_affected" : "=" }, { "version_value" : "3.6.10", "version_affected" : "=" }, { "version_value" : "3.6.11", "version_affected" : "=" }, { "version_value" : "3.7", "version_affected" : "=" }, { "version_value" : "3.7.1", "version_affected" : "=" }, { "version_value" : "3.7.2", "version_affected" : "=" }, { "version_value" : "3.7.3", "version_affected" : "=" }, { "version_value" : "3.7.4", "version_affected" : "=" }, { "version_value" : "3.7.5", "version_affected" : "=" }, { "version_value" : "3.7.6", "version_affected" : "=" }, { "version_value" : "3.7.7", "version_affected" : "=" }, { "version_value" : "3.7.8", "version_affected" : "=" }, { "version_value" : "3.7.9", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=77c1090f94d1b0b5186fb13a1b71b47b1343f87f", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=77c1090f94d1b0b5186fb13a1b71b47b1343f87f", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00009.html", "name" : "openSUSE-SU-2013:0951", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00017.html", "name" : "openSUSE-SU-2013:1042", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.kernel.org/pub/linux/kernel/v3.x/patch-3.8.bz2", "name" : "http://www.kernel.org/pub/linux/kernel/v3.x/patch-3.8.bz2", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:176", "name" : "MDVSA-2013:176", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/15/2", "name" : "[oss-security] 20130214 Re: CVE Request: kernel -- local DOS (endless loop with interrupts disabled)", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=911473", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=911473", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://github.com/torvalds/linux/commit/77c1090f94d1b0b5186fb13a1b71b47b1343f87f", "name" : "https://github.com/torvalds/linux/commit/77c1090f94d1b0b5186fb13a1b71b47b1343f87f", "refsource" : "CONFIRM", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The __skb_recv_datagram function in net/core/datagram.c in the Linux kernel before 3.8 does not properly handle the MSG_PEEK flag with zero-length data, which allows local users to cause a denial of service (infinite loop and system hang) via a crafted application." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.44:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.7.9" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 4.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-19T19:55Z", "lastModifiedDate" : "2013-09-12T03:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0291", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "imagely", "product" : { "product_data" : [ { "product_name" : "nextgen_gallery", "version" : { "version_data" : [ { "version_value" : "1.9.10", "version_affected" : "=" }, { "version_value" : "1.9.11", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2013/02/15/3", "name" : "http://www.openwall.com/lists/oss-security/2013/02/15/3", "refsource" : "MISC", "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57957", "name" : "http://www.securityfocus.com/bid/57957", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "VDB Entry" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "NextGEN Gallery Plugin for WordPress 1.9.10 and 1.9.11 has a Path Disclosure Vulnerability" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagely:nextgen_gallery:1.9.10:*:*:*:*:wordpress:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:imagely:nextgen_gallery:1.9.11:*:*:*:*:wordpress:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2020-01-30T13:15Z", "lastModifiedDate" : "2020-02-06T21:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0292", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "freedesktop", "product" : { "product_data" : [ { "product_name" : "dbus-glib", "version" : { "version_data" : [ { "version_value" : "0.72", "version_affected" : "=" }, { "version_value" : "0.73", "version_affected" : "=" }, { "version_value" : "0.74", "version_affected" : "=" }, { "version_value" : "0.76", "version_affected" : "=" }, { "version_value" : "0.78", "version_affected" : "=" }, { "version_value" : "0.80", "version_affected" : "=" }, { "version_value" : "0.82", "version_affected" : "=" }, { "version_value" : "0.84", "version_affected" : "=" }, { "version_value" : "0.86", "version_affected" : "=" }, { "version_value" : "0.88", "version_affected" : "=" }, { "version_value" : "0.90", "version_affected" : "=" }, { "version_value" : "0.92", "version_affected" : "=" }, { "version_value" : "0.94", "version_affected" : "=" }, { "version_value" : "0.96", "version_affected" : "=" }, { "version_value" : "0.98", "version_affected" : "=" }, { "version_value" : "0.100", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=911658", "name" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=911658", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://cgit.freedesktop.org/dbus/dbus-glib/commit/?id=166978a09cf5edff4028e670b6074215a4c75eca", "name" : "http://cgit.freedesktop.org/dbus/dbus-glib/commit/?id=166978a09cf5edff4028e670b6074215a4c75eca", "refsource" : "CONFIRM", "tags" : [ "Exploit", "Patch" ] }, { "url" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705", "name" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://osvdb.org/90302", "name" : "90302", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0568.html", "name" : "RHSA-2013:0568", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/52225", "name" : "52225", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/52375", "name" : "52375", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/52404", "name" : "52404", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.exploit-db.com/exploits/33614", "name" : "33614", "refsource" : "EXPLOIT-DB", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:071", "name" : "MDVSA-2013:071", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/15/10", "name" : "[oss-security] 20130215 CVE-2013-0292: authentication bypass due to insufficient checks in dbus-glib < 0.100.1", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html", "name" : "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/57985", "name" : "57985", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1753-1", "name" : "USN-1753-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://bugs.freedesktop.org/show_bug.cgi?id=60916", "name" : "https://bugs.freedesktop.org/show_bug.cgi?id=60916", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82135", "name" : "dbus-message-sender-priv-esc(82135)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The dbus_g_proxy_manager_filter function in dbus-gproxy in Dbus-glib before 0.100.1 does not properly verify the sender of NameOwnerChanged signals, which allows local users to gain privileges via a spoofed signal." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:freedesktop:dbus-glib:0.72:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:freedesktop:dbus-glib:0.73:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:freedesktop:dbus-glib:0.74:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:freedesktop:dbus-glib:0.76:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:freedesktop:dbus-glib:0.78:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:freedesktop:dbus-glib:0.80:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:freedesktop:dbus-glib:0.82:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:freedesktop:dbus-glib:0.84:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:freedesktop:dbus-glib:0.86:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:freedesktop:dbus-glib:0.88:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:freedesktop:dbus-glib:0.90:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:freedesktop:dbus-glib:0.92:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:freedesktop:dbus-glib:0.94:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:freedesktop:dbus-glib:0.96:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:freedesktop:dbus-glib:0.98:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:freedesktop:dbus-glib:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.100" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-05T21:38Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0293", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ovirt", "product" : { "product_data" : [ { "product_name" : "node", "version" : { "version_data" : [ { "version_value" : "2.6.0-1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-269" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2013/02/28/13", "name" : "http://www.openwall.com/lists/oss-security/2013/02/28/13", "refsource" : "MISC", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/58227", "name" : "http://www.securityfocus.com/bid/58227", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://access.redhat.com/security/cve/cve-2013-0293", "name" : "https://access.redhat.com/security/cve/cve-2013-0293", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82474", "name" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82474", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://security-tracker.debian.org/tracker/CVE-2013-0293", "name" : "https://security-tracker.debian.org/tracker/CVE-2013-0293", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "oVirt Node: Lock screen accepts F2 to drop to shell causing privilege escalation" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ovirt:node:2.6.0-1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-12-10T14:15Z", "lastModifiedDate" : "2019-12-13T15:07Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0294", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "pyrad_project", "product" : { "product_data" : [ { "product_name" : "pyrad", "version" : { "version_data" : [ { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "fedoraproject", "product" : { "product_data" : [ { "product_name" : "fedora", "version" : { "version_data" : [ { "version_value" : "18", "version_affected" : "=" }, { "version_value" : "19", "version_affected" : "=" }, { "version_value" : "20", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-330" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115677.html", "name" : "http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115677.html", "refsource" : "CONFIRM", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115705.html", "name" : "http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115705.html", "refsource" : "CONFIRM", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116567.html", "name" : "http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116567.html", "refsource" : "CONFIRM", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/15/13", "name" : "http://www.openwall.com/lists/oss-security/2013/02/15/13", "refsource" : "MISC", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57984", "name" : "http://www.securityfocus.com/bid/57984", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=911682", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=911682", "refsource" : "CONFIRM", "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82133", "name" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82133", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://github.com/wichert/pyrad/commit/38f74b36814ca5b1a27d9898141126af4953bee5", "name" : "https://github.com/wichert/pyrad/commit/38f74b36814ca5b1a27d9898141126af4953bee5", "refsource" : "CONFIRM", "tags" : [ "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obtain sensitive information via a brute force attack." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pyrad_project:pyrad:*:*:*:*:*:*:*:*", "versionEndExcluding" : "2.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:fedoraproject:fedora:18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2020-01-28T16:15Z", "lastModifiedDate" : "2020-01-31T19:07Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0295", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-0342. Reason: This candidate is a duplicate of [ID]. Notes: All CVE users should reference CVE-2013-0342 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2020-02-13T20:15Z", "lastModifiedDate" : "2020-02-13T20:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0296", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "zlib", "product" : { "product_data" : [ { "product_name" : "pigz", "version" : { "version_data" : [ { "version_value" : "2.2.4-1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-updates/2013-03/msg00106.html", "name" : "openSUSE-SU-2013:0540", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://mail.zlib.net/pipermail/pigz-announce_zlib.net/2012-July/000006.html", "name" : "[pigz-announce] 20120728 pigz version 2.2.5 released", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/15/4", "name" : "[oss-security] 20130215 CVE# request: pigz creates temp file with insecure permissions", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/16/3", "name" : "[oss-security] 20130215 Re: CVE# request: pigz creates temp file with insecure permissions", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700608", "name" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700608", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Race condition in pigz before 2.2.5 uses permissions derived from the umask when compressing a file before setting that file's permissions to match those of the original file, which might allow local users to bypass intended access permissions while compression is occurring." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zlib:pigz:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.2.4-1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-04-27T21:55Z", "lastModifiedDate" : "2014-04-28T19:28Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0297", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "owncloud", "product" : { "product_data" : [ { "product_name" : "owncloud", "version" : { "version_data" : [ { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "=" }, { "version_value" : "4.0.5", "version_affected" : "=" }, { "version_value" : "4.0.6", "version_affected" : "=" }, { "version_value" : "4.0.7", "version_affected" : "=" }, { "version_value" : "4.0.8", "version_affected" : "=" }, { "version_value" : "4.0.9", "version_affected" : "=" }, { "version_value" : "4.0.10", "version_affected" : "=" }, { "version_value" : "4.0.11", "version_affected" : "<=" }, { "version_value" : "4.5.0", "version_affected" : "=" }, { "version_value" : "4.5.1", "version_affected" : "=" }, { "version_value" : "4.5.2", "version_affected" : "=" }, { "version_value" : "4.5.3", "version_affected" : "=" }, { "version_value" : "4.5.4", "version_affected" : "=" }, { "version_value" : "4.5.5", "version_affected" : "=" }, { "version_value" : "4.5.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://owncloud.org/about/security/advisories/oC-SA-2013-003/", "name" : "http://owncloud.org/about/security/advisories/oC-SA-2013-003/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.12 and 4.5.x before 4.5.7 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) site_name or (2) site_url parameter to apps/external/ajax/setsites.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:3.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.0.11" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2014-03-14T15:55Z", "lastModifiedDate" : "2014-03-26T00:39Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0298", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "owncloud", "product" : { "product_data" : [ { "product_name" : "owncloud", "version" : { "version_data" : [ { "version_value" : "4.5.0", "version_affected" : "=" }, { "version_value" : "4.5.1", "version_affected" : "=" }, { "version_value" : "4.5.2", "version_affected" : "=" }, { "version_value" : "4.5.3", "version_affected" : "=" }, { "version_value" : "4.5.4", "version_affected" : "=" }, { "version_value" : "4.5.5", "version_affected" : "=" }, { "version_value" : "4.5.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://owncloud.org/about/security/advisories/oC-SA-2013-003/", "name" : "http://owncloud.org/about/security/advisories/oC-SA-2013-003/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.x before 4.5.7 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted iCalendar file to the calendar application, the (2) dir or (3) file parameter to apps/files_pdfviewer/viewer.php, or the (4) mountpoint parameter to /apps/files_external/addMountPoint.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2014-03-14T15:55Z", "lastModifiedDate" : "2014-03-26T00:40Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0299", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "owncloud", "product" : { "product_data" : [ { "product_name" : "owncloud", "version" : { "version_data" : [ { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "=" }, { "version_value" : "4.0.5", "version_affected" : "=" }, { "version_value" : "4.0.6", "version_affected" : "=" }, { "version_value" : "4.0.7", "version_affected" : "=" }, { "version_value" : "4.0.8", "version_affected" : "=" }, { "version_value" : "4.0.9", "version_affected" : "=" }, { "version_value" : "4.0.10", "version_affected" : "=" }, { "version_value" : "4.0.11", "version_affected" : "<=" }, { "version_value" : "4.5.0", "version_affected" : "=" }, { "version_value" : "4.5.1", "version_affected" : "=" }, { "version_value" : "4.5.2", "version_affected" : "=" }, { "version_value" : "4.5.3", "version_affected" : "=" }, { "version_value" : "4.5.4", "version_affected" : "=" }, { "version_value" : "4.5.5", "version_affected" : "=" }, { "version_value" : "4.5.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://owncloud.org/about/security/advisories/oC-SA-2013-004/", "name" : "http://owncloud.org/about/security/advisories/oC-SA-2013-004/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud before 4.0.12 and 4.5.x before 4.5.7 allow remote attackers to hijack the authentication of users for requests that (1) change the timezone for the user via the lat and lng parameters to apps/calendar/ajax/settings/guesstimezone.php, (2) disable or enable the automatic timezone detection via the timezonedetection parameter to apps/calendar/ajax/settings/timezonedetection.php, (3) import user accounts via the admin_export parameter to apps/admin_migrate/settings.php, (4) overwrite user files via the operation parameter to apps/user_migrate/ajax/export.php, or (5) change the authentication server URL via unspecified vectors to apps/user_ldap/settings.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:3.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.0.11" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2014-03-14T17:55Z", "lastModifiedDate" : "2014-03-25T20:49Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0300", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "owncloud", "product" : { "product_data" : [ { "product_name" : "owncloud", "version" : { "version_data" : [ { "version_value" : "4.5.0", "version_affected" : "=" }, { "version_value" : "4.5.1", "version_affected" : "=" }, { "version_value" : "4.5.2", "version_affected" : "=" }, { "version_value" : "4.5.3", "version_affected" : "=" }, { "version_value" : "4.5.4", "version_affected" : "=" }, { "version_value" : "4.5.5", "version_affected" : "=" }, { "version_value" : "4.5.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://owncloud.org/about/security/advisories/oC-SA-2013-004/", "name" : "http://owncloud.org/about/security/advisories/oC-SA-2013-004/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud 4.5.x before 4.5.7 allow remote attackers to hijack the authentication of users for requests that (1) change the default view via the v parameter to apps/calendar/ajax/changeview.php, mount arbitrary (2) Google Drive or (3) Dropbox folders via vectors related to addRootCertificate.php, dropbox.php and google.php in apps/files_external/ajax/, or (4) change the authentication server URL via unspecified vectors to apps/user_webdavauth/settings.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2014-03-14T17:55Z", "lastModifiedDate" : "2014-03-25T20:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0301", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "owncloud", "product" : { "product_data" : [ { "product_name" : "owncloud", "version" : { "version_data" : [ { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "=" }, { "version_value" : "4.0.5", "version_affected" : "=" }, { "version_value" : "4.0.6", "version_affected" : "=" }, { "version_value" : "4.0.7", "version_affected" : "=" }, { "version_value" : "4.0.8", "version_affected" : "=" }, { "version_value" : "4.0.9", "version_affected" : "=" }, { "version_value" : "4.0.10", "version_affected" : "=" }, { "version_value" : "4.0.11", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://owncloud.org/about/security/advisories/oC-SA-2013-004/", "name" : "http://owncloud.org/about/security/advisories/oC-SA-2013-004/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site request forgery (CSRF) vulnerability in apps/calendar/ajax/settings/settimezone in ownCloud before 4.0.12 allows remote attackers to hijack the authentication of users for requests that change the timezone via the timezone parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:3.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.0.11" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2014-03-14T17:55Z", "lastModifiedDate" : "2014-03-25T20:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0302", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "owncloud", "product" : { "product_data" : [ { "product_name" : "owncloud", "version" : { "version_data" : [ { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "=" }, { "version_value" : "4.0.5", "version_affected" : "=" }, { "version_value" : "4.0.6", "version_affected" : "=" }, { "version_value" : "4.0.7", "version_affected" : "=" }, { "version_value" : "4.0.8", "version_affected" : "=" }, { "version_value" : "4.0.9", "version_affected" : "=" }, { "version_value" : "4.0.10", "version_affected" : "=" }, { "version_value" : "4.0.11", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://owncloud.org/about/security/advisories/oC-SA-2013-005/", "name" : "http://owncloud.org/about/security/advisories/oC-SA-2013-005/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in ownCloud Server before 4.0.12 allows remote attackers to obtain sensitive information via unspecified vectors related to \"inclusion of the Amazon SDK testing suite.\" NOTE: due to lack of details, it is not clear whether the issue exists in ownCloud itself, or in Amazon SDK." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.0.11" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:amazon:sdk_tester:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-06-05T15:44Z", "lastModifiedDate" : "2014-06-24T15:49Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0303", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "owncloud", "product" : { "product_data" : [ { "product_name" : "owncloud", "version" : { "version_data" : [ { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "=" }, { "version_value" : "4.0.5", "version_affected" : "=" }, { "version_value" : "4.0.6", "version_affected" : "=" }, { "version_value" : "4.0.7", "version_affected" : "=" }, { "version_value" : "4.0.8", "version_affected" : "=" }, { "version_value" : "4.0.9", "version_affected" : "=" }, { "version_value" : "4.0.10", "version_affected" : "=" }, { "version_value" : "4.0.11", "version_affected" : "<=" }, { "version_value" : "4.5.0", "version_affected" : "=" }, { "version_value" : "4.5.1", "version_affected" : "=" }, { "version_value" : "4.5.2", "version_affected" : "=" }, { "version_value" : "4.5.3", "version_affected" : "=" }, { "version_value" : "4.5.4", "version_affected" : "=" }, { "version_value" : "4.5.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://owncloud.org/about/security/advisories/oC-SA-2013-006/", "name" : "http://owncloud.org/about/security/advisories/oC-SA-2013-006/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in core/ajax/translations.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via unknown vectors. NOTE: this entry has been SPLIT due to different affected versions. The core/settings.php issue is covered by CVE-2013-7344." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.0.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-03-24T16:31Z", "lastModifiedDate" : "2014-03-24T16:38Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0304", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "owncloud", "product" : { "product_data" : [ { "product_name" : "owncloud", "version" : { "version_data" : [ { "version_value" : "4.5.0", "version_affected" : "=" }, { "version_value" : "4.5.1", "version_affected" : "=" }, { "version_value" : "4.5.2", "version_affected" : "=" }, { "version_value" : "4.5.3", "version_affected" : "=" }, { "version_value" : "4.5.4", "version_affected" : "=" }, { "version_value" : "4.5.5", "version_affected" : "=" }, { "version_value" : "4.5.6", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://owncloud.org/about/security/advisories/oC-SA-2013-007/", "name" : "http://owncloud.org/about/security/advisories/oC-SA-2013-007/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securite.intrinsec.com/wp-content/uploads/2013/02/ISEC-V2013-01-v-1.0-Owncloud-4.5.4-Arbitrary-calendar-export.pdf", "name" : "http://securite.intrinsec.com/wp-content/uploads/2013/02/ISEC-V2013-01-v-1.0-Owncloud-4.5.4-Arbitrary-calendar-export.pdf", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ownCloud Server before 4.5.7 does not properly check ownership of calendars, which allows remote authenticated users to read arbitrary calendars via the calid parameter to /apps/calendar/export.php. NOTE: this issue has been reported as a cross-site request forgery (CSRF) vulnerability, but due to lack of details, it is uncertain what the root cause is." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.5.6" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-06-05T15:44Z", "lastModifiedDate" : "2014-06-05T17:28Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0305", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "djangoproject", "product" : { "product_data" : [ { "product_name" : "django", "version" : { "version_data" : [ { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "canonical", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "10.04", "version_affected" : "=" }, { "version_value" : "11.10", "version_affected" : "=" }, { "version_value" : "12.04", "version_affected" : "=" }, { "version_value" : "12.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0670.html", "name" : "RHSA-2013:0670", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://ubuntu.com/usn/usn-1757-1", "name" : "USN-1757-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2013/dsa-2634", "name" : "DSA-2634", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "https://www.djangoproject.com/weblog/2013/feb/19/security/", "name" : "https://www.djangoproject.com/weblog/2013/feb/19/security/", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The administrative interface for Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 does not check permissions for the history view, which allows remote authenticated administrators to obtain sensitive object history information." }, { "lang" : "en", "value" : "Per http://www.ubuntu.com/usn/usn-1757-1/\r\n\"A security issue affects these releases of Ubuntu and its derivatives:\r\n\r\n Ubuntu 12.10\r\n Ubuntu 12.04 LTS\r\n Ubuntu 11.10\r\n Ubuntu 10.04 LTS\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:djangoproject:django:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:djangoproject:django:1.3:alpha1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:djangoproject:django:1.3:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:djangoproject:django:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:djangoproject:django:1.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:djangoproject:django:1.3.3:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:djangoproject:django:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:djangoproject:django:1.4:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:djangoproject:django:1.4:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:djangoproject:django:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:djangoproject:django:1.4.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:djangoproject:django:1.5:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:djangoproject:django:1.5:beta:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:10.04:-:lts:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-05-02T14:55Z", "lastModifiedDate" : "2013-05-15T03:34Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0306", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "djangoproject", "product" : { "product_data" : [ { "product_name" : "django", "version" : { "version_data" : [ { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "canonical", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "10.04", "version_affected" : "=" }, { "version_value" : "11.10", "version_affected" : "=" }, { "version_value" : "12.04", "version_affected" : "=" }, { "version_value" : "12.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-189" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0670.html", "name" : "RHSA-2013:0670", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://ubuntu.com/usn/usn-1757-1", "name" : "USN-1757-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2013/dsa-2634", "name" : "DSA-2634", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "https://www.djangoproject.com/weblog/2013/feb/19/security/", "name" : "https://www.djangoproject.com/weblog/2013/feb/19/security/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended resource limits for formsets and cause a denial of service (memory consumption) or trigger server errors via a modified max_num parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:djangoproject:django:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:djangoproject:django:1.3:alpha1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:djangoproject:django:1.3:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:djangoproject:django:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:djangoproject:django:1.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:djangoproject:django:1.3.3:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:djangoproject:django:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:djangoproject:django:1.4:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:djangoproject:django:1.4:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:djangoproject:django:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:djangoproject:django:1.4.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:djangoproject:django:1.5:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:djangoproject:django:1.5:beta:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:10.04:-:lts:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-05-02T14:55Z", "lastModifiedDate" : "2013-05-15T03:34Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0307", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "owncloud", "product" : { "product_data" : [ { "product_name" : "owncloud", "version" : { "version_data" : [ { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "=" }, { "version_value" : "4.0.5", "version_affected" : "=" }, { "version_value" : "4.0.6", "version_affected" : "=" }, { "version_value" : "4.0.7", "version_affected" : "=" }, { "version_value" : "4.0.8", "version_affected" : "=" }, { "version_value" : "4.0.9", "version_affected" : "=" }, { "version_value" : "4.0.10", "version_affected" : "=" }, { "version_value" : "4.0.11", "version_affected" : "<=" }, { "version_value" : "4.5.0", "version_affected" : "=" }, { "version_value" : "4.5.1", "version_affected" : "=" }, { "version_value" : "4.5.2", "version_affected" : "=" }, { "version_value" : "4.5.3", "version_affected" : "=" }, { "version_value" : "4.5.4", "version_affected" : "=" }, { "version_value" : "4.5.5", "version_affected" : "=" }, { "version_value" : "4.5.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://owncloud.org/about/security/advisories/oC-SA-2013-003/", "name" : "http://owncloud.org/about/security/advisories/oC-SA-2013-003/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.7 allows remote administrators to inject arbitrary web script or HTML via the group input field parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:3.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.0.11" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:owncloud:owncloud:4.5.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2014-03-14T15:55Z", "lastModifiedDate" : "2014-03-26T00:41Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0308", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "git", "product" : { "product_data" : [ { "product_name" : "git", "version" : { "version_data" : [ { "version_value" : "1.8.1.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=701586", "name" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=701586", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2013/Sep/msg00007.html", "name" : "APPLE-SA-2013-09-18-3", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-03/msg00005.html", "name" : "openSUSE-SU-2013:0380", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-03/msg00007.html", "name" : "openSUSE-SU-2013:0382", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=git&m=136134619013145&w=2", "name" : "[ANNOUNCE] 20130220 Git v1.8.1.4", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0589.html", "name" : "RHSA-2013:0589", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/52361", "name" : "52361", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/52443", "name" : "52443", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/52467", "name" : "52467", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT5937", "name" : "http://support.apple.com/kb/HT5937", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html", "name" : "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/58148", "name" : "58148", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id/1028205", "name" : "1028205", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "https://bugzilla.novell.com/show_bug.cgi?id=804730", "name" : "https://bugzilla.novell.com/show_bug.cgi?id=804730", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=909977", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=909977", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82329", "name" : "git-gitimapsend-spoofing(82329)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://raw.github.com/git/git/master/Documentation/RelNotes/1.8.1.4.txt", "name" : "https://raw.github.com/git/git/master/Documentation/RelNotes/1.8.1.4.txt", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:git:git:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.8.1.3" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-08T21:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0309", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "=" }, { "version_value" : "3.0.18", "version_affected" : "=" }, { "version_value" : "3.0.19", "version_affected" : "=" }, { "version_value" : "3.0.20", "version_affected" : "=" }, { "version_value" : "3.0.21", "version_affected" : "=" }, { "version_value" : "3.0.22", "version_affected" : "=" }, { "version_value" : "3.0.23", "version_affected" : "=" }, { "version_value" : "3.0.24", "version_affected" : "=" }, { "version_value" : "3.0.25", "version_affected" : "=" }, { "version_value" : "3.0.26", "version_affected" : "=" }, { "version_value" : "3.0.27", "version_affected" : "=" }, { "version_value" : "3.0.28", "version_affected" : "=" }, { "version_value" : "3.0.29", "version_affected" : "=" }, { "version_value" : "3.0.30", "version_affected" : "=" }, { "version_value" : "3.0.31", "version_affected" : "=" }, { "version_value" : "3.0.32", "version_affected" : "=" }, { "version_value" : "3.0.33", "version_affected" : "=" }, { "version_value" : "3.0.34", "version_affected" : "=" }, { "version_value" : "3.0.35", "version_affected" : "=" }, { "version_value" : "3.0.36", "version_affected" : "=" }, { "version_value" : "3.0.37", "version_affected" : "=" }, { "version_value" : "3.0.38", "version_affected" : "=" }, { "version_value" : "3.0.39", "version_affected" : "=" }, { "version_value" : "3.0.40", "version_affected" : "=" }, { "version_value" : "3.0.41", "version_affected" : "=" }, { "version_value" : "3.0.42", "version_affected" : "=" }, { "version_value" : "3.0.43", "version_affected" : "=" }, { "version_value" : "3.0.44", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.3", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.1.5", "version_affected" : "=" }, { "version_value" : "3.1.6", "version_affected" : "=" }, { "version_value" : "3.1.7", "version_affected" : "=" }, { "version_value" : "3.1.8", "version_affected" : "=" }, { "version_value" : "3.1.9", "version_affected" : "=" }, { "version_value" : "3.1.10", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.2.6", "version_affected" : "=" }, { "version_value" : "3.2.7", "version_affected" : "=" }, { "version_value" : "3.2.8", "version_affected" : "=" }, { "version_value" : "3.2.9", "version_affected" : "=" }, { "version_value" : "3.2.10", "version_affected" : "=" }, { "version_value" : "3.2.11", "version_affected" : "=" }, { "version_value" : "3.2.12", "version_affected" : "=" }, { "version_value" : "3.2.13", "version_affected" : "=" }, { "version_value" : "3.2.14", "version_affected" : "=" }, { "version_value" : "3.2.15", "version_affected" : "=" }, { "version_value" : "3.2.16", "version_affected" : "=" }, { "version_value" : "3.2.17", "version_affected" : "=" }, { "version_value" : "3.2.18", "version_affected" : "=" }, { "version_value" : "3.2.19", "version_affected" : "=" }, { "version_value" : "3.2.20", "version_affected" : "=" }, { "version_value" : "3.2.21", "version_affected" : "=" }, { "version_value" : "3.2.22", "version_affected" : "=" }, { "version_value" : "3.2.23", "version_affected" : "=" }, { "version_value" : "3.2.24", "version_affected" : "=" }, { "version_value" : "3.2.25", "version_affected" : "=" }, { "version_value" : "3.2.26", "version_affected" : "=" }, { "version_value" : "3.2.27", "version_affected" : "=" }, { "version_value" : "3.2.28", "version_affected" : "=" }, { "version_value" : "3.2.29", "version_affected" : "=" }, { "version_value" : "3.2.30", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.3.4", "version_affected" : "=" }, { "version_value" : "3.3.5", "version_affected" : "=" }, { "version_value" : "3.3.6", "version_affected" : "=" }, { "version_value" : "3.3.7", "version_affected" : "=" }, { "version_value" : "3.3.8", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.4.3", "version_affected" : "=" }, { "version_value" : "3.4.4", "version_affected" : "=" }, { "version_value" : "3.4.5", "version_affected" : "=" }, { "version_value" : "3.4.10", "version_affected" : "=" }, { "version_value" : "3.4.11", "version_affected" : "=" }, { "version_value" : "3.4.12", "version_affected" : "=" }, { "version_value" : "3.4.13", "version_affected" : "=" }, { "version_value" : "3.4.14", "version_affected" : "=" }, { "version_value" : "3.4.15", "version_affected" : "=" }, { "version_value" : "3.4.16", "version_affected" : "=" }, { "version_value" : "3.4.17", "version_affected" : "=" }, { "version_value" : "3.4.18", "version_affected" : "=" }, { "version_value" : "3.4.19", "version_affected" : "=" }, { "version_value" : "3.4.20", "version_affected" : "=" }, { "version_value" : "3.4.21", "version_affected" : "=" }, { "version_value" : "3.4.22", "version_affected" : "=" }, { "version_value" : "3.4.23", "version_affected" : "=" }, { "version_value" : "3.4.24", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "=" }, { "version_value" : "3.6", "version_affected" : "=" }, { "version_value" : "3.6.1", "version_affected" : "<=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=027ef6c87853b0a9df53175063028edb4950d476", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=027ef6c87853b0a9df53175063028edb4950d476", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0496.html", "name" : "RHSA-2013:0496", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.6.2", "name" : "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.6.2", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/20/4", "name" : "[oss-security] 20130219 Re: CVE request -- Linux kernel: mm: thp: pmd_present and PROT_NONE local DoS", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=912898", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=912898", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://github.com/torvalds/linux/commit/027ef6c87853b0a9df53175063028edb4950d476", "name" : "https://github.com/torvalds/linux/commit/027ef6c87853b0a9df53175063028edb4950d476", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "arch/x86/include/asm/pgtable.h in the Linux kernel before 3.6.2, when transparent huge pages are used, does not properly support PROT_NONE memory regions, which allows local users to cause a denial of service (system crash) via a crafted application." }, { "lang" : "en", "value" : "Per https://access.redhat.com/security/cve/CVE-2013-0309 \"This issue did affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 6.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.44:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:*:*:*:*:*:x86:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.1:*:*:*:*:*:x86:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:*:*:*:*:*:x86:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc1:*:*:*:*:x86:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc2:*:*:*:*:x86:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc3:*:*:*:*:x86:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc4:*:*:*:*:x86:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc5:*:*:*:*:x86:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc6:*:*:*:*:x86:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc7:*:*:*:*:x86:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.1:*:*:*:*:*:x86:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.2:*:*:*:*:*:x86:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.3:*:*:*:*:*:x86:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.4:*:*:*:*:*:x86:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.5:*:*:*:*:*:x86:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.6.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 4.7 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-22T00:55Z", "lastModifiedDate" : "2019-04-22T17:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0310", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "=" }, { "version_value" : "3.0.18", "version_affected" : "=" }, { "version_value" : "3.0.19", "version_affected" : "=" }, { "version_value" : "3.0.20", "version_affected" : "=" }, { "version_value" : "3.0.21", "version_affected" : "=" }, { "version_value" : "3.0.22", "version_affected" : "=" }, { "version_value" : "3.0.23", "version_affected" : "=" }, { "version_value" : "3.0.24", "version_affected" : "=" }, { "version_value" : "3.0.25", "version_affected" : "=" }, { "version_value" : "3.0.26", "version_affected" : "=" }, { "version_value" : "3.0.27", "version_affected" : "=" }, { "version_value" : "3.0.28", "version_affected" : "=" }, { "version_value" : "3.0.29", "version_affected" : "=" }, { "version_value" : "3.0.30", "version_affected" : "=" }, { "version_value" : "3.0.31", "version_affected" : "=" }, { "version_value" : "3.0.32", "version_affected" : "=" }, { "version_value" : "3.0.33", "version_affected" : "=" }, { "version_value" : "3.0.34", "version_affected" : "=" }, { "version_value" : "3.0.35", "version_affected" : "=" }, { "version_value" : "3.0.36", "version_affected" : "=" }, { "version_value" : "3.0.37", "version_affected" : "=" }, { "version_value" : "3.0.38", "version_affected" : "=" }, { "version_value" : "3.0.39", "version_affected" : "=" }, { "version_value" : "3.0.40", "version_affected" : "=" }, { "version_value" : "3.0.41", "version_affected" : "=" }, { "version_value" : "3.0.42", "version_affected" : "=" }, { "version_value" : "3.0.43", "version_affected" : "=" }, { "version_value" : "3.0.44", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.3", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.1.5", "version_affected" : "=" }, { "version_value" : "3.1.6", "version_affected" : "=" }, { "version_value" : "3.1.7", "version_affected" : "=" }, { "version_value" : "3.1.8", "version_affected" : "=" }, { "version_value" : "3.1.9", "version_affected" : "=" }, { "version_value" : "3.1.10", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.2.6", "version_affected" : "=" }, { "version_value" : "3.2.7", "version_affected" : "=" }, { "version_value" : "3.2.8", "version_affected" : "=" }, { "version_value" : "3.2.9", "version_affected" : "=" }, { "version_value" : "3.2.10", "version_affected" : "=" }, { "version_value" : "3.2.11", "version_affected" : "=" }, { "version_value" : "3.2.12", "version_affected" : "=" }, { "version_value" : "3.2.13", "version_affected" : "=" }, { "version_value" : "3.2.14", "version_affected" : "=" }, { "version_value" : "3.2.15", "version_affected" : "=" }, { "version_value" : "3.2.16", "version_affected" : "=" }, { "version_value" : "3.2.17", "version_affected" : "=" }, { "version_value" : "3.2.18", "version_affected" : "=" }, { "version_value" : "3.2.19", "version_affected" : "=" }, { "version_value" : "3.2.20", "version_affected" : "=" }, { "version_value" : "3.2.21", "version_affected" : "=" }, { "version_value" : "3.2.22", "version_affected" : "=" }, { "version_value" : "3.2.23", "version_affected" : "=" }, { "version_value" : "3.2.24", "version_affected" : "=" }, { "version_value" : "3.2.25", "version_affected" : "=" }, { "version_value" : "3.2.26", "version_affected" : "=" }, { "version_value" : "3.2.27", "version_affected" : "=" }, { "version_value" : "3.2.28", "version_affected" : "=" }, { "version_value" : "3.2.29", "version_affected" : "=" }, { "version_value" : "3.2.30", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.3.4", "version_affected" : "=" }, { "version_value" : "3.3.5", "version_affected" : "=" }, { "version_value" : "3.3.6", "version_affected" : "=" }, { "version_value" : "3.3.7", "version_affected" : "=" }, { "version_value" : "3.3.8", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.4.3", "version_affected" : "=" }, { "version_value" : "3.4.4", "version_affected" : "=" }, { "version_value" : "3.4.5", "version_affected" : "=" }, { "version_value" : "3.4.6", "version_affected" : "=" }, { "version_value" : "3.4.7", "version_affected" : "<=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=89d7ae34cdda4195809a5a987f697a517a2a3177", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=89d7ae34cdda4195809a5a987f697a517a2a3177", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0496.html", "name" : "RHSA-2013:0496", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.8", "name" : "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.8", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/20/5", "name" : "[oss-security] 20130219 Re: CVE request -- Linux kernel: net: CIPSO_V4_TAG_LOCAL tag NULL pointer dereference", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=912900", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=912900", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://github.com/torvalds/linux/commit/89d7ae34cdda4195809a5a987f697a517a2a3177", "name" : "https://github.com/torvalds/linux/commit/89d7ae34cdda4195809a5a987f697a517a2a3177", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The cipso_v4_validate function in net/ipv4/cipso_ipv4.c in the Linux kernel before 3.4.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an IPOPT_CIPSO IP_OPTIONS setsockopt system call." }, { "lang" : "en", "value" : "Per https://access.redhat.com/security/cve/CVE-2013-0310\r\n\"This issue did affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 6.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.44:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.4.7" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:S/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 2.7, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-22T00:55Z", "lastModifiedDate" : "2019-04-22T17:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0311", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "=" }, { "version_value" : "3.0.18", "version_affected" : "=" }, { "version_value" : "3.0.19", "version_affected" : "=" }, { "version_value" : "3.0.20", "version_affected" : "=" }, { "version_value" : "3.0.21", "version_affected" : "=" }, { "version_value" : "3.0.22", "version_affected" : "=" }, { "version_value" : "3.0.23", "version_affected" : "=" }, { "version_value" : "3.0.24", "version_affected" : "=" }, { "version_value" : "3.0.25", "version_affected" : "=" }, { "version_value" : "3.0.26", "version_affected" : "=" }, { "version_value" : "3.0.27", "version_affected" : "=" }, { "version_value" : "3.0.28", "version_affected" : "=" }, { "version_value" : "3.0.29", "version_affected" : "=" }, { "version_value" : "3.0.30", "version_affected" : "=" }, { "version_value" : "3.0.31", "version_affected" : "=" }, { "version_value" : "3.0.32", "version_affected" : "=" }, { "version_value" : "3.0.33", "version_affected" : "=" }, { "version_value" : "3.0.34", "version_affected" : "=" }, { "version_value" : "3.0.35", "version_affected" : "=" }, { "version_value" : "3.0.36", "version_affected" : "=" }, { "version_value" : "3.0.37", "version_affected" : "=" }, { "version_value" : "3.0.38", "version_affected" : "=" }, { "version_value" : "3.0.39", "version_affected" : "=" }, { "version_value" : "3.0.40", "version_affected" : "=" }, { "version_value" : "3.0.41", "version_affected" : "=" }, { "version_value" : "3.0.42", "version_affected" : "=" }, { "version_value" : "3.0.43", "version_affected" : "=" }, { "version_value" : "3.0.44", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.3", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.1.5", "version_affected" : "=" }, { "version_value" : "3.1.6", "version_affected" : "=" }, { "version_value" : "3.1.7", "version_affected" : "=" }, { "version_value" : "3.1.8", "version_affected" : "=" }, { "version_value" : "3.1.9", "version_affected" : "=" }, { "version_value" : "3.1.10", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.2.6", "version_affected" : "=" }, { "version_value" : "3.2.7", "version_affected" : "=" }, { "version_value" : "3.2.8", "version_affected" : "=" }, { "version_value" : "3.2.9", "version_affected" : "=" }, { "version_value" : "3.2.10", "version_affected" : "=" }, { "version_value" : "3.2.11", "version_affected" : "=" }, { "version_value" : "3.2.12", "version_affected" : "=" }, { "version_value" : "3.2.13", "version_affected" : "=" }, { "version_value" : "3.2.14", "version_affected" : "=" }, { "version_value" : "3.2.15", "version_affected" : "=" }, { "version_value" : "3.2.16", "version_affected" : "=" }, { "version_value" : "3.2.17", "version_affected" : "=" }, { "version_value" : "3.2.18", "version_affected" : "=" }, { "version_value" : "3.2.19", "version_affected" : "=" }, { "version_value" : "3.2.20", "version_affected" : "=" }, { "version_value" : "3.2.21", "version_affected" : "=" }, { "version_value" : "3.2.22", "version_affected" : "=" }, { "version_value" : "3.2.23", "version_affected" : "=" }, { "version_value" : "3.2.24", "version_affected" : "=" }, { "version_value" : "3.2.25", "version_affected" : "=" }, { "version_value" : "3.2.26", "version_affected" : "=" }, { "version_value" : "3.2.27", "version_affected" : "=" }, { "version_value" : "3.2.28", "version_affected" : "=" }, { "version_value" : "3.2.29", "version_affected" : "=" }, { "version_value" : "3.2.30", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.3.4", "version_affected" : "=" }, { "version_value" : "3.3.5", "version_affected" : "=" }, { "version_value" : "3.3.6", "version_affected" : "=" }, { "version_value" : "3.3.7", "version_affected" : "=" }, { "version_value" : "3.3.8", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.4.3", "version_affected" : "=" }, { "version_value" : "3.4.4", "version_affected" : "=" }, { "version_value" : "3.4.5", "version_affected" : "=" }, { "version_value" : "3.4.6", "version_affected" : "=" }, { "version_value" : "3.4.7", "version_affected" : "=" }, { "version_value" : "3.4.8", "version_affected" : "=" }, { "version_value" : "3.4.9", "version_affected" : "=" }, { "version_value" : "3.4.10", "version_affected" : "=" }, { "version_value" : "3.4.11", "version_affected" : "=" }, { "version_value" : "3.4.12", "version_affected" : "=" }, { "version_value" : "3.4.13", "version_affected" : "=" }, { "version_value" : "3.4.14", "version_affected" : "=" }, { "version_value" : "3.4.15", "version_affected" : "=" }, { "version_value" : "3.4.16", "version_affected" : "=" }, { "version_value" : "3.4.17", "version_affected" : "=" }, { "version_value" : "3.4.18", "version_affected" : "=" }, { "version_value" : "3.4.19", "version_affected" : "=" }, { "version_value" : "3.4.20", "version_affected" : "=" }, { "version_value" : "3.4.21", "version_affected" : "=" }, { "version_value" : "3.4.22", "version_affected" : "=" }, { "version_value" : "3.4.23", "version_affected" : "=" }, { "version_value" : "3.4.24", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "=" }, { "version_value" : "3.6.9", "version_affected" : "=" }, { "version_value" : "3.6.10", "version_affected" : "=" }, { "version_value" : "3.6.11", "version_affected" : "<=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=bd97120fc3d1a11f3124c7c9ba1d91f51829eb85", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=bd97120fc3d1a11f3124c7c9ba1d91f51829eb85", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html", "name" : "openSUSE-SU-2013:1187", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0496.html", "name" : "RHSA-2013:0496", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0579.html", "name" : "RHSA-2013:0579", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0882.html", "name" : "RHSA-2013:0882", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0928.html", "name" : "RHSA-2013:0928", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.kernel.org/pub/linux/kernel/v3.x/patch-3.7.bz2", "name" : "http://www.kernel.org/pub/linux/kernel/v3.x/patch-3.7.bz2", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:176", "name" : "MDVSA-2013:176", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/20/6", "name" : "[oss-security] 20130219 Re: CVE request -- Linux kernel: vhost: fix length for cross region descriptor", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=912905", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=912905", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://github.com/torvalds/linux/commit/bd97120fc3d1a11f3124c7c9ba1d91f51829eb85", "name" : "https://github.com/torvalds/linux/commit/bd97120fc3d1a11f3124c7c9ba1d91f51829eb85", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The translate_desc function in drivers/vhost/vhost.c in the Linux kernel before 3.7 does not properly handle cross-region descriptors, which allows guest OS users to obtain host OS privileges by leveraging KVM guest OS privileges." }, { "lang" : "en", "value" : "Per https://access.redhat.com/security/cve/CVE-2013-0311\r\n\"This issue did affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 6.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.44:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.6.11" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:H/Au:S/C:C/I:C/A:C", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "HIGH", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 2.5, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-22T00:55Z", "lastModifiedDate" : "2019-04-22T17:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0312", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "fedoraproject", "product" : { "product_data" : [ { "product_name" : "389_directory_server", "version" : { "version_data" : [ { "version_value" : "1.3.0.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-189" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://directory.fedoraproject.org/wiki/Releases/1.3.0.4", "name" : "http://directory.fedoraproject.org/wiki/Releases/1.3.0.4", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0628.html", "name" : "RHSA-2013:0628", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/52279", "name" : "52279", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/52568", "name" : "52568", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/58428", "name" : "58428", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=912964", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=912964", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://fedorahosted.org/389/ticket/571", "name" : "https://fedorahosted.org/389/ticket/571", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service (crash) via a zero length LDAP control sequence." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:389_directory_server:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.3.0.3" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-13T20:55Z", "lastModifiedDate" : "2013-03-19T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0313", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "=" }, { "version_value" : "3.0.18", "version_affected" : "=" }, { "version_value" : "3.0.19", "version_affected" : "=" }, { "version_value" : "3.0.20", "version_affected" : "=" }, { "version_value" : "3.0.21", "version_affected" : "=" }, { "version_value" : "3.0.22", "version_affected" : "=" }, { "version_value" : "3.0.23", "version_affected" : "=" }, { "version_value" : "3.0.24", "version_affected" : "=" }, { "version_value" : "3.0.25", "version_affected" : "=" }, { "version_value" : "3.0.26", "version_affected" : "=" }, { "version_value" : "3.0.27", "version_affected" : "=" }, { "version_value" : "3.0.28", "version_affected" : "=" }, { "version_value" : "3.0.29", "version_affected" : "=" }, { "version_value" : "3.0.30", "version_affected" : "=" }, { "version_value" : "3.0.31", "version_affected" : "=" }, { "version_value" : "3.0.32", "version_affected" : "=" }, { "version_value" : "3.0.33", "version_affected" : "=" }, { "version_value" : "3.0.34", "version_affected" : "=" }, { "version_value" : "3.0.35", "version_affected" : "=" }, { "version_value" : "3.0.36", "version_affected" : "=" }, { "version_value" : "3.0.37", "version_affected" : "=" }, { "version_value" : "3.0.38", "version_affected" : "=" }, { "version_value" : "3.0.39", "version_affected" : "=" }, { "version_value" : "3.0.40", "version_affected" : "=" }, { "version_value" : "3.0.41", "version_affected" : "=" }, { "version_value" : "3.0.42", "version_affected" : "=" }, { "version_value" : "3.0.43", "version_affected" : "=" }, { "version_value" : "3.0.44", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.3", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.1.5", "version_affected" : "=" }, { "version_value" : "3.1.6", "version_affected" : "=" }, { "version_value" : "3.1.7", "version_affected" : "=" }, { "version_value" : "3.1.8", "version_affected" : "=" }, { "version_value" : "3.1.9", "version_affected" : "=" }, { "version_value" : "3.1.10", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.2.6", "version_affected" : "=" }, { "version_value" : "3.2.7", "version_affected" : "=" }, { "version_value" : "3.2.8", "version_affected" : "=" }, { "version_value" : "3.2.9", "version_affected" : "=" }, { "version_value" : "3.2.10", "version_affected" : "=" }, { "version_value" : "3.2.11", "version_affected" : "=" }, { "version_value" : "3.2.12", "version_affected" : "=" }, { "version_value" : "3.2.13", "version_affected" : "=" }, { "version_value" : "3.2.14", "version_affected" : "=" }, { "version_value" : "3.2.15", "version_affected" : "=" }, { "version_value" : "3.2.16", "version_affected" : "=" }, { "version_value" : "3.2.17", "version_affected" : "=" }, { "version_value" : "3.2.18", "version_affected" : "=" }, { "version_value" : "3.2.19", "version_affected" : "=" }, { "version_value" : "3.2.20", "version_affected" : "=" }, { "version_value" : "3.2.21", "version_affected" : "=" }, { "version_value" : "3.2.22", "version_affected" : "=" }, { "version_value" : "3.2.23", "version_affected" : "=" }, { "version_value" : "3.2.24", "version_affected" : "=" }, { "version_value" : "3.2.25", "version_affected" : "=" }, { "version_value" : "3.2.26", "version_affected" : "=" }, { "version_value" : "3.2.27", "version_affected" : "=" }, { "version_value" : "3.2.28", "version_affected" : "=" }, { "version_value" : "3.2.29", "version_affected" : "=" }, { "version_value" : "3.2.30", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.3.4", "version_affected" : "=" }, { "version_value" : "3.3.5", "version_affected" : "=" }, { "version_value" : "3.3.6", "version_affected" : "=" }, { "version_value" : "3.3.7", "version_affected" : "=" }, { "version_value" : "3.3.8", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.4.3", "version_affected" : "=" }, { "version_value" : "3.4.4", "version_affected" : "=" }, { "version_value" : "3.4.5", "version_affected" : "=" }, { "version_value" : "3.4.6", "version_affected" : "=" }, { "version_value" : "3.4.7", "version_affected" : "=" }, { "version_value" : "3.4.8", "version_affected" : "=" }, { "version_value" : "3.4.9", "version_affected" : "=" }, { "version_value" : "3.4.10", "version_affected" : "=" }, { "version_value" : "3.4.11", "version_affected" : "=" }, { "version_value" : "3.4.12", "version_affected" : "=" }, { "version_value" : "3.4.13", "version_affected" : "=" }, { "version_value" : "3.4.14", "version_affected" : "=" }, { "version_value" : "3.4.15", "version_affected" : "=" }, { "version_value" : "3.4.16", "version_affected" : "=" }, { "version_value" : "3.4.17", "version_affected" : "=" }, { "version_value" : "3.4.18", "version_affected" : "=" }, { "version_value" : "3.4.19", "version_affected" : "=" }, { "version_value" : "3.4.20", "version_affected" : "=" }, { "version_value" : "3.4.21", "version_affected" : "=" }, { "version_value" : "3.4.22", "version_affected" : "=" }, { "version_value" : "3.4.23", "version_affected" : "=" }, { "version_value" : "3.4.24", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "=" }, { "version_value" : "3.6.9", "version_affected" : "=" }, { "version_value" : "3.6.10", "version_affected" : "=" }, { "version_value" : "3.6.11", "version_affected" : "=" }, { "version_value" : "3.7", "version_affected" : "=" }, { "version_value" : "3.7.1", "version_affected" : "=" }, { "version_value" : "3.7.2", "version_affected" : "=" }, { "version_value" : "3.7.3", "version_affected" : "=" }, { "version_value" : "3.7.4", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=a67adb997419fb53540d4a4f79c6471c60bc69b6", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=a67adb997419fb53540d4a4f79c6471c60bc69b6", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.5", "name" : "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.5", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/20/16", "name" : "[oss-security] 20130220 Re: CVE request - Linux kernel: evm: NULL pointer de-reference flaw", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=913266", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=913266", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://github.com/torvalds/linux/commit/a67adb997419fb53540d4a4f79c6471c60bc69b6", "name" : "https://github.com/torvalds/linux/commit/a67adb997419fb53540d4a4f79c6471c60bc69b6", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The evm_update_evmxattr function in security/integrity/evm/evm_crypto.c in the Linux kernel before 3.7.5, when the Extended Verification Module (EVM) is enabled, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an attempted removexattr operation on an inode of a sockfs filesystem." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.44:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.7.4" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.2 }, "severity" : "MEDIUM", "exploitabilityScore" : 1.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-22T00:55Z", "lastModifiedDate" : "2013-02-22T14:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0314", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "jboss_enterprise_portal_platform", "version" : { "version_data" : [ { "version_value" : "5.2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-287" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0613.html", "name" : "RHSA-2013:0613", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/52552", "name" : "52552", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/91120", "name" : "91120", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=913327", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=913327", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 does not properly check authentication when importing Zip files, which allows remote attackers to modify site contents, remove the site, or alter the access controls for portlets." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-12T22:55Z", "lastModifiedDate" : "2013-04-15T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0315", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "jboss_enterprise_portal_platform", "version" : { "version_data" : [ { "version_value" : "5.2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0613.html", "name" : "RHSA-2013:0613", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/52552", "name" : "52552", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/91121", "name" : "91121", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=913340", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=913340", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 allows remote attackers to read arbitrary files via a crafted external XML entity in an XML document, aka an XML Entity Expansion (XEE) attack." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-12T22:55Z", "lastModifiedDate" : "2013-04-15T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0316", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "drupal", "product" : { "product_data" : [ { "product_name" : "drupal", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.1", "version_affected" : "=" }, { "version_value" : "7.2", "version_affected" : "=" }, { "version_value" : "7.3", "version_affected" : "=" }, { "version_value" : "7.4", "version_affected" : "=" }, { "version_value" : "7.5", "version_affected" : "=" }, { "version_value" : "7.6", "version_affected" : "=" }, { "version_value" : "7.7", "version_affected" : "=" }, { "version_value" : "7.8", "version_affected" : "=" }, { "version_value" : "7.9", "version_affected" : "=" }, { "version_value" : "7.10", "version_affected" : "=" }, { "version_value" : "7.11", "version_affected" : "=" }, { "version_value" : "7.12", "version_affected" : "=" }, { "version_value" : "7.13", "version_affected" : "=" }, { "version_value" : "7.14", "version_affected" : "=" }, { "version_value" : "7.15", "version_affected" : "=" }, { "version_value" : "7.16", "version_affected" : "=" }, { "version_value" : "7.17", "version_affected" : "=" }, { "version_value" : "7.18", "version_affected" : "=" }, { "version_value" : "7.19", "version_affected" : "=" }, { "version_value" : "7.x-dev", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://drupal.org/SA-CORE-2013-002", "name" : "http://drupal.org/SA-CORE-2013-002", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/21/5", "name" : "[oss-security] 20130220 Re: CVE request for Drupal Core and contributed modules", "refsource" : "MLIST", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Image module in Drupal 7.x before 7.20 allows remote attackers to cause a denial of service (CPU and disk space consumption) via a large number of new derivative requests." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:alpha1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:alpha2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:alpha3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:alpha4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:alpha5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:alpha6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:alpha7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:beta3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:dev:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:7.x-dev:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-27T21:55Z", "lastModifiedDate" : "2013-03-28T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0317", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "joe_haskins", "product" : { "product_data" : [ { "product_name" : "og_manager_change", "version" : { "version_data" : [ { "version_value" : "7.x-2.0", "version_affected" : "=" }, { "version_value" : "7.x-2.x", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://drupal.org/node/1915408", "name" : "http://drupal.org/node/1915408", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://drupal.org/node/1916312", "name" : "http://drupal.org/node/1916312", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://drupalcode.org/project/og_manager_change.git/commitdiff/ab7152b", "name" : "http://drupalcode.org/project/og_manager_change.git/commitdiff/ab7152b", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/21/5", "name" : "[oss-security] 20130220 Re: CVE request for Drupal Core and contributed modules", "refsource" : "MLIST", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the Manager Change for Organic Groups (og_manager_change) module 7.x-2.x before 7.x-2.1 for Drupal might allow remote attackers to inject arbitrary web script or HTML via the username in the new manager autocomplete field." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:joe_haskins:og_manager_change:7.x-2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:joe_haskins:og_manager_change:7.x-2.0:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:joe_haskins:og_manager_change:7.x-2.x:dev:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-27T21:55Z", "lastModifiedDate" : "2013-04-04T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0318", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "banckle_chat_project", "product" : { "product_data" : [ { "product_name" : "banckle_chat", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://drupal.org/node/1916370", "name" : "http://drupal.org/node/1916370", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/21/5", "name" : "[oss-security] 20130220 Re: CVE request for Drupal Core and contributed modules", "refsource" : "MLIST", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The admin page in the Banckle Chat module for Drupal does not properly restrict access, which allows remote attackers to bypass intended restrictions via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:banckle_chat_project:banckle_chat:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-27T21:55Z", "lastModifiedDate" : "2013-03-28T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0319", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "yandex.metrics_project", "product" : { "product_data" : [ { "product_name" : "yandex_metrics", "version" : { "version_data" : [ { "version_value" : "6.x-1.0", "version_affected" : "=" }, { "version_value" : "6.x-1.1", "version_affected" : "=" }, { "version_value" : "6.x-1.2", "version_affected" : "=" }, { "version_value" : "6.x-1.3", "version_affected" : "=" }, { "version_value" : "6.x-1.4", "version_affected" : "=" }, { "version_value" : "6.x-1.5", "version_affected" : "=" }, { "version_value" : "6.x-1.x", "version_affected" : "=" }, { "version_value" : "7.x-1.0", "version_affected" : "=" }, { "version_value" : "7.x-1.1", "version_affected" : "=" }, { "version_value" : "7.x-1.2", "version_affected" : "=" }, { "version_value" : "7.x-1.3", "version_affected" : "=" }, { "version_value" : "7.x-1.4", "version_affected" : "=" }, { "version_value" : "7.x-1.x", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://drupal.org/node/1921340", "name" : "http://drupal.org/node/1921340", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://drupal.org/node/1921342", "name" : "http://drupal.org/node/1921342", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://drupal.org/node/1922400", "name" : "http://drupal.org/node/1922400", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://drupalcode.org/project/yandex_metrics.git/commitdiff/290b718", "name" : "http://drupalcode.org/project/yandex_metrics.git/commitdiff/290b718", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://drupalcode.org/project/yandex_metrics.git/commitdiff/80bb901", "name" : "http://drupalcode.org/project/yandex_metrics.git/commitdiff/80bb901", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/21/5", "name" : "[oss-security] 20130220 Re: CVE request for Drupal Core and contributed modules", "refsource" : "MLIST", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the Yandex.Metrics module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors related to the Yandex.Metrica service data." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yandex.metrics_project:yandex_metrics:7.x-1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yandex.metrics_project:yandex_metrics:7.x-1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yandex.metrics_project:yandex_metrics:7.x-1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yandex.metrics_project:yandex_metrics:7.x-1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yandex.metrics_project:yandex_metrics:7.x-1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yandex.metrics_project:yandex_metrics:7.x-1.x:dev:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yandex.metrics_project:yandex_metrics:6.x-1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yandex.metrics_project:yandex_metrics:6.x-1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yandex.metrics_project:yandex_metrics:6.x-1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yandex.metrics_project:yandex_metrics:6.x-1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yandex.metrics_project:yandex_metrics:6.x-1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yandex.metrics_project:yandex_metrics:6.x-1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yandex.metrics_project:yandex_metrics:6.x-1.x:dev:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-27T21:55Z", "lastModifiedDate" : "2013-04-04T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0320", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mattias_hutterer", "product" : { "product_data" : [ { "product_name" : "taxonomy_manager", "version" : { "version_data" : [ { "version_value" : "6.x-2.0", "version_affected" : "=" }, { "version_value" : "6.x-2.1", "version_affected" : "=" }, { "version_value" : "6.x-2.x", "version_affected" : "=" }, { "version_value" : "7.x-1.0", "version_affected" : "=" }, { "version_value" : "7.x-1.x", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://drupal.org/node/1922168", "name" : "http://drupal.org/node/1922168", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://drupal.org/node/1922170", "name" : "http://drupal.org/node/1922170", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://drupal.org/node/1922410", "name" : "http://drupal.org/node/1922410", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://drupalcode.org/project/taxonomy_manager.git/commitdiff/2d05801", "name" : "http://drupalcode.org/project/taxonomy_manager.git/commitdiff/2d05801", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://drupalcode.org/project/taxonomy_manager.git/commitdiff/595f1b3", "name" : "http://drupalcode.org/project/taxonomy_manager.git/commitdiff/595f1b3", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/21/5", "name" : "[oss-security] 20130220 Re: CVE request for Drupal Core and contributed modules", "refsource" : "MLIST", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site request forgery (CSRF) vulnerability in the Taxonomy Manager (taxonomy_manager) module 6.x-2.x before 6.x-2.2 and 7.x-1.x before 7.x-1.0-rc1 for Drupal allows remote attackers to hijack the authentication of users with 'administer taxonomy' permissions via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mattias_hutterer:taxonomy_manager:6.x-2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mattias_hutterer:taxonomy_manager:6.x-2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mattias_hutterer:taxonomy_manager:6.x-2.x:dev:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mattias_hutterer:taxonomy_manager:7.x-1.0:alpha1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mattias_hutterer:taxonomy_manager:7.x-1.0:alpha2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mattias_hutterer:taxonomy_manager:7.x-1.0:alpha3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mattias_hutterer:taxonomy_manager:7.x-1.0:alpha4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mattias_hutterer:taxonomy_manager:7.x-1.0:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mattias_hutterer:taxonomy_manager:7.x-1.0:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mattias_hutterer:taxonomy_manager:7.x-1.0:beta3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mattias_hutterer:taxonomy_manager:7.x-1.x:dev:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-27T21:55Z", "lastModifiedDate" : "2013-03-28T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0321", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ubercart_views_project", "product" : { "product_data" : [ { "product_name" : "uc_views", "version" : { "version_data" : [ { "version_value" : "6.x-1.0", "version_affected" : "=" }, { "version_value" : "6.x-1.1", "version_affected" : "=" }, { "version_value" : "6.x-1.x", "version_affected" : "=" }, { "version_value" : "6.x-2.0", "version_affected" : "=" }, { "version_value" : "6.x-3.0", "version_affected" : "=" }, { "version_value" : "6.x-3.1", "version_affected" : "=" }, { "version_value" : "6.x-3.2", "version_affected" : "=" }, { "version_value" : "6.x-3.x", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://drupal.org/node/1922128", "name" : "http://drupal.org/node/1922128", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://drupal.org/node/1922416", "name" : "http://drupal.org/node/1922416", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://drupalcode.org/project/uc_views.git/commitdiff/157d5d3", "name" : "http://drupalcode.org/project/uc_views.git/commitdiff/157d5d3", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/21/5", "name" : "[oss-security] 20130220 Re: CVE request for Drupal Core and contributed modules", "refsource" : "MLIST", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in Views in the Ubercart Views (uc_views) module 6.x before 6.x-3.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the full name field." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ubercart_views_project:uc_views:6.x-1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ubercart_views_project:uc_views:6.x-1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ubercart_views_project:uc_views:6.x-1.x:dev:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ubercart_views_project:uc_views:6.x-2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ubercart_views_project:uc_views:6.x-3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ubercart_views_project:uc_views:6.x-3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ubercart_views_project:uc_views:6.x-3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ubercart_views_project:uc_views:6.x-3.x:dev:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-27T21:55Z", "lastModifiedDate" : "2013-03-28T15:28Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0322", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ubercart", "product" : { "product_data" : [ { "product_name" : "ubercart", "version" : { "version_data" : [ { "version_value" : "7.x-3.0", "version_affected" : "=" }, { "version_value" : "7.x-3.1", "version_affected" : "=" }, { "version_value" : "7.x-3.2", "version_affected" : "=" }, { "version_value" : "7.x-3.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://drupal.org/node/1922136", "name" : "http://drupal.org/node/1922136", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://drupal.org/node/1922418", "name" : "http://drupal.org/node/1922418", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://drupalcode.org/project/ubercart.git/commitdiff/f9d69b5", "name" : "http://drupalcode.org/project/ubercart.git/commitdiff/f9d69b5", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/52298", "name" : "52298", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/21/5", "name" : "[oss-security] 20130220 Re: CVE request for Drupal Core and contributed modules", "refsource" : "MLIST", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in Views in the Ubercart module 7.x-3.x before 7.x-3.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via the full name field." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ubercart:ubercart:7.x-3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ubercart:ubercart:7.x-3.0:alpha1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ubercart:ubercart:7.x-3.0:alpha2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ubercart:ubercart:7.x-3.0:alpha3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ubercart:ubercart:7.x-3.0:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ubercart:ubercart:7.x-3.0:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ubercart:ubercart:7.x-3.0:beta3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ubercart:ubercart:7.x-3.0:beta4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ubercart:ubercart:7.x-3.0:dev:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ubercart:ubercart:7.x-3.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ubercart:ubercart:7.x-3.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ubercart:ubercart:7.x-3.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ubercart:ubercart:7.x-3.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ubercart:ubercart:7.x-3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ubercart:ubercart:7.x-3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ubercart:ubercart:7.x-3.3:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-27T21:55Z", "lastModifiedDate" : "2013-07-20T03:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0323", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "display_suite_project", "product" : { "product_data" : [ { "product_name" : "ds", "version" : { "version_data" : [ { "version_value" : "7.x-1.0", "version_affected" : "=" }, { "version_value" : "7.x-1.1", "version_affected" : "=" }, { "version_value" : "7.x-1.2", "version_affected" : "=" }, { "version_value" : "7.x-1.3", "version_affected" : "=" }, { "version_value" : "7.x-1.4", "version_affected" : "=" }, { "version_value" : "7.x-1.5", "version_affected" : "=" }, { "version_value" : "7.x-1.6", "version_affected" : "=" }, { "version_value" : "7.x-1.x", "version_affected" : "=" }, { "version_value" : "7.x-2.0", "version_affected" : "=" }, { "version_value" : "7.x-2.x", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://drupal.org/node/1922424", "name" : "http://drupal.org/node/1922424", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://drupal.org/node/1922430", "name" : "http://drupal.org/node/1922430", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://drupal.org/node/1922438", "name" : "http://drupal.org/node/1922438", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://drupalcode.org/project/ds.git/commitdiff/45d490e", "name" : "http://drupalcode.org/project/ds.git/commitdiff/45d490e", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://drupalcode.org/project/ds.git/commitdiff/665c791", "name" : "http://drupalcode.org/project/ds.git/commitdiff/665c791", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://drupalcode.org/project/ds.git/commitdiff/90bcd8f", "name" : "http://drupalcode.org/project/ds.git/commitdiff/90bcd8f", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/21/5", "name" : "[oss-security] 20130220 Re: CVE request for Drupal Core and contributed modules", "refsource" : "MLIST", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the Display Suite module 7.x-1.x before 7.x-1.7 and 7.x-2.x before 7.x-2.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via the author field." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:display_suite_project:ds:7.x-1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:display_suite_project:ds:7.x-1.0:alpha1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:display_suite_project:ds:7.x-1.0:alpha2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:display_suite_project:ds:7.x-1.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:display_suite_project:ds:7.x-1.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:display_suite_project:ds:7.x-1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:display_suite_project:ds:7.x-1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:display_suite_project:ds:7.x-1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:display_suite_project:ds:7.x-1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:display_suite_project:ds:7.x-1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:display_suite_project:ds:7.x-1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:display_suite_project:ds:7.x-1.x:dev:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:display_suite_project:ds:7.x-2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:display_suite_project:ds:7.x-2.0:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:display_suite_project:ds:7.x-2.0:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:display_suite_project:ds:7.x-2.0:beta3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:display_suite_project:ds:7.x-2.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:display_suite_project:ds:7.x-2.x:dev:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-27T21:55Z", "lastModifiedDate" : "2013-04-04T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0324", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "tomasbarej", "product" : { "product_data" : [ { "product_name" : "menu_reference", "version" : { "version_data" : [ { "version_value" : "7.x-1.x", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://drupal.org/node/1922434", "name" : "http://drupal.org/node/1922434", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://drupal.org/node/1922446", "name" : "http://drupal.org/node/1922446", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://drupalcode.org/project/menu_reference.git/commitdiff/7e7367d", "name" : "http://drupalcode.org/project/menu_reference.git/commitdiff/7e7367d", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/21/5", "name" : "[oss-security] 20130220 Re: CVE request for Drupal Core and contributed modules", "refsource" : "MLIST", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the Rendered links formatter in the Menu Reference module 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with the \"Administer menus and menu items\" permission to inject arbitrary web script or HTML via the menu link title." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tomasbarej:menu_reference:7.x-1.x:dev:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-27T21:55Z", "lastModifiedDate" : "2013-04-04T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0325", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "varnish_http_accelerator_integration_project", "product" : { "product_data" : [ { "product_name" : "varnish", "version" : { "version_data" : [ { "version_value" : "6.x-1.0", "version_affected" : "=" }, { "version_value" : "6.x-1.1", "version_affected" : "=" }, { "version_value" : "6.x-1.x", "version_affected" : "=" }, { "version_value" : "7.x-1.0", "version_affected" : "=" }, { "version_value" : "7.x-1.x", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://drupal.org/node/1922726", "name" : "http://drupal.org/node/1922726", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://drupal.org/node/1922730", "name" : "http://drupal.org/node/1922730", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://drupal.org/node/1922756", "name" : "http://drupal.org/node/1922756", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://drupalcode.org/project/varnish.git/commitdiff/e6726b4", "name" : "http://drupalcode.org/project/varnish.git/commitdiff/e6726b4", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://drupalcode.org/project/varnish.git/commitdiff/f69a62c", "name" : "http://drupalcode.org/project/varnish.git/commitdiff/f69a62c", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/21/5", "name" : "[oss-security] 20130220 Re: CVE request for Drupal Core and contributed modules", "refsource" : "MLIST", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the Varnish module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.0-beta2 for Drupal allow remote attackers to inject arbitrary web script or HTML via crafted a (1) Watchdog message or (2) admin setting." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:varnish_http_accelerator_integration_project:varnish:6.x-1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:varnish_http_accelerator_integration_project:varnish:6.x-1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:varnish_http_accelerator_integration_project:varnish:6.x-1.x:dev:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:varnish_http_accelerator_integration_project:varnish:7.x-1.0:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:varnish_http_accelerator_integration_project:varnish:7.x-1.x:dev:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-27T21:55Z", "lastModifiedDate" : "2013-03-28T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0326", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "openstack", "product" : { "product_data" : [ { "product_name" : "nova", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "debian_linux", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-732" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://access.redhat.com/security/cve/cve-2013-0326", "name" : "https://access.redhat.com/security/cve/cve-2013-0326", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0326", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0326", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Third Party Advisory" ] }, { "url" : "https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-0326", "name" : "https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-0326", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Third Party Advisory" ] }, { "url" : "https://security-tracker.debian.org/tracker/CVE-2013-0326", "name" : "https://security-tracker.debian.org/tracker/CVE-2013-0326", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "OpenStack nova base images permissions are world readable" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openstack:nova:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-12-05T17:15Z", "lastModifiedDate" : "2019-12-13T19:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0327", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jenkins", "product" : { "product_data" : [ { "product_name" : "jenkins", "version" : { "version_data" : [ { "version_value" : "1.480.2", "version_affected" : "<=" }, { "version_value" : "1.501", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0638.html", "name" : "RHSA-2013:0638", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb", "name" : "http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/21/7", "name" : "[oss-security] 20130220 Re: Jenkins CVE request for Jenkins Security Advisory 2013-02-16", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=914875", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=914875", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16", "name" : "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site request forgery (CSRF) vulnerability in Jenkins master in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to hijack the authentication of users via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.501" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*", "versionEndIncluding" : "1.480.2" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-19T14:55Z", "lastModifiedDate" : "2016-06-13T15:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0328", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jenkins", "product" : { "product_data" : [ { "product_name" : "jenkins", "version" : { "version_data" : [ { "version_value" : "1.480.2", "version_affected" : "<=" }, { "version_value" : "1.501", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0638.html", "name" : "RHSA-2013:0638", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb", "name" : "http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/21/7", "name" : "[oss-security] 20130220 Re: Jenkins CVE request for Jenkins Security Advisory 2013-02-16", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/57994", "name" : "57994", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=914876", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=914876", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16", "name" : "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.501" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*", "versionEndIncluding" : "1.480.2" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-19T14:55Z", "lastModifiedDate" : "2016-06-13T15:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0329", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jenkins", "product" : { "product_data" : [ { "product_name" : "jenkins", "version" : { "version_data" : [ { "version_value" : "1.480.2", "version_affected" : "<=" }, { "version_value" : "1.501", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0638.html", "name" : "RHSA-2013:0638", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb", "name" : "http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/21/7", "name" : "[oss-security] 20130220 Re: Jenkins CVE request for Jenkins Security Advisory 2013-02-16", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=914877", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=914877", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16", "name" : "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to bypass the CSRF protection mechanism via unknown attack vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*", "versionEndIncluding" : "1.480.2" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.501" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-19T14:55Z", "lastModifiedDate" : "2016-06-13T22:01Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0330", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jenkins", "product" : { "product_data" : [ { "product_name" : "jenkins", "version" : { "version_data" : [ { "version_value" : "1.480.2", "version_affected" : "<=" }, { "version_value" : "1.501", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0638.html", "name" : "RHSA-2013:0638", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb", "name" : "http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/21/7", "name" : "[oss-security] 20130220 Re: Jenkins CVE request for Jenkins Security Advisory 2013-02-16", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/57994", "name" : "57994", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=914878", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=914878", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16", "name" : "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote authenticated users with write access to build arbitrary jobs via unknown attack vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*", "versionEndIncluding" : "1.480.2" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.501" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-19T14:55Z", "lastModifiedDate" : "2016-06-13T23:24Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0331", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jenkins", "product" : { "product_data" : [ { "product_name" : "jenkins", "version" : { "version_data" : [ { "version_value" : "1.480.2", "version_affected" : "<=" }, { "version_value" : "1.501", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0638.html", "name" : "RHSA-2013:0638", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb", "name" : "http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/21/7", "name" : "[oss-security] 20130220 Re: Jenkins CVE request for Jenkins Security Advisory 2013-02-16", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/57994", "name" : "57994", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=914879", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=914879", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16", "name" : "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Jenkins before 1.502 and LTS before 1.480.3 allows remote authenticated users with write access to cause a denial of service via a crafted payload." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*", "versionEndIncluding" : "1.480.2" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.501" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-19T14:55Z", "lastModifiedDate" : "2016-06-13T23:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0332", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "zoneminder", "product" : { "product_data" : [ { "product_name" : "zoneminder", "version" : { "version_data" : [ { "version_value" : "1.24.0", "version_affected" : "=" }, { "version_value" : "1.24.1", "version_affected" : "=" }, { "version_value" : "1.24.2", "version_affected" : "=" }, { "version_value" : "1.24.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700912", "name" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700912", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2013/dsa-2640", "name" : "DSA-2640", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/21/8", "name" : "[oss-security] 20130220 Re: CVE request: zoneminder: local file inclusion vulnerability", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/21/9", "name" : "[oss-security] 20130221 Re: CVE request: zoneminder: local file inclusion vulnerability", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.zoneminder.com/forums/viewtopic.php?f=1&t=17979", "name" : "http://www.zoneminder.com/forums/viewtopic.php?f=1&t=17979", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.zoneminder.com/wiki/index.php/Change_History", "name" : "http://www.zoneminder.com/wiki/index.php/Change_History", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple directory traversal vulnerabilities in ZoneMinder 1.24.x before 1.24.4 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) view, (2) request, or (3) action parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zoneminder:zoneminder:1.24.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zoneminder:zoneminder:1.24.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zoneminder:zoneminder:1.24.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zoneminder:zoneminder:1.24.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-20T15:55Z", "lastModifiedDate" : "2013-03-21T16:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0333", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "rubyonrails", "product" : { "product_data" : [ { "product_name" : "rails", "version" : { "version_data" : [ { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.3.3", "version_affected" : "=" }, { "version_value" : "2.3.4", "version_affected" : "=" }, { "version_value" : "2.3.9", "version_affected" : "=" }, { "version_value" : "2.3.10", "version_affected" : "=" }, { "version_value" : "2.3.11", "version_affected" : "=" }, { "version_value" : "2.3.12", "version_affected" : "=" }, { "version_value" : "2.3.13", "version_affected" : "=" }, { "version_value" : "2.3.14", "version_affected" : "=" }, { "version_value" : "2.3.15", "version_affected" : "=" }, { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "=" }, { "version_value" : "3.0.18", "version_affected" : "=" }, { "version_value" : "3.0.19", "version_affected" : "=" } ] } }, { "product_name" : "ruby_on_rails", "version" : { "version_data" : [ { "version_value" : "3.0.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html", "name" : "APPLE-SA-2013-06-04-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html", "name" : "APPLE-SA-2013-03-14-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0201.html", "name" : "RHSA-2013:0201", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0202.html", "name" : "RHSA-2013:0202", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0203.html", "name" : "RHSA-2013:0203", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT5784", "name" : "http://support.apple.com/kb/HT5784", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://weblog.rubyonrails.org/2013/1/28/Rails-3-0-20-and-2-3-16-have-been-released/", "name" : "http://weblog.rubyonrails.org/2013/1/28/Rails-3-0-20-and-2-3-16-have-been-released/", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2013/dsa-2613", "name" : "DSA-2613", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/628463", "name" : "VU#628463", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "https://groups.google.com/group/rubyonrails-security/msg/52179af76915e518?dmode=source&output=gplain", "name" : "[rubyonrails-security] 20130129 Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3", "refsource" : "MLIST", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://puppet.com/security/cve/cve-2013-0333", "name" : "https://puppet.com/security/cve/cve-2013-0333", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "lib/active_support/json/backends/yaml.rb in Ruby on Rails 2.3.x before 2.3.16 and 3.0.x before 3.0.20 does not properly convert JSON data to YAML data for processing by a YAML parser, which allows remote attackers to execute arbitrary code, conduct SQL injection attacks, or bypass authentication via crafted data that triggers unsafe decoding, a different vulnerability than CVE-2013-0156." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:2.3.15:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.0:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.0:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.0:beta3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.0:beta4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.0:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.1:pre:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.2:pre:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.4:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.5:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.6:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.6:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.7:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.7:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.8:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.8:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.8:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.8:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.9:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.9:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.9:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.9:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.9:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.10:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.12:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.13:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:rails:3.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rubyonrails:ruby_on_rails:3.0.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-30T12:00Z", "lastModifiedDate" : "2019-08-08T15:42Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0334", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "bundler", "product" : { "product_data" : [ { "product_name" : "bundler", "version" : { "version_data" : [ { "version_value" : "0.3.1", "version_affected" : "=" }, { "version_value" : "0.4.0", "version_affected" : "=" }, { "version_value" : "0.4.1", "version_affected" : "=" }, { "version_value" : "0.5.0", "version_affected" : "=" }, { "version_value" : "0.6.0", "version_affected" : "=" }, { "version_value" : "0.7.0", "version_affected" : "=" }, { "version_value" : "0.7.2", "version_affected" : "=" }, { "version_value" : "0.8.0", "version_affected" : "=" }, { "version_value" : "0.8.2", "version_affected" : "=" }, { "version_value" : "0.8.5", "version_affected" : "=" }, { "version_value" : "0.9.0", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.9.4", "version_affected" : "=" }, { "version_value" : "0.9.5", "version_affected" : "=" }, { "version_value" : "0.9.6", "version_affected" : "=" }, { "version_value" : "0.9.7", "version_affected" : "=" }, { "version_value" : "0.9.8", "version_affected" : "=" }, { "version_value" : "0.9.9", "version_affected" : "=" }, { "version_value" : "0.9.10", "version_affected" : "=" }, { "version_value" : "0.9.11", "version_affected" : "=" }, { "version_value" : "0.9.12", "version_affected" : "=" }, { "version_value" : "0.9.13", "version_affected" : "=" }, { "version_value" : "0.9.14", "version_affected" : "=" }, { "version_value" : "0.9.15", "version_affected" : "=" }, { "version_value" : "0.9.16", "version_affected" : "=" }, { "version_value" : "0.9.17", "version_affected" : "=" }, { "version_value" : "0.9.18", "version_affected" : "=" }, { "version_value" : "0.9.19", "version_affected" : "=" }, { "version_value" : "0.9.20", "version_affected" : "=" }, { "version_value" : "0.9.21", "version_affected" : "=" }, { "version_value" : "0.9.22", "version_affected" : "=" }, { "version_value" : "0.9.23", "version_affected" : "=" }, { "version_value" : "0.9.24", "version_affected" : "=" }, { "version_value" : "0.9.25", "version_affected" : "=" }, { "version_value" : "0.9.26", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.0.9", "version_affected" : "=" }, { "version_value" : "1.0.10", "version_affected" : "=" }, { "version_value" : "1.0.11", "version_affected" : "=" }, { "version_value" : "1.0.12", "version_affected" : "=" }, { "version_value" : "1.0.13", "version_affected" : "=" }, { "version_value" : "1.0.14", "version_affected" : "=" }, { "version_value" : "1.0.15", "version_affected" : "=" }, { "version_value" : "1.0.16", "version_affected" : "=" }, { "version_value" : "1.0.17", "version_affected" : "=" }, { "version_value" : "1.0.18", "version_affected" : "=" }, { "version_value" : "1.0.19", "version_affected" : "=" }, { "version_value" : "1.0.20", "version_affected" : "=" }, { "version_value" : "1.0.21", "version_affected" : "=" }, { "version_value" : "1.0.21.1", "version_affected" : "=" }, { "version_value" : "1.0.22", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.2.5", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.3.4", "version_affected" : "=" }, { "version_value" : "1.3.5", "version_affected" : "=" }, { "version_value" : "1.3.6", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.6", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.6.1", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "1.6.3", "version_affected" : "=" }, { "version_value" : "1.6.4", "version_affected" : "=" }, { "version_value" : "1.6.5", "version_affected" : "=" }, { "version_value" : "1.6.6", "version_affected" : "=" }, { "version_value" : "1.6.7", "version_affected" : "=" }, { "version_value" : "1.6.8", "version_affected" : "=" }, { "version_value" : "1.6.9", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "fedoraproject", "product" : { "product_data" : [ { "product_name" : "fedora", "version" : { "version_data" : [ { "version_value" : "19", "version_affected" : "=" }, { "version_value" : "20", "version_affected" : "=" }, { "version_value" : "21", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "opensuse", "product" : { "product_data" : [ { "product_name" : "opensuse", "version" : { "version_data" : [ { "version_value" : "13.1", "version_affected" : "=" }, { "version_value" : "13.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bundler.io/blog/2014/08/14/bundler-may-install-gems-from-a-different-source-than-expected-cve-2013-0334.html", "name" : "http://bundler.io/blog/2014/08/14/bundler-may-install-gems-from-a-different-source-than-expected-cve-2013-0334.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140609.html", "name" : "FEDORA-2014-11649", "refsource" : "FEDORA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140654.html", "name" : "FEDORA-2014-11630", "refsource" : "FEDORA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140655.html", "name" : "FEDORA-2014-11677", "refsource" : "FEDORA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2015-03/msg00092.html", "name" : "openSUSE-SU-2015:0628", "refsource" : "SUSE", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html", "name" : "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/70099", "name" : "70099", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://security.gentoo.org/glsa/201609-02", "name" : "GLSA-201609-02", "refsource" : "GENTOO", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Bundler before 1.7, when multiple top-level source lines are used, allows remote attackers to install arbitrary gems by creating a gem with the same name as another gem in a different source." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bundler:bundler:*:*:*:*:*:ruby:*:*", "versionEndExcluding" : "1.7.0" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-10-31T14:55Z", "lastModifiedDate" : "2019-07-16T12:21Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0335", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "openstack", "product" : { "product_data" : [ { "product_name" : "essex", "version" : { "version_data" : [ { "version_value" : "2012.1", "version_affected" : "=" } ] } }, { "product_name" : "folsom", "version" : { "version_data" : [ { "version_value" : "2012.2", "version_affected" : "=" } ] } }, { "product_name" : "grizzly", "version" : { "version_data" : [ { "version_value" : "2012.2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "canonical", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "11.10", "version_affected" : "=" }, { "version_value" : "12.04", "version_affected" : "=" }, { "version_value" : "12.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0709.html", "name" : "RHSA-2013:0709", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/52337", "name" : "52337", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/52728", "name" : "52728", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/26/7", "name" : "[oss-security] 20130226 [OSSA-2013-006] VNC proxy can connect to the wrong VM (CVE-2013-0335)", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.osvdb.org/90657", "name" : "90657", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1771-1", "name" : "USN-1771-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://bugs.launchpad.net/nova/+bug/1125378", "name" : "https://bugs.launchpad.net/nova/+bug/1125378", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://review.openstack.org/#/c/22086/", "name" : "https://review.openstack.org/#/c/22086/", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://review.openstack.org/#/c/22758", "name" : "https://review.openstack.org/#/c/22758", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://review.openstack.org/#/c/22872/", "name" : "https://review.openstack.org/#/c/22872/", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token for a deleted VM that was bound to the same VNC port." }, { "lang" : "en", "value" : "Per http://www.ubuntu.com/usn/USN-1771-1/\r\n\"A security issue affects these releases of Ubuntu and its derivatives:\r\n\r\nUbuntu 12.10\r\nUbuntu 12.04 LTS\r\nUbuntu 11.10\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openstack:essex:2012.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openstack:folsom:2012.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openstack:grizzly:2012.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 6.8, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-22T21:55Z", "lastModifiedDate" : "2013-06-05T03:40Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0336", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "freeipa", "version" : { "version_data" : [ { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.3", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.1.5", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/52763", "name" : "52763", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/58747", "name" : "58747", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=913751", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=913751", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83132", "name" : "389directoryserver-cve20130336-dos(83132)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://fedorahosted.org/freeipa/ticket/3539", "name" : "https://fedorahosted.org/freeipa/ticket/3539", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://git.fedorahosted.org/cgit/freeipa.git/commit/?id=7b45e33400355df44e75576ef7f70a39d163bf8e", "name" : "https://git.fedorahosted.org/cgit/freeipa.git/commit/?id=7b45e33400355df44e75576ef7f70a39d163bf8e", "refsource" : "CONFIRM", "tags" : [ "Exploit", "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The ipapwd_chpwop function in daemons/ipa-slapi-plugins/ipa-pwd-extop/ipa_pwd_extop.c in the directory server (dirsrv) in FreeIPA before 3.2.0 allows remote attackers to cause a denial of service (crash) via a connection request without a username/dn, related to the 389 directory server." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:freeipa:3.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:freeipa:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:freeipa:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:freeipa:3.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:freeipa:3.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:freeipa:3.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:freeipa:3.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:freeipa:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.1.5" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-11-03T23:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0337", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "nginx", "product" : { "product_data" : [ { "product_name" : "nginx", "version" : { "version_data" : [ { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.0.9", "version_affected" : "=" }, { "version_value" : "1.0.10", "version_affected" : "=" }, { "version_value" : "1.0.11", "version_affected" : "=" }, { "version_value" : "1.0.12", "version_affected" : "=" }, { "version_value" : "1.0.13", "version_affected" : "=" }, { "version_value" : "1.0.14", "version_affected" : "=" }, { "version_value" : "1.0.15", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "=" }, { "version_value" : "1.1.7", "version_affected" : "=" }, { "version_value" : "1.1.8", "version_affected" : "=" }, { "version_value" : "1.1.9", "version_affected" : "=" }, { "version_value" : "1.1.10", "version_affected" : "=" }, { "version_value" : "1.1.11", "version_affected" : "=" }, { "version_value" : "1.1.12", "version_affected" : "=" }, { "version_value" : "1.1.13", "version_affected" : "=" }, { "version_value" : "1.1.14", "version_affected" : "=" }, { "version_value" : "1.1.15", "version_affected" : "=" }, { "version_value" : "1.1.16", "version_affected" : "=" }, { "version_value" : "1.1.17", "version_affected" : "=" }, { "version_value" : "1.1.18", "version_affected" : "=" }, { "version_value" : "1.1.19", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.3.4", "version_affected" : "=" }, { "version_value" : "1.3.5", "version_affected" : "=" }, { "version_value" : "1.3.6", "version_affected" : "=" }, { "version_value" : "1.3.7", "version_affected" : "=" }, { "version_value" : "1.3.8", "version_affected" : "=" }, { "version_value" : "1.3.9", "version_affected" : "=" }, { "version_value" : "1.3.10", "version_affected" : "=" }, { "version_value" : "1.3.11", "version_affected" : "=" }, { "version_value" : "1.3.12", "version_affected" : "=" }, { "version_value" : "1.3.13", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/55181", "name" : "55181", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201310-04.xml", "name" : "GLSA-201310-04", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/21/15", "name" : "[oss-security] 20130221 nginx world-readable logdir", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/22/1", "name" : "[oss-security] 20130221 Re: CVE request: nginx world-readable logdir", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/24/1", "name" : "[oss-security] 20130224 nginx CVE-2013-0337 world-readable logs", "refsource" : "MLIST", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the (1) access.log and (2) error.log files, which allows local users to obtain sensitive information by reading the files." }, { "lang" : "en", "value" : "AV:N per http://www.gentoo.org/security/en/glsa/glsa-201310-04.xml\n\nand per http://secunia.com/advisories/55181" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.1.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.3.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.3.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.3.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:1.3.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:nginx:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.3.13" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-10-27T00:55Z", "lastModifiedDate" : "2019-02-28T20:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0338", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "xmlsoft", "product" : { "product_data" : [ { "product_name" : "libxml2", "version" : { "version_data" : [ { "version_value" : "1.7.0", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.7.4", "version_affected" : "=" }, { "version_value" : "1.8.0", "version_affected" : "=" }, { "version_value" : "1.8.1", "version_affected" : "=" }, { "version_value" : "1.8.2", "version_affected" : "=" }, { "version_value" : "1.8.3", "version_affected" : "=" }, { "version_value" : "1.8.4", "version_affected" : "=" }, { "version_value" : "1.8.5", "version_affected" : "=" }, { "version_value" : "1.8.6", "version_affected" : "=" }, { "version_value" : "1.8.7", "version_affected" : "=" }, { "version_value" : "1.8.9", "version_affected" : "=" }, { "version_value" : "1.8.10", "version_affected" : "=" }, { "version_value" : "1.8.13", "version_affected" : "=" }, { "version_value" : "1.8.14", "version_affected" : "=" }, { "version_value" : "1.8.16", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.5", "version_affected" : "=" }, { "version_value" : "2.2.6", "version_affected" : "=" }, { "version_value" : "2.2.7", "version_affected" : "=" }, { "version_value" : "2.2.8", "version_affected" : "=" }, { "version_value" : "2.2.9", "version_affected" : "=" }, { "version_value" : "2.2.10", "version_affected" : "=" }, { "version_value" : "2.2.11", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.3.3", "version_affected" : "=" }, { "version_value" : "2.3.4", "version_affected" : "=" }, { "version_value" : "2.3.5", "version_affected" : "=" }, { "version_value" : "2.3.6", "version_affected" : "=" }, { "version_value" : "2.3.7", "version_affected" : "=" }, { "version_value" : "2.3.8", "version_affected" : "=" }, { "version_value" : "2.3.9", "version_affected" : "=" }, { "version_value" : "2.3.10", "version_affected" : "=" }, { "version_value" : "2.3.11", "version_affected" : "=" }, { "version_value" : "2.3.12", "version_affected" : "=" }, { "version_value" : "2.3.13", "version_affected" : "=" }, { "version_value" : "2.3.14", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.4.4", "version_affected" : "=" }, { "version_value" : "2.4.5", "version_affected" : "=" }, { "version_value" : "2.4.6", "version_affected" : "=" }, { "version_value" : "2.4.7", "version_affected" : "=" }, { "version_value" : "2.4.8", "version_affected" : "=" }, { "version_value" : "2.4.9", "version_affected" : "=" }, { "version_value" : "2.4.10", "version_affected" : "=" }, { "version_value" : "2.4.11", "version_affected" : "=" }, { "version_value" : "2.4.12", "version_affected" : "=" }, { "version_value" : "2.4.13", "version_affected" : "=" }, { "version_value" : "2.4.14", "version_affected" : "=" }, { "version_value" : "2.4.15", "version_affected" : "=" }, { "version_value" : "2.4.16", "version_affected" : "=" }, { "version_value" : "2.4.17", "version_affected" : "=" }, { "version_value" : "2.4.18", "version_affected" : "=" }, { "version_value" : "2.4.19", "version_affected" : "=" }, { "version_value" : "2.4.20", "version_affected" : "=" }, { "version_value" : "2.4.21", "version_affected" : "=" }, { "version_value" : "2.4.22", "version_affected" : "=" }, { "version_value" : "2.4.23", "version_affected" : "=" }, { "version_value" : "2.4.24", "version_affected" : "=" }, { "version_value" : "2.4.25", "version_affected" : "=" }, { "version_value" : "2.4.26", "version_affected" : "=" }, { "version_value" : "2.4.27", "version_affected" : "=" }, { "version_value" : "2.4.28", "version_affected" : "=" }, { "version_value" : "2.4.29", "version_affected" : "=" }, { "version_value" : "2.4.30", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.4", "version_affected" : "=" }, { "version_value" : "2.5.7", "version_affected" : "=" }, { "version_value" : "2.5.8", "version_affected" : "=" }, { "version_value" : "2.5.10", "version_affected" : "=" }, { "version_value" : "2.5.11", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.6.7", "version_affected" : "=" }, { "version_value" : "2.6.8", "version_affected" : "=" }, { "version_value" : "2.6.9", "version_affected" : "=" }, { "version_value" : "2.6.11", "version_affected" : "=" }, { "version_value" : "2.6.12", "version_affected" : "=" }, { "version_value" : "2.6.13", "version_affected" : "=" }, { "version_value" : "2.6.14", "version_affected" : "=" }, { "version_value" : "2.6.16", "version_affected" : "=" }, { "version_value" : "2.6.17", "version_affected" : "=" }, { "version_value" : "2.6.18", "version_affected" : "=" }, { "version_value" : "2.6.20", "version_affected" : "=" }, { "version_value" : "2.6.21", "version_affected" : "=" }, { "version_value" : "2.6.22", "version_affected" : "=" }, { "version_value" : "2.6.23", "version_affected" : "=" }, { "version_value" : "2.6.24", "version_affected" : "=" }, { "version_value" : "2.6.25", "version_affected" : "=" }, { "version_value" : "2.6.26", "version_affected" : "=" }, { "version_value" : "2.6.27", "version_affected" : "=" }, { "version_value" : "2.6.28", "version_affected" : "=" }, { "version_value" : "2.6.29", "version_affected" : "=" }, { "version_value" : "2.6.30", "version_affected" : "=" }, { "version_value" : "2.6.31", "version_affected" : "=" }, { "version_value" : "2.6.32", "version_affected" : "=" }, { "version_value" : "2.7.0", "version_affected" : "=" }, { "version_value" : "2.7.1", "version_affected" : "=" }, { "version_value" : "2.7.2", "version_affected" : "=" }, { "version_value" : "2.7.3", "version_affected" : "=" }, { "version_value" : "2.7.4", "version_affected" : "=" }, { "version_value" : "2.7.5", "version_affected" : "=" }, { "version_value" : "2.7.6", "version_affected" : "=" }, { "version_value" : "2.7.7", "version_affected" : "=" }, { "version_value" : "2.7.8", "version_affected" : "=" }, { "version_value" : "2.9.0", "version_affected" : "<=" } ] } } ] } }, { "vendor_name" : "canonical", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "8.04", "version_affected" : "=" }, { "version_value" : "10.04", "version_affected" : "=" }, { "version_value" : "11.10", "version_affected" : "=" }, { "version_value" : "12.04", "version_affected" : "=" }, { "version_value" : "12.10", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "opensuse", "product" : { "product_data" : [ { "product_name" : "opensuse", "version" : { "version_data" : [ { "version_value" : "12.1", "version_affected" : "=" }, { "version_value" : "12.2", "version_affected" : "=" }, { "version_value" : "12.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html", "name" : "SUSE-SU-2013:1627", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-03/msg00112.html", "name" : "openSUSE-SU-2013:0552", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-03/msg00114.html", "name" : "openSUSE-SU-2013:0555", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=142798889927587&w=2", "name" : "SSRT101996", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/52662", "name" : "52662", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/55568", "name" : "55568", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2013/dsa-2652", "name" : "DSA-2652", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:056", "name" : "MDVSA-2013:056", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1782-1", "name" : "USN-1782-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=912400", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=912400", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://git.gnome.org/browse/libxml2/commit/?id=23f05e0c33987d6605387b300c4be5da2120a7ab", "name" : "https://git.gnome.org/browse/libxml2/commit/?id=23f05e0c33987d6605387b300c4be5da2120a7ab", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "libxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via an XML file containing an entity declaration with long replacement text and many references to this entity, aka \"internal entity expansion\" with linear complexity." }, { "lang" : "en", "value" : "Per http://www.ubuntu.com/usn/USN-1782-1/ \"A security issue affects these releases of Ubuntu and its derivatives:\r\n\r\n Ubuntu 12.10\r\n Ubuntu 12.04 LTS\r\n Ubuntu 11.10\r\n Ubuntu 10.04 LTS\r\n Ubuntu 8.04 LTS\"\r\n\r\nPer http://lists.opensuse.org/opensuse-updates/2013-03/msg00112.html \"http://lists.opensuse.org/opensuse-updates/2013-03/msg00112.html\"\r\n" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.8.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.8.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.8.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.8.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.8.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.8.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.8.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.8.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.8.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.8.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.2.0:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.5.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.5.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.7.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.7.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.7.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.9.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.9.0:rc1:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:-:lts:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:10.04:-:lts:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-25T23:55Z", "lastModifiedDate" : "2018-10-30T16:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0339", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "xmlsoft", "product" : { "product_data" : [ { "product_name" : "libxml2", "version" : { "version_data" : [ { "version_value" : "1.7.0", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.7.4", "version_affected" : "=" }, { "version_value" : "1.8.0", "version_affected" : "=" }, { "version_value" : "1.8.1", "version_affected" : "=" }, { "version_value" : "1.8.2", "version_affected" : "=" }, { "version_value" : "1.8.3", "version_affected" : "=" }, { "version_value" : "1.8.4", "version_affected" : "=" }, { "version_value" : "1.8.5", "version_affected" : "=" }, { "version_value" : "1.8.6", "version_affected" : "=" }, { "version_value" : "1.8.7", "version_affected" : "=" }, { "version_value" : "1.8.9", "version_affected" : "=" }, { "version_value" : "1.8.10", "version_affected" : "=" }, { "version_value" : "1.8.13", "version_affected" : "=" }, { "version_value" : "1.8.14", "version_affected" : "=" }, { "version_value" : "1.8.16", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.5", "version_affected" : "=" }, { "version_value" : "2.2.6", "version_affected" : "=" }, { "version_value" : "2.2.7", "version_affected" : "=" }, { "version_value" : "2.2.8", "version_affected" : "=" }, { "version_value" : "2.2.9", "version_affected" : "=" }, { "version_value" : "2.2.10", "version_affected" : "=" }, { "version_value" : "2.2.11", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.3.3", "version_affected" : "=" }, { "version_value" : "2.3.4", "version_affected" : "=" }, { "version_value" : "2.3.5", "version_affected" : "=" }, { "version_value" : "2.3.6", "version_affected" : "=" }, { "version_value" : "2.3.7", "version_affected" : "=" }, { "version_value" : "2.3.8", "version_affected" : "=" }, { "version_value" : "2.3.9", "version_affected" : "=" }, { "version_value" : "2.3.10", "version_affected" : "=" }, { "version_value" : "2.3.11", "version_affected" : "=" }, { "version_value" : "2.3.12", "version_affected" : "=" }, { "version_value" : "2.3.13", "version_affected" : "=" }, { "version_value" : "2.3.14", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.4.4", "version_affected" : "=" }, { "version_value" : "2.4.5", "version_affected" : "=" }, { "version_value" : "2.4.6", "version_affected" : "=" }, { "version_value" : "2.4.7", "version_affected" : "=" }, { "version_value" : "2.4.8", "version_affected" : "=" }, { "version_value" : "2.4.9", "version_affected" : "=" }, { "version_value" : "2.4.10", "version_affected" : "=" }, { "version_value" : "2.4.11", "version_affected" : "=" }, { "version_value" : "2.4.12", "version_affected" : "=" }, { "version_value" : "2.4.13", "version_affected" : "=" }, { "version_value" : "2.4.14", "version_affected" : "=" }, { "version_value" : "2.4.15", "version_affected" : "=" }, { "version_value" : "2.4.16", "version_affected" : "=" }, { "version_value" : "2.4.17", "version_affected" : "=" }, { "version_value" : "2.4.18", "version_affected" : "=" }, { "version_value" : "2.4.19", "version_affected" : "=" }, { "version_value" : "2.4.20", "version_affected" : "=" }, { "version_value" : "2.4.21", "version_affected" : "=" }, { "version_value" : "2.4.22", "version_affected" : "=" }, { "version_value" : "2.4.23", "version_affected" : "=" }, { "version_value" : "2.4.24", "version_affected" : "=" }, { "version_value" : "2.4.25", "version_affected" : "=" }, { "version_value" : "2.4.26", "version_affected" : "=" }, { "version_value" : "2.4.27", "version_affected" : "=" }, { "version_value" : "2.4.28", "version_affected" : "=" }, { "version_value" : "2.4.29", "version_affected" : "=" }, { "version_value" : "2.4.30", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.4", "version_affected" : "=" }, { "version_value" : "2.5.7", "version_affected" : "=" }, { "version_value" : "2.5.8", "version_affected" : "=" }, { "version_value" : "2.5.10", "version_affected" : "=" }, { "version_value" : "2.5.11", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.6.7", "version_affected" : "=" }, { "version_value" : "2.6.8", "version_affected" : "=" }, { "version_value" : "2.6.9", "version_affected" : "=" }, { "version_value" : "2.6.11", "version_affected" : "=" }, { "version_value" : "2.6.12", "version_affected" : "=" }, { "version_value" : "2.6.13", "version_affected" : "=" }, { "version_value" : "2.6.14", "version_affected" : "=" }, { "version_value" : "2.6.16", "version_affected" : "=" }, { "version_value" : "2.6.17", "version_affected" : "=" }, { "version_value" : "2.6.18", "version_affected" : "=" }, { "version_value" : "2.6.20", "version_affected" : "=" }, { "version_value" : "2.6.21", "version_affected" : "=" }, { "version_value" : "2.6.22", "version_affected" : "=" }, { "version_value" : "2.6.23", "version_affected" : "=" }, { "version_value" : "2.6.24", "version_affected" : "=" }, { "version_value" : "2.6.25", "version_affected" : "=" }, { "version_value" : "2.6.26", "version_affected" : "=" }, { "version_value" : "2.6.27", "version_affected" : "=" }, { "version_value" : "2.6.28", "version_affected" : "=" }, { "version_value" : "2.6.29", "version_affected" : "=" }, { "version_value" : "2.6.30", "version_affected" : "=" }, { "version_value" : "2.6.31", "version_affected" : "=" }, { "version_value" : "2.6.32", "version_affected" : "=" }, { "version_value" : "2.7.0", "version_affected" : "=" }, { "version_value" : "2.7.1", "version_affected" : "=" }, { "version_value" : "2.7.2", "version_affected" : "=" }, { "version_value" : "2.7.3", "version_affected" : "=" }, { "version_value" : "2.7.4", "version_affected" : "=" }, { "version_value" : "2.7.5", "version_affected" : "=" }, { "version_value" : "2.7.6", "version_affected" : "=" }, { "version_value" : "2.7.7", "version_affected" : "=" }, { "version_value" : "2.7.8", "version_affected" : "=" }, { "version_value" : "2.8.0", "version_affected" : "=" }, { "version_value" : "2.9.0", "version_affected" : "=" }, { "version_value" : "2.9.1", "version_affected" : "<=" } ] } } ] } }, { "vendor_name" : "canonical", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "10.04", "version_affected" : "=" }, { "version_value" : "12.04", "version_affected" : "=" }, { "version_value" : "12.10", "version_affected" : "=" }, { "version_value" : "13.04", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "debian_linux", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "suse", "product" : { "product_data" : [ { "product_name" : "linux_enterprise_server", "version" : { "version_data" : [ { "version_value" : "10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html", "name" : "SUSE-SU-2013:1627", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://openwall.com/lists/oss-security/2013/02/21/24", "name" : "[oss-security] 20130221 CVE Guidance for Libraries and Resource-Consumption DoS", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://openwall.com/lists/oss-security/2013/02/22/3", "name" : "[oss-security] 20130221 CVEs for libxml2 and expat internal and external XML entity expansion", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://seclists.org/oss-sec/2013/q4/182", "name" : "[oss-security] 20131028 Re: CVE Request: libxml2 external parsed entities issue", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://seclists.org/oss-sec/2013/q4/184", "name" : "[oss-security] 20131029 Re: CVE Request: libxml2 external parsed entities issue", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://seclists.org/oss-sec/2013/q4/188", "name" : "[oss-security] 20131029 Re: CVE Request: libxml2 external parsed entities issue", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/52662", "name" : "52662", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/54172", "name" : "54172", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/55568", "name" : "55568", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2013/dsa-2652", "name" : "DSA-2652", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/04/12/6", "name" : "[oss-security] 20130412 Re-evaluating expat/libxml2 CVE assignments", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1904-1", "name" : "USN-1904-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1904-2", "name" : "USN-1904-2", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=915149", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=915149", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://git.gnome.org/browse/libxml2/commit/?id=4629ee02ac649c27f9c0cf98ba017c6b5526070f", "name" : "https://git.gnome.org/browse/libxml2/commit/?id=4629ee02ac649c27f9c0cf98ba017c6b5526070f", "refsource" : "MISC", "tags" : [ "Exploit", "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "libxml2 through 2.9.1 does not properly handle external entities expansion unless an application developer uses the xmlSAX2ResolveEntity or xmlSetExternalEntityLoader function, which allows remote attackers to cause a denial of service (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML document, aka an XML External Entity (XXE) issue. NOTE: it could be argued that because libxml2 already provides the ability to disable external entity expansion, the responsibility for resolving this issue lies with application developers; according to this argument, this entry should be REJECTed and each affected application would need its own CVE." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.8.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.8.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.8.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.8.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.8.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.8.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.8.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.8.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.8.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:1.8.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.2.0:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.3.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.4.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.5.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.5.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.6.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.7.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.7.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.7.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:2.9.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.9.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:ltss:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-01-21T18:55Z", "lastModifiedDate" : "2016-05-05T15:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0340", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "libexpat", "product" : { "product_data" : [ { "product_name" : "expat", "version" : { "version_data" : [ { "version_value" : "1.95.1", "version_affected" : "=" }, { "version_value" : "1.95.2", "version_affected" : "=" }, { "version_value" : "1.95.4", "version_affected" : "=" }, { "version_value" : "1.95.5", "version_affected" : "=" }, { "version_value" : "1.95.6", "version_affected" : "=" }, { "version_value" : "1.95.7", "version_affected" : "=" }, { "version_value" : "1.95.8", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://openwall.com/lists/oss-security/2013/02/22/3", "name" : "[oss-security] 20130221 CVEs for libxml2 and expat internal and external XML entity expansion", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1028213", "name" : "1028213", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/04/12/6", "name" : "[oss-security] 20130413 Re-evaluating expat/libxml2 CVE assignments", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.osvdb.org/90634", "name" : "90634", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/58233", "name" : "58233", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://security.gentoo.org/glsa/201701-21", "name" : "GLSA-201701-21", "refsource" : "GENTOO", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "expat 2.1.0 and earlier does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML document, aka an XML External Entity (XXE) issue. NOTE: it could be argued that because expat already provides the ability to disable external entity expansion, the responsibility for resolving this issue lies with application developers; according to this argument, this entry should be REJECTed, and each affected application would need its own CVE." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libexpat:expat:1.95.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libexpat:expat:1.95.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libexpat:expat:1.95.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libexpat:expat:1.95.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libexpat:expat:1.95.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libexpat:expat:1.95.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libexpat:expat:1.95.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libexpat:expat:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libexpat:expat:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libexpat:expat:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.1.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-01-21T18:55Z", "lastModifiedDate" : "2017-07-01T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0341", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2013-09-26T14:16Z", "lastModifiedDate" : "2013-09-26T14:16Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0342", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "pyrad_project", "product" : { "product_data" : [ { "product_name" : "pyrad", "version" : { "version_data" : [ { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2013/02/15/9", "name" : "http://www.openwall.com/lists/oss-security/2013/02/15/9", "refsource" : "MISC", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/21/27", "name" : "http://www.openwall.com/lists/oss-security/2013/02/21/27", "refsource" : "MISC", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/22/2", "name" : "http://www.openwall.com/lists/oss-security/2013/02/22/2", "refsource" : "MISC", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57984", "name" : "http://www.securityfocus.com/bid/57984", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=911685", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=911685", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82134", "name" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82134", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://github.com/pyradius/pyrad/commit/38f74b36814ca5b1a27d9898141126af4953bee5", "name" : "https://github.com/pyradius/pyrad/commit/38f74b36814ca5b1a27d9898141126af4953bee5", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pyrad_project:pyrad:*:*:*:*:*:*:*:*", "versionEndExcluding" : "2.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-12-09T21:15Z", "lastModifiedDate" : "2019-12-11T02:40Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0343", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "=" }, { "version_value" : "3.0.18", "version_affected" : "=" }, { "version_value" : "3.0.19", "version_affected" : "=" }, { "version_value" : "3.0.20", "version_affected" : "=" }, { "version_value" : "3.0.21", "version_affected" : "=" }, { "version_value" : "3.0.22", "version_affected" : "=" }, { "version_value" : "3.0.23", "version_affected" : "=" }, { "version_value" : "3.0.24", "version_affected" : "=" }, { "version_value" : "3.0.25", "version_affected" : "=" }, { "version_value" : "3.0.26", "version_affected" : "=" }, { "version_value" : "3.0.27", "version_affected" : "=" }, { "version_value" : "3.0.28", "version_affected" : "=" }, { "version_value" : "3.0.29", "version_affected" : "=" }, { "version_value" : "3.0.30", "version_affected" : "=" }, { "version_value" : "3.0.31", "version_affected" : "=" }, { "version_value" : "3.0.32", "version_affected" : "=" }, { "version_value" : "3.0.33", "version_affected" : "=" }, { "version_value" : "3.0.34", "version_affected" : "=" }, { "version_value" : "3.0.35", "version_affected" : "=" }, { "version_value" : "3.0.36", "version_affected" : "=" }, { "version_value" : "3.0.37", "version_affected" : "=" }, { "version_value" : "3.0.38", "version_affected" : "=" }, { "version_value" : "3.0.39", "version_affected" : "=" }, { "version_value" : "3.0.40", "version_affected" : "=" }, { "version_value" : "3.0.41", "version_affected" : "=" }, { "version_value" : "3.0.42", "version_affected" : "=" }, { "version_value" : "3.0.43", "version_affected" : "=" }, { "version_value" : "3.0.44", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.3", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.1.5", "version_affected" : "=" }, { "version_value" : "3.1.6", "version_affected" : "=" }, { "version_value" : "3.1.7", "version_affected" : "=" }, { "version_value" : "3.1.8", "version_affected" : "=" }, { "version_value" : "3.1.9", "version_affected" : "=" }, { "version_value" : "3.1.10", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.2.6", "version_affected" : "=" }, { "version_value" : "3.2.7", "version_affected" : "=" }, { "version_value" : "3.2.8", "version_affected" : "=" }, { "version_value" : "3.2.9", "version_affected" : "=" }, { "version_value" : "3.2.10", "version_affected" : "=" }, { "version_value" : "3.2.11", "version_affected" : "=" }, { "version_value" : "3.2.12", "version_affected" : "=" }, { "version_value" : "3.2.13", "version_affected" : "=" }, { "version_value" : "3.2.14", "version_affected" : "=" }, { "version_value" : "3.2.15", "version_affected" : "=" }, { "version_value" : "3.2.16", "version_affected" : "=" }, { "version_value" : "3.2.17", "version_affected" : "=" }, { "version_value" : "3.2.18", "version_affected" : "=" }, { "version_value" : "3.2.19", "version_affected" : "=" }, { "version_value" : "3.2.20", "version_affected" : "=" }, { "version_value" : "3.2.21", "version_affected" : "=" }, { "version_value" : "3.2.22", "version_affected" : "=" }, { "version_value" : "3.2.23", "version_affected" : "=" }, { "version_value" : "3.2.24", "version_affected" : "=" }, { "version_value" : "3.2.25", "version_affected" : "=" }, { "version_value" : "3.2.26", "version_affected" : "=" }, { "version_value" : "3.2.27", "version_affected" : "=" }, { "version_value" : "3.2.28", "version_affected" : "=" }, { "version_value" : "3.2.29", "version_affected" : "=" }, { "version_value" : "3.2.30", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.3.4", "version_affected" : "=" }, { "version_value" : "3.3.5", "version_affected" : "=" }, { "version_value" : "3.3.6", "version_affected" : "=" }, { "version_value" : "3.3.7", "version_affected" : "=" }, { "version_value" : "3.3.8", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.4.3", "version_affected" : "=" }, { "version_value" : "3.4.4", "version_affected" : "=" }, { "version_value" : "3.4.5", "version_affected" : "=" }, { "version_value" : "3.4.6", "version_affected" : "=" }, { "version_value" : "3.4.7", "version_affected" : "=" }, { "version_value" : "3.4.8", "version_affected" : "=" }, { "version_value" : "3.4.9", "version_affected" : "=" }, { "version_value" : "3.4.10", "version_affected" : "=" }, { "version_value" : "3.4.11", "version_affected" : "=" }, { "version_value" : "3.4.12", "version_affected" : "=" }, { "version_value" : "3.4.13", "version_affected" : "=" }, { "version_value" : "3.4.14", "version_affected" : "=" }, { "version_value" : "3.4.15", "version_affected" : "=" }, { "version_value" : "3.4.16", "version_affected" : "=" }, { "version_value" : "3.4.17", "version_affected" : "=" }, { "version_value" : "3.4.18", "version_affected" : "=" }, { "version_value" : "3.4.19", "version_affected" : "=" }, { "version_value" : "3.4.20", "version_affected" : "=" }, { "version_value" : "3.4.21", "version_affected" : "=" }, { "version_value" : "3.4.22", "version_affected" : "=" }, { "version_value" : "3.4.23", "version_affected" : "=" }, { "version_value" : "3.4.24", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "=" }, { "version_value" : "3.6", "version_affected" : "=" }, { "version_value" : "3.6.1", "version_affected" : "=" }, { "version_value" : "3.6.2", "version_affected" : "=" }, { "version_value" : "3.6.3", "version_affected" : "=" }, { "version_value" : "3.6.4", "version_affected" : "=" }, { "version_value" : "3.6.5", "version_affected" : "=" }, { "version_value" : "3.6.6", "version_affected" : "=" }, { "version_value" : "3.6.7", "version_affected" : "=" }, { "version_value" : "3.6.8", "version_affected" : "=" }, { "version_value" : "3.6.9", "version_affected" : "=" }, { "version_value" : "3.6.10", "version_affected" : "=" }, { "version_value" : "3.6.11", "version_affected" : "=" }, { "version_value" : "3.7", "version_affected" : "=" }, { "version_value" : "3.7.1", "version_affected" : "=" }, { "version_value" : "3.7.2", "version_affected" : "=" }, { "version_value" : "3.7.3", "version_affected" : "=" }, { "version_value" : "3.7.4", "version_affected" : "=" }, { "version_value" : "3.7.5", "version_affected" : "=" }, { "version_value" : "3.7.6", "version_affected" : "=" }, { "version_value" : "3.7.7", "version_affected" : "=" }, { "version_value" : "3.7.8", "version_affected" : "=" }, { "version_value" : "3.7.9", "version_affected" : "=" }, { "version_value" : "3.7.10", "version_affected" : "=" }, { "version_value" : "3.8", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html", "name" : "openSUSE-SU-2014:0204", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://openwall.com/lists/oss-security/2012/12/05/4", "name" : "[oss-security] 20121205 Re: Linux kernel handling of IPv6 temporary addresses", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://openwall.com/lists/oss-security/2013/01/16/7", "name" : "[oss-security] 20130116 Re: Linux kernel handling of IPv6 temporary addresses", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://openwall.com/lists/oss-security/2013/01/21/11", "name" : "[oss-security] 20130121 Re: Linux kernel handling of IPv6 temporary addresses", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1449.html", "name" : "RHSA-2013:1449", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1490.html", "name" : "RHSA-2013:1490", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1645.html", "name" : "RHSA-2013:1645", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/22/6", "name" : "[oss-security] 20130222 Re: Linux kernel handling of IPv6 temporary addresses", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1976-1", "name" : "USN-1976-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1977-1", "name" : "USN-1977-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-2019-1", "name" : "USN-2019-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-2020-1", "name" : "USN-2020-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-2021-1", "name" : "USN-2021-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-2022-1", "name" : "USN-2022-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-2023-1", "name" : "USN-2023-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-2024-1", "name" : "USN-2024-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-2038-1", "name" : "USN-2038-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-2039-1", "name" : "USN-2039-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-2050-1", "name" : "USN-2050-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=914664", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=914664", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The ipv6_create_tempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.8 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a denial of service (excessive retries and address-generation outage), and consequently obtain sensitive information, via ICMPv6 Router Advertisement (RA) messages." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.44:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.8" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:H/Au:N/C:P/I:N/A:P", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 3.2 }, "severity" : "LOW", "exploitabilityScore" : 3.2, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-28T19:55Z", "lastModifiedDate" : "2014-03-06T04:42Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0345", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "varnish-cache", "product" : { "product_data" : [ { "product_name" : "varnish", "version" : { "version_data" : [ { "version_value" : "3.0.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2013/02/22/14", "name" : "[oss-security] 20130222 CVE request: varnish world-readable logdir", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/23/4", "name" : "[oss-security] 20130222 Re: CVE request: varnish world-readable logdir", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.osvdb.org/90586", "name" : "90586", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/58125", "name" : "58125", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "varnish 3.0.3 uses world-readable permissions for the /var/log/varnish/ directory and the log files in the directory, which allows local users to obtain sensitive information by reading the files. NOTE: some of these details are obtained from third party information." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:varnish-cache:varnish:3.0.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-05-08T14:29Z", "lastModifiedDate" : "2014-05-08T14:49Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0346", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apache", "product" : { "product_data" : [ { "product_name" : "tomcat", "version" : { "version_data" : [ { "version_value" : "7.0.0", "version_affected" : "=" }, { "version_value" : "7.0.1", "version_affected" : "=" }, { "version_value" : "7.0.2", "version_affected" : "=" }, { "version_value" : "7.0.3", "version_affected" : "=" }, { "version_value" : "7.0.4", "version_affected" : "=" }, { "version_value" : "7.0.5", "version_affected" : "=" }, { "version_value" : "7.0.6", "version_affected" : "=" }, { "version_value" : "7.0.7", "version_affected" : "=" }, { "version_value" : "7.0.8", "version_affected" : "=" }, { "version_value" : "7.0.9", "version_affected" : "=" }, { "version_value" : "7.0.10", "version_affected" : "=" }, { "version_value" : "7.0.11", "version_affected" : "=" }, { "version_value" : "7.0.12", "version_affected" : "=" }, { "version_value" : "7.0.13", "version_affected" : "=" }, { "version_value" : "7.0.14", "version_affected" : "=" }, { "version_value" : "7.0.15", "version_affected" : "=" }, { "version_value" : "7.0.16", "version_affected" : "=" }, { "version_value" : "7.0.17", "version_affected" : "=" }, { "version_value" : "7.0.18", "version_affected" : "=" }, { "version_value" : "7.0.19", "version_affected" : "=" }, { "version_value" : "7.0.20", "version_affected" : "=" }, { "version_value" : "7.0.21", "version_affected" : "=" }, { "version_value" : "7.0.22", "version_affected" : "=" }, { "version_value" : "7.0.23", "version_affected" : "=" }, { "version_value" : "7.0.24", "version_affected" : "=" }, { "version_value" : "7.0.25", "version_affected" : "=" }, { "version_value" : "7.0.26", "version_affected" : "=" }, { "version_value" : "7.0.27", "version_affected" : "=" }, { "version_value" : "7.0.28", "version_affected" : "=" }, { "version_value" : "7.0.29", "version_affected" : "=" }, { "version_value" : "7.0.30", "version_affected" : "=" }, { "version_value" : "7.0.31", "version_affected" : "=" }, { "version_value" : "7.0.32", "version_affected" : "=" }, { "version_value" : "7.0.33", "version_affected" : "=" }, { "version_value" : "7.0.34", "version_affected" : "=" }, { "version_value" : "7.0.35", "version_affected" : "=" }, { "version_value" : "7.0.36", "version_affected" : "=" }, { "version_value" : "7.0.37", "version_affected" : "=" }, { "version_value" : "7.0.38", "version_affected" : "=" }, { "version_value" : "7.0.39", "version_affected" : "=" }, { "version_value" : "7.0.40", "version_affected" : "=" }, { "version_value" : "7.0.41", "version_affected" : "=" }, { "version_value" : "7.0.42", "version_affected" : "=" }, { "version_value" : "7.0.43", "version_affected" : "=" }, { "version_value" : "7.0.44", "version_affected" : "=" }, { "version_value" : "7.0.45", "version_affected" : "=" }, { "version_value" : "7.0.46", "version_affected" : "=" }, { "version_value" : "7.0.47", "version_affected" : "=" }, { "version_value" : "7.0.48", "version_affected" : "=" }, { "version_value" : "7.0.49", "version_affected" : "=" }, { "version_value" : "7.0.50", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2013/02/23/5", "name" : "[oss-security] 20130222 Re: Cve request: tomcat world-readable logdir", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=924841", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=924841", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** DISPUTED ** Apache Tomcat 7.x uses world-readable permissions for the log directory and its files, which might allow local users to obtain sensitive information by reading a file. NOTE: One Tomcat distributor has stated \"The tomcat log directory does not contain any sensitive information.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.0:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.2:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.4:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.44:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.45:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.46:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.47:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.48:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.49:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:tomcat:7.0.50:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-02-15T14:57Z", "lastModifiedDate" : "2014-02-18T19:40Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0347", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "webfs", "product" : { "product_data" : [ { "product_name" : "webfs", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/90585", "name" : "90585", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://seclists.org/oss-sec/2013/q1/404", "name" : "[oss-security] 20130222 CVE request: webfs world-readable log", "refsource" : "MLIST", "tags" : [ "Exploit" ] }, { "url" : "http://seclists.org/oss-sec/2013/q1/405", "name" : "[oss-security] 20130222 Re: CVE request: webfs world-readable log", "refsource" : "MLIST", "tags" : [ "Exploit" ] }, { "url" : "http://seclists.org/oss-sec/2013/q1/415", "name" : "[oss-security] 20130222 Re: Re: CVE request: webfs world-readable log", "refsource" : "MLIST", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/58126", "name" : "58126", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82356", "name" : "webfs-webfsd-information-disclosure(82356)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Gentoo init script for webfs uses world-readable permissions for /var/log/webfsd.log, which allows local users to have unspecified impact by reading the file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:webfs:webfs:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-11-16T11:59Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0348", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "acme", "product" : { "product_data" : [ { "product_name" : "thttpd", "version" : { "version_data" : [ { "version_value" : "2.25", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "open_source_development_team", "product" : { "product_data" : [ { "product_name" : "sthttpd", "version" : { "version_data" : [ { "version_value" : "2.26", "version_affected" : "=" }, { "version_value" : "2.26.1", "version_affected" : "=" }, { "version_value" : "2.26.2", "version_affected" : "=" }, { "version_value" : "2.26.3", "version_affected" : "=" }, { "version_value" : "2.26.4", "version_affected" : "<=" } ] } } ] } }, { "vendor_name" : "fedoraproject", "product" : { "product_data" : [ { "product_name" : "fedora", "version" : { "version_data" : [ { "version_value" : "17", "version_affected" : "=" }, { "version_value" : "18", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "gentoo", "product" : { "product_data" : [ { "product_name" : "linux", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "opensuse", "product" : { "product_data" : [ { "product_name" : "opensuse", "version" : { "version_data" : [ { "version_value" : "12.2", "version_affected" : "=" }, { "version_value" : "12.3", "version_affected" : "=" }, { "version_value" : "13.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-updates/2013-12/msg00050.html", "name" : "openSUSE-SU-2013:1862", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2014-01/msg00015.html", "name" : "openSUSE-SU-2014:0021", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://opensource.dyc.edu/gitweb/?p=sthttpd.git;a=commitdiff;h=d2e186dbd58d274a0dea9b59357edc8498b5388d", "name" : "http://opensource.dyc.edu/gitweb/?p=sthttpd.git;a=commitdiff;h=d2e186dbd58d274a0dea9b59357edc8498b5388d", "refsource" : "CONFIRM", "tags" : [ "Exploit", "Patch" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/23/7", "name" : "[oss-security] 20130222 Re: CVE request: sthttpd world-redable logdir", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://bugs.gentoo.org/show_bug.cgi?id=458896", "name" : "https://bugs.gentoo.org/show_bug.cgi?id=458896", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=924857", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=924857", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "thttpd.c in sthttpd before 2.26.4-r2 and thttpd 2.25b use world-readable permissions for /var/log/thttpd.log, which allows local users to obtain sensitive information by reading the file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:open_source_development_team:sthttpd:2.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:open_source_development_team:sthttpd:2.26.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:open_source_development_team:sthttpd:2.26.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:open_source_development_team:sthttpd:2.26.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:open_source_development_team:sthttpd:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.26.4" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:fedoraproject:fedora:17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:fedoraproject:fedora:18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:acme:thttpd:2.25:b:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-12-13T18:07Z", "lastModifiedDate" : "2018-10-30T16:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0349", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "=" }, { "version_value" : "3.0.18", "version_affected" : "=" }, { "version_value" : "3.0.19", "version_affected" : "=" }, { "version_value" : "3.0.20", "version_affected" : "=" }, { "version_value" : "3.0.21", "version_affected" : "=" }, { "version_value" : "3.0.22", "version_affected" : "=" }, { "version_value" : "3.0.23", "version_affected" : "=" }, { "version_value" : "3.0.24", "version_affected" : "=" }, { "version_value" : "3.0.25", "version_affected" : "=" }, { "version_value" : "3.0.26", "version_affected" : "=" }, { "version_value" : "3.0.27", "version_affected" : "=" }, { "version_value" : "3.0.28", "version_affected" : "=" }, { "version_value" : "3.0.29", "version_affected" : "=" }, { "version_value" : "3.0.30", "version_affected" : "=" }, { "version_value" : "3.0.31", "version_affected" : "=" }, { "version_value" : "3.0.32", "version_affected" : "=" }, { "version_value" : "3.0.33", "version_affected" : "=" }, { "version_value" : "3.0.34", "version_affected" : "=" }, { "version_value" : "3.0.35", "version_affected" : "=" }, { "version_value" : "3.0.36", "version_affected" : "=" }, { "version_value" : "3.0.37", "version_affected" : "=" }, { "version_value" : "3.0.38", "version_affected" : "=" }, { "version_value" : "3.0.39", "version_affected" : "=" }, { "version_value" : "3.0.40", "version_affected" : "=" }, { "version_value" : "3.0.41", "version_affected" : "=" }, { "version_value" : "3.0.42", "version_affected" : "=" }, { "version_value" : "3.0.43", "version_affected" : "=" }, { "version_value" : "3.0.44", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.3", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.1.5", "version_affected" : "=" }, { "version_value" : "3.1.6", "version_affected" : "=" }, { "version_value" : "3.1.7", "version_affected" : "=" }, { "version_value" : "3.1.8", "version_affected" : "=" }, { "version_value" : "3.1.9", "version_affected" : "=" }, { "version_value" : "3.1.10", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.2.6", "version_affected" : "=" }, { "version_value" : "3.2.7", "version_affected" : "=" }, { "version_value" : "3.2.8", "version_affected" : "=" }, { "version_value" : "3.2.9", "version_affected" : "=" }, { "version_value" : "3.2.10", "version_affected" : "=" }, { "version_value" : "3.2.11", "version_affected" : "=" }, { "version_value" : "3.2.12", "version_affected" : "=" }, { "version_value" : "3.2.13", "version_affected" : "=" }, { "version_value" : "3.2.14", "version_affected" : "=" }, { "version_value" : "3.2.15", "version_affected" : "=" }, { "version_value" : "3.2.16", "version_affected" : "=" }, { "version_value" : "3.2.17", "version_affected" : "=" }, { "version_value" : "3.2.18", "version_affected" : "=" }, { "version_value" : "3.2.19", "version_affected" : "=" }, { "version_value" : "3.2.20", "version_affected" : "=" }, { "version_value" : "3.2.21", "version_affected" : "=" }, { "version_value" : "3.2.22", "version_affected" : "=" }, { "version_value" : "3.2.23", "version_affected" : "=" }, { "version_value" : "3.2.24", "version_affected" : "=" }, { "version_value" : "3.2.25", "version_affected" : "=" }, { "version_value" : "3.2.26", "version_affected" : "=" }, { "version_value" : "3.2.27", "version_affected" : "=" }, { "version_value" : "3.2.28", "version_affected" : "=" }, { "version_value" : "3.2.29", "version_affected" : "=" }, { "version_value" : "3.2.30", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.3.4", "version_affected" : "=" }, { "version_value" : "3.3.5", "version_affected" : "=" }, { "version_value" : "3.3.6", "version_affected" : "=" }, { "version_value" : "3.3.7", "version_affected" : "=" }, { "version_value" : "3.3.8", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.4.3", "version_affected" : "=" }, { "version_value" : "3.4.4", "version_affected" : "=" }, { "version_value" : "3.4.5", "version_affected" : "=" }, { "version_value" : "3.4.6", "version_affected" : "=" }, { "version_value" : "3.4.7", "version_affected" : "=" }, { "version_value" : "3.4.8", "version_affected" : "=" }, { "version_value" : "3.4.9", "version_affected" : "=" }, { "version_value" : "3.4.10", "version_affected" : "=" }, { "version_value" : "3.4.11", "version_affected" : "=" }, { "version_value" : "3.4.12", "version_affected" : "=" }, { "version_value" : "3.4.13", "version_affected" : "=" }, { "version_value" : "3.4.14", "version_affected" : "=" }, { "version_value" : "3.4.15", "version_affected" : "=" }, { "version_value" : "3.4.16", "version_affected" : "=" }, { "version_value" : "3.4.17", "version_affected" : "=" }, { "version_value" : "3.4.18", "version_affected" : "=" }, { "version_value" : "3.4.19", "version_affected" : "=" }, { "version_value" : "3.4.20", "version_affected" : "=" }, { "version_value" : "3.4.21", "version_affected" : "=" }, { "version_value" : "3.4.22", "version_affected" : "=" }, { "version_value" : "3.4.23", "version_affected" : "=" }, { "version_value" : "3.4.24", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "=" }, { "version_value" : "3.6", "version_affected" : "=" }, { "version_value" : "3.6.1", "version_affected" : "=" }, { "version_value" : "3.6.2", "version_affected" : "=" }, { "version_value" : "3.6.3", "version_affected" : "=" }, { "version_value" : "3.6.4", "version_affected" : "=" }, { "version_value" : "3.6.5", "version_affected" : "=" }, { "version_value" : "3.6.6", "version_affected" : "=" }, { "version_value" : "3.6.7", "version_affected" : "=" }, { "version_value" : "3.6.8", "version_affected" : "=" }, { "version_value" : "3.6.9", "version_affected" : "=" }, { "version_value" : "3.6.10", "version_affected" : "=" }, { "version_value" : "3.6.11", "version_affected" : "=" }, { "version_value" : "3.7", "version_affected" : "=" }, { "version_value" : "3.7.1", "version_affected" : "=" }, { "version_value" : "3.7.2", "version_affected" : "=" }, { "version_value" : "3.7.3", "version_affected" : "=" }, { "version_value" : "3.7.4", "version_affected" : "=" }, { "version_value" : "3.7.5", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=0a9ab9bdb3e891762553f667066190c1d22ad62b", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=0a9ab9bdb3e891762553f667066190c1d22ad62b", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0744.html", "name" : "RHSA-2013:0744", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.6", "name" : "http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.6", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2013/02/23/3", "name" : "[oss-security] 20130222 Re: CVE request: Linux kernel: Bluetooth HIDP information disclosure", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1805-1", "name" : "USN-1805-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1808-1", "name" : "USN-1808-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=914298", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=914298", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://github.com/torvalds/linux/commit/0a9ab9bdb3e891762553f667066190c1d22ad62b", "name" : "https://github.com/torvalds/linux/commit/0a9ab9bdb3e891762553f667066190c1d22ad62b", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The hidp_setup_hid function in net/bluetooth/hidp/core.c in the Linux kernel before 3.7.6 does not properly copy a certain name field, which allows local users to obtain sensitive information from kernel memory by setting a long name and making an HIDPCONNADD ioctl call." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.0.44:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.2.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.4.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.6.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:3.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.7.5" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 1.9 }, "severity" : "LOW", "exploitabilityScore" : 3.4, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-28T19:55Z", "lastModifiedDate" : "2013-06-05T03:40Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0350", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "david_leonard", "product" : { "product_data" : [ { "product_name" : "pkstat", "version" : { "version_data" : [ { "version_value" : "1.8.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-59" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/90588", "name" : "90588", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://seclists.org/oss-sec/2013/q1/417", "name" : "[oss-security] 20130222 CVE-2013-0350 for pktstat: writes content from TCP streams to public readable file /tmp/smtp.log", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=701211", "name" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=701211", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "tmp_smtp.c in pktstat 1.8.5 allows local users to overwrite arbitrary files via a symlink attack on /tmp/smtp.log." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:david_leonard:pkstat:1.8.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:N/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 9.2, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-05-05T17:06Z", "lastModifiedDate" : "2014-05-05T17:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0351", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=136439120408139&w=2", "name" : "HPSBUX02857", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136570436423916&w=2", "name" : "SSRT101156", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0236.html", "name" : "RHSA-2013:0236", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0237.html", "name" : "RHSA-2013:0237", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1455.html", "name" : "RHSA-2013:1455", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1456.html", "name" : "RHSA-2013:1456", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57720", "name" : "57720", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16703", "name" : "oval:org.mitre.oval:def:16703", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19199", "name" : "oval:org.mitre.oval:def:19199", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19439", "name" : "oval:org.mitre.oval:def:19439", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU." }, { "lang" : "en", "value" : "Per: http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html\r\n\r\n\"Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0352", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "enterprise_manager_database_control", "version" : { "version_data" : [ { "version_value" : "10.2.0.3", "version_affected" : "=" }, { "version_value" : "10.2.0.4", "version_affected" : "=" }, { "version_value" : "10.2.0.5", "version_affected" : "=" }, { "version_value" : "11.1.0.7", "version_affected" : "=" }, { "version_value" : "11.2.0.2", "version_affected" : "=" }, { "version_value" : "11.2.0.3", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_manager_grid_control", "version" : { "version_data" : [ { "version_value" : "10.2.0.5", "version_affected" : "=" }, { "version_value" : "11.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_manager_plugin_for_database_control", "version" : { "version_data" : [ { "version_value" : "12.1.0.1", "version_affected" : "=" }, { "version_value" : "12.1.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=139344343412337&w=2", "name" : "HPSBST02955", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/57126", "name" : "57126", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57365", "name" : "57365", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1 and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Content Management." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:10.2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:10.2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:10.2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:11.1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:11.2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:11.2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_grid_control:10.2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_grid_control:11.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_plugin_for_database_control:12.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_plugin_for_database_control:12.1.0.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2015-10-08T14:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0353", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "enterprise_manager_database_control", "version" : { "version_data" : [ { "version_value" : "11.1.0.7", "version_affected" : "=" }, { "version_value" : "11.2.0.2", "version_affected" : "=" }, { "version_value" : "11.2.0.3", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_manager_grid_control", "version" : { "version_data" : [ { "version_value" : "10.2.0.5", "version_affected" : "=" }, { "version_value" : "11.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_manager_plugin_for_database_control", "version" : { "version_data" : [ { "version_value" : "12.1.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1 allows remote attackers to affect integrity via unknown vectors related to Enterprise Configuration Management." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_grid_control:10.2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_grid_control:11.1.0.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:11.1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:11.2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:11.2.0.3:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_plugin_for_database_control:12.1.0.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0354", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "enterprise_manager_database_control", "version" : { "version_data" : [ { "version_value" : "11.1.0.7", "version_affected" : "=" }, { "version_value" : "11.2.0.2", "version_affected" : "=" }, { "version_value" : "11.2.0.3", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_manager_grid_control", "version" : { "version_data" : [ { "version_value" : "10.2.0.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=139344343412337&w=2", "name" : "HPSBST02955", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/57126", "name" : "57126", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5, and EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3, allows remote attackers to affect integrity via unknown vectors related to Policy Framework." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:11.1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:11.2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:11.2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_grid_control:10.2.0.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2014-03-16T04:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0355", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "enterprise_manager_database_control", "version" : { "version_data" : [ { "version_value" : "11.1.0.7", "version_affected" : "=" }, { "version_value" : "11.2.0.2", "version_affected" : "=" }, { "version_value" : "11.2.0.3", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_manager_grid_control", "version" : { "version_data" : [ { "version_value" : "10.2.0.5", "version_affected" : "=" }, { "version_value" : "11.1.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1, and EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3, allows remote attackers to affect integrity via unknown vectors related to Distributed/Cross DB Features." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:11.1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:11.2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:11.2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_grid_control:10.2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_grid_control:11.1.0.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0356", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "peoplesoft_products", "version" : { "version_data" : [ { "version_value" : "8.51", "version_affected" : "=" }, { "version_value" : "8.52", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 and 8.52 allows remote attackers to affect integrity, related to PIA Core Technology." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:peoplesoft_products:8.51:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:peoplesoft_products:8.52:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0357", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "peoplesoft_products", "version" : { "version_data" : [ { "version_value" : "8.52", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.52 allows remote attackers to affect integrity, related to PIA Core Technology." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:peoplesoft_products:8.52:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0358", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "enterprise_manager_database_control", "version" : { "version_data" : [ { "version_value" : "10.2.0.3", "version_affected" : "=" }, { "version_value" : "10.2.0.4", "version_affected" : "=" }, { "version_value" : "10.2.0.5", "version_affected" : "=" }, { "version_value" : "11.1.0.7", "version_affected" : "=" }, { "version_value" : "11.2.0.2", "version_affected" : "=" }, { "version_value" : "11.2.0.3", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_manager_grid_control", "version" : { "version_data" : [ { "version_value" : "10.2.0.5", "version_affected" : "=" }, { "version_value" : "11.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_manager_plugin_for_database_control", "version" : { "version_data" : [ { "version_value" : "12.1.0.1", "version_affected" : "=" }, { "version_value" : "12.1.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1 and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Resource Manager." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:10.2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:10.2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:10.2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:11.1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:11.2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:11.2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_grid_control:10.2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_grid_control:11.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_plugin_for_database_control:12.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_plugin_for_database_control:12.1.0.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0359", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "enterprise_manager_grid_control", "version" : { "version_data" : [ { "version_value" : "6.5", "version_affected" : "=" }, { "version_value" : "11.1", "version_affected" : "=" }, { "version_value" : "12.1.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the APM - Application Performance Management component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Business Transaction Management." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_grid_control:6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_grid_control:11.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_grid_control:12.1.0.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0360", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "enterprise_manager_grid_control", "version" : { "version_data" : [ { "version_value" : "6.5", "version_affected" : "=" }, { "version_value" : "11.1", "version_affected" : "=" }, { "version_value" : "12.1.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Application Performance Management (APM) component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Business Transaction Management, a different vulnerability than CVE-2013-0396." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_grid_control:6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_grid_control:11.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_grid_control:12.1.0.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0361", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "database_lite", "version" : { "version_data" : [ { "version_value" : "10.3.0.3", "version_affected" : "=" } ] } }, { "product_name" : "database_mobile/lite_server", "version" : { "version_data" : [ { "version_value" : "10.3.0.3", "version_affected" : "=" }, { "version_value" : "11.1.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=139344343412337&w=2", "name" : "HPSBST02955", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/57126", "name" : "57126", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Mobile Server component in Oracle Database Mobile/Lite Server (formerly Oracle Database Lite) 10.3.0.3 and 11.1.0.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-0366." }, { "lang" : "en", "value" : "Per: http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html\r\n\r\n'Oracle Database Mobile Server was formerly known as Oracle Database Lite for 10g.'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_lite:10.3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_mobile\\/lite_server:10.3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_mobile\\/lite_server:11.1.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2014-03-16T04:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0362", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "database_mobile/lite_server", "version" : { "version_data" : [ { "version_value" : "10.3.0.3", "version_affected" : "=" }, { "version_value" : "11.1.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Mobile Server component in Oracle Database Mobile/Lite Server (formerly Oracle Database Lite) 10.3.0.3 and 11.1.0.0 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2013-0363 and CVE-2013-0364." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_mobile\\/lite_server:10.3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_mobile\\/lite_server:11.1.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0363", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "database_mobile/lite_server", "version" : { "version_data" : [ { "version_value" : "10.3.0.3", "version_affected" : "=" }, { "version_value" : "11.1.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=139344343412337&w=2", "name" : "HPSBST02955", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/57126", "name" : "57126", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Mobile Server component in Oracle Database Mobile/Lite Server (formerly Oracle Database Lite) 10.3.0.3 and 11.1.0.0 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2013-0362 and CVE-2013-0364." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_mobile\\/lite_server:10.3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_mobile\\/lite_server:11.1.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2014-03-16T04:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0364", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "database_lite", "version" : { "version_data" : [ { "version_value" : "10.3.0.3", "version_affected" : "=" } ] } }, { "product_name" : "database_mobile/lite_server", "version" : { "version_data" : [ { "version_value" : "10.3.0.3", "version_affected" : "=" }, { "version_value" : "11.1.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=139344343412337&w=2", "name" : "HPSBST02955", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/57126", "name" : "57126", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Mobile Server component in Oracle Database Mobile/Lite Server (formerly Oracle Database Lite) 10.3.0.3 and 11.1.0.0 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2013-0362 and CVE-2013-0363." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_lite:10.3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_mobile\\/lite_server:10.3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_mobile\\/lite_server:11.1.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2014-03-16T04:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0365", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "siebel_crm", "version" : { "version_data" : [ { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Security." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:siebel_crm:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:siebel_crm:8.2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0366", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "database_mobile/lite_server", "version" : { "version_data" : [ { "version_value" : "10.3.0.3", "version_affected" : "=" }, { "version_value" : "11.1.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=139344343412337&w=2", "name" : "HPSBST02955", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/57126", "name" : "57126", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Mobile Server component in Oracle Database Mobile/Lite Server (formerly Oracle Database Lite) 10.3.0.3 and 11.1.0.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-0361." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_mobile\\/lite_server:10.3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_mobile\\/lite_server:11.1.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2014-03-16T04:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0367", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "mysql", "version" : { "version_data" : [ { "version_value" : "5.5.0", "version_affected" : "=" }, { "version_value" : "5.5.1", "version_affected" : "=" }, { "version_value" : "5.5.2", "version_affected" : "=" }, { "version_value" : "5.5.3", "version_affected" : "=" }, { "version_value" : "5.5.4", "version_affected" : "=" }, { "version_value" : "5.5.5", "version_affected" : "=" }, { "version_value" : "5.5.6", "version_affected" : "=" }, { "version_value" : "5.5.7", "version_affected" : "=" }, { "version_value" : "5.5.9", "version_affected" : "=" }, { "version_value" : "5.5.10", "version_affected" : "=" }, { "version_value" : "5.5.11", "version_affected" : "=" }, { "version_value" : "5.5.12", "version_affected" : "=" }, { "version_value" : "5.5.13", "version_affected" : "=" }, { "version_value" : "5.5.14", "version_affected" : "=" }, { "version_value" : "5.5.15", "version_affected" : "=" }, { "version_value" : "5.5.16", "version_affected" : "=" }, { "version_value" : "5.5.17", "version_affected" : "=" }, { "version_value" : "5.5.18", "version_affected" : "=" }, { "version_value" : "5.5.19", "version_affected" : "=" }, { "version_value" : "5.5.20", "version_affected" : "=" }, { "version_value" : "5.5.21", "version_affected" : "=" }, { "version_value" : "5.5.22", "version_affected" : "=" }, { "version_value" : "5.5.23", "version_affected" : "=" }, { "version_value" : "5.5.24", "version_affected" : "=" }, { "version_value" : "5.5.25", "version_affected" : "=" }, { "version_value" : "5.5.26", "version_affected" : "=" }, { "version_value" : "5.5.27", "version_affected" : "=" }, { "version_value" : "5.5.28", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/53372", "name" : "53372", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-06.xml", "name" : "GLSA-201308-06", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.ubuntu.com/usn/USN-1703-1", "name" : "USN-1703-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17077", "name" : "oval:org.mitre.oval:def:17077", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Partition." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.25:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.5.28" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2019-12-17T15:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0368", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "mysql", "version" : { "version_data" : [ { "version_value" : "5.5.0", "version_affected" : "=" }, { "version_value" : "5.5.1", "version_affected" : "=" }, { "version_value" : "5.5.2", "version_affected" : "=" }, { "version_value" : "5.5.3", "version_affected" : "=" }, { "version_value" : "5.5.4", "version_affected" : "=" }, { "version_value" : "5.5.5", "version_affected" : "=" }, { "version_value" : "5.5.6", "version_affected" : "=" }, { "version_value" : "5.5.7", "version_affected" : "=" }, { "version_value" : "5.5.9", "version_affected" : "=" }, { "version_value" : "5.5.10", "version_affected" : "=" }, { "version_value" : "5.5.11", "version_affected" : "=" }, { "version_value" : "5.5.12", "version_affected" : "=" }, { "version_value" : "5.5.13", "version_affected" : "=" }, { "version_value" : "5.5.14", "version_affected" : "=" }, { "version_value" : "5.5.15", "version_affected" : "=" }, { "version_value" : "5.5.16", "version_affected" : "=" }, { "version_value" : "5.5.17", "version_affected" : "=" }, { "version_value" : "5.5.18", "version_affected" : "=" }, { "version_value" : "5.5.19", "version_affected" : "=" }, { "version_value" : "5.5.20", "version_affected" : "=" }, { "version_value" : "5.5.21", "version_affected" : "=" }, { "version_value" : "5.5.22", "version_affected" : "=" }, { "version_value" : "5.5.23", "version_affected" : "=" }, { "version_value" : "5.5.24", "version_affected" : "=" }, { "version_value" : "5.5.25", "version_affected" : "=" }, { "version_value" : "5.5.26", "version_affected" : "=" }, { "version_value" : "5.5.27", "version_affected" : "=" }, { "version_value" : "5.5.28", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/53372", "name" : "53372", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-06.xml", "name" : "GLSA-201308-06", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.ubuntu.com/usn/USN-1703-1", "name" : "USN-1703-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17255", "name" : "oval:org.mitre.oval:def:17255", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.25:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.5.28" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2019-12-17T15:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0369", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "peoplesoft_products", "version" : { "version_data" : [ { "version_value" : "8.51", "version_affected" : "=" }, { "version_value" : "8.52", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 and 8.52 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Query." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:peoplesoft_products:8.51:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:peoplesoft_products:8.52:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0370", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "supply_chain_products_suite", "version" : { "version_data" : [ { "version_value" : "9.3.1.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.1.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Security." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:supply_chain_products_suite:9.3.1.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0371", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "mysql", "version" : { "version_data" : [ { "version_value" : "5.5.0", "version_affected" : "=" }, { "version_value" : "5.5.1", "version_affected" : "=" }, { "version_value" : "5.5.2", "version_affected" : "=" }, { "version_value" : "5.5.3", "version_affected" : "=" }, { "version_value" : "5.5.4", "version_affected" : "=" }, { "version_value" : "5.5.5", "version_affected" : "=" }, { "version_value" : "5.5.6", "version_affected" : "=" }, { "version_value" : "5.5.7", "version_affected" : "=" }, { "version_value" : "5.5.9", "version_affected" : "=" }, { "version_value" : "5.5.10", "version_affected" : "=" }, { "version_value" : "5.5.11", "version_affected" : "=" }, { "version_value" : "5.5.12", "version_affected" : "=" }, { "version_value" : "5.5.13", "version_affected" : "=" }, { "version_value" : "5.5.14", "version_affected" : "=" }, { "version_value" : "5.5.15", "version_affected" : "=" }, { "version_value" : "5.5.16", "version_affected" : "=" }, { "version_value" : "5.5.17", "version_affected" : "=" }, { "version_value" : "5.5.18", "version_affected" : "=" }, { "version_value" : "5.5.19", "version_affected" : "=" }, { "version_value" : "5.5.20", "version_affected" : "=" }, { "version_value" : "5.5.21", "version_affected" : "=" }, { "version_value" : "5.5.22", "version_affected" : "=" }, { "version_value" : "5.5.23", "version_affected" : "=" }, { "version_value" : "5.5.24", "version_affected" : "=" }, { "version_value" : "5.5.25", "version_affected" : "=" }, { "version_value" : "5.5.26", "version_affected" : "=" }, { "version_value" : "5.5.27", "version_affected" : "=" }, { "version_value" : "5.5.28", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/53372", "name" : "53372", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-06.xml", "name" : "GLSA-201308-06", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.ubuntu.com/usn/USN-1703-1", "name" : "USN-1703-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16451", "name" : "oval:org.mitre.oval:def:16451", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availability, related to MyISAM." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.25:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.5.28" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2019-12-17T15:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0372", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "enterprise_manager_database_control", "version" : { "version_data" : [ { "version_value" : "11.1.0.7", "version_affected" : "=" }, { "version_value" : "11.2.0.2", "version_affected" : "=" }, { "version_value" : "11.2.0.3", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_manager_grid_control", "version" : { "version_data" : [ { "version_value" : "11.1.0.1", "version_affected" : "=" }, { "version_value" : "12.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_manager_plugin_for_database_control", "version" : { "version_data" : [ { "version_value" : "12.1.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=139344343412337&w=2", "name" : "HPSBST02955", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/57126", "name" : "57126", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57378", "name" : "57378", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1 and 12.1.0.1; EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Distributed/Cross DB Features." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:11.1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:11.2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:11.2.0.3:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_plugin_for_database_control:12.1.0.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_grid_control:11.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_grid_control:12.1.0.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2015-10-08T14:37Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0373", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "enterprise_manager_database_control", "version" : { "version_data" : [ { "version_value" : "10.2.0.3", "version_affected" : "=" }, { "version_value" : "10.2.0.4", "version_affected" : "=" }, { "version_value" : "10.2.0.5", "version_affected" : "=" }, { "version_value" : "11.1.0.7", "version_affected" : "=" }, { "version_value" : "11.2.0.2", "version_affected" : "=" }, { "version_value" : "11.2.0.3", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_manager_grid_control", "version" : { "version_data" : [ { "version_value" : "10.2.0.5", "version_affected" : "=" }, { "version_value" : "11.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_manager_plugin_for_database_control", "version" : { "version_data" : [ { "version_value" : "12.1.0.1", "version_affected" : "=" }, { "version_value" : "12.1.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Distributed/Cross DB Features." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:10.2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:10.2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:10.2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:11.1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:11.2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:11.2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_grid_control:10.2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_grid_control:11.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_plugin_for_database_control:12.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_plugin_for_database_control:12.1.0.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0374", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "enterprise_manager_database_control", "version" : { "version_data" : [ { "version_value" : "10.2.0.3", "version_affected" : "=" }, { "version_value" : "10.2.0.4", "version_affected" : "=" }, { "version_value" : "10.2.0.5", "version_affected" : "=" }, { "version_value" : "11.1.0.7", "version_affected" : "=" }, { "version_value" : "11.2.0.2", "version_affected" : "=" }, { "version_value" : "11.2.0.3", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_manager_grid_control", "version" : { "version_data" : [ { "version_value" : "10.2.0.5", "version_affected" : "=" }, { "version_value" : "11.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_manager_plugin_for_database_control", "version" : { "version_data" : [ { "version_value" : "12.1.0.1", "version_affected" : "=" }, { "version_value" : "12.1.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Database Cloning." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_grid_control:10.2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_grid_control:11.1.0.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:10.2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:10.2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:10.2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:11.1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:11.2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_database_control:11.2.0.3:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_plugin_for_database_control:12.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_plugin_for_database_control:12.1.0.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0375", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "mysql", "version" : { "version_data" : [ { "version_value" : "5.1.0", "version_affected" : "=" }, { "version_value" : "5.1.1", "version_affected" : "=" }, { "version_value" : "5.1.2", "version_affected" : "=" }, { "version_value" : "5.1.3", "version_affected" : "=" }, { "version_value" : "5.1.4", "version_affected" : "=" }, { "version_value" : "5.1.5", "version_affected" : "=" }, { "version_value" : "5.1.5a", "version_affected" : "=" }, { "version_value" : "5.1.6", "version_affected" : "=" }, { "version_value" : "5.1.7", "version_affected" : "=" }, { "version_value" : "5.1.8", "version_affected" : "=" }, { "version_value" : "5.1.9", "version_affected" : "=" }, { "version_value" : "5.1.10", "version_affected" : "=" }, { "version_value" : "5.1.11", "version_affected" : "=" }, { "version_value" : "5.1.12", "version_affected" : "=" }, { "version_value" : "5.1.13", "version_affected" : "=" }, { "version_value" : "5.1.14", "version_affected" : "=" }, { "version_value" : "5.1.15", "version_affected" : "=" }, { "version_value" : "5.1.16", "version_affected" : "=" }, { "version_value" : "5.1.17", "version_affected" : "=" }, { "version_value" : "5.1.18", "version_affected" : "=" }, { "version_value" : "5.1.19", "version_affected" : "=" }, { "version_value" : "5.1.20", "version_affected" : "=" }, { "version_value" : "5.1.21", "version_affected" : "=" }, { "version_value" : "5.1.22", "version_affected" : "=" }, { "version_value" : "5.1.23", "version_affected" : "=" }, { "version_value" : "5.1.23_bk", "version_affected" : "=" }, { "version_value" : "5.1.23a", "version_affected" : "=" }, { "version_value" : "5.1.24", "version_affected" : "=" }, { "version_value" : "5.1.25", "version_affected" : "=" }, { "version_value" : "5.1.26", "version_affected" : "=" }, { "version_value" : "5.1.27", "version_affected" : "=" }, { "version_value" : "5.1.28", "version_affected" : "=" }, { "version_value" : "5.1.29", "version_affected" : "=" }, { "version_value" : "5.1.30", "version_affected" : "=" }, { "version_value" : "5.1.31", "version_affected" : "=" }, { "version_value" : "5.1.32", "version_affected" : "=" }, { "version_value" : "5.1.32-bzr", "version_affected" : "=" }, { "version_value" : "5.1.33", "version_affected" : "=" }, { "version_value" : "5.1.34", "version_affected" : "=" }, { "version_value" : "5.1.35", "version_affected" : "=" }, { "version_value" : "5.1.36", "version_affected" : "=" }, { "version_value" : "5.1.37", "version_affected" : "=" }, { "version_value" : "5.1.38", "version_affected" : "=" }, { "version_value" : "5.1.39", "version_affected" : "=" }, { "version_value" : "5.1.40", "version_affected" : "=" }, { "version_value" : "5.1.41", "version_affected" : "=" }, { "version_value" : "5.1.42", "version_affected" : "=" }, { "version_value" : "5.1.43", "version_affected" : "=" }, { "version_value" : "5.1.44", "version_affected" : "=" }, { "version_value" : "5.1.45", "version_affected" : "=" }, { "version_value" : "5.1.46", "version_affected" : "=" }, { "version_value" : "5.1.47", "version_affected" : "=" }, { "version_value" : "5.1.48", "version_affected" : "=" }, { "version_value" : "5.1.49", "version_affected" : "=" }, { "version_value" : "5.1.50", "version_affected" : "=" }, { "version_value" : "5.1.51", "version_affected" : "=" }, { "version_value" : "5.1.52", "version_affected" : "=" }, { "version_value" : "5.1.53", "version_affected" : "=" }, { "version_value" : "5.1.54", "version_affected" : "=" }, { "version_value" : "5.1.55", "version_affected" : "=" }, { "version_value" : "5.1.56", "version_affected" : "=" }, { "version_value" : "5.1.57", "version_affected" : "=" }, { "version_value" : "5.1.58", "version_affected" : "=" }, { "version_value" : "5.1.59", "version_affected" : "=" }, { "version_value" : "5.1.60", "version_affected" : "=" }, { "version_value" : "5.1.61", "version_affected" : "=" }, { "version_value" : "5.1.62", "version_affected" : "=" }, { "version_value" : "5.1.63", "version_affected" : "=" }, { "version_value" : "5.1.64", "version_affected" : "=" }, { "version_value" : "5.1.65", "version_affected" : "=" }, { "version_value" : "5.1.66", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0219.html", "name" : "RHSA-2013:0219", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/53372", "name" : "53372", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-06.xml", "name" : "GLSA-201308-06", "refsource" : "GENTOO", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.ubuntu.com/usn/USN-1703-1", "name" : "USN-1703-1", "refsource" : "UBUNTU", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17175", "name" : "oval:org.mitre.oval:def:17175", "refsource" : "OVAL", "tags" : [ "Tool Signature" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.1.28 and earlier, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Server Replication." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*", "versionStartIncluding" : "5.1.0", "versionEndIncluding" : "5.1.66" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2019-09-27T17:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0376", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "e-business_suite", "version" : { "version_data" : [ { "version_value" : "11.5.10.2", "version_affected" : "=" }, { "version_value" : "12.0.6", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Diagnostics." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:12.1.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0377", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "e-business_suite", "version" : { "version_data" : [ { "version_value" : "11.5.10.2", "version_affected" : "=" }, { "version_value" : "12.0.6", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Client System Analyzer." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:12.1.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0378", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "siebel_crm", "version" : { "version_data" : [ { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to Siebel Calendar, a different vulnerability than CVE-2013-0379." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:siebel_crm:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:siebel_crm:8.2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0379", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "siebel_crm", "version" : { "version_data" : [ { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to Siebel Calendar, a different vulnerability than CVE-2013-0378." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:siebel_crm:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:siebel_crm:8.2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0380", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "e-business_suite", "version" : { "version_data" : [ { "version_value" : "11.5.10.2", "version_affected" : "=" }, { "version_value" : "12.0.6", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Oracle Payroll component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to View Payslip." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:12.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:12.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:12.1.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0381", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "e-business_suite", "version" : { "version_data" : [ { "version_value" : "11.5.10.2", "version_affected" : "=" }, { "version_value" : "12.0.6", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=139344343412337&w=2", "name" : "HPSBST02955", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/57126", "name" : "57126", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Application Framework." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:12.1.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2014-03-16T04:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0382", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "e-business_suite", "version" : { "version_data" : [ { "version_value" : "11.5.10.2", "version_affected" : "=" }, { "version_value" : "12.0.6", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Campaign Management." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:12.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:12.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:12.1.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0383", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mysql", "product" : { "product_data" : [ { "product_name" : "mysql", "version" : { "version_data" : [ { "version_value" : "5.1.5", "version_affected" : "=" }, { "version_value" : "5.1.23", "version_affected" : "=" }, { "version_value" : "5.1.31", "version_affected" : "=" }, { "version_value" : "5.1.32", "version_affected" : "=" }, { "version_value" : "5.1.34", "version_affected" : "=" }, { "version_value" : "5.1.37", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "mysql", "version" : { "version_data" : [ { "version_value" : "5.1.1", "version_affected" : "=" }, { "version_value" : "5.1.2", "version_affected" : "=" }, { "version_value" : "5.1.3", "version_affected" : "=" }, { "version_value" : "5.1.4", "version_affected" : "=" }, { "version_value" : "5.1.10", "version_affected" : "=" }, { "version_value" : "5.1.11", "version_affected" : "=" }, { "version_value" : "5.1.12", "version_affected" : "=" }, { "version_value" : "5.1.13", "version_affected" : "=" }, { "version_value" : "5.1.14", "version_affected" : "=" }, { "version_value" : "5.1.15", "version_affected" : "=" }, { "version_value" : "5.1.16", "version_affected" : "=" }, { "version_value" : "5.1.17", "version_affected" : "=" }, { "version_value" : "5.1.18", "version_affected" : "=" }, { "version_value" : "5.1.19", "version_affected" : "=" }, { "version_value" : "5.1.20", "version_affected" : "=" }, { "version_value" : "5.1.21", "version_affected" : "=" }, { "version_value" : "5.1.22", "version_affected" : "=" }, { "version_value" : "5.1.23", "version_affected" : "=" }, { "version_value" : "5.1.24", "version_affected" : "=" }, { "version_value" : "5.1.25", "version_affected" : "=" }, { "version_value" : "5.1.26", "version_affected" : "=" }, { "version_value" : "5.1.27", "version_affected" : "=" }, { "version_value" : "5.1.28", "version_affected" : "=" }, { "version_value" : "5.1.29", "version_affected" : "=" }, { "version_value" : "5.1.30", "version_affected" : "=" }, { "version_value" : "5.1.31", "version_affected" : "=" }, { "version_value" : "5.1.33", "version_affected" : "=" }, { "version_value" : "5.1.34", "version_affected" : "=" }, { "version_value" : "5.1.35", "version_affected" : "=" }, { "version_value" : "5.1.36", "version_affected" : "=" }, { "version_value" : "5.1.37", "version_affected" : "=" }, { "version_value" : "5.1.38", "version_affected" : "=" }, { "version_value" : "5.1.39", "version_affected" : "=" }, { "version_value" : "5.1.40", "version_affected" : "=" }, { "version_value" : "5.1.41", "version_affected" : "=" }, { "version_value" : "5.1.42", "version_affected" : "=" }, { "version_value" : "5.1.43", "version_affected" : "=" }, { "version_value" : "5.1.44", "version_affected" : "=" }, { "version_value" : "5.1.45", "version_affected" : "=" }, { "version_value" : "5.1.46", "version_affected" : "=" }, { "version_value" : "5.1.47", "version_affected" : "=" }, { "version_value" : "5.1.48", "version_affected" : "=" }, { "version_value" : "5.1.49", "version_affected" : "=" }, { "version_value" : "5.1.50", "version_affected" : "=" }, { "version_value" : "5.1.51", "version_affected" : "=" }, { "version_value" : "5.1.52", "version_affected" : "=" }, { "version_value" : "5.1.53", "version_affected" : "=" }, { "version_value" : "5.1.54", "version_affected" : "=" }, { "version_value" : "5.1.55", "version_affected" : "=" }, { "version_value" : "5.1.56", "version_affected" : "=" }, { "version_value" : "5.1.57", "version_affected" : "=" }, { "version_value" : "5.1.58", "version_affected" : "=" }, { "version_value" : "5.1.59", "version_affected" : "=" }, { "version_value" : "5.1.60", "version_affected" : "=" }, { "version_value" : "5.1.61", "version_affected" : "=" }, { "version_value" : "5.1.62", "version_affected" : "=" }, { "version_value" : "5.1.63", "version_affected" : "=" }, { "version_value" : "5.1.64", "version_affected" : "=" }, { "version_value" : "5.1.65", "version_affected" : "=" }, { "version_value" : "5.1.66", "version_affected" : "<=" }, { "version_value" : "5.5.0", "version_affected" : "=" }, { "version_value" : "5.5.1", "version_affected" : "=" }, { "version_value" : "5.5.2", "version_affected" : "=" }, { "version_value" : "5.5.3", "version_affected" : "=" }, { "version_value" : "5.5.4", "version_affected" : "=" }, { "version_value" : "5.5.5", "version_affected" : "=" }, { "version_value" : "5.5.6", "version_affected" : "=" }, { "version_value" : "5.5.7", "version_affected" : "=" }, { "version_value" : "5.5.9", "version_affected" : "=" }, { "version_value" : "5.5.10", "version_affected" : "=" }, { "version_value" : "5.5.11", "version_affected" : "=" }, { "version_value" : "5.5.12", "version_affected" : "=" }, { "version_value" : "5.5.13", "version_affected" : "=" }, { "version_value" : "5.5.14", "version_affected" : "=" }, { "version_value" : "5.5.15", "version_affected" : "=" }, { "version_value" : "5.5.16", "version_affected" : "=" }, { "version_value" : "5.5.17", "version_affected" : "=" }, { "version_value" : "5.5.18", "version_affected" : "=" }, { "version_value" : "5.5.19", "version_affected" : "=" }, { "version_value" : "5.5.20", "version_affected" : "=" }, { "version_value" : "5.5.21", "version_affected" : "=" }, { "version_value" : "5.5.22", "version_affected" : "=" }, { "version_value" : "5.5.23", "version_affected" : "=" }, { "version_value" : "5.5.24", "version_affected" : "=" }, { "version_value" : "5.5.25", "version_affected" : "=" }, { "version_value" : "5.5.26", "version_affected" : "=" }, { "version_value" : "5.5.27", "version_affected" : "=" }, { "version_value" : "5.5.28", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0219.html", "name" : "RHSA-2013:0219", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/53372", "name" : "53372", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-06.xml", "name" : "GLSA-201308-06", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.ubuntu.com/usn/USN-1703-1", "name" : "USN-1703-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16758", "name" : "oval:org.mitre.oval:def:16758", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote attackers to affect availability via unknown vectors related to Server Locking." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:5.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:5.1.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:5.1.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:5.1.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:5.1.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:5.1.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.23:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.31:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.34:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.37:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.40:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.43:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.44:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.45:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.46:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.46:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.47:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.48:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.49:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.49:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.50:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.51:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.52:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.52:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.53:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.54:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.55:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.56:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.57:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.58:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.59:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.60:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.61:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.62:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.63:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.64:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.65:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.1.66" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.25:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.5.28" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2019-12-17T20:23Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0384", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mysql", "product" : { "product_data" : [ { "product_name" : "mysql", "version" : { "version_data" : [ { "version_value" : "5.1.5", "version_affected" : "=" }, { "version_value" : "5.1.23", "version_affected" : "=" }, { "version_value" : "5.1.31", "version_affected" : "=" }, { "version_value" : "5.1.32", "version_affected" : "=" }, { "version_value" : "5.1.34", "version_affected" : "=" }, { "version_value" : "5.1.37", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "mysql", "version" : { "version_data" : [ { "version_value" : "5.1.1", "version_affected" : "=" }, { "version_value" : "5.1.2", "version_affected" : "=" }, { "version_value" : "5.1.3", "version_affected" : "=" }, { "version_value" : "5.1.4", "version_affected" : "=" }, { "version_value" : "5.1.10", "version_affected" : "=" }, { "version_value" : "5.1.11", "version_affected" : "=" }, { "version_value" : "5.1.12", "version_affected" : "=" }, { "version_value" : "5.1.13", "version_affected" : "=" }, { "version_value" : "5.1.14", "version_affected" : "=" }, { "version_value" : "5.1.15", "version_affected" : "=" }, { "version_value" : "5.1.16", "version_affected" : "=" }, { "version_value" : "5.1.17", "version_affected" : "=" }, { "version_value" : "5.1.18", "version_affected" : "=" }, { "version_value" : "5.1.19", "version_affected" : "=" }, { "version_value" : "5.1.20", "version_affected" : "=" }, { "version_value" : "5.1.21", "version_affected" : "=" }, { "version_value" : "5.1.22", "version_affected" : "=" }, { "version_value" : "5.1.23", "version_affected" : "=" }, { "version_value" : "5.1.24", "version_affected" : "=" }, { "version_value" : "5.1.25", "version_affected" : "=" }, { "version_value" : "5.1.26", "version_affected" : "=" }, { "version_value" : "5.1.27", "version_affected" : "=" }, { "version_value" : "5.1.28", "version_affected" : "=" }, { "version_value" : "5.1.29", "version_affected" : "=" }, { "version_value" : "5.1.30", "version_affected" : "=" }, { "version_value" : "5.1.31", "version_affected" : "=" }, { "version_value" : "5.1.33", "version_affected" : "=" }, { "version_value" : "5.1.34", "version_affected" : "=" }, { "version_value" : "5.1.35", "version_affected" : "=" }, { "version_value" : "5.1.36", "version_affected" : "=" }, { "version_value" : "5.1.37", "version_affected" : "=" }, { "version_value" : "5.1.38", "version_affected" : "=" }, { "version_value" : "5.1.39", "version_affected" : "=" }, { "version_value" : "5.1.40", "version_affected" : "=" }, { "version_value" : "5.1.41", "version_affected" : "=" }, { "version_value" : "5.1.42", "version_affected" : "=" }, { "version_value" : "5.1.43", "version_affected" : "=" }, { "version_value" : "5.1.44", "version_affected" : "=" }, { "version_value" : "5.1.45", "version_affected" : "=" }, { "version_value" : "5.1.46", "version_affected" : "=" }, { "version_value" : "5.1.47", "version_affected" : "=" }, { "version_value" : "5.1.48", "version_affected" : "=" }, { "version_value" : "5.1.49", "version_affected" : "=" }, { "version_value" : "5.1.50", "version_affected" : "=" }, { "version_value" : "5.1.51", "version_affected" : "=" }, { "version_value" : "5.1.52", "version_affected" : "=" }, { "version_value" : "5.1.53", "version_affected" : "=" }, { "version_value" : "5.1.54", "version_affected" : "=" }, { "version_value" : "5.1.55", "version_affected" : "=" }, { "version_value" : "5.1.56", "version_affected" : "=" }, { "version_value" : "5.1.57", "version_affected" : "=" }, { "version_value" : "5.1.58", "version_affected" : "=" }, { "version_value" : "5.1.59", "version_affected" : "=" }, { "version_value" : "5.1.60", "version_affected" : "=" }, { "version_value" : "5.1.61", "version_affected" : "=" }, { "version_value" : "5.1.62", "version_affected" : "=" }, { "version_value" : "5.1.63", "version_affected" : "=" }, { "version_value" : "5.1.64", "version_affected" : "=" }, { "version_value" : "5.1.65", "version_affected" : "=" }, { "version_value" : "5.1.66", "version_affected" : "<=" }, { "version_value" : "5.5.0", "version_affected" : "=" }, { "version_value" : "5.5.1", "version_affected" : "=" }, { "version_value" : "5.5.2", "version_affected" : "=" }, { "version_value" : "5.5.3", "version_affected" : "=" }, { "version_value" : "5.5.4", "version_affected" : "=" }, { "version_value" : "5.5.5", "version_affected" : "=" }, { "version_value" : "5.5.6", "version_affected" : "=" }, { "version_value" : "5.5.7", "version_affected" : "=" }, { "version_value" : "5.5.9", "version_affected" : "=" }, { "version_value" : "5.5.10", "version_affected" : "=" }, { "version_value" : "5.5.11", "version_affected" : "=" }, { "version_value" : "5.5.12", "version_affected" : "=" }, { "version_value" : "5.5.13", "version_affected" : "=" }, { "version_value" : "5.5.14", "version_affected" : "=" }, { "version_value" : "5.5.15", "version_affected" : "=" }, { "version_value" : "5.5.16", "version_affected" : "=" }, { "version_value" : "5.5.17", "version_affected" : "=" }, { "version_value" : "5.5.18", "version_affected" : "=" }, { "version_value" : "5.5.19", "version_affected" : "=" }, { "version_value" : "5.5.20", "version_affected" : "=" }, { "version_value" : "5.5.21", "version_affected" : "=" }, { "version_value" : "5.5.22", "version_affected" : "=" }, { "version_value" : "5.5.23", "version_affected" : "=" }, { "version_value" : "5.5.24", "version_affected" : "=" }, { "version_value" : "5.5.25", "version_affected" : "=" }, { "version_value" : "5.5.26", "version_affected" : "=" }, { "version_value" : "5.5.27", "version_affected" : "=" }, { "version_value" : "5.5.28", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0219.html", "name" : "RHSA-2013:0219", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/53372", "name" : "53372", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-06.xml", "name" : "GLSA-201308-06", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.ubuntu.com/usn/USN-1703-1", "name" : "USN-1703-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16632", "name" : "oval:org.mitre.oval:def:16632", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Information Schema." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:5.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:5.1.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:5.1.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:5.1.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:5.1.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:5.1.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.23:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.31:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.34:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.37:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.40:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.43:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.44:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.45:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.46:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.46:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.47:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.48:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.49:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.49:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.50:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.51:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.52:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.52:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.53:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.54:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.55:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.56:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.57:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.58:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.59:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.60:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.61:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.62:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.63:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.64:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.65:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.1.66" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.25:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.5.28" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2019-12-17T20:23Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0385", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mysql", "product" : { "product_data" : [ { "product_name" : "mysql", "version" : { "version_data" : [ { "version_value" : "5.1.5", "version_affected" : "=" }, { "version_value" : "5.1.23", "version_affected" : "=" }, { "version_value" : "5.1.31", "version_affected" : "=" }, { "version_value" : "5.1.32", "version_affected" : "=" }, { "version_value" : "5.1.34", "version_affected" : "=" }, { "version_value" : "5.1.37", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "mysql", "version" : { "version_data" : [ { "version_value" : "5.1.1", "version_affected" : "=" }, { "version_value" : "5.1.2", "version_affected" : "=" }, { "version_value" : "5.1.3", "version_affected" : "=" }, { "version_value" : "5.1.4", "version_affected" : "=" }, { "version_value" : "5.1.10", "version_affected" : "=" }, { "version_value" : "5.1.11", "version_affected" : "=" }, { "version_value" : "5.1.12", "version_affected" : "=" }, { "version_value" : "5.1.13", "version_affected" : "=" }, { "version_value" : "5.1.14", "version_affected" : "=" }, { "version_value" : "5.1.15", "version_affected" : "=" }, { "version_value" : "5.1.16", "version_affected" : "=" }, { "version_value" : "5.1.17", "version_affected" : "=" }, { "version_value" : "5.1.18", "version_affected" : "=" }, { "version_value" : "5.1.19", "version_affected" : "=" }, { "version_value" : "5.1.20", "version_affected" : "=" }, { "version_value" : "5.1.21", "version_affected" : "=" }, { "version_value" : "5.1.22", "version_affected" : "=" }, { "version_value" : "5.1.23", "version_affected" : "=" }, { "version_value" : "5.1.24", "version_affected" : "=" }, { "version_value" : "5.1.25", "version_affected" : "=" }, { "version_value" : "5.1.26", "version_affected" : "=" }, { "version_value" : "5.1.27", "version_affected" : "=" }, { "version_value" : "5.1.28", "version_affected" : "=" }, { "version_value" : "5.1.29", "version_affected" : "=" }, { "version_value" : "5.1.30", "version_affected" : "=" }, { "version_value" : "5.1.31", "version_affected" : "=" }, { "version_value" : "5.1.33", "version_affected" : "=" }, { "version_value" : "5.1.34", "version_affected" : "=" }, { "version_value" : "5.1.35", "version_affected" : "=" }, { "version_value" : "5.1.36", "version_affected" : "=" }, { "version_value" : "5.1.37", "version_affected" : "=" }, { "version_value" : "5.1.38", "version_affected" : "=" }, { "version_value" : "5.1.39", "version_affected" : "=" }, { "version_value" : "5.1.40", "version_affected" : "=" }, { "version_value" : "5.1.41", "version_affected" : "=" }, { "version_value" : "5.1.42", "version_affected" : "=" }, { "version_value" : "5.1.43", "version_affected" : "=" }, { "version_value" : "5.1.44", "version_affected" : "=" }, { "version_value" : "5.1.45", "version_affected" : "=" }, { "version_value" : "5.1.46", "version_affected" : "=" }, { "version_value" : "5.1.47", "version_affected" : "=" }, { "version_value" : "5.1.48", "version_affected" : "=" }, { "version_value" : "5.1.49", "version_affected" : "=" }, { "version_value" : "5.1.50", "version_affected" : "=" }, { "version_value" : "5.1.51", "version_affected" : "=" }, { "version_value" : "5.1.52", "version_affected" : "=" }, { "version_value" : "5.1.53", "version_affected" : "=" }, { "version_value" : "5.1.54", "version_affected" : "=" }, { "version_value" : "5.1.55", "version_affected" : "=" }, { "version_value" : "5.1.56", "version_affected" : "=" }, { "version_value" : "5.1.57", "version_affected" : "=" }, { "version_value" : "5.1.58", "version_affected" : "=" }, { "version_value" : "5.1.59", "version_affected" : "=" }, { "version_value" : "5.1.60", "version_affected" : "=" }, { "version_value" : "5.1.61", "version_affected" : "=" }, { "version_value" : "5.1.62", "version_affected" : "=" }, { "version_value" : "5.1.63", "version_affected" : "=" }, { "version_value" : "5.1.64", "version_affected" : "=" }, { "version_value" : "5.1.65", "version_affected" : "=" }, { "version_value" : "5.1.66", "version_affected" : "<=" }, { "version_value" : "5.5.0", "version_affected" : "=" }, { "version_value" : "5.5.1", "version_affected" : "=" }, { "version_value" : "5.5.2", "version_affected" : "=" }, { "version_value" : "5.5.3", "version_affected" : "=" }, { "version_value" : "5.5.4", "version_affected" : "=" }, { "version_value" : "5.5.5", "version_affected" : "=" }, { "version_value" : "5.5.6", "version_affected" : "=" }, { "version_value" : "5.5.7", "version_affected" : "=" }, { "version_value" : "5.5.9", "version_affected" : "=" }, { "version_value" : "5.5.10", "version_affected" : "=" }, { "version_value" : "5.5.11", "version_affected" : "=" }, { "version_value" : "5.5.12", "version_affected" : "=" }, { "version_value" : "5.5.13", "version_affected" : "=" }, { "version_value" : "5.5.14", "version_affected" : "=" }, { "version_value" : "5.5.15", "version_affected" : "=" }, { "version_value" : "5.5.16", "version_affected" : "=" }, { "version_value" : "5.5.17", "version_affected" : "=" }, { "version_value" : "5.5.18", "version_affected" : "=" }, { "version_value" : "5.5.19", "version_affected" : "=" }, { "version_value" : "5.5.20", "version_affected" : "=" }, { "version_value" : "5.5.21", "version_affected" : "=" }, { "version_value" : "5.5.22", "version_affected" : "=" }, { "version_value" : "5.5.23", "version_affected" : "=" }, { "version_value" : "5.5.24", "version_affected" : "=" }, { "version_value" : "5.5.25", "version_affected" : "=" }, { "version_value" : "5.5.26", "version_affected" : "=" }, { "version_value" : "5.5.27", "version_affected" : "=" }, { "version_value" : "5.5.28", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0219.html", "name" : "RHSA-2013:0219", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/53372", "name" : "53372", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-06.xml", "name" : "GLSA-201308-06", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.ubuntu.com/usn/USN-1703-1", "name" : "USN-1703-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16267", "name" : "oval:org.mitre.oval:def:16267", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows local users to affect confidentiality and integrity via unknown vectors related to Server Replication." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:5.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:5.1.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:5.1.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:5.1.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:5.1.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:5.1.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.23:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.31:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.34:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.37:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.40:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.43:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.44:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.45:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.46:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.46:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.47:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.48:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.49:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.49:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.50:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.51:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.52:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.52:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.53:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.54:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.55:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.56:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.57:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.58:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.59:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.60:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.61:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.62:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.63:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.64:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.65:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.1.66" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.25:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.5.28" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "NONE", "baseScore" : 6.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 9.2, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2019-12-17T20:23Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0386", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "mysql", "version" : { "version_data" : [ { "version_value" : "5.5.0", "version_affected" : "=" }, { "version_value" : "5.5.1", "version_affected" : "=" }, { "version_value" : "5.5.2", "version_affected" : "=" }, { "version_value" : "5.5.3", "version_affected" : "=" }, { "version_value" : "5.5.4", "version_affected" : "=" }, { "version_value" : "5.5.5", "version_affected" : "=" }, { "version_value" : "5.5.6", "version_affected" : "=" }, { "version_value" : "5.5.7", "version_affected" : "=" }, { "version_value" : "5.5.9", "version_affected" : "=" }, { "version_value" : "5.5.10", "version_affected" : "=" }, { "version_value" : "5.5.11", "version_affected" : "=" }, { "version_value" : "5.5.12", "version_affected" : "=" }, { "version_value" : "5.5.13", "version_affected" : "=" }, { "version_value" : "5.5.14", "version_affected" : "=" }, { "version_value" : "5.5.15", "version_affected" : "=" }, { "version_value" : "5.5.16", "version_affected" : "=" }, { "version_value" : "5.5.17", "version_affected" : "=" }, { "version_value" : "5.5.18", "version_affected" : "=" }, { "version_value" : "5.5.19", "version_affected" : "=" }, { "version_value" : "5.5.20", "version_affected" : "=" }, { "version_value" : "5.5.21", "version_affected" : "=" }, { "version_value" : "5.5.22", "version_affected" : "=" }, { "version_value" : "5.5.23", "version_affected" : "=" }, { "version_value" : "5.5.24", "version_affected" : "=" }, { "version_value" : "5.5.25", "version_affected" : "=" }, { "version_value" : "5.5.26", "version_affected" : "=" }, { "version_value" : "5.5.27", "version_affected" : "=" }, { "version_value" : "5.5.28", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/53372", "name" : "53372", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-06.xml", "name" : "GLSA-201308-06", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.ubuntu.com/usn/USN-1703-1", "name" : "USN-1703-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16835", "name" : "oval:org.mitre.oval:def:16835", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to Stored Procedure." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.25:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.5.28" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2019-12-17T15:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0387", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "peoplesoft_products", "version" : { "version_data" : [ { "version_value" : "8.51", "version_affected" : "=" }, { "version_value" : "8.52", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 and 8.52 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to PeopleCode." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:peoplesoft_products:8.51:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:peoplesoft_products:8.52:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:M/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "MULTIPLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 5.5, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0388", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "peoplesoft_products", "version" : { "version_data" : [ { "version_value" : "9.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the PeopleSoft HRMS component in Oracle PeopleSoft Products 9.1 allows remote attackers to affect integrity via unknown vectors related to Mobile Company Directory." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:peoplesoft_products:9.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0389", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mysql", "product" : { "product_data" : [ { "product_name" : "mysql", "version" : { "version_data" : [ { "version_value" : "5.1.5", "version_affected" : "=" }, { "version_value" : "5.1.23", "version_affected" : "=" }, { "version_value" : "5.1.31", "version_affected" : "=" }, { "version_value" : "5.1.32", "version_affected" : "=" }, { "version_value" : "5.1.34", "version_affected" : "=" }, { "version_value" : "5.1.37", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "mysql", "version" : { "version_data" : [ { "version_value" : "5.1.1", "version_affected" : "=" }, { "version_value" : "5.1.2", "version_affected" : "=" }, { "version_value" : "5.1.3", "version_affected" : "=" }, { "version_value" : "5.1.4", "version_affected" : "=" }, { "version_value" : "5.1.10", "version_affected" : "=" }, { "version_value" : "5.1.11", "version_affected" : "=" }, { "version_value" : "5.1.12", "version_affected" : "=" }, { "version_value" : "5.1.13", "version_affected" : "=" }, { "version_value" : "5.1.14", "version_affected" : "=" }, { "version_value" : "5.1.15", "version_affected" : "=" }, { "version_value" : "5.1.16", "version_affected" : "=" }, { "version_value" : "5.1.17", "version_affected" : "=" }, { "version_value" : "5.1.18", "version_affected" : "=" }, { "version_value" : "5.1.19", "version_affected" : "=" }, { "version_value" : "5.1.20", "version_affected" : "=" }, { "version_value" : "5.1.21", "version_affected" : "=" }, { "version_value" : "5.1.22", "version_affected" : "=" }, { "version_value" : "5.1.23", "version_affected" : "=" }, { "version_value" : "5.1.24", "version_affected" : "=" }, { "version_value" : "5.1.25", "version_affected" : "=" }, { "version_value" : "5.1.26", "version_affected" : "=" }, { "version_value" : "5.1.27", "version_affected" : "=" }, { "version_value" : "5.1.28", "version_affected" : "=" }, { "version_value" : "5.1.29", "version_affected" : "=" }, { "version_value" : "5.1.30", "version_affected" : "=" }, { "version_value" : "5.1.31", "version_affected" : "=" }, { "version_value" : "5.1.33", "version_affected" : "=" }, { "version_value" : "5.1.34", "version_affected" : "=" }, { "version_value" : "5.1.35", "version_affected" : "=" }, { "version_value" : "5.1.36", "version_affected" : "=" }, { "version_value" : "5.1.37", "version_affected" : "=" }, { "version_value" : "5.1.38", "version_affected" : "=" }, { "version_value" : "5.1.39", "version_affected" : "=" }, { "version_value" : "5.1.40", "version_affected" : "=" }, { "version_value" : "5.1.41", "version_affected" : "=" }, { "version_value" : "5.1.42", "version_affected" : "=" }, { "version_value" : "5.1.43", "version_affected" : "=" }, { "version_value" : "5.1.44", "version_affected" : "=" }, { "version_value" : "5.1.45", "version_affected" : "=" }, { "version_value" : "5.1.46", "version_affected" : "=" }, { "version_value" : "5.1.47", "version_affected" : "=" }, { "version_value" : "5.1.48", "version_affected" : "=" }, { "version_value" : "5.1.49", "version_affected" : "=" }, { "version_value" : "5.1.50", "version_affected" : "=" }, { "version_value" : "5.1.51", "version_affected" : "=" }, { "version_value" : "5.1.52", "version_affected" : "=" }, { "version_value" : "5.1.53", "version_affected" : "=" }, { "version_value" : "5.1.54", "version_affected" : "=" }, { "version_value" : "5.1.55", "version_affected" : "=" }, { "version_value" : "5.1.56", "version_affected" : "=" }, { "version_value" : "5.1.57", "version_affected" : "=" }, { "version_value" : "5.1.58", "version_affected" : "=" }, { "version_value" : "5.1.59", "version_affected" : "=" }, { "version_value" : "5.1.60", "version_affected" : "=" }, { "version_value" : "5.1.61", "version_affected" : "=" }, { "version_value" : "5.1.62", "version_affected" : "=" }, { "version_value" : "5.1.63", "version_affected" : "=" }, { "version_value" : "5.1.64", "version_affected" : "=" }, { "version_value" : "5.1.65", "version_affected" : "=" }, { "version_value" : "5.1.66", "version_affected" : "<=" }, { "version_value" : "5.5.0", "version_affected" : "=" }, { "version_value" : "5.5.1", "version_affected" : "=" }, { "version_value" : "5.5.2", "version_affected" : "=" }, { "version_value" : "5.5.3", "version_affected" : "=" }, { "version_value" : "5.5.4", "version_affected" : "=" }, { "version_value" : "5.5.5", "version_affected" : "=" }, { "version_value" : "5.5.6", "version_affected" : "=" }, { "version_value" : "5.5.7", "version_affected" : "=" }, { "version_value" : "5.5.9", "version_affected" : "=" }, { "version_value" : "5.5.10", "version_affected" : "=" }, { "version_value" : "5.5.11", "version_affected" : "=" }, { "version_value" : "5.5.12", "version_affected" : "=" }, { "version_value" : "5.5.13", "version_affected" : "=" }, { "version_value" : "5.5.14", "version_affected" : "=" }, { "version_value" : "5.5.15", "version_affected" : "=" }, { "version_value" : "5.5.16", "version_affected" : "=" }, { "version_value" : "5.5.17", "version_affected" : "=" }, { "version_value" : "5.5.18", "version_affected" : "=" }, { "version_value" : "5.5.19", "version_affected" : "=" }, { "version_value" : "5.5.20", "version_affected" : "=" }, { "version_value" : "5.5.21", "version_affected" : "=" }, { "version_value" : "5.5.22", "version_affected" : "=" }, { "version_value" : "5.5.23", "version_affected" : "=" }, { "version_value" : "5.5.24", "version_affected" : "=" }, { "version_value" : "5.5.25", "version_affected" : "=" }, { "version_value" : "5.5.26", "version_affected" : "=" }, { "version_value" : "5.5.27", "version_affected" : "=" }, { "version_value" : "5.5.28", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0219.html", "name" : "RHSA-2013:0219", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/53372", "name" : "53372", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-06.xml", "name" : "GLSA-201308-06", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.ubuntu.com/usn/USN-1703-1", "name" : "USN-1703-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16825", "name" : "oval:org.mitre.oval:def:16825", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:5.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:5.1.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:5.1.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:5.1.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:5.1.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mysql:mysql:5.1.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.23:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.31:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.34:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.37:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.40:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.43:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.44:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.45:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.46:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.46:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.47:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.48:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.49:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.49:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.50:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.51:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.52:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.52:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.53:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.54:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.55:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.56:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.57:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.58:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.59:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.60:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.61:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.62:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.63:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.64:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.1.65:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.1.66" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.25:a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:5.5.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.5.28" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2019-12-17T20:23Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0390", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "e-business_suite", "version" : { "version_data" : [ { "version_value" : "11.5.10.2", "version_affected" : "=" }, { "version_value" : "12.0.6", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Bookmarkable Pages." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:12.1.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0391", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "peoplesoft_products", "version" : { "version_data" : [ { "version_value" : "8.52", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.52 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Security." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:peoplesoft_products:8.52:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0392", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "peoplesoft_products", "version" : { "version_data" : [ { "version_value" : "8.51", "version_affected" : "=" }, { "version_value" : "8.52", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 and 8.52 allows remote attackers to affect integrity via unknown vectors related to Portal, a different vulnerability than CVE-2012-5059." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:peoplesoft_products:8.51:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:peoplesoft_products:8.52:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0393", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "fusion_middleware", "version" : { "version_data" : [ { "version_value" : "8.3.7.0", "version_affected" : "=" }, { "version_value" : "8.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-043B.html", "name" : "TA13-043B", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21660640", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21660640", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-012", "name" : "MS13-012", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16202", "name" : "oval:org.mitre.oval:def:16202", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 and 8.4 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2013-0418." }, { "lang" : "en", "value" : "Per: http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html\r\n\r\n'2. Outside In Technology is a suite of software development kits (SDKs). It does not have any particular associated protocol. If the hosting software passes data received over the network to Outside In Technology code, the CVSS score would increase to 6.8.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:fusion_middleware:8.3.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:fusion_middleware:8.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0394", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "peoplesoft_products", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the PeopleSoft HRMS component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote attackers to affect confidentiality via unknown vectors related to Candidate Gateway." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:peoplesoft_products:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:peoplesoft_products:9.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0395", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "peoplesoft_products", "version" : { "version_data" : [ { "version_value" : "8.51", "version_affected" : "=" }, { "version_value" : "8.52", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 and 8.52 allows remote authenticated users to affect integrity via unknown vectors related to Security." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:peoplesoft_products:8.51:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:peoplesoft_products:8.52:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0396", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "enterprise_manager_grid_control", "version" : { "version_data" : [ { "version_value" : "6.5", "version_affected" : "=" }, { "version_value" : "11.1", "version_affected" : "=" }, { "version_value" : "12.1.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Application Performance Management (APM) component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Business Transaction Management, a different vulnerability than CVE-2013-0360." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_grid_control:6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_grid_control:11.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:enterprise_manager_grid_control:12.1.0.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0397", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "e-business_suite", "version" : { "version_data" : [ { "version_value" : "11.5.10.2", "version_affected" : "=" }, { "version_value" : "12.0.6", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=139344343412337&w=2", "name" : "HPSBST02955", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/57126", "name" : "57126", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Diagnostics." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:12.1.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2014-03-16T04:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0398", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "sunos", "version" : { "version_data" : [ { "version_value" : "5.8", "version_affected" : "=" }, { "version_value" : "5.9", "version_affected" : "=" }, { "version_value" : "5.10", "version_affected" : "=" }, { "version_value" : "5.11", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19037", "name" : "oval:org.mitre.oval:def:19037", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 allows remote attackers to affect confidentiality via unknown vectors related to Utility/Remote Execution Server (in.rexecd)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.11:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-07-17T13:41Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0399", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "sunos", "version" : { "version_data" : [ { "version_value" : "5.9", "version_affected" : "=" }, { "version_value" : "5.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ "Broken Link" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf", "name" : "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19228", "name" : "oval:org.mitre.oval:def:19228", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Oracle Sun Solaris 9 and 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Utility/Umount." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:S/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 2.7, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0400", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "sunos", "version" : { "version_data" : [ { "version_value" : "5.9", "version_affected" : "=" }, { "version_value" : "5.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ "Broken Link" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf", "name" : "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19308", "name" : "oval:org.mitre.oval:def:19308", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Oracle Sun Solaris 9 and 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Filesystem/cachefs." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:S/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 2.7, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0401", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/", "name" : "http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/", "name" : "http://blog.fuseyism.com/index.php/2013/04/25/security-icedtea-1-11-11-1-12-5-for-openjdk-6-released/", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880", "name" : "SSRT101305", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157", "name" : "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/31c782610044", "name" : "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/31c782610044", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00007.html", "name" : "SUSE-SU-2013:0814", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00013.html", "name" : "SUSE-SU-2013:0835", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00001.html", "name" : "SUSE-SU-2013:0871", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-05/msg00017.html", "name" : "openSUSE-SU-2013:0777", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html", "name" : "openSUSE-SU-2013:0964", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022796.html", "name" : "[distro-pkg-dev] 20130417 [SECURITY] IcedTea 1.11.10 for OpenJDK 6 Released!", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=137283787217316&w=2", "name" : "SSRT101252", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0752.html", "name" : "RHSA-2013:0752", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0757.html", "name" : "RHSA-2013:0757", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0758.html", "name" : "RHSA-2013:0758", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1455.html", "name" : "RHSA-2013:1455", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1456.html", "name" : "RHSA-2013:1456", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201406-32.xml", "name" : "GLSA-201406-32", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:145", "name" : "MDVSA-2013:145", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:161", "name" : "MDVSA-2013:161", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1806-1", "name" : "USN-1806-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/ncas/alerts/TA13-107A", "name" : "TA13-107A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.zdnet.com/pwn2own-down-go-all-the-browsers-7000012283/", "name" : "http://www.zdnet.com/pwn2own-down-go-all-the-browsers-7000012283/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=920245", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=920245", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16297", "name" : "oval:org.mitre.oval:def:16297", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19463", "name" : "oval:org.mitre.oval:def:19463", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19641", "name" : "oval:org.mitre.oval:def:19641", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://twitter.com/thezdi/status/309784608508100608", "name" : "https://twitter.com/thezdi/status/309784608508100608", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124", "name" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0124", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130", "name" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute arbitrary code via vectors related to AWT, as demonstrated by Ben Murphy during a Pwn2Own competition at CanSecWest 2013. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to invocation of the system class loader by the sun.awt.datatransfer.ClassLoaderObjectInputStream class, which allows remote attackers to bypass Java sandbox restrictions." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update17:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-08T18:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0402", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "javafx", "version" : { "version_data" : [ { "version_value" : "2.2.7", "version_affected" : "<=" } ] } }, { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157", "name" : "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0757.html", "name" : "RHSA-2013:0757", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.us-cert.gov/ncas/alerts/TA13-107A", "name" : "TA13-107A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.zdnet.com/pwn2own-down-go-all-the-browsers-7000012283/", "name" : "http://www.zdnet.com/pwn2own-down-go-all-the-browsers-7000012283/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15728", "name" : "oval:org.mitre.oval:def:15728", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://twitter.com/thezdi/status/309484730506698752", "name" : "https://twitter.com/thezdi/status/309484730506698752", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via unspecified vectors related to JavaFX, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:javafx:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.2.7" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update17:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-08T18:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0403", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "sunos", "version" : { "version_data" : [ { "version_value" : "5.8", "version_affected" : "=" }, { "version_value" : "5.9", "version_affected" : "=" }, { "version_value" : "5.10", "version_affected" : "=" }, { "version_value" : "5.11", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ "Broken Link" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19196", "name" : "oval:org.mitre.oval:def:19196", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect availability via unknown vectors related to Utility." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.11:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 1.9 }, "severity" : "LOW", "exploitabilityScore" : 3.4, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-17T12:14Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0404", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "sunos", "version" : { "version_data" : [ { "version_value" : "5.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ "Broken Link" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19194", "name" : "oval:org.mitre.oval:def:19194", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Kernel/Boot." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 3.7 }, "severity" : "LOW", "exploitabilityScore" : 1.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-17T12:14Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0405", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "sunos", "version" : { "version_data" : [ { "version_value" : "5.8", "version_affected" : "=" }, { "version_value" : "5.9", "version_affected" : "=" }, { "version_value" : "5.10", "version_affected" : "=" }, { "version_value" : "5.11", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ "Broken Link" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19352", "name" : "oval:org.mitre.oval:def:19352", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows remote attackers to affect confidentiality and integrity via vectors related to NFS client mounts and IPv6." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.11:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-17T12:14Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0406", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "sunos", "version" : { "version_data" : [ { "version_value" : "5.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ "Broken Link" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19224", "name" : "oval:org.mitre.oval:def:19224", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect integrity via unknown vectors via vectors related to Kernel/IPsec." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-17T12:14Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0407", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "xerox", "product" : { "product_data" : [ { "product_name" : "freeflow_print_server", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "sunos", "version" : { "version_data" : [ { "version_value" : "5.10", "version_affected" : "=" }, { "version_value" : "5.11", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ "Broken Link" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf", "name" : "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19400", "name" : "oval:org.mitre.oval:def:19400", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Kernel/DTrace Framework." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xerox:freeflow_print_server:8.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.11:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.1, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0408", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "sunos", "version" : { "version_data" : [ { "version_value" : "5.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ "Broken Link" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19124", "name" : "oval:org.mitre.oval:def:19124", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability via vectors related to CPU performance counters drivers." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-17T12:14Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0409", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=136439120408139&w=2", "name" : "HPSBUX02857", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136570436423916&w=2", "name" : "SSRT101156", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0236.html", "name" : "RHSA-2013:0236", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0237.html", "name" : "RHSA-2013:0237", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1455.html", "name" : "RHSA-2013:1455", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1456.html", "name" : "RHSA-2013:1456", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57728", "name" : "57728", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16530", "name" : "oval:org.mitre.oval:def:16530", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19114", "name" : "oval:org.mitre.oval:def:19114", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19240", "name" : "oval:org.mitre.oval:def:19240", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19383", "name" : "oval:org.mitre.oval:def:19383", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38 allows remote attackers to affect confidentiality via vectors related to JMX." }, { "lang" : "en", "value" : "Per http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html\r\n\r\n\"Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)\r\nApplies to installation process on client deployment of Java.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0410", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "supply_chain_products_suite", "version" : { "version_data" : [ { "version_value" : "6.1.1.0", "version_affected" : "=" }, { "version_value" : "6.1.2.0", "version_affected" : "=" }, { "version_value" : "6.1.2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Agile EDM component in Oracle Supply Chain Products Suite 6.1.1.0, 6.1.2.0, and 6.1.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Base Component - Common Objects." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:supply_chain_products_suite:6.1.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:supply_chain_products_suite:6.1.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:supply_chain_products_suite:6.1.2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-17T12:14Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0411", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "sunos", "version" : { "version_data" : [ { "version_value" : "5.8", "version_affected" : "=" }, { "version_value" : "5.9", "version_affected" : "=" }, { "version_value" : "5.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ "Broken Link" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18529", "name" : "oval:org.mitre.oval:def:18529", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Oracle Sun Solaris 8, 9, and 10 allows local users to affect confidentiality, integrity, and availability via vectors related to RBAC Configuration." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:H/Au:M/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "HIGH", "authentication" : "MULTIPLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 5.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 1.2, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-17T12:14Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0412", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "sunos", "version" : { "version_data" : [ { "version_value" : "5.8", "version_affected" : "=" }, { "version_value" : "5.9", "version_affected" : "=" }, { "version_value" : "5.10", "version_affected" : "=" }, { "version_value" : "5.11", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ "Broken Link" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18818", "name" : "oval:org.mitre.oval:def:18818", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect integrity and availability via unknown vectors related to Utility/pax." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.11:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 3.6 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-17T12:14Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0413", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "sunos", "version" : { "version_data" : [ { "version_value" : "5.10", "version_affected" : "=" }, { "version_value" : "5.11", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ "Broken Link" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19409", "name" : "oval:org.mitre.oval:def:19409", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Remote Execution Service." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.11:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-17T12:14Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0414", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "sunos", "version" : { "version_data" : [ { "version_value" : "5.11", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect integrity and availability via unknown vectors related to Utility/ksh93." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.11:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 3.3 }, "severity" : "LOW", "exploitabilityScore" : 3.4, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0415", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "xerox", "product" : { "product_data" : [ { "product_name" : "freeflow_print_server", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "sunos", "version" : { "version_data" : [ { "version_value" : "5.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ "Broken Link" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf", "name" : "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19370", "name" : "oval:org.mitre.oval:def:19370", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the Bind/Postinstall script for Bind package." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xerox:freeflow_print_server:8.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:H/Au:S/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "HIGH", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 1.5, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0416", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "siebel_crm", "version" : { "version_data" : [ { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Siebel Enterprise Application Integration component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Services, a different vulnerability than CVE-2013-2403." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:siebel_crm:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:siebel_crm:8.2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-17T12:14Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0417", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "sun_products_suite", "version" : { "version_data" : [ { "version_value" : "6.9.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Sun Storage Common Array Manager (CAM) component in Oracle Sun Products Suite 6.9.0 allows remote attackers to affect confidentiality, related to Fault Management System (FMS)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:sun_products_suite:6.9.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2013-10-11T03:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0418", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "exchange_server", "version" : { "version_data" : [ { "version_value" : "2007", "version_affected" : "=" }, { "version_value" : "2010", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "fusion_middleware", "version" : { "version_data" : [ { "version_value" : "8.3.7.0", "version_affected" : "=" }, { "version_value" : "8.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/bugtraq/2013-01/0073.html", "name" : "20130117 Secunia Research: Oracle Outside In Technology Paradox Database Handling Buffer Overflow", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-043B.html", "name" : "TA13-043B", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21660640", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21660640", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-012", "name" : "MS13-012", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16251", "name" : "oval:org.mitre.oval:def:16251", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 and 8.4 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2013-0393. NOTE: the previous information was obtained from the January 2013 CPU. Oracle has not commented on claims from an independent researcher that this is a heap-based buffer overflow in the Paradox database stream filter (vspdx.dll) that can be triggered using a table header with a crafted \"number of fields\" value." }, { "lang" : "en", "value" : "Per: http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html#AppendixFMW\n\n'2. Outside In Technology is a suite of software development kits (SDKs). It does not have any particular associated protocol. If the hosting software passes data received over the network to Outside In Technology code, the CVSS score would increase to 6.8.'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:exchange_server:2007:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:exchange_server:2010:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:fusion_middleware:8.3.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:fusion_middleware:8.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2018-10-12T22:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0419", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=136439120408139&w=2", "name" : "HPSBUX02857", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136570436423916&w=2", "name" : "SSRT101156", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0236.html", "name" : "RHSA-2013:0236", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0237.html", "name" : "RHSA-2013:0237", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1455.html", "name" : "RHSA-2013:1455", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1456.html", "name" : "RHSA-2013:1456", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57714", "name" : "57714", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16247", "name" : "oval:org.mitre.oval:def:16247", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19097", "name" : "oval:org.mitre.oval:def:19097", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19501", "name" : "oval:org.mitre.oval:def:19501", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU." }, { "lang" : "en", "value" : "Per http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html\r\n\r\n\"Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.6 }, "severity" : "HIGH", "exploitabilityScore" : 4.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0420", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "virtualization", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.1", "version_affected" : "=" }, { "version_value" : "4.2", "version_affected" : "=" } ] } }, { "product_name" : "vm_virtualbox", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.1.0", "version_affected" : "=" }, { "version_value" : "4.2.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "opensuse", "product" : { "product_data" : [ { "product_name" : "opensuse", "version" : { "version_data" : [ { "version_value" : "12.1", "version_affected" : "=" }, { "version_value" : "12.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-updates/2013-02/msg00000.html", "name" : "openSUSE-SU-2013:0231", "refsource" : "SUSE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://bugzilla.novell.com/show_bug.cgi?id=798776", "name" : "https://bugzilla.novell.com/show_bug.cgi?id=798776", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15763", "name" : "oval:org.mitre.oval:def:15763", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://www.virtualbox.org/changeset/44055/vbox", "name" : "https://www.virtualbox.org/changeset/44055/vbox", "refsource" : "MISC", "tags" : [ "Exploit", "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4.0, 4.1, and 4.2 allows local users to affect integrity and availability via unknown vectors related to Core. NOTE: The previous information was obtained from the January 2013 Oracle CPU. Oracle has not commented on claims from another vendor that this issue is related to an incorrect comparison in the vga_draw_text function in Devices/Graphics/DevVGA.cpp, which can cause VirtualBox to \"draw more lines than necessary.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:virtualization:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:virtualization:4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:virtualization:4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:vm_virtualbox:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:vm_virtualbox:4.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:vm_virtualbox:4.2.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:H/Au:S/C:N/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "HIGH", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 2.4 }, "severity" : "LOW", "exploitabilityScore" : 1.5, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-17T01:55Z", "lastModifiedDate" : "2018-10-30T16:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0421", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0422", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blog.fireeye.com/research/2013/01/happy-new-year-from-new-java-zero-day.html", "name" : "http://blog.fireeye.com/research/2013/01/happy-new-year-from-new-java-zero-day.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://blog.fuseyism.com/index.php/2013/01/15/security-icedtea-2-1-4-2-2-4-2-3-4-released/", "name" : "http://blog.fuseyism.com/index.php/2013/01/15/security-icedtea-2-1-4-2-2-4-2-3-4-released/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://immunityproducts.blogspot.ca/2013/01/confirmed-java-only-fixed-one-of-two.html", "name" : "http://immunityproducts.blogspot.ca/2013/01/confirmed-java-only-fixed-one-of-two.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://krebsonsecurity.com/2013/01/zero-day-java-exploit-debuts-in-crimeware/", "name" : "http://krebsonsecurity.com/2013/01/zero-day-java-exploit-debuts-in-crimeware/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://labs.alienvault.com/labs/index.php/2013/new-year-new-java-zeroday/", "name" : "http://labs.alienvault.com/labs/index.php/2013/new-year-new-java-zeroday/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00025.html", "name" : "openSUSE-SU-2013:0199", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://malware.dontneedcoffee.com/2013/01/0-day-17u10-spotted-in-while-disable.html", "name" : "http://malware.dontneedcoffee.com/2013/01/0-day-17u10-spotted-in-while-disable.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0156.html", "name" : "RHSA-2013:0156", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0165.html", "name" : "RHSA-2013:0165", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://seclists.org/bugtraq/2013/Jan/48", "name" : "20130110 [SE-2012-01] 'Fix' for Issue 32 exploited by new Java 0-day code", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/625617", "name" : "VU#625617", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:095", "name" : "MDVSA-2013:095", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/alert-cve-2013-0422-1896849.html", "name" : "http://www.oracle.com/technetwork/topics/security/alert-cve-2013-0422-1896849.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1693-1", "name" : "USN-1693-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-010A.html", "name" : "TA13-010A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://partners.immunityinc.com/idocs/Java%20MBeanInstantiator.findClass%200day%20Analysis.pdf", "name" : "https://partners.immunityinc.com/idocs/Java%20MBeanInstantiator.findClass%200day%20Analysis.pdf", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://threatpost.com/en_us/blogs/nasty-new-java-zero-day-found-exploit-kits-already-have-it-011013", "name" : "https://threatpost.com/en_us/blogs/nasty-new-java-zero-day-found-exploit-kits-already-have-it-011013", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0018", "name" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0018", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://www-304.ibm.com/connections/blogs/PSIRT/entry/oracle_java_7_security_manager_bypass_vulnerability_cve_2013_04224?lang=en_us", "name" : "https://www-304.ibm.com/connections/blogs/PSIRT/entry/oracle_java_7_security_manager_bypass_vulnerability_cve_2013_04224?lang=en_us", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBeanInstantiator method in the JmxMBeanServer class to obtain a reference to a private MBeanInstantiator object, then retrieving arbitrary Class references using the findClass method, and (2) using the Reflection API with recursion in a way that bypasses a security check by the java.lang.invoke.MethodHandles.Lookup.checkSecurityManager method due to the inability of the sun.reflect.Reflection.getCallerClass method to skip frames related to the new reflection API, as exploited in the wild in January 2013, as demonstrated by Blackhole and Nuclear Pack, and a different vulnerability than CVE-2012-4681 and CVE-2012-3174. NOTE: some parties have mapped the recursive Reflection API issue to CVE-2012-3174, but CVE-2012-3174 is for a different vulnerability whose details are not public as of 20130114. CVE-2013-0422 covers both the JMX/MBean and Reflection API issues. NOTE: it was originally reported that Java 6 was also vulnerable, but the reporter has retracted this claim, stating that Java 6 is not exploitable because the relevant code is called in a way that does not bypass security checks. NOTE: as of 20130114, a reliable third party has claimed that the findClass/MBeanInstantiator vector was not fixed in Oracle Java 7 Update 11. If there is still a vulnerable condition, then a separate CVE identifier might be created for the unfixed issue." }, { "lang" : "en", "value" : "Per: http://www.oracle.com/technetwork/java/javase/downloads/jdk7-downloads-1880260.html\r\n\r\n'Note: JDK and JRE 6, 5.0 and 1.4.2, and Java SE Embedded JRE releases are not affected.'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-01-10T21:55Z", "lastModifiedDate" : "2014-02-21T04:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0423", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=136439120408139&w=2", "name" : "HPSBUX02857", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136570436423916&w=2", "name" : "SSRT101156", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0236.html", "name" : "RHSA-2013:0236", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0237.html", "name" : "RHSA-2013:0237", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1455.html", "name" : "RHSA-2013:1455", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1456.html", "name" : "RHSA-2013:1456", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57716", "name" : "57716", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16476", "name" : "oval:org.mitre.oval:def:16476", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18869", "name" : "oval:org.mitre.oval:def:18869", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19425", "name" : "oval:org.mitre.oval:def:19425", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU." }, { "lang" : "en", "value" : "Per http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html\r\n\r\n\"Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.6 }, "severity" : "HIGH", "exploitabilityScore" : 4.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0424", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.4.2_38", "version_affected" : "=" }, { "version_value" : "1.4.2_40", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.4.2_38", "version_affected" : "=" }, { "version_value" : "1.4.2_40", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_2", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "=" }, { "version_value" : "1.4.2_26", "version_affected" : "=" }, { "version_value" : "1.4.2_27", "version_affected" : "=" }, { "version_value" : "1.4.2_28", "version_affected" : "=" }, { "version_value" : "1.4.2_29", "version_affected" : "=" }, { "version_value" : "1.4.2_30", "version_affected" : "=" }, { "version_value" : "1.4.2_31", "version_affected" : "=" }, { "version_value" : "1.4.2_32", "version_affected" : "=" }, { "version_value" : "1.4.2_33", "version_affected" : "=" }, { "version_value" : "1.4.2_34", "version_affected" : "=" }, { "version_value" : "1.4.2_35", "version_affected" : "=" }, { "version_value" : "1.4.2_36", "version_affected" : "=" }, { "version_value" : "1.4.2_37", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_2", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_20", "version_affected" : "=" }, { "version_value" : "1.4.2_21", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_24", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "=" }, { "version_value" : "1.4.2_26", "version_affected" : "=" }, { "version_value" : "1.4.2_27", "version_affected" : "=" }, { "version_value" : "1.4.2_28", "version_affected" : "=" }, { "version_value" : "1.4.2_29", "version_affected" : "=" }, { "version_value" : "1.4.2_30", "version_affected" : "=" }, { "version_value" : "1.4.2_31", "version_affected" : "=" }, { "version_value" : "1.4.2_32", "version_affected" : "=" }, { "version_value" : "1.4.2_33", "version_affected" : "=" }, { "version_value" : "1.4.2_34", "version_affected" : "=" }, { "version_value" : "1.4.2_35", "version_affected" : "=" }, { "version_value" : "1.4.2_36", "version_affected" : "=" }, { "version_value" : "1.4.2_37", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "name" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/6e173569e1e7", "name" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/6e173569e1e7", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html", "name" : "openSUSE-SU-2013:0312", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html", "name" : "openSUSE-SU-2013:0377", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00034.html", "name" : "SUSE-SU-2013:0478", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136439120408139&w=2", "name" : "HPSBUX02857", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136570436423916&w=2", "name" : "SSRT101156", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0236.html", "name" : "RHSA-2013:0236", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0237.html", "name" : "RHSA-2013:0237", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0245.html", "name" : "RHSA-2013:0245", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0246.html", "name" : "RHSA-2013:0246", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0247.html", "name" : "RHSA-2013:0247", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1455.html", "name" : "RHSA-2013:1455", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1456.html", "name" : "RHSA-2013:1456", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201406-32.xml", "name" : "GLSA-201406-32", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:095", "name" : "MDVSA-2013:095", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57715", "name" : "57715", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=906813", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=906813", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16519", "name" : "oval:org.mitre.oval:def:16519", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19131", "name" : "oval:org.mitre.oval:def:19131", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19423", "name" : "oval:org.mitre.oval:def:19423", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19522", "name" : "oval:org.mitre.oval:def:19522", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "name" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to RMI. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to cross-site scripting (XSS) in the sun.rmi.transport.proxy CGIHandler class that does not properly handle error messages in a (1) command or (2) port number." }, { "lang" : "en", "value" : "Per: http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html\r\n\r\n\"Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.4.2_38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_40" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_37:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.4.2_38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_40" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_37:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0425", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.4.2_38", "version_affected" : "=" }, { "version_value" : "1.4.2_40", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.4.2_38", "version_affected" : "=" }, { "version_value" : "1.4.2_40", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_2", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "=" }, { "version_value" : "1.4.2_26", "version_affected" : "=" }, { "version_value" : "1.4.2_27", "version_affected" : "=" }, { "version_value" : "1.4.2_28", "version_affected" : "=" }, { "version_value" : "1.4.2_29", "version_affected" : "=" }, { "version_value" : "1.4.2_30", "version_affected" : "=" }, { "version_value" : "1.4.2_31", "version_affected" : "=" }, { "version_value" : "1.4.2_32", "version_affected" : "=" }, { "version_value" : "1.4.2_33", "version_affected" : "=" }, { "version_value" : "1.4.2_34", "version_affected" : "=" }, { "version_value" : "1.4.2_35", "version_affected" : "=" }, { "version_value" : "1.4.2_36", "version_affected" : "=" }, { "version_value" : "1.4.2_37", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_2", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_20", "version_affected" : "=" }, { "version_value" : "1.4.2_21", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_24", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "=" }, { "version_value" : "1.4.2_26", "version_affected" : "=" }, { "version_value" : "1.4.2_27", "version_affected" : "=" }, { "version_value" : "1.4.2_28", "version_affected" : "=" }, { "version_value" : "1.4.2_29", "version_affected" : "=" }, { "version_value" : "1.4.2_30", "version_affected" : "=" }, { "version_value" : "1.4.2_31", "version_affected" : "=" }, { "version_value" : "1.4.2_32", "version_affected" : "=" }, { "version_value" : "1.4.2_33", "version_affected" : "=" }, { "version_value" : "1.4.2_34", "version_affected" : "=" }, { "version_value" : "1.4.2_35", "version_affected" : "=" }, { "version_value" : "1.4.2_36", "version_affected" : "=" }, { "version_value" : "1.4.2_37", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907344", "name" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907344", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "name" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/ce105dd2e4de", "name" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/ce105dd2e4de", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html", "name" : "openSUSE-SU-2013:0312", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html", "name" : "openSUSE-SU-2013:0377", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00034.html", "name" : "SUSE-SU-2013:0478", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136439120408139&w=2", "name" : "HPSBUX02857", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136570436423916&w=2", "name" : "SSRT101156", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0236.html", "name" : "RHSA-2013:0236", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0237.html", "name" : "RHSA-2013:0237", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0245.html", "name" : "RHSA-2013:0245", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0246.html", "name" : "RHSA-2013:0246", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0247.html", "name" : "RHSA-2013:0247", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1455.html", "name" : "RHSA-2013:1455", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1456.html", "name" : "RHSA-2013:1456", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201406-32.xml", "name" : "GLSA-201406-32", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:095", "name" : "MDVSA-2013:095", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57709", "name" : "57709", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16058", "name" : "oval:org.mitre.oval:def:16058", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19483", "name" : "oval:org.mitre.oval:def:19483", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19502", "name" : "oval:org.mitre.oval:def:19502", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19503", "name" : "oval:org.mitre.oval:def:19503", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "name" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-0428 and CVE-2013-0426. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect \"access control checks\" in the logging API that allow remote attackers to bypass Java sandbox restrictions." }, { "lang" : "en", "value" : "Per http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html\r\n\r\n\"Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.4.2_38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_40" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_37:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.4.2_38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_40" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_37:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0426", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.4.2_38", "version_affected" : "=" }, { "version_value" : "1.4.2_40", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.4.2_38", "version_affected" : "=" }, { "version_value" : "1.4.2_40", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_2", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "=" }, { "version_value" : "1.4.2_26", "version_affected" : "=" }, { "version_value" : "1.4.2_27", "version_affected" : "=" }, { "version_value" : "1.4.2_28", "version_affected" : "=" }, { "version_value" : "1.4.2_29", "version_affected" : "=" }, { "version_value" : "1.4.2_30", "version_affected" : "=" }, { "version_value" : "1.4.2_31", "version_affected" : "=" }, { "version_value" : "1.4.2_32", "version_affected" : "=" }, { "version_value" : "1.4.2_33", "version_affected" : "=" }, { "version_value" : "1.4.2_34", "version_affected" : "=" }, { "version_value" : "1.4.2_35", "version_affected" : "=" }, { "version_value" : "1.4.2_36", "version_affected" : "=" }, { "version_value" : "1.4.2_37", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_2", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_20", "version_affected" : "=" }, { "version_value" : "1.4.2_21", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_24", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "=" }, { "version_value" : "1.4.2_26", "version_affected" : "=" }, { "version_value" : "1.4.2_27", "version_affected" : "=" }, { "version_value" : "1.4.2_28", "version_affected" : "=" }, { "version_value" : "1.4.2_29", "version_affected" : "=" }, { "version_value" : "1.4.2_30", "version_affected" : "=" }, { "version_value" : "1.4.2_31", "version_affected" : "=" }, { "version_value" : "1.4.2_32", "version_affected" : "=" }, { "version_value" : "1.4.2_33", "version_affected" : "=" }, { "version_value" : "1.4.2_34", "version_affected" : "=" }, { "version_value" : "1.4.2_35", "version_affected" : "=" }, { "version_value" : "1.4.2_36", "version_affected" : "=" }, { "version_value" : "1.4.2_37", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907346", "name" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907346", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "name" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/ce105dd2e4de", "name" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/ce105dd2e4de", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html", "name" : "openSUSE-SU-2013:0312", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html", "name" : "openSUSE-SU-2013:0377", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00034.html", "name" : "SUSE-SU-2013:0478", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136439120408139&w=2", "name" : "HPSBUX02857", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136570436423916&w=2", "name" : "SSRT101156", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0236.html", "name" : "RHSA-2013:0236", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0237.html", "name" : "RHSA-2013:0237", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0245.html", "name" : "RHSA-2013:0245", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0246.html", "name" : "RHSA-2013:0246", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0247.html", "name" : "RHSA-2013:0247", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1455.html", "name" : "RHSA-2013:1455", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1456.html", "name" : "RHSA-2013:1456", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201406-32.xml", "name" : "GLSA-201406-32", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:095", "name" : "MDVSA-2013:095", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57711", "name" : "57711", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15888", "name" : "oval:org.mitre.oval:def:15888", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19261", "name" : "oval:org.mitre.oval:def:19261", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19471", "name" : "oval:org.mitre.oval:def:19471", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19484", "name" : "oval:org.mitre.oval:def:19484", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "name" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-0425 and CVE-2013-0428. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect \"access control checks\" in the logging API that allow remote attackers to bypass Java sandbox restrictions." }, { "lang" : "en", "value" : "Per http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html \r\n\r\n\r\n\"Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.4.2_38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_40" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_37:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.4.2_38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_40" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_37:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0427", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907455", "name" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907455", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "name" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/87d135824bdf", "name" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/87d135824bdf", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html", "name" : "openSUSE-SU-2013:0312", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html", "name" : "openSUSE-SU-2013:0377", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136439120408139&w=2", "name" : "HPSBUX02857", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136570436423916&w=2", "name" : "SSRT101156", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0236.html", "name" : "RHSA-2013:0236", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0237.html", "name" : "RHSA-2013:0237", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0245.html", "name" : "RHSA-2013:0245", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0246.html", "name" : "RHSA-2013:0246", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0247.html", "name" : "RHSA-2013:0247", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1455.html", "name" : "RHSA-2013:1455", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1456.html", "name" : "RHSA-2013:1456", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201406-32.xml", "name" : "GLSA-201406-32", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:095", "name" : "MDVSA-2013:095", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57724", "name" : "57724", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16013", "name" : "oval:org.mitre.oval:def:16013", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18641", "name" : "oval:org.mitre.oval:def:18641", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19245", "name" : "oval:org.mitre.oval:def:19245", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19488", "name" : "oval:org.mitre.oval:def:19488", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "name" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect integrity via unknown vectors related to Libraries. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to interrupt certain threads that should not be interrupted." }, { "lang" : "en", "value" : "Per http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html\r\n\r\n\"Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0428", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.4.2_38", "version_affected" : "=" }, { "version_value" : "1.4.2_40", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.4.2_38", "version_affected" : "=" }, { "version_value" : "1.4.2_40", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_2", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "=" }, { "version_value" : "1.4.2_26", "version_affected" : "=" }, { "version_value" : "1.4.2_27", "version_affected" : "=" }, { "version_value" : "1.4.2_28", "version_affected" : "=" }, { "version_value" : "1.4.2_29", "version_affected" : "=" }, { "version_value" : "1.4.2_30", "version_affected" : "=" }, { "version_value" : "1.4.2_31", "version_affected" : "=" }, { "version_value" : "1.4.2_32", "version_affected" : "=" }, { "version_value" : "1.4.2_33", "version_affected" : "=" }, { "version_value" : "1.4.2_34", "version_affected" : "=" }, { "version_value" : "1.4.2_35", "version_affected" : "=" }, { "version_value" : "1.4.2_36", "version_affected" : "=" }, { "version_value" : "1.4.2_37", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_2", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_20", "version_affected" : "=" }, { "version_value" : "1.4.2_21", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_24", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "=" }, { "version_value" : "1.4.2_26", "version_affected" : "=" }, { "version_value" : "1.4.2_27", "version_affected" : "=" }, { "version_value" : "1.4.2_28", "version_affected" : "=" }, { "version_value" : "1.4.2_29", "version_affected" : "=" }, { "version_value" : "1.4.2_30", "version_affected" : "=" }, { "version_value" : "1.4.2_31", "version_affected" : "=" }, { "version_value" : "1.4.2_32", "version_affected" : "=" }, { "version_value" : "1.4.2_33", "version_affected" : "=" }, { "version_value" : "1.4.2_34", "version_affected" : "=" }, { "version_value" : "1.4.2_35", "version_affected" : "=" }, { "version_value" : "1.4.2_36", "version_affected" : "=" }, { "version_value" : "1.4.2_37", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "name" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/c9534e095b37", "name" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/c9534e095b37", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html", "name" : "openSUSE-SU-2013:0312", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html", "name" : "openSUSE-SU-2013:0377", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00034.html", "name" : "SUSE-SU-2013:0478", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136439120408139&w=2", "name" : "HPSBUX02857", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136570436423916&w=2", "name" : "SSRT101156", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0236.html", "name" : "RHSA-2013:0236", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0237.html", "name" : "RHSA-2013:0237", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0245.html", "name" : "RHSA-2013:0245", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0246.html", "name" : "RHSA-2013:0246", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0247.html", "name" : "RHSA-2013:0247", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1455.html", "name" : "RHSA-2013:1455", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1456.html", "name" : "RHSA-2013:1456", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201406-32.xml", "name" : "GLSA-201406-32", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:095", "name" : "MDVSA-2013:095", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57713", "name" : "57713", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=907207", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=907207", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16496", "name" : "oval:org.mitre.oval:def:16496", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19474", "name" : "oval:org.mitre.oval:def:19474", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19480", "name" : "oval:org.mitre.oval:def:19480", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19491", "name" : "oval:org.mitre.oval:def:19491", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "name" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-0425 and CVE-2013-0426. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"incorrect checks for proxy classes\" in the Reflection API." }, { "lang" : "en", "value" : "Per: http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html\r\n\r\n\"Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.4.2_38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_40" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_37:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.4.2_38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_40" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_37:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0429", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907460", "name" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907460", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "name" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/corba/rev/c1ed8145c1b8", "name" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/corba/rev/c1ed8145c1b8", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html", "name" : "openSUSE-SU-2013:0312", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html", "name" : "openSUSE-SU-2013:0377", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136439120408139&w=2", "name" : "HPSBUX02857", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136570436423916&w=2", "name" : "SSRT101156", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0236.html", "name" : "RHSA-2013:0236", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0237.html", "name" : "RHSA-2013:0237", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0245.html", "name" : "RHSA-2013:0245", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0246.html", "name" : "RHSA-2013:0246", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0247.html", "name" : "RHSA-2013:0247", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201406-32.xml", "name" : "GLSA-201406-32", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:095", "name" : "MDVSA-2013:095", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57710", "name" : "57710", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16649", "name" : "oval:org.mitre.oval:def:16649", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19300", "name" : "oval:org.mitre.oval:def:19300", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19342", "name" : "oval:org.mitre.oval:def:19342", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19457", "name" : "oval:org.mitre.oval:def:19457", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "name" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue involves the creation of a single PresentationManager that is shared across multiple thread groups, which allows remote attackers to bypass Java sandbox restrictions." }, { "lang" : "en", "value" : "Per http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html\r\n\r\n\"Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.6 }, "severity" : "HIGH", "exploitabilityScore" : 4.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0430", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0236.html", "name" : "RHSA-2013:0236", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0237.html", "name" : "RHSA-2013:0237", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57722", "name" : "57722", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16600", "name" : "oval:org.mitre.oval:def:16600", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the installation process of the client." }, { "lang" : "en", "value" : "Per http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html \r\n\r\n\"Applies to installation process on client deployment of Java.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0431", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://arstechnica.com/security/2013/01/critical-java-vulnerabilies-confirmed-in-latest-version/", "name" : "http://arstechnica.com/security/2013/01/critical-java-vulnerabilies-confirmed-in-latest-version/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://blogs.computerworld.com/malware-and-vulnerabilities/21693/yet-another-java-security-flaw-discovered-number-53", "name" : "http://blogs.computerworld.com/malware-and-vulnerabilities/21693/yet-another-java-security-flaw-discovered-number-53", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html", "name" : "openSUSE-SU-2013:0377", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136439120408139&w=2", "name" : "HPSBUX02857", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0237.html", "name" : "RHSA-2013:0237", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0247.html", "name" : "RHSA-2013:0247", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://seclists.org/fulldisclosure/2013/Jan/142", "name" : "20130118 [SE-2012-01] Java 7 Update 11 confirmed to be vulnerable", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://seclists.org/fulldisclosure/2013/Jan/195", "name" : "20130122 Re: [SE-2012-01] Java 7 Update 11 confirmed to be vulnerable", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201406-32.xml", "name" : "GLSA-201406-32", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.informationweek.com/security/application-security/java-hacker-uncovers-two-flaws-in-latest/240146717", "name" : "http://www.informationweek.com/security/application-security/java-hacker-uncovers-two-flaws-in-latest/240146717", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:095", "name" : "MDVSA-2013:095", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/525387/30/0/threaded", "name" : "20130122 Re: [SE-2012-01] Java 7 Update 11 confirmed to be vulnerable", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16579", "name" : "oval:org.mitre.oval:def:16579", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19418", "name" : "oval:org.mitre.oval:def:19418", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "name" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors related to JMX, aka \"Issue 52,\" a different vulnerability than CVE-2013-1490." }, { "lang" : "en", "value" : "Per: http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html\r\n\r\n\"Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-31T14:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0432", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.4.2_38", "version_affected" : "=" }, { "version_value" : "1.4.2_40", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.4.2_38", "version_affected" : "=" }, { "version_value" : "1.4.2_40", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_2", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "=" }, { "version_value" : "1.4.2_26", "version_affected" : "=" }, { "version_value" : "1.4.2_27", "version_affected" : "=" }, { "version_value" : "1.4.2_28", "version_affected" : "=" }, { "version_value" : "1.4.2_29", "version_affected" : "=" }, { "version_value" : "1.4.2_30", "version_affected" : "=" }, { "version_value" : "1.4.2_31", "version_affected" : "=" }, { "version_value" : "1.4.2_32", "version_affected" : "=" }, { "version_value" : "1.4.2_33", "version_affected" : "=" }, { "version_value" : "1.4.2_34", "version_affected" : "=" }, { "version_value" : "1.4.2_35", "version_affected" : "=" }, { "version_value" : "1.4.2_36", "version_affected" : "=" }, { "version_value" : "1.4.2_37", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_2", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_20", "version_affected" : "=" }, { "version_value" : "1.4.2_21", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_24", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "=" }, { "version_value" : "1.4.2_26", "version_affected" : "=" }, { "version_value" : "1.4.2_27", "version_affected" : "=" }, { "version_value" : "1.4.2_28", "version_affected" : "=" }, { "version_value" : "1.4.2_29", "version_affected" : "=" }, { "version_value" : "1.4.2_30", "version_affected" : "=" }, { "version_value" : "1.4.2_31", "version_affected" : "=" }, { "version_value" : "1.4.2_32", "version_affected" : "=" }, { "version_value" : "1.4.2_33", "version_affected" : "=" }, { "version_value" : "1.4.2_34", "version_affected" : "=" }, { "version_value" : "1.4.2_35", "version_affected" : "=" }, { "version_value" : "1.4.2_36", "version_affected" : "=" }, { "version_value" : "1.4.2_37", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907219", "name" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907219", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "name" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/e46d557465da", "name" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/e46d557465da", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html", "name" : "openSUSE-SU-2013:0312", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html", "name" : "openSUSE-SU-2013:0377", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00034.html", "name" : "SUSE-SU-2013:0478", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136439120408139&w=2", "name" : "HPSBUX02857", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136570436423916&w=2", "name" : "SSRT101156", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0236.html", "name" : "RHSA-2013:0236", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0237.html", "name" : "RHSA-2013:0237", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0245.html", "name" : "RHSA-2013:0245", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0246.html", "name" : "RHSA-2013:0246", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0247.html", "name" : "RHSA-2013:0247", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1455.html", "name" : "RHSA-2013:1455", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1456.html", "name" : "RHSA-2013:1456", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201406-32.xml", "name" : "GLSA-201406-32", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:095", "name" : "MDVSA-2013:095", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57727", "name" : "57727", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16567", "name" : "oval:org.mitre.oval:def:16567", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19181", "name" : "oval:org.mitre.oval:def:19181", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19426", "name" : "oval:org.mitre.oval:def:19426", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19489", "name" : "oval:org.mitre.oval:def:19489", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "name" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality and integrity via vectors related to AWT. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"insufficient clipboard access premission checks.\"" }, { "lang" : "en", "value" : "Per: http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html\r\n\r\n\"Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.4.2_38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_40" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_37:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.4.2_38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_40" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_37:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0433", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "name" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/ab011765c4e8", "name" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/ab011765c4e8", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html", "name" : "openSUSE-SU-2013:0312", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html", "name" : "openSUSE-SU-2013:0377", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136439120408139&w=2", "name" : "HPSBUX02857", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136570436423916&w=2", "name" : "SSRT101156", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0236.html", "name" : "RHSA-2013:0236", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0237.html", "name" : "RHSA-2013:0237", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0245.html", "name" : "RHSA-2013:0245", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0246.html", "name" : "RHSA-2013:0246", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0247.html", "name" : "RHSA-2013:0247", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1455.html", "name" : "RHSA-2013:1455", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1456.html", "name" : "RHSA-2013:1456", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201406-32.xml", "name" : "GLSA-201406-32", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:095", "name" : "MDVSA-2013:095", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57719", "name" : "57719", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=907456", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=907456", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16537", "name" : "oval:org.mitre.oval:def:16537", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19405", "name" : "oval:org.mitre.oval:def:19405", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19459", "name" : "oval:org.mitre.oval:def:19459", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19468", "name" : "oval:org.mitre.oval:def:19468", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "name" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect integrity via unknown vectors related to Networking. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to avoid triggering an exception during the deserialization of invalid InetSocketAddress data." }, { "lang" : "en", "value" : "Per http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html\r\n\r\n\"Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0434", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.4.2_38", "version_affected" : "=" }, { "version_value" : "1.4.2_40", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.4.2_38", "version_affected" : "=" }, { "version_value" : "1.4.2_40", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_2", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "=" }, { "version_value" : "1.4.2_26", "version_affected" : "=" }, { "version_value" : "1.4.2_27", "version_affected" : "=" }, { "version_value" : "1.4.2_28", "version_affected" : "=" }, { "version_value" : "1.4.2_29", "version_affected" : "=" }, { "version_value" : "1.4.2_30", "version_affected" : "=" }, { "version_value" : "1.4.2_31", "version_affected" : "=" }, { "version_value" : "1.4.2_32", "version_affected" : "=" }, { "version_value" : "1.4.2_33", "version_affected" : "=" }, { "version_value" : "1.4.2_34", "version_affected" : "=" }, { "version_value" : "1.4.2_35", "version_affected" : "=" }, { "version_value" : "1.4.2_36", "version_affected" : "=" }, { "version_value" : "1.4.2_37", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_2", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_20", "version_affected" : "=" }, { "version_value" : "1.4.2_21", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_24", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "=" }, { "version_value" : "1.4.2_26", "version_affected" : "=" }, { "version_value" : "1.4.2_27", "version_affected" : "=" }, { "version_value" : "1.4.2_28", "version_affected" : "=" }, { "version_value" : "1.4.2_29", "version_affected" : "=" }, { "version_value" : "1.4.2_30", "version_affected" : "=" }, { "version_value" : "1.4.2_31", "version_affected" : "=" }, { "version_value" : "1.4.2_32", "version_affected" : "=" }, { "version_value" : "1.4.2_33", "version_affected" : "=" }, { "version_value" : "1.4.2_34", "version_affected" : "=" }, { "version_value" : "1.4.2_35", "version_affected" : "=" }, { "version_value" : "1.4.2_36", "version_affected" : "=" }, { "version_value" : "1.4.2_37", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907453", "name" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907453", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "name" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jaxp/rev/91fcc41a0b4b", "name" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jaxp/rev/91fcc41a0b4b", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html", "name" : "openSUSE-SU-2013:0312", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html", "name" : "openSUSE-SU-2013:0377", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00034.html", "name" : "SUSE-SU-2013:0478", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136439120408139&w=2", "name" : "HPSBUX02857", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136570436423916&w=2", "name" : "SSRT101156", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0236.html", "name" : "RHSA-2013:0236", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0237.html", "name" : "RHSA-2013:0237", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0245.html", "name" : "RHSA-2013:0245", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0246.html", "name" : "RHSA-2013:0246", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0247.html", "name" : "RHSA-2013:0247", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1455.html", "name" : "RHSA-2013:1455", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1456.html", "name" : "RHSA-2013:1456", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201406-32.xml", "name" : "GLSA-201406-32", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:095", "name" : "MDVSA-2013:095", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57730", "name" : "57730", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16528", "name" : "oval:org.mitre.oval:def:16528", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19272", "name" : "oval:org.mitre.oval:def:19272", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19430", "name" : "oval:org.mitre.oval:def:19430", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19505", "name" : "oval:org.mitre.oval:def:19505", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "name" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality via vectors related to JAXP. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to the public declaration of the loadPropertyFile method in the JAXP FuncSystemProperty class, which allows remote attackers to obtain sensitive information." }, { "lang" : "en", "value" : "Per http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html\r\n\r\n\"Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.4.2_38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_40" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_37:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.4.2_38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_40" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_37:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0435", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=906892", "name" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=906892", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "name" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/c1fa21042291", "name" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/c1fa21042291", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html", "name" : "openSUSE-SU-2013:0312", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html", "name" : "openSUSE-SU-2013:0377", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136439120408139&w=2", "name" : "HPSBUX02857", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136570436423916&w=2", "name" : "SSRT101156", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0236.html", "name" : "RHSA-2013:0236", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0237.html", "name" : "RHSA-2013:0237", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0245.html", "name" : "RHSA-2013:0245", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0246.html", "name" : "RHSA-2013:0246", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0247.html", "name" : "RHSA-2013:0247", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1455.html", "name" : "RHSA-2013:1455", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1456.html", "name" : "RHSA-2013:1456", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201406-32.xml", "name" : "GLSA-201406-32", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:095", "name" : "MDVSA-2013:095", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57729", "name" : "57729", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16489", "name" : "oval:org.mitre.oval:def:16489", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19078", "name" : "oval:org.mitre.oval:def:19078", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19520", "name" : "oval:org.mitre.oval:def:19520", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "name" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality via vectors related to JAX-WS. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper restriction of com.sun.xml.internal packages and \"Better handling of UI elements.\"" }, { "lang" : "en", "value" : "Per http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html\r\n\r\n\"Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0436", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "javafx", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15723", "name" : "oval:org.mitre.oval:def:15723", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:javafx:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:javafx:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:javafx:2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:javafx:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:javafx:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:javafx:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:javafx:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.2.4" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0437", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "javafx", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "<=" } ] } }, { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=136439120408139&w=2", "name" : "HPSBUX02857", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0237.html", "name" : "RHSA-2013:0237", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16492", "name" : "oval:org.mitre.oval:def:16492", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19403", "name" : "oval:org.mitre.oval:def:19403", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D." }, { "lang" : "en", "value" : "Per http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html \r\n\r\n\"Applies to client and server deployment of Java. This vulnerability can be exploited through untrusted Java Web Start applications and untrusted Java applets. It can also be exploited by supplying data to APIs in the specified Component without using untrusted Java Web Start applications or untrusted Java applets, such as through a web service.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:javafx:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:javafx:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:javafx:2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:javafx:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:javafx:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:javafx:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:javafx:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.2.4" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0438", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=136439120408139&w=2", "name" : "HPSBUX02857", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136570436423916&w=2", "name" : "SSRT101156", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0236.html", "name" : "RHSA-2013:0236", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0237.html", "name" : "RHSA-2013:0237", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1455.html", "name" : "RHSA-2013:1455", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1456.html", "name" : "RHSA-2013:1456", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57708", "name" : "57708", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16582", "name" : "oval:org.mitre.oval:def:16582", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19288", "name" : "oval:org.mitre.oval:def:19288", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19485", "name" : "oval:org.mitre.oval:def:19485", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality via unknown vectors related to Deployment." }, { "lang" : "en", "value" : "Per http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html\r\n\r\n\"Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)\"\r\n" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0439", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "javafx", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16705", "name" : "oval:org.mitre.oval:def:16705", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU." }, { "lang" : "en", "value" : "Per http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html\r\n\r\n\"Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:javafx:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:javafx:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:javafx:2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:javafx:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:javafx:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:javafx:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:javafx:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.2.4" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0440", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.4.2_38", "version_affected" : "=" }, { "version_value" : "1.4.2_40", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.4.2_38", "version_affected" : "=" }, { "version_value" : "1.4.2_40", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_2", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "=" }, { "version_value" : "1.4.2_26", "version_affected" : "=" }, { "version_value" : "1.4.2_27", "version_affected" : "=" }, { "version_value" : "1.4.2_28", "version_affected" : "=" }, { "version_value" : "1.4.2_29", "version_affected" : "=" }, { "version_value" : "1.4.2_30", "version_affected" : "=" }, { "version_value" : "1.4.2_31", "version_affected" : "=" }, { "version_value" : "1.4.2_32", "version_affected" : "=" }, { "version_value" : "1.4.2_33", "version_affected" : "=" }, { "version_value" : "1.4.2_34", "version_affected" : "=" }, { "version_value" : "1.4.2_35", "version_affected" : "=" }, { "version_value" : "1.4.2_36", "version_affected" : "=" }, { "version_value" : "1.4.2_37", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_2", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_20", "version_affected" : "=" }, { "version_value" : "1.4.2_21", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_24", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "=" }, { "version_value" : "1.4.2_26", "version_affected" : "=" }, { "version_value" : "1.4.2_27", "version_affected" : "=" }, { "version_value" : "1.4.2_28", "version_affected" : "=" }, { "version_value" : "1.4.2_29", "version_affected" : "=" }, { "version_value" : "1.4.2_30", "version_affected" : "=" }, { "version_value" : "1.4.2_31", "version_affected" : "=" }, { "version_value" : "1.4.2_32", "version_affected" : "=" }, { "version_value" : "1.4.2_33", "version_affected" : "=" }, { "version_value" : "1.4.2_34", "version_affected" : "=" }, { "version_value" : "1.4.2_35", "version_affected" : "=" }, { "version_value" : "1.4.2_36", "version_affected" : "=" }, { "version_value" : "1.4.2_37", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "name" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/5c1e8b779c65", "name" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/5c1e8b779c65", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html", "name" : "openSUSE-SU-2013:0312", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html", "name" : "openSUSE-SU-2013:0377", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00034.html", "name" : "SUSE-SU-2013:0478", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136439120408139&w=2", "name" : "HPSBUX02857", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136570436423916&w=2", "name" : "SSRT101156", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0236.html", "name" : "RHSA-2013:0236", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0237.html", "name" : "RHSA-2013:0237", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0245.html", "name" : "RHSA-2013:0245", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0246.html", "name" : "RHSA-2013:0246", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0247.html", "name" : "RHSA-2013:0247", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1455.html", "name" : "RHSA-2013:1455", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1456.html", "name" : "RHSA-2013:1456", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201406-32.xml", "name" : "GLSA-201406-32", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:095", "name" : "MDVSA-2013:095", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57712", "name" : "57712", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=859140", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=859140", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16558", "name" : "oval:org.mitre.oval:def:16558", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19229", "name" : "oval:org.mitre.oval:def:19229", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19285", "name" : "oval:org.mitre.oval:def:19285", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19397", "name" : "oval:org.mitre.oval:def:19397", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "name" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 7, allows remote attackers to affect availability via vectors related to JSSE. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to CPU consumption in the SSL/TLS implementation via a large number of ClientHello packets that are not properly handled by (1) ClientHandshaker.java and (2) ServerHandshaker.java." }, { "lang" : "en", "value" : "Per http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html \r\n\r\n\"Applies to server deployments of JSSE.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.4.2_38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_40" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_37:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.4.2_38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_40" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_37:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0441", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.4.2_38", "version_affected" : "=" }, { "version_value" : "1.4.2_40", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.4.2_38", "version_affected" : "=" }, { "version_value" : "1.4.2_40", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_2", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "=" }, { "version_value" : "1.4.2_26", "version_affected" : "=" }, { "version_value" : "1.4.2_27", "version_affected" : "=" }, { "version_value" : "1.4.2_28", "version_affected" : "=" }, { "version_value" : "1.4.2_29", "version_affected" : "=" }, { "version_value" : "1.4.2_30", "version_affected" : "=" }, { "version_value" : "1.4.2_31", "version_affected" : "=" }, { "version_value" : "1.4.2_32", "version_affected" : "=" }, { "version_value" : "1.4.2_33", "version_affected" : "=" }, { "version_value" : "1.4.2_34", "version_affected" : "=" }, { "version_value" : "1.4.2_35", "version_affected" : "=" }, { "version_value" : "1.4.2_36", "version_affected" : "=" }, { "version_value" : "1.4.2_37", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_2", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_20", "version_affected" : "=" }, { "version_value" : "1.4.2_21", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_24", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "=" }, { "version_value" : "1.4.2_26", "version_affected" : "=" }, { "version_value" : "1.4.2_27", "version_affected" : "=" }, { "version_value" : "1.4.2_28", "version_affected" : "=" }, { "version_value" : "1.4.2_29", "version_affected" : "=" }, { "version_value" : "1.4.2_30", "version_affected" : "=" }, { "version_value" : "1.4.2_31", "version_affected" : "=" }, { "version_value" : "1.4.2_32", "version_affected" : "=" }, { "version_value" : "1.4.2_33", "version_affected" : "=" }, { "version_value" : "1.4.2_34", "version_affected" : "=" }, { "version_value" : "1.4.2_35", "version_affected" : "=" }, { "version_value" : "1.4.2_36", "version_affected" : "=" }, { "version_value" : "1.4.2_37", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907458", "name" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907458", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "name" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/corba/rev/307ddc7799c7", "name" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/corba/rev/307ddc7799c7", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html", "name" : "openSUSE-SU-2013:0312", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html", "name" : "openSUSE-SU-2013:0377", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136439120408139&w=2", "name" : "HPSBUX02857", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136570436423916&w=2", "name" : "SSRT101156", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0236.html", "name" : "RHSA-2013:0236", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0237.html", "name" : "RHSA-2013:0237", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0245.html", "name" : "RHSA-2013:0245", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0246.html", "name" : "RHSA-2013:0246", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0247.html", "name" : "RHSA-2013:0247", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1455.html", "name" : "RHSA-2013:1455", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1456.html", "name" : "RHSA-2013:1456", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201406-32.xml", "name" : "GLSA-201406-32", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:095", "name" : "MDVSA-2013:095", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57692", "name" : "57692", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16566", "name" : "oval:org.mitre.oval:def:16566", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19266", "name" : "oval:org.mitre.oval:def:19266", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19289", "name" : "oval:org.mitre.oval:def:19289", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19509", "name" : "oval:org.mitre.oval:def:19509", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "name" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2013-1476 and CVE-2013-1475. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass Java sandbox restrictions via certain methods that should not be serialized, aka \"missing serialization restriction.\"" }, { "lang" : "en", "value" : "Per http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html\r\n\r\n\"Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.4.2_38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_40" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_37:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.4.2_38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_40" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_37:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0442", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.4.2_38", "version_affected" : "=" }, { "version_value" : "1.4.2_40", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.4.2_38", "version_affected" : "=" }, { "version_value" : "1.4.2_40", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_2", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "=" }, { "version_value" : "1.4.2_26", "version_affected" : "=" }, { "version_value" : "1.4.2_27", "version_affected" : "=" }, { "version_value" : "1.4.2_28", "version_affected" : "=" }, { "version_value" : "1.4.2_29", "version_affected" : "=" }, { "version_value" : "1.4.2_30", "version_affected" : "=" }, { "version_value" : "1.4.2_31", "version_affected" : "=" }, { "version_value" : "1.4.2_32", "version_affected" : "=" }, { "version_value" : "1.4.2_33", "version_affected" : "=" }, { "version_value" : "1.4.2_34", "version_affected" : "=" }, { "version_value" : "1.4.2_35", "version_affected" : "=" }, { "version_value" : "1.4.2_36", "version_affected" : "=" }, { "version_value" : "1.4.2_37", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_2", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_20", "version_affected" : "=" }, { "version_value" : "1.4.2_21", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_24", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "=" }, { "version_value" : "1.4.2_26", "version_affected" : "=" }, { "version_value" : "1.4.2_27", "version_affected" : "=" }, { "version_value" : "1.4.2_28", "version_affected" : "=" }, { "version_value" : "1.4.2_29", "version_affected" : "=" }, { "version_value" : "1.4.2_30", "version_affected" : "=" }, { "version_value" : "1.4.2_31", "version_affected" : "=" }, { "version_value" : "1.4.2_32", "version_affected" : "=" }, { "version_value" : "1.4.2_33", "version_affected" : "=" }, { "version_value" : "1.4.2_34", "version_affected" : "=" }, { "version_value" : "1.4.2_35", "version_affected" : "=" }, { "version_value" : "1.4.2_36", "version_affected" : "=" }, { "version_value" : "1.4.2_37", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=906899", "name" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=906899", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "name" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/6527ae06da69", "name" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/6527ae06da69", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html", "name" : "openSUSE-SU-2013:0312", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html", "name" : "openSUSE-SU-2013:0377", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00034.html", "name" : "SUSE-SU-2013:0478", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136439120408139&w=2", "name" : "HPSBUX02857", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136570436423916&w=2", "name" : "SSRT101156", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0236.html", "name" : "RHSA-2013:0236", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0237.html", "name" : "RHSA-2013:0237", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0245.html", "name" : "RHSA-2013:0245", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0246.html", "name" : "RHSA-2013:0246", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0247.html", "name" : "RHSA-2013:0247", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1455.html", "name" : "RHSA-2013:1455", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1456.html", "name" : "RHSA-2013:1456", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201406-32.xml", "name" : "GLSA-201406-32", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:095", "name" : "MDVSA-2013:095", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57687", "name" : "57687", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16035", "name" : "oval:org.mitre.oval:def:16035", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18597", "name" : "oval:org.mitre.oval:def:18597", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19126", "name" : "oval:org.mitre.oval:def:19126", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19434", "name" : "oval:org.mitre.oval:def:19434", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "name" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to an improper check of \"privileges of the code\" that bypasses the sandbox." }, { "lang" : "en", "value" : "Per http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html \r\n\r\n\"Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.4.2_38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_40" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_37:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.4.2_38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_40" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_37:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0443", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.4.2_38", "version_affected" : "=" }, { "version_value" : "1.4.2_40", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.4.2_38", "version_affected" : "=" }, { "version_value" : "1.4.2_40", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_2", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "=" }, { "version_value" : "1.4.2_26", "version_affected" : "=" }, { "version_value" : "1.4.2_27", "version_affected" : "=" }, { "version_value" : "1.4.2_28", "version_affected" : "=" }, { "version_value" : "1.4.2_29", "version_affected" : "=" }, { "version_value" : "1.4.2_30", "version_affected" : "=" }, { "version_value" : "1.4.2_31", "version_affected" : "=" }, { "version_value" : "1.4.2_32", "version_affected" : "=" }, { "version_value" : "1.4.2_33", "version_affected" : "=" }, { "version_value" : "1.4.2_34", "version_affected" : "=" }, { "version_value" : "1.4.2_35", "version_affected" : "=" }, { "version_value" : "1.4.2_36", "version_affected" : "=" }, { "version_value" : "1.4.2_37", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_2", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_20", "version_affected" : "=" }, { "version_value" : "1.4.2_21", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_24", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "=" }, { "version_value" : "1.4.2_26", "version_affected" : "=" }, { "version_value" : "1.4.2_27", "version_affected" : "=" }, { "version_value" : "1.4.2_28", "version_affected" : "=" }, { "version_value" : "1.4.2_29", "version_affected" : "=" }, { "version_value" : "1.4.2_30", "version_affected" : "=" }, { "version_value" : "1.4.2_31", "version_affected" : "=" }, { "version_value" : "1.4.2_32", "version_affected" : "=" }, { "version_value" : "1.4.2_33", "version_affected" : "=" }, { "version_value" : "1.4.2_34", "version_affected" : "=" }, { "version_value" : "1.4.2_35", "version_affected" : "=" }, { "version_value" : "1.4.2_36", "version_affected" : "=" }, { "version_value" : "1.4.2_37", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "name" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/496bced2d275", "name" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/496bced2d275", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html", "name" : "openSUSE-SU-2013:0312", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html", "name" : "openSUSE-SU-2013:0377", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00034.html", "name" : "SUSE-SU-2013:0478", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136439120408139&w=2", "name" : "HPSBUX02857", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136570436423916&w=2", "name" : "SSRT101156", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0236.html", "name" : "RHSA-2013:0236", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0237.html", "name" : "RHSA-2013:0237", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0245.html", "name" : "RHSA-2013:0245", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0246.html", "name" : "RHSA-2013:0246", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0247.html", "name" : "RHSA-2013:0247", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1455.html", "name" : "RHSA-2013:1455", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1456.html", "name" : "RHSA-2013:1456", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201406-32.xml", "name" : "GLSA-201406-32", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:095", "name" : "MDVSA-2013:095", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57702", "name" : "57702", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=907340", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=907340", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15832", "name" : "oval:org.mitre.oval:def:15832", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19010", "name" : "oval:org.mitre.oval:def:19010", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19382", "name" : "oval:org.mitre.oval:def:19382", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19437", "name" : "oval:org.mitre.oval:def:19437", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "name" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality and integrity via vectors related to JSSE. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect validation of Diffie-Hellman keys, which allows remote attackers to conduct a \"small subgroup attack\" to force the use of weak session keys or obtain sensitive information about the private key." }, { "lang" : "en", "value" : "Per http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html\r\n\r\n\"Applies to server deployments of JSSE.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.4.2_38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_40" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_37:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.4.2_38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_40" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2_37:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0444", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907218", "name" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907218", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/ce04db4aba39", "name" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/ce04db4aba39", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html", "name" : "openSUSE-SU-2013:0377", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136439120408139&w=2", "name" : "HPSBUX02857", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0237.html", "name" : "RHSA-2013:0237", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0247.html", "name" : "RHSA-2013:0247", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201406-32.xml", "name" : "GLSA-201406-32", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:095", "name" : "MDVSA-2013:095", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16614", "name" : "oval:org.mitre.oval:def:16614", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19349", "name" : "oval:org.mitre.oval:def:19349", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "name" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to \"insufficient checks for cached results\" by the Java Beans MethodFinder, which might allow attackers to access methods that should only be accessible to privileged code." }, { "lang" : "en", "value" : "Per http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html \r\n\r\n\"Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.6 }, "severity" : "HIGH", "exploitabilityScore" : 4.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0445", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "name" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/6527ae06da69", "name" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/6527ae06da69", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136439120408139&w=2", "name" : "HPSBUX02857", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136570436423916&w=2", "name" : "SSRT101156", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0236.html", "name" : "RHSA-2013:0236", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0237.html", "name" : "RHSA-2013:0237", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0245.html", "name" : "RHSA-2013:0245", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0246.html", "name" : "RHSA-2013:0246", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0247.html", "name" : "RHSA-2013:0247", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1455.html", "name" : "RHSA-2013:1455", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1456.html", "name" : "RHSA-2013:1456", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:095", "name" : "MDVSA-2013:095", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57689", "name" : "57689", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=906900", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=906900", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16680", "name" : "oval:org.mitre.oval:def:16680", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19282", "name" : "oval:org.mitre.oval:def:19282", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19304", "name" : "oval:org.mitre.oval:def:19304", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19372", "name" : "oval:org.mitre.oval:def:19372", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "name" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to an improper check of \"privileges of the code\" that bypasses the sandbox." }, { "lang" : "en", "value" : "Per http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html\r\n\r\n\"Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0446", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=136439120408139&w=2", "name" : "HPSBUX02857", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136570436423916&w=2", "name" : "SSRT101156", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0236.html", "name" : "RHSA-2013:0236", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0237.html", "name" : "RHSA-2013:0237", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1455.html", "name" : "RHSA-2013:1455", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1456.html", "name" : "RHSA-2013:1456", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57699", "name" : "57699", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16353", "name" : "oval:org.mitre.oval:def:16353", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19048", "name" : "oval:org.mitre.oval:def:19048", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19102", "name" : "oval:org.mitre.oval:def:19102", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU." }, { "lang" : "en", "value" : "Per http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html \r\n\r\n\"Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0447", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "javafx", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16240", "name" : "oval:org.mitre.oval:def:16240", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU." }, { "lang" : "en", "value" : "Per http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html \r\n\r\n\"Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:javafx:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:javafx:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:javafx:2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:javafx:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:javafx:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:javafx:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:javafx:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.2.4" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0448", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0237.html", "name" : "RHSA-2013:0237", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16264", "name" : "oval:org.mitre.oval:def:16264", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 allows remote attackers to affect integrity via unknown vectors related to Libraries." }, { "lang" : "en", "value" : "Per http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html\r\n\r\n\"Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0449", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=136439120408139&w=2", "name" : "HPSBUX02857", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0237.html", "name" : "RHSA-2013:0237", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16610", "name" : "oval:org.mitre.oval:def:16610", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19123", "name" : "oval:org.mitre.oval:def:19123", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 allows remote attackers to affect confidentiality via unknown vectors related to Deployment." }, { "lang" : "en", "value" : "Per http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html \r\n\r\n\"Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0450", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "name" : "http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/6e0d9f4942af", "name" : "http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/6e0d9f4942af", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html", "name" : "openSUSE-SU-2013:0312", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html", "name" : "openSUSE-SU-2013:0377", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136439120408139&w=2", "name" : "HPSBUX02857", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136570436423916&w=2", "name" : "SSRT101156", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=136733161405818&w=2", "name" : "HPSBMU02874", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0236.html", "name" : "RHSA-2013:0236", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0237.html", "name" : "RHSA-2013:0237", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0245.html", "name" : "RHSA-2013:0245", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0246.html", "name" : "RHSA-2013:0246", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0247.html", "name" : "RHSA-2013:0247", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1455.html", "name" : "RHSA-2013:1455", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1456.html", "name" : "RHSA-2013:1456", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201406-32.xml", "name" : "GLSA-201406-32", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/858729", "name" : "VU#858729", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:095", "name" : "MDVSA-2013:095", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/57703", "name" : "57703", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA13-032A.html", "name" : "TA13-032A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=906911", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=906911", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16550", "name" : "oval:org.mitre.oval:def:16550", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19286", "name" : "oval:org.mitre.oval:def:19286", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19363", "name" : "oval:org.mitre.oval:def:19363", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19572", "name" : "oval:org.mitre.oval:def:19572", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "name" : "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper checks of \"access control context\" in the JMX RequiredModelMBean class." }, { "lang" : "en", "value" : "Per http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html\r\n\r\n\"Applies to client deployment of Java only. This vulnerability can be exploited only through untrusted Java Web Start applications and untrusted Java applets. (Untrusted Java Web Start applications and untrusted applets run in the Java sandbox with limited privileges.)\"\r\n" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_34:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_37:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.6.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jre:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_36:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jdk:1.5.0:update_38:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update22:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update24:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update28:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update29:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update31:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update33:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-02T00:55Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0451", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "maximo_asset_management", "version" : { "version_data" : [ { "version_value" : "6.2", "version_affected" : "=" }, { "version_value" : "6.2.1", "version_affected" : "=" }, { "version_value" : "6.2.2", "version_affected" : "=" }, { "version_value" : "6.2.3", "version_affected" : "=" }, { "version_value" : "6.2.4", "version_affected" : "=" }, { "version_value" : "6.2.5", "version_affected" : "=" }, { "version_value" : "6.2.6", "version_affected" : "=" }, { "version_value" : "6.2.6.1", "version_affected" : "=" }, { "version_value" : "6.2.7", "version_affected" : "=" }, { "version_value" : "6.2.8", "version_affected" : "=" }, { "version_value" : "7.1", "version_affected" : "=" }, { "version_value" : "7.1.1", "version_affected" : "=" }, { "version_value" : "7.1.1.1", "version_affected" : "=" }, { "version_value" : "7.1.1.2", "version_affected" : "=" }, { "version_value" : "7.1.1.5", "version_affected" : "=" }, { "version_value" : "7.1.1.6", "version_affected" : "=" }, { "version_value" : "7.1.1.7", "version_affected" : "=" }, { "version_value" : "7.1.1.8", "version_affected" : "=" }, { "version_value" : "7.1.1.9", "version_affected" : "=" }, { "version_value" : "7.1.1.10", "version_affected" : "=" }, { "version_value" : "7.1.1.11", "version_affected" : "=" }, { "version_value" : "7.1.1.12", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/55068", "name" : "55068", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/55070", "name" : "55070", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IV24726", "name" : "IV24726", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21651085", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21651085", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/80967", "name" : "maximo-cve20130451-sql-injection(80967)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 7.1 through 7.1.1.12 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:maximo_asset_management:6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:maximo_asset_management:6.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:maximo_asset_management:6.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:maximo_asset_management:6.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:maximo_asset_management:6.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:maximo_asset_management:6.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:maximo_asset_management:6.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:maximo_asset_management:6.2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:maximo_asset_management:6.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:maximo_asset_management:6.2.8:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:maximo_asset_management:7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:maximo_asset_management:7.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:maximo_asset_management:7.1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:maximo_asset_management:7.1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:maximo_asset_management:7.1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:maximo_asset_management:7.1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:maximo_asset_management:7.1.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:maximo_asset_management:7.1.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:maximo_asset_management:7.1.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:maximo_asset_management:7.1.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:maximo_asset_management:7.1.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:maximo_asset_management:7.1.1.12:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-10-01T11:14Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0452", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "software_use_analysis", "version" : { "version_data" : [ { "version_value" : "1.3.2", "version_affected" : "<=" } ] } }, { "product_name" : "tivoli_endpoint_manager", "version" : { "version_data" : [ { "version_value" : "8.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IV38145", "name" : "IV38145", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21631350", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21631350", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/80968", "name" : "tem-sua-csrf(80968)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site request forgery (CSRF) vulnerability in the Software Use Analysis (SUA) application before 1.3.3 in IBM Tivoli Endpoint Manager 8.2 allows remote attackers to hijack the authentication of arbitrary users via a web site that contains crafted Flash Action Message Format (AMF) messages." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:software_use_analysis:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.3.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_endpoint_manager:8.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-29T16:08Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0453", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "tivoli_endpoint_manager", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.ibm.com/support/docview.wss?uid=swg21631351", "name" : "http://www.ibm.com/support/docview.wss?uid=swg21631351", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IV37766", "name" : "IV37766", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/80969", "name" : "tem-web-reports-xss(80969)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in Web Reports in IBM Tivoli Endpoint Manager (TEM) before 8.2.1372 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_endpoint_manager:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_endpoint_manager:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_endpoint_manager:*:*:*:*:*:*:*:*", "versionEndIncluding" : "8.2" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-21T20:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0454", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "storwize", "version" : { "version_data" : [ { "version_value" : "v7000", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "samba", "product" : { "product_data" : [ { "product_name" : "samba", "version" : { "version_data" : [ { "version_value" : "3.6.0", "version_affected" : "=" }, { "version_value" : "3.6.1", "version_affected" : "=" }, { "version_value" : "3.6.2", "version_affected" : "=" }, { "version_value" : "3.6.3", "version_affected" : "=" }, { "version_value" : "3.6.4", "version_affected" : "=" }, { "version_value" : "3.6.5", "version_affected" : "<=" } ] } } ] } }, { "vendor_name" : "canonical", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "12.04", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.ibm.com/support/docview.wss?uid=ssg1S1004289", "name" : "http://www.ibm.com/support/docview.wss?uid=ssg1S1004289", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.ubuntu.com/usn/USN-1802-1", "name" : "USN-1802-1", "refsource" : "UBUNTU", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=928419", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=928419", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://bugzilla.samba.org/show_bug.cgi?id=8738", "name" : "https://bugzilla.samba.org/show_bug.cgi?id=8738", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/80970", "name" : "storwize-cifs-incorrect-permissions(80970)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://lists.samba.org/archive/samba-announce/2012/000259.html", "name" : "[samba-announce] 20120625 [Announce] Samba 3.6.6 Available for Download", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://www.samba.org/samba/security/CVE-2013-0454", "name" : "https://www.samba.org/samba/security/CVE-2013-0454", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The SMB2 implementation in Samba 3.6.x before 3.6.6, as used on the IBM Storwize V7000 Unified 1.3 before 1.3.2.3 and 1.4 before 1.4.0.1 and possibly other products, does not properly enforce CIFS share attributes, which allows remote authenticated users to (1) write to a read-only share; (2) trigger data-integrity problems related to the oplock, locking, coherency, or leases attribute; or (3) have an unspecified impact by leveraging incorrect handling of the browseable or \"hide unreadable\" parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*" } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:3.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.6.5" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:storwize:v7000:1.3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:storwize:v7000:1.4:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-26T21:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0455", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "sterling_b2b_integrator", "version" : { "version_data" : [ { "version_value" : "5.2.4", "version_affected" : "=" } ] } }, { "product_name" : "sterling_file_gateway", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC92888", "name" : "IC92888", "refsource" : "AIXAPAR", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in IBM Sterling B2B Integrator 5.2.4 and Sterling File Gateway allow remote attackers to inject arbitrary web script or HTML via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_file_gateway:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-07-02T14:12Z", "lastModifiedDate" : "2013-10-10T18:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0456", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "sterling_b2b_integrator", "version" : { "version_data" : [ { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" } ] } }, { "product_name" : "sterling_file_gateway", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640830", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640830", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/80972", "name" : "sterling-b2b-cve20130456-hijack(80972)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to hijack sessions via a modified cookie path." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_file_gateway:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_file_gateway:2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-07-03T13:54Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0457", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "maximo_asset_management", "version" : { "version_data" : [ { "version_value" : "7.5.0.0", "version_affected" : "=" } ] } }, { "product_name" : "maximo_asset_management_essentials", "version" : { "version_data" : [ { "version_value" : "7.5.0.0", "version_affected" : "=" } ] } }, { "product_name" : "smartcloud_control_desk", "version" : { "version_data" : [ { "version_value" : "7.5.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IV20590", "name" : "IV20590", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21625624", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21625624", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81011", "name" : "mam-uisessionid-xss(81011)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to a uisessionid." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-02-20T12:09Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0458", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "websphere_application_server", "version" : { "version_data" : [ { "version_value" : "6.1.0.0", "version_affected" : "=" }, { "version_value" : "6.1.0.1", "version_affected" : "=" }, { "version_value" : "6.1.0.2", "version_affected" : "=" }, { "version_value" : "6.1.0.3", "version_affected" : "=" }, { "version_value" : "6.1.0.5", "version_affected" : "=" }, { "version_value" : "6.1.0.7", "version_affected" : "=" }, { "version_value" : "6.1.0.9", "version_affected" : "=" }, { "version_value" : "6.1.0.11", "version_affected" : "=" }, { "version_value" : "6.1.0.12", "version_affected" : "=" }, { "version_value" : "6.1.0.13", "version_affected" : "=" }, { "version_value" : "6.1.0.14", "version_affected" : "=" }, { "version_value" : "6.1.0.15", "version_affected" : "=" }, { "version_value" : "6.1.0.17", "version_affected" : "=" }, { "version_value" : "6.1.0.19", "version_affected" : "=" }, { "version_value" : "6.1.0.21", "version_affected" : "=" }, { "version_value" : "6.1.0.23", "version_affected" : "=" }, { "version_value" : "6.1.0.25", "version_affected" : "=" }, { "version_value" : "6.1.0.27", "version_affected" : "=" }, { "version_value" : "6.1.0.29", "version_affected" : "=" }, { "version_value" : "6.1.0.31", "version_affected" : "=" }, { "version_value" : "6.1.0.33", "version_affected" : "=" }, { "version_value" : "6.1.0.35", "version_affected" : "=" }, { "version_value" : "6.1.0.37", "version_affected" : "=" }, { "version_value" : "6.1.0.39", "version_affected" : "=" }, { "version_value" : "6.1.0.41", "version_affected" : "=" }, { "version_value" : "6.1.0.43", "version_affected" : "=" }, { "version_value" : "6.1.0.45", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.0.0.1", "version_affected" : "=" }, { "version_value" : "7.0.0.2", "version_affected" : "=" }, { "version_value" : "7.0.0.3", "version_affected" : "=" }, { "version_value" : "7.0.0.5", "version_affected" : "=" }, { "version_value" : "7.0.0.7", "version_affected" : "=" }, { "version_value" : "7.0.0.9", "version_affected" : "=" }, { "version_value" : "7.0.0.11", "version_affected" : "=" }, { "version_value" : "7.0.0.13", "version_affected" : "=" }, { "version_value" : "7.0.0.15", "version_affected" : "=" }, { "version_value" : "7.0.0.17", "version_affected" : "=" }, { "version_value" : "7.0.0.19", "version_affected" : "=" }, { "version_value" : "7.0.0.21", "version_affected" : "=" }, { "version_value" : "7.0.0.23", "version_affected" : "=" }, { "version_value" : "7.0.0.25", "version_affected" : "=" }, { "version_value" : "8.0.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.1", "version_affected" : "=" }, { "version_value" : "8.0.0.2", "version_affected" : "=" }, { "version_value" : "8.0.0.3", "version_affected" : "=" }, { "version_value" : "8.0.0.4", "version_affected" : "=" }, { "version_value" : "8.0.0.5", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.ibm.com/support/docview.wss?uid=swg21622444", "name" : "http://www.ibm.com/support/docview.wss?uid=swg21622444", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM71139", "name" : "PM71139", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81012", "name" : "was-admin-login-xss(81012)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.27, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2, when login security is disabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.45:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.25:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.5.0.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-01-27T18:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0459", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "websphere_application_server", "version" : { "version_data" : [ { "version_value" : "6.1.0.0", "version_affected" : "=" }, { "version_value" : "6.1.0.1", "version_affected" : "=" }, { "version_value" : "6.1.0.2", "version_affected" : "=" }, { "version_value" : "6.1.0.3", "version_affected" : "=" }, { "version_value" : "6.1.0.5", "version_affected" : "=" }, { "version_value" : "6.1.0.7", "version_affected" : "=" }, { "version_value" : "6.1.0.9", "version_affected" : "=" }, { "version_value" : "6.1.0.11", "version_affected" : "=" }, { "version_value" : "6.1.0.12", "version_affected" : "=" }, { "version_value" : "6.1.0.13", "version_affected" : "=" }, { "version_value" : "6.1.0.14", "version_affected" : "=" }, { "version_value" : "6.1.0.15", "version_affected" : "=" }, { "version_value" : "6.1.0.17", "version_affected" : "=" }, { "version_value" : "6.1.0.19", "version_affected" : "=" }, { "version_value" : "6.1.0.21", "version_affected" : "=" }, { "version_value" : "6.1.0.23", "version_affected" : "=" }, { "version_value" : "6.1.0.25", "version_affected" : "=" }, { "version_value" : "6.1.0.27", "version_affected" : "=" }, { "version_value" : "6.1.0.29", "version_affected" : "=" }, { "version_value" : "6.1.0.31", "version_affected" : "=" }, { "version_value" : "6.1.0.33", "version_affected" : "=" }, { "version_value" : "6.1.0.35", "version_affected" : "=" }, { "version_value" : "6.1.0.37", "version_affected" : "=" }, { "version_value" : "6.1.0.39", "version_affected" : "=" }, { "version_value" : "6.1.0.41", "version_affected" : "=" }, { "version_value" : "6.1.0.43", "version_affected" : "=" }, { "version_value" : "6.1.0.45", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.0.0.1", "version_affected" : "=" }, { "version_value" : "7.0.0.2", "version_affected" : "=" }, { "version_value" : "7.0.0.3", "version_affected" : "=" }, { "version_value" : "7.0.0.5", "version_affected" : "=" }, { "version_value" : "7.0.0.7", "version_affected" : "=" }, { "version_value" : "7.0.0.9", "version_affected" : "=" }, { "version_value" : "7.0.0.11", "version_affected" : "=" }, { "version_value" : "7.0.0.13", "version_affected" : "=" }, { "version_value" : "7.0.0.15", "version_affected" : "=" }, { "version_value" : "7.0.0.17", "version_affected" : "=" }, { "version_value" : "7.0.0.19", "version_affected" : "=" }, { "version_value" : "7.0.0.21", "version_affected" : "=" }, { "version_value" : "7.0.0.23", "version_affected" : "=" }, { "version_value" : "7.0.0.25", "version_affected" : "=" }, { "version_value" : "8.0.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.1", "version_affected" : "=" }, { "version_value" : "8.0.0.2", "version_affected" : "=" }, { "version_value" : "8.0.0.3", "version_affected" : "=" }, { "version_value" : "8.0.0.4", "version_affected" : "=" }, { "version_value" : "8.0.0.5", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.ibm.com/support/docview.wss?uid=swg21622444", "name" : "http://www.ibm.com/support/docview.wss?uid=swg21622444", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM72536", "name" : "PM72536", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81013", "name" : "was-admin-type-xss(81013)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.27, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.45:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.25:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.5.0.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-01-27T18:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0460", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "websphere_application_server", "version" : { "version_data" : [ { "version_value" : "6.1.0.0", "version_affected" : "=" }, { "version_value" : "6.1.0.1", "version_affected" : "=" }, { "version_value" : "6.1.0.2", "version_affected" : "=" }, { "version_value" : "6.1.0.3", "version_affected" : "=" }, { "version_value" : "6.1.0.5", "version_affected" : "=" }, { "version_value" : "6.1.0.7", "version_affected" : "=" }, { "version_value" : "6.1.0.9", "version_affected" : "=" }, { "version_value" : "6.1.0.11", "version_affected" : "=" }, { "version_value" : "6.1.0.12", "version_affected" : "=" }, { "version_value" : "6.1.0.13", "version_affected" : "=" }, { "version_value" : "6.1.0.14", "version_affected" : "=" }, { "version_value" : "6.1.0.15", "version_affected" : "=" }, { "version_value" : "6.1.0.17", "version_affected" : "=" }, { "version_value" : "6.1.0.19", "version_affected" : "=" }, { "version_value" : "6.1.0.21", "version_affected" : "=" }, { "version_value" : "6.1.0.23", "version_affected" : "=" }, { "version_value" : "6.1.0.25", "version_affected" : "=" }, { "version_value" : "6.1.0.27", "version_affected" : "=" }, { "version_value" : "6.1.0.29", "version_affected" : "=" }, { "version_value" : "6.1.0.31", "version_affected" : "=" }, { "version_value" : "6.1.0.33", "version_affected" : "=" }, { "version_value" : "6.1.0.35", "version_affected" : "=" }, { "version_value" : "6.1.0.37", "version_affected" : "=" }, { "version_value" : "6.1.0.39", "version_affected" : "=" }, { "version_value" : "6.1.0.41", "version_affected" : "=" }, { "version_value" : "6.1.0.43", "version_affected" : "=" }, { "version_value" : "6.1.0.45", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.0.0.1", "version_affected" : "=" }, { "version_value" : "7.0.0.2", "version_affected" : "=" }, { "version_value" : "7.0.0.3", "version_affected" : "=" }, { "version_value" : "7.0.0.5", "version_affected" : "=" }, { "version_value" : "7.0.0.7", "version_affected" : "=" }, { "version_value" : "7.0.0.9", "version_affected" : "=" }, { "version_value" : "7.0.0.11", "version_affected" : "=" }, { "version_value" : "7.0.0.13", "version_affected" : "=" }, { "version_value" : "7.0.0.15", "version_affected" : "=" }, { "version_value" : "7.0.0.17", "version_affected" : "=" }, { "version_value" : "7.0.0.19", "version_affected" : "=" }, { "version_value" : "7.0.0.21", "version_affected" : "=" }, { "version_value" : "7.0.0.23", "version_affected" : "=" }, { "version_value" : "7.0.0.25", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.ibm.com/support/docview.wss?uid=swg21622444", "name" : "http://www.ibm.com/support/docview.wss?uid=swg21622444", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM72275", "name" : "PM72275", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81014", "name" : "was-admin-portlet-csrf(81014)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site request forgery (CSRF) vulnerability in the portlet subsystem in the administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47 and 7.0 before 7.0.0.27 allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting (XSS) sequences." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.45:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.25:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-01-27T18:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0461", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "websphere_application_server", "version" : { "version_data" : [ { "version_value" : "6.1.0.0", "version_affected" : "=" }, { "version_value" : "6.1.0.1", "version_affected" : "=" }, { "version_value" : "6.1.0.2", "version_affected" : "=" }, { "version_value" : "6.1.0.3", "version_affected" : "=" }, { "version_value" : "6.1.0.5", "version_affected" : "=" }, { "version_value" : "6.1.0.7", "version_affected" : "=" }, { "version_value" : "6.1.0.9", "version_affected" : "=" }, { "version_value" : "6.1.0.11", "version_affected" : "=" }, { "version_value" : "6.1.0.12", "version_affected" : "=" }, { "version_value" : "6.1.0.13", "version_affected" : "=" }, { "version_value" : "6.1.0.14", "version_affected" : "=" }, { "version_value" : "6.1.0.15", "version_affected" : "=" }, { "version_value" : "6.1.0.17", "version_affected" : "=" }, { "version_value" : "6.1.0.19", "version_affected" : "=" }, { "version_value" : "6.1.0.21", "version_affected" : "=" }, { "version_value" : "6.1.0.23", "version_affected" : "=" }, { "version_value" : "6.1.0.25", "version_affected" : "=" }, { "version_value" : "6.1.0.27", "version_affected" : "=" }, { "version_value" : "6.1.0.29", "version_affected" : "=" }, { "version_value" : "6.1.0.31", "version_affected" : "=" }, { "version_value" : "6.1.0.33", "version_affected" : "=" }, { "version_value" : "6.1.0.35", "version_affected" : "=" }, { "version_value" : "6.1.0.37", "version_affected" : "=" }, { "version_value" : "6.1.0.39", "version_affected" : "=" }, { "version_value" : "6.1.0.41", "version_affected" : "=" }, { "version_value" : "6.1.0.43", "version_affected" : "=" }, { "version_value" : "6.1.0.45", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.0.0.1", "version_affected" : "=" }, { "version_value" : "7.0.0.2", "version_affected" : "=" }, { "version_value" : "7.0.0.3", "version_affected" : "=" }, { "version_value" : "7.0.0.5", "version_affected" : "=" }, { "version_value" : "7.0.0.7", "version_affected" : "=" }, { "version_value" : "7.0.0.9", "version_affected" : "=" }, { "version_value" : "7.0.0.11", "version_affected" : "=" }, { "version_value" : "7.0.0.13", "version_affected" : "=" }, { "version_value" : "7.0.0.15", "version_affected" : "=" }, { "version_value" : "7.0.0.17", "version_affected" : "=" }, { "version_value" : "7.0.0.19", "version_affected" : "=" }, { "version_value" : "7.0.0.21", "version_affected" : "=" }, { "version_value" : "7.0.0.23", "version_affected" : "=" }, { "version_value" : "7.0.0.25", "version_affected" : "=" }, { "version_value" : "8.0.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.1", "version_affected" : "=" }, { "version_value" : "8.0.0.2", "version_affected" : "=" }, { "version_value" : "8.0.0.3", "version_affected" : "=" }, { "version_value" : "8.0.0.4", "version_affected" : "=" }, { "version_value" : "8.0.0.5", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.ibm.com/support/docview.wss?uid=swg21622444", "name" : "http://www.ibm.com/support/docview.wss?uid=swg21622444", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM71389", "name" : "PM71389", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81015", "name" : "was-admin-vmm-xss(81015)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the virtual member manager (VMM) administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.27, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.45:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.25:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.5.0.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-01-27T18:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0462", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "websphere_application_server", "version" : { "version_data" : [ { "version_value" : "6.1.0.0", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.0.0.1", "version_affected" : "=" }, { "version_value" : "7.0.0.2", "version_affected" : "=" }, { "version_value" : "7.0.0.3", "version_affected" : "=" }, { "version_value" : "7.0.0.5", "version_affected" : "=" }, { "version_value" : "7.0.0.7", "version_affected" : "=" }, { "version_value" : "7.0.0.9", "version_affected" : "=" }, { "version_value" : "7.0.0.11", "version_affected" : "=" }, { "version_value" : "7.0.0.13", "version_affected" : "=" }, { "version_value" : "7.0.0.15", "version_affected" : "=" }, { "version_value" : "7.0.0.17", "version_affected" : "=" }, { "version_value" : "7.0.0.19", "version_affected" : "=" }, { "version_value" : "7.0.0.21", "version_affected" : "=" }, { "version_value" : "7.0.0.23", "version_affected" : "=" }, { "version_value" : "7.0.0.25", "version_affected" : "=" }, { "version_value" : "8.0.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.ibm.com/connections/blogs/PSIRT/entry/security_vulnerabilities_fixed_in_ibm_websphere_application_server_7_0_0_2785", "name" : "http://www.ibm.com/connections/blogs/PSIRT/entry/security_vulnerabilities_fixed_in_ibm_websphere_application_server_7_0_0_2785", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in IBM WebSphere Application Server (WAS) 6.1, 7.0 before 7.0.0.27, 8.0, and 8.5 has unknown impact and attack vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.25:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.5.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : true, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-27T18:55Z", "lastModifiedDate" : "2013-01-30T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0463", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "sterling_b2b_integrator", "version" : { "version_data" : [ { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" } ] } }, { "product_name" : "sterling_file_gateway", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640830", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640830", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81017", "name" : "sterling-b2b-cve20130463-infodisc(81017)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-2985, CVE-2013-2987, CVE-2013-3020, CVE-2013-0568, CVE-2013-0475, and CVE-2013-0567." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_file_gateway:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_file_gateway:2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-07-03T13:54Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0464", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "eclipse_help_system", "version" : { "version_data" : [ { "version_value" : "3.4.3", "version_affected" : "=" }, { "version_value" : "3.6.2", "version_affected" : "=" } ] } }, { "product_name" : "spss_data_collection", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.0.1", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/54971", "name" : "54971", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/55115", "name" : "55115", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/60246", "name" : "60246", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21637954", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21637954", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81060", "name" : "iehs-cve20130464-xss(81060)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in IBM Eclipse Help System (IEHS) 3.4.3 and 3.6.2, as used in IBM SPSS Data Collection 6.0, 6.0.1, and 7.0, allow remote attackers to inject arbitrary web script or HTML via a crafted URL." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:eclipse_help_system:3.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:eclipse_help_system:3.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:spss_data_collection:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:spss_data_collection:6.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:spss_data_collection:7.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-06-03T23:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0465", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "webshere_cast_iron_cloud_integration", "version" : { "version_data" : [ { "version_value" : "6.0.0.0", "version_affected" : "=" }, { "version_value" : "6.1.0.0", "version_affected" : "=" }, { "version_value" : "6.1.0.1", "version_affected" : "=" }, { "version_value" : "6.1.0.2", "version_affected" : "=" }, { "version_value" : "6.1.0.3", "version_affected" : "=" }, { "version_value" : "6.1.0.6", "version_affected" : "=" }, { "version_value" : "6.1.0.9", "version_affected" : "=" }, { "version_value" : "6.1.0.12", "version_affected" : "=" }, { "version_value" : "6.3.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1LI77155", "name" : "LI77155", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21623324", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21623324", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81061", "name" : "was-castiron-security-bypass(81061)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the IBM WebSphere Cast Iron physical and virtual appliance 6.0 and 6.1 before 6.1.0.15 and 6.3 before 6.3.0.1, when LDAP authentication is enabled, allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:ibm:webshere_cast_iron_cloud_integration:6.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:ibm:webshere_cast_iron_cloud_integration:6.1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:ibm:webshere_cast_iron_cloud_integration:6.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:ibm:webshere_cast_iron_cloud_integration:6.1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:ibm:webshere_cast_iron_cloud_integration:6.1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:ibm:webshere_cast_iron_cloud_integration:6.1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:ibm:webshere_cast_iron_cloud_integration:6.1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:ibm:webshere_cast_iron_cloud_integration:6.1.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:ibm:webshere_cast_iron_cloud_integration:6.3.0.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:webshere_cast_iron_cloud_integration:6.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:webshere_cast_iron_cloud_integration:6.1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:webshere_cast_iron_cloud_integration:6.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:webshere_cast_iron_cloud_integration:6.1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:webshere_cast_iron_cloud_integration:6.1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:webshere_cast_iron_cloud_integration:6.1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:webshere_cast_iron_cloud_integration:6.1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:webshere_cast_iron_cloud_integration:6.1.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:webshere_cast_iron_cloud_integration:6.3.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 5.5, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-22T20:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0466", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "websphere_message_broker", "version" : { "version_data" : [ { "version_value" : "7.0.", "version_affected" : "=" }, { "version_value" : "7.0.0.1", "version_affected" : "=" }, { "version_value" : "7.0.0.2", "version_affected" : "=" }, { "version_value" : "7.0.0.3", "version_affected" : "=" }, { "version_value" : "7.0.0.4", "version_affected" : "=" }, { "version_value" : "7.0.0.5", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.0.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC89383", "name" : "IC89383", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21623316", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21623316", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81062", "name" : "wmb-wsdl-xss(81062)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in IBM WebSphere Message Broker 7.0 before 7.0.0.6 and 8.0 before 8.0.0.2, when wsdl support is enabled on a SOAPInput node, allows remote attackers to inject arbitrary web script or HTML via a wsdl request that is not properly handled during construction of an error message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_message_broker:7.0.:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_message_broker:7.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_message_broker:7.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_message_broker:7.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_message_broker:7.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_message_broker:7.0.0.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_message_broker:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-02-20T12:09Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0467", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "data_studio", "version" : { "version_data" : [ { "version_value" : "3.1.0", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21625573", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21625573", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81102", "name" : "iehs-source-disclosure(81102)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM Eclipse Help System (IEHS), as used in IBM Data Studio 3.1 and 3.1.1 and other products, allows remote authenticated users to read source code via a crafted URL." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:data_studio:3.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:data_studio:3.1.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-21T01:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0468", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "sterling_b2b_integrator", "version" : { "version_data" : [ { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" } ] } }, { "product_name" : "sterling_file_gateway", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640830", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640830", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81334", "name" : "sterling-b2b-cve20130468-xss(81334)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-2983." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_file_gateway:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_file_gateway:2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-07-03T13:54Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0470", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "netezza_performance_portal", "version" : { "version_data" : [ { "version_value" : "1.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-16" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21631945", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21631945", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81336", "name" : "netezza-cve20130470-info-disclosure(81336)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "HTTPD in IBM Netezza Performance Portal 1.0.2 allows remote authenticated users to list application directories containing asset files via a direct request to a directory URI, as demonstrated by listing image files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:ibm:netezza_performance_portal:1.0.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-05T16:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0471", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "tivoli_storage_manager", "version" : { "version_data" : [ { "version_value" : "3.1.0", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "4.2", "version_affected" : "=" }, { "version_value" : "4.2.1", "version_affected" : "=" }, { "version_value" : "4.2.2", "version_affected" : "=" }, { "version_value" : "4.2.3", "version_affected" : "=" }, { "version_value" : "4.2.4", "version_affected" : "=" }, { "version_value" : "5.1.0", "version_affected" : "=" }, { "version_value" : "5.1.1", "version_affected" : "=" }, { "version_value" : "5.1.5", "version_affected" : "=" }, { "version_value" : "5.1.6", "version_affected" : "=" }, { "version_value" : "5.1.7", "version_affected" : "=" }, { "version_value" : "5.1.8", "version_affected" : "=" }, { "version_value" : "5.1.9", "version_affected" : "=" }, { "version_value" : "5.1.10", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" }, { "version_value" : "5.2.0", "version_affected" : "=" }, { "version_value" : "5.2.1", "version_affected" : "=" }, { "version_value" : "5.2.2", "version_affected" : "=" }, { "version_value" : "5.2.4", "version_affected" : "=" }, { "version_value" : "5.2.5.1", "version_affected" : "=" }, { "version_value" : "5.2.5.2", "version_affected" : "=" }, { "version_value" : "5.2.5.3", "version_affected" : "=" }, { "version_value" : "5.2.7", "version_affected" : "=" }, { "version_value" : "5.2.8", "version_affected" : "=" }, { "version_value" : "5.2.9", "version_affected" : "=" }, { "version_value" : "5.3", "version_affected" : "=" }, { "version_value" : "5.3.0", "version_affected" : "=" }, { "version_value" : "5.3.1", "version_affected" : "=" }, { "version_value" : "5.3.2", "version_affected" : "=" }, { "version_value" : "5.3.2.4", "version_affected" : "=" }, { "version_value" : "5.3.3", "version_affected" : "=" }, { "version_value" : "5.3.4", "version_affected" : "=" }, { "version_value" : "5.3.5.1", "version_affected" : "=" }, { "version_value" : "5.3.6.1", "version_affected" : "=" }, { "version_value" : "5.3.6.2", "version_affected" : "=" }, { "version_value" : "5.3.6.3", "version_affected" : "=" }, { "version_value" : "5.3.6.4", "version_affected" : "=" }, { "version_value" : "5.3.6.5", "version_affected" : "=" }, { "version_value" : "5.3.6.6", "version_affected" : "=" }, { "version_value" : "5.4", "version_affected" : "=" }, { "version_value" : "5.4.0", "version_affected" : "=" }, { "version_value" : "5.4.1", "version_affected" : "=" }, { "version_value" : "5.4.2", "version_affected" : "=" }, { "version_value" : "5.4.2.2", "version_affected" : "=" }, { "version_value" : "5.4.2.3", "version_affected" : "=" }, { "version_value" : "5.4.2.4", "version_affected" : "=" }, { "version_value" : "5.4.3.0", "version_affected" : "=" }, { "version_value" : "5.4.3.2", "version_affected" : "=" }, { "version_value" : "5.4.3.3", "version_affected" : "=" }, { "version_value" : "5.4.4.0", "version_affected" : "=" }, { "version_value" : "5.5.0", "version_affected" : "=" }, { "version_value" : "5.5.1", "version_affected" : "=" }, { "version_value" : "5.5.2", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.1.0", "version_affected" : "=" }, { "version_value" : "6.1.1", "version_affected" : "=" }, { "version_value" : "6.1.2", "version_affected" : "=" }, { "version_value" : "6.1.3", "version_affected" : "=" }, { "version_value" : "6.2.0", "version_affected" : "=" }, { "version_value" : "6.2.0.0", "version_affected" : "=" }, { "version_value" : "6.2.1", "version_affected" : "=" }, { "version_value" : "6.2.4.4", "version_affected" : "<=" }, { "version_value" : "6.3.0.0", "version_affected" : "=" }, { "version_value" : "6.4.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC87331", "name" : "IC87331", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21624135", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21624135", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81215", "name" : "tsm-scheduler-dos(81215)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The traditional scheduler in the client in IBM Tivoli Storage Manager (TSM) before 6.2.5.0, 6.3 before 6.3.1.0, and 6.4 before 6.4.0.1, when Prompted mode is enabled, allows remote attackers to cause a denial of service (scheduling outage) via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:3.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:4.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:4.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:4.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:4.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.2.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.2.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.2.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:*:*:*:*:*:*:*:*", "versionEndIncluding" : "6.2.4.4" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.0.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-21T04:35Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0472", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "tivoli_storage_manager", "version" : { "version_data" : [ { "version_value" : "3.1.0", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "4.2", "version_affected" : "=" }, { "version_value" : "4.2.1", "version_affected" : "=" }, { "version_value" : "4.2.2", "version_affected" : "=" }, { "version_value" : "4.2.3", "version_affected" : "=" }, { "version_value" : "4.2.4", "version_affected" : "=" }, { "version_value" : "5.1.0", "version_affected" : "=" }, { "version_value" : "5.1.1", "version_affected" : "=" }, { "version_value" : "5.1.5", "version_affected" : "=" }, { "version_value" : "5.1.6", "version_affected" : "=" }, { "version_value" : "5.1.7", "version_affected" : "=" }, { "version_value" : "5.1.8", "version_affected" : "=" }, { "version_value" : "5.1.9", "version_affected" : "=" }, { "version_value" : "5.1.10", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" }, { "version_value" : "5.2.0", "version_affected" : "=" }, { "version_value" : "5.2.1", "version_affected" : "=" }, { "version_value" : "5.2.2", "version_affected" : "=" }, { "version_value" : "5.2.4", "version_affected" : "=" }, { "version_value" : "5.2.5.1", "version_affected" : "=" }, { "version_value" : "5.2.5.2", "version_affected" : "=" }, { "version_value" : "5.2.5.3", "version_affected" : "=" }, { "version_value" : "5.2.7", "version_affected" : "=" }, { "version_value" : "5.2.8", "version_affected" : "=" }, { "version_value" : "5.2.9", "version_affected" : "=" }, { "version_value" : "5.3", "version_affected" : "=" }, { "version_value" : "5.3.0", "version_affected" : "=" }, { "version_value" : "5.3.1", "version_affected" : "=" }, { "version_value" : "5.3.2", "version_affected" : "=" }, { "version_value" : "5.3.2.4", "version_affected" : "=" }, { "version_value" : "5.3.3", "version_affected" : "=" }, { "version_value" : "5.3.4", "version_affected" : "=" }, { "version_value" : "5.3.5.1", "version_affected" : "=" }, { "version_value" : "5.3.6.1", "version_affected" : "=" }, { "version_value" : "5.3.6.2", "version_affected" : "=" }, { "version_value" : "5.3.6.3", "version_affected" : "=" }, { "version_value" : "5.3.6.4", "version_affected" : "=" }, { "version_value" : "5.3.6.5", "version_affected" : "=" }, { "version_value" : "5.3.6.6", "version_affected" : "=" }, { "version_value" : "5.4", "version_affected" : "=" }, { "version_value" : "5.4.0", "version_affected" : "=" }, { "version_value" : "5.4.1", "version_affected" : "=" }, { "version_value" : "5.4.2", "version_affected" : "=" }, { "version_value" : "5.4.2.2", "version_affected" : "=" }, { "version_value" : "5.4.2.3", "version_affected" : "=" }, { "version_value" : "5.4.2.4", "version_affected" : "=" }, { "version_value" : "5.4.3.0", "version_affected" : "=" }, { "version_value" : "5.4.3.2", "version_affected" : "=" }, { "version_value" : "5.4.3.3", "version_affected" : "=" }, { "version_value" : "5.4.4.0", "version_affected" : "=" }, { "version_value" : "5.5.0", "version_affected" : "=" }, { "version_value" : "5.5.1", "version_affected" : "=" }, { "version_value" : "5.5.2", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.1.0", "version_affected" : "=" }, { "version_value" : "6.1.1", "version_affected" : "=" }, { "version_value" : "6.1.2", "version_affected" : "=" }, { "version_value" : "6.1.3", "version_affected" : "=" }, { "version_value" : "6.2.0", "version_affected" : "=" }, { "version_value" : "6.2.0.0", "version_affected" : "=" }, { "version_value" : "6.2.1", "version_affected" : "=" }, { "version_value" : "6.2.4.4", "version_affected" : "<=" }, { "version_value" : "6.3.0.0", "version_affected" : "=" }, { "version_value" : "6.4.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC87210", "name" : "IC87210", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21624118", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21624118", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81216", "name" : "tsm-gui-unauth-access(81216)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Web GUI in the client in IBM Tivoli Storage Manager (TSM) 6.3 before 6.3.1.0 and 6.4 before 6.4.0.1 allows man-in-the-middle attackers to obtain unspecified client access, and consequently obtain unspecified server access, via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:3.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:4.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:4.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:4.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:4.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.2.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.2.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.2.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:5.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:*:*:*:*:*:*:*:*", "versionEndIncluding" : "6.2.4.4" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.3.0.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_storage_manager:6.4.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-21T04:35Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0473", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "rational_policy_tester", "version" : { "version_data" : [ { "version_value" : "5.6.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.1", "version_affected" : "=" }, { "version_value" : "8.0.0.2", "version_affected" : "=" }, { "version_value" : "8.0.1.0", "version_affected" : "=" }, { "version_value" : "8.0.1.1", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" }, { "version_value" : "8.5.0.2", "version_affected" : "=" }, { "version_value" : "8.5.0.3", "version_affected" : "=" } ] } }, { "product_name" : "security_appscan", "version" : { "version_data" : [ { "version_value" : "5.6.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.1", "version_affected" : "=" }, { "version_value" : "8.0.0.2", "version_affected" : "=" }, { "version_value" : "8.0.1.0", "version_affected" : "=" }, { "version_value" : "8.0.1.1", "version_affected" : "=" }, { "version_value" : "8.0.11", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" }, { "version_value" : "8.6.0.0", "version_affected" : "=" }, { "version_value" : "8.6.0.1", "version_affected" : "=" }, { "version_value" : "8.6.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21626264", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21626264", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21631304", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21631304", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81337", "name" : "appscan-cve20130473-xss(81337)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allow remote attackers to inject arbitrary web script or HTML via a crafted report." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:5.6.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.0.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.0.2:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.1.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.1.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.11:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.5.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.5.0.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.6.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.6.0.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.6.0.2:-:enterprise:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:5.6.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.0.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.0.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.5.0.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-29T16:08Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0474", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "rational_policy_tester", "version" : { "version_data" : [ { "version_value" : "5.6.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.1", "version_affected" : "=" }, { "version_value" : "8.0.0.2", "version_affected" : "=" }, { "version_value" : "8.0.1.0", "version_affected" : "=" }, { "version_value" : "8.0.1.1", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" }, { "version_value" : "8.5.0.2", "version_affected" : "=" }, { "version_value" : "8.5.0.3", "version_affected" : "=" } ] } }, { "product_name" : "security_appscan", "version" : { "version_data" : [ { "version_value" : "5.6.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.1", "version_affected" : "=" }, { "version_value" : "8.0.0.2", "version_affected" : "=" }, { "version_value" : "8.0.1.0", "version_affected" : "=" }, { "version_value" : "8.0.1.1", "version_affected" : "=" }, { "version_value" : "8.0.11", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" }, { "version_value" : "8.6.0.0", "version_affected" : "=" }, { "version_value" : "8.6.0.1", "version_affected" : "=" }, { "version_value" : "8.6.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21626264", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21626264", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21631304", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21631304", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81338", "name" : "appscan-manual-explore-csrf(81338)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Manual Explore browser plug-in in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allows remote attackers to discover test Platform Authentication credentials via a crafted web site." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:5.6.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.0.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.0.2:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.1.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.1.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.11:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.5.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.5.0.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.6.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.6.0.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.6.0.2:-:enterprise:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:5.6.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.0.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.0.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.5.0.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-29T16:09Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0475", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "sterling_b2b_integrator", "version" : { "version_data" : [ { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" } ] } }, { "product_name" : "sterling_file_gateway", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640830", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640830", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81403", "name" : "sterling-b2b-cve20130475-infodisc(81403)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-3020, CVE-2013-0568, and CVE-2013-0567." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_file_gateway:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_file_gateway:2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-07-03T13:54Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0476", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "sterling_b2b_integrator", "version" : { "version_data" : [ { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" } ] } }, { "product_name" : "sterling_file_gateway", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640830", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640830", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81405", "name" : "sterling-b2b-cve20130476-ftp(81405)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to inject arbitrary FTP commands via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_file_gateway:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_file_gateway:2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-07-03T13:54Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0477", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "infosphere_master_data_management_collaboration_server", "version" : { "version_data" : [ { "version_value" : "10.0.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" } ] } }, { "product_name" : "infosphere_master_data_management_server_for_product_information_management", "version" : { "version_data" : [ { "version_value" : "6.0.0", "version_affected" : "=" }, { "version_value" : "9.0.0", "version_affected" : "=" }, { "version_value" : "9.1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21624952", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21624952", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81481", "name" : "mdm-web-content-spoofing(81481)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 and 10.1 before FP1 and InfoSphere Master Data Management Server for Product Information Management 6.0, 9.0, and 9.1 allow remote authenticated users to inject content, and conduct phishing attacks, via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_master_data_management_collaboration_server:10.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_master_data_management_collaboration_server:10.0.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:6.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:9.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:9.1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 6.8, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-02-21T01:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0478", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "infosphere_master_data_management_collaboration_server", "version" : { "version_data" : [ { "version_value" : "10.0.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" } ] } }, { "product_name" : "infosphere_master_data_management_server_for_product_information_management", "version" : { "version_data" : [ { "version_value" : "6.0.0", "version_affected" : "=" }, { "version_value" : "9.0.0", "version_affected" : "=" }, { "version_value" : "9.1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21624952", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21624952", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81482", "name" : "mdm-web-xss(81482)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 and 10.1 before FP1 and InfoSphere Master Data Management Server for Product Information Management 6.0, 9.0, and 9.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_master_data_management_collaboration_server:10.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_master_data_management_collaboration_server:10.0.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:6.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:9.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:9.1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-02-21T01:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0479", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "sterling_b2b_integrator", "version" : { "version_data" : [ { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" } ] } }, { "product_name" : "sterling_file_gateway", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640830", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640830", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81547", "name" : "sterling-b2b-cve20130479-filehandling(81547)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not properly restrict file types and extensions, which allows remote authenticated users to bypass intended access restrictions via a crafted filename." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_file_gateway:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_file_gateway:2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-07-03T13:54Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0481", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "sterling_b2b_integrator", "version" : { "version_data" : [ { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" } ] } }, { "product_name" : "sterling_file_gateway", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21627986", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21627986", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640830", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640830", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81546", "name" : "sterling-b2b-ui-info-disclosure(81546)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The console in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote attackers to read stack traces by triggering (1) an error or (2) an exception." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_file_gateway:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_file_gateway:2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-07-03T13:54Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0482", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "websphere_application_server", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.0.0.1", "version_affected" : "=" }, { "version_value" : "7.0.0.2", "version_affected" : "=" }, { "version_value" : "7.0.0.3", "version_affected" : "=" }, { "version_value" : "7.0.0.4", "version_affected" : "=" }, { "version_value" : "7.0.0.5", "version_affected" : "=" }, { "version_value" : "7.0.0.6", "version_affected" : "=" }, { "version_value" : "7.0.0.7", "version_affected" : "=" }, { "version_value" : "7.0.0.8", "version_affected" : "=" }, { "version_value" : "7.0.0.9", "version_affected" : "=" }, { "version_value" : "7.0.0.10", "version_affected" : "=" }, { "version_value" : "7.0.0.11", "version_affected" : "=" }, { "version_value" : "7.0.0.12", "version_affected" : "=" }, { "version_value" : "7.0.0.13", "version_affected" : "=" }, { "version_value" : "7.0.0.14", "version_affected" : "=" }, { "version_value" : "7.0.0.15", "version_affected" : "=" }, { "version_value" : "7.0.0.16", "version_affected" : "=" }, { "version_value" : "7.0.0.17", "version_affected" : "=" }, { "version_value" : "7.0.0.18", "version_affected" : "=" }, { "version_value" : "7.0.0.19", "version_affected" : "=" }, { "version_value" : "7.0.0.21", "version_affected" : "=" }, { "version_value" : "7.0.0.22", "version_affected" : "=" }, { "version_value" : "7.0.0.23", "version_affected" : "=" }, { "version_value" : "7.0.0.24", "version_affected" : "=" }, { "version_value" : "7.0.0.25", "version_affected" : "=" }, { "version_value" : "7.0.0.27", "version_affected" : "=" }, { "version_value" : "8.0.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.1", "version_affected" : "=" }, { "version_value" : "8.0.0.2", "version_affected" : "=" }, { "version_value" : "8.0.0.3", "version_affected" : "=" }, { "version_value" : "8.0.0.4", "version_affected" : "=" }, { "version_value" : "8.0.0.5", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" } ] } }, { "product_name" : "websphere_message_broker", "version" : { "version_data" : [ { "version_value" : "6.1", "version_affected" : "=" }, { "version_value" : "7.0.", "version_affected" : "=" }, { "version_value" : "7.0.0.1", "version_affected" : "=" }, { "version_value" : "7.0.0.2", "version_affected" : "=" }, { "version_value" : "7.0.0.3", "version_affected" : "=" }, { "version_value" : "7.0.0.4", "version_affected" : "=" }, { "version_value" : "7.0.0.5", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.0.0.1", "version_affected" : "=" }, { "version_value" : "8.0.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC88185", "name" : "IC88185", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM76582", "name" : "PM76582", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM86026", "name" : "PM86026", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21634646", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21634646", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21635474", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21635474", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81548", "name" : "was-wssecurity-spoofing(81548)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 through 8.5.0.2 and WebSphere Message Broker 6.1, 7.0 through 7.0.0.5, and 8.0 through 8.0.0.2, when WS-Security is used, allows remote attackers to spoof the signatures of messages via a crafted SOAP message, related to a \"Signature Wrap attack,\" a different vulnerability than CVE-2011-1377 and CVE-2013-0489." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_message_broker:6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_message_broker:7.0.:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_message_broker:7.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_message_broker:7.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_message_broker:7.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_message_broker:7.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_message_broker:7.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_message_broker:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-05-29T14:29Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0483", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "ims_enterprise_suite", "version" : { "version_data" : [ { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-310" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21631537", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21631537", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81533", "name" : "ims-insecure-login(81533)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The login component in SOAP Gateway in IBM IMS Enterprise Suite 1.1, 2.1, and 2.2 uses cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:ims_enterprise_suite:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:ims_enterprise_suite:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:ims_enterprise_suite:2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-05T16:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0484", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "cognos_tm1", "version" : { "version_data" : [ { "version_value" : "10.1.0", "version_affected" : "=" }, { "version_value" : "10.1.0.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21637655", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21637655", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81612", "name" : "tm1-undocumented-api(81612)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The server process in IBM Cognos TM1 10.1.x before 10.1.1 FP1 allows remote attackers to cause a denial of service (daemon crash) via an undocumented API call that triggers the transmission of unexpected data." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:cognos_tm1:10.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:cognos_tm1:10.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:cognos_tm1:10.1.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-06-19T13:39Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0485", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "java", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "5.0.0.0", "version_affected" : "=" }, { "version_value" : "6.0.0.0", "version_affected" : "=" }, { "version_value" : "7.0.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00020.html", "name" : "SUSE-SU-2013:0701", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.ibm.com/developerworks/java/jdk/aix/142_64/fixes.html#SR13FP16", "name" : "http://www.ibm.com/developerworks/java/jdk/aix/142_64/fixes.html#SR13FP16", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.ibm.com/developerworks/java/jdk/aix/j532/fixes.html#SR16FP1", "name" : "http://www.ibm.com/developerworks/java/jdk/aix/j532/fixes.html#SR16FP1", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.ibm.com/developerworks/java/jdk/aix/j664/Java6_64.fixes.html#SR13FP1", "name" : "http://www.ibm.com/developerworks/java/jdk/aix/j664/Java6_64.fixes.html#SR13FP1", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.ibm.com/developerworks/java/jdk/aix/j732/Java7.fixes.html#SR4FP1", "name" : "http://www.ibm.com/developerworks/java/jdk/aix/j732/Java7.fixes.html#SR4FP1", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=950072", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=950072", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in IBM Java SDK 7 before SR4-FP1, 6 before SR13-FP1, 5.0 before SR16-FP1, and 1.4.2 before SR13-FP16 has unknown impact and attack vectors related to Class Libraries." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:java:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:java:5.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:java:6.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:java:7.0.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-01-21T18:55Z", "lastModifiedDate" : "2016-05-25T15:34Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0486", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "lotus_domino", "version" : { "version_data" : [ { "version_value" : "8.5.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" }, { "version_value" : "8.5.1", "version_affected" : "=" }, { "version_value" : "8.5.1.1", "version_affected" : "=" }, { "version_value" : "8.5.1.2", "version_affected" : "=" }, { "version_value" : "8.5.1.3", "version_affected" : "=" }, { "version_value" : "8.5.1.4", "version_affected" : "=" }, { "version_value" : "8.5.1.5", "version_affected" : "=" }, { "version_value" : "8.5.2.0", "version_affected" : "=" }, { "version_value" : "8.5.2.1", "version_affected" : "=" }, { "version_value" : "8.5.2.2", "version_affected" : "=" }, { "version_value" : "8.5.2.3", "version_affected" : "=" }, { "version_value" : "8.5.2.4", "version_affected" : "=" }, { "version_value" : "8.5.3.0", "version_affected" : "=" }, { "version_value" : "8.5.3.1", "version_affected" : "=" }, { "version_value" : "8.5.3.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://jvn.jp/en/jp/JVN51305555/index.html", "name" : "JVN#51305555", "refsource" : "JVN", "tags" : [ ] }, { "url" : "http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-000030.html", "name" : "JVNDB-2013-000030", "refsource" : "JVNDB", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21627597", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21627597", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81812", "name" : "domino-get-dos(81812)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Memory leak in the HTTP server in IBM Domino 8.5.x allows remote attackers to cause a denial of service (memory consumption and daemon crash) via GET requests, aka SPR KLYH92NKZY." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-27T12:23Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0487", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "lotus_domino", "version" : { "version_data" : [ { "version_value" : "8.5.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" }, { "version_value" : "8.5.1", "version_affected" : "=" }, { "version_value" : "8.5.1.1", "version_affected" : "=" }, { "version_value" : "8.5.1.2", "version_affected" : "=" }, { "version_value" : "8.5.1.3", "version_affected" : "=" }, { "version_value" : "8.5.1.4", "version_affected" : "=" }, { "version_value" : "8.5.1.5", "version_affected" : "=" }, { "version_value" : "8.5.2.0", "version_affected" : "=" }, { "version_value" : "8.5.2.1", "version_affected" : "=" }, { "version_value" : "8.5.2.2", "version_affected" : "=" }, { "version_value" : "8.5.2.3", "version_affected" : "=" }, { "version_value" : "8.5.2.4", "version_affected" : "=" }, { "version_value" : "8.5.3.0", "version_affected" : "=" }, { "version_value" : "8.5.3.1", "version_affected" : "=" }, { "version_value" : "8.5.3.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-287" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21627597", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21627597", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81852", "name" : "domino-controller-auth-bypass(81852)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Java Console in IBM Domino 8.5.x allows remote authenticated users to hijack temporary credentials by leveraging knowledge of configuration details, aka SPR KLYH8TNNDN." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 8.5 }, "severity" : "HIGH", "exploitabilityScore" : 6.8, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-27T12:23Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0488", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "lotus_domino", "version" : { "version_data" : [ { "version_value" : "8.5.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" }, { "version_value" : "8.5.1", "version_affected" : "=" }, { "version_value" : "8.5.1.1", "version_affected" : "=" }, { "version_value" : "8.5.1.2", "version_affected" : "=" }, { "version_value" : "8.5.1.3", "version_affected" : "=" }, { "version_value" : "8.5.1.4", "version_affected" : "=" }, { "version_value" : "8.5.1.5", "version_affected" : "=" }, { "version_value" : "8.5.2.0", "version_affected" : "=" }, { "version_value" : "8.5.2.1", "version_affected" : "=" }, { "version_value" : "8.5.2.2", "version_affected" : "=" }, { "version_value" : "8.5.2.3", "version_affected" : "=" }, { "version_value" : "8.5.2.4", "version_affected" : "=" }, { "version_value" : "8.5.3.0", "version_affected" : "=" }, { "version_value" : "8.5.3.1", "version_affected" : "=" }, { "version_value" : "8.5.3.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21627597", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21627597", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81853", "name" : "domino-webadmin-xss(81853)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in webadmin.nsf (aka the Web Administrator client) in IBM Domino 8.5.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-27T12:23Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0489", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "lotus_domino", "version" : { "version_data" : [ { "version_value" : "8.5.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" }, { "version_value" : "8.5.1", "version_affected" : "=" }, { "version_value" : "8.5.1.1", "version_affected" : "=" }, { "version_value" : "8.5.1.2", "version_affected" : "=" }, { "version_value" : "8.5.1.3", "version_affected" : "=" }, { "version_value" : "8.5.1.4", "version_affected" : "=" }, { "version_value" : "8.5.1.5", "version_affected" : "=" }, { "version_value" : "8.5.2.0", "version_affected" : "=" }, { "version_value" : "8.5.2.1", "version_affected" : "=" }, { "version_value" : "8.5.2.2", "version_affected" : "=" }, { "version_value" : "8.5.2.3", "version_affected" : "=" }, { "version_value" : "8.5.2.4", "version_affected" : "=" }, { "version_value" : "8.5.3.0", "version_affected" : "=" }, { "version_value" : "8.5.3.1", "version_affected" : "=" }, { "version_value" : "8.5.3.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21627597", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21627597", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81854", "name" : "domino-webadmin-csrf(81854)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site request forgery (CSRF) vulnerability in webadmin.nsf (aka the Web Administrator client) in IBM Domino 8.5.x allows remote authenticated users to hijack the authentication of administrators." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 6.8, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-27T12:23Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0490", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "infosphere_guardium", "version" : { "version_data" : [ { "version_value" : "8.00", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21626276", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21626276", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/81948", "name" : "ibm-zos-priv-esc(81948)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in IBM InfoSphere Guardium S-TAP 8.1 for DB2 on z/OS allows local users to gain privileges via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_guardium:8.00:-:*:*:*:z\\/os:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-27T21:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0492", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "informix_open_admin_tool", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21645601", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21645601", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82007", "name" : "informix-oat-cve20130492-xss(82007)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in IBM Informix Open Admin Tool (OAT) 2.x and 3.x before 3.11.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:informix_open_admin_tool:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:informix_open_admin_tool:3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-08-09T23:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0494", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "sterling_b2b_integrator", "version" : { "version_data" : [ { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "5.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC82726", "name" : "IC82726", "refsource" : "AIXAPAR", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21627989", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21627989", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82009", "name" : "sterling-b2b-byte-dos(82009)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM Sterling B2B Integrator 5.0 and 5.1 allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted HTTP (1) Range or (2) Request-Range header." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-08-09T23:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0499", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "websphere_datapower_b2b_appliance_xb62", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "websphere_datapower_integration_appliance_xi50", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "websphere_datapower_integration_appliance_xi52", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "websphere_datapower_integration_appliance_xi52_virtual_edition", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "websphere_datapower_service_gateway_xg45", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "websphere_datapower_service_gateway_xg45_virtual_edition", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "websphere_datapower_xc10_appliance", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "websphere_datapower_b2b_appliance_xb62_firmware", "version" : { "version_data" : [ { "version_value" : "3.8.2", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "5.0.0", "version_affected" : "=" } ] } }, { "product_name" : "websphere_datapower_integration_appliance_xi50_firmware", "version" : { "version_data" : [ { "version_value" : "3.8.2", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "5.0.0", "version_affected" : "=" } ] } }, { "product_name" : "websphere_datapower_integration_appliance_xi52_firmware", "version" : { "version_data" : [ { "version_value" : "3.8.2", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "5.0.0", "version_affected" : "=" } ] } }, { "product_name" : "websphere_datapower_integration_appliance_xi52_virtual_edition_firmware", "version" : { "version_data" : [ { "version_value" : "3.8.2", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "5.0.0", "version_affected" : "=" } ] } }, { "product_name" : "websphere_datapower_service_gateway_xg45_firmware", "version" : { "version_data" : [ { "version_value" : "3.8.2", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "5.0.0", "version_affected" : "=" } ] } }, { "product_name" : "websphere_datapower_service_gateway_xg45_virtual_edition_firmware", "version" : { "version_data" : [ { "version_value" : "3.8.2", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "5.0.0", "version_affected" : "=" } ] } }, { "product_name" : "websphere_datapower_xc10_appliance_firmware", "version" : { "version_data" : [ { "version_value" : "3.8.2", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "5.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://seclists.org/bugtraq/2013/May/83", "name" : "20130523 SEC Consult SA-20130523-0 :: JavaScript Execution in IBM WebSphere DataPower Services", "refsource" : "BUGTRAQ", "tags" : [ "Exploit" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21637717", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21637717", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82221", "name" : "was-datapower-echo-xss(82221)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130523-0_IBM_Xi50_Echo-WebService_Xss_in_Xml_v10.txt", "name" : "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130523-0_IBM_Xi50_Echo-WebService_Xss_in_Xml_v10.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the echo functionality on IBM WebSphere DataPower SOA appliances with firmware 3.8.2, 4.0, 4.0.1, 4.0.2, and 5.0.0 allows remote attackers to inject arbitrary web script or HTML via a SOAP message, as demonstrated by the XML Firewall, Multi Protocol Gateway (MPGW), Web Service Proxy, and Web Token services." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_xc10_appliance_firmware:3.8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_xc10_appliance_firmware:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_xc10_appliance_firmware:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_xc10_appliance_firmware:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_xc10_appliance_firmware:5.0.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:ibm:websphere_datapower_xc10_appliance:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_service_gateway_xg45_virtual_edition_firmware:3.8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_service_gateway_xg45_virtual_edition_firmware:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_service_gateway_xg45_virtual_edition_firmware:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_service_gateway_xg45_virtual_edition_firmware:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_service_gateway_xg45_virtual_edition_firmware:5.0.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:ibm:websphere_datapower_service_gateway_xg45_virtual_edition:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_service_gateway_xg45_firmware:3.8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_service_gateway_xg45_firmware:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_service_gateway_xg45_firmware:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_service_gateway_xg45_firmware:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_service_gateway_xg45_firmware:5.0.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:ibm:websphere_datapower_service_gateway_xg45:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_integration_appliance_xi52_virtual_edition_firmware:3.8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_integration_appliance_xi52_virtual_edition_firmware:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_integration_appliance_xi52_virtual_edition_firmware:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_integration_appliance_xi52_virtual_edition_firmware:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_integration_appliance_xi52_virtual_edition_firmware:5.0.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:ibm:websphere_datapower_integration_appliance_xi52_virtual_edition:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_integration_appliance_xi52_firmware:3.8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_integration_appliance_xi52_firmware:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_integration_appliance_xi52_firmware:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_integration_appliance_xi52_firmware:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_integration_appliance_xi52_firmware:5.0.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:ibm:websphere_datapower_integration_appliance_xi52:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_integration_appliance_xi50_firmware:3.8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_integration_appliance_xi50_firmware:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_integration_appliance_xi50_firmware:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_integration_appliance_xi50_firmware:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_integration_appliance_xi50_firmware:5.0.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:ibm:websphere_datapower_integration_appliance_xi50:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_b2b_appliance_xb62_firmware:3.8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_b2b_appliance_xb62_firmware:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_b2b_appliance_xb62_firmware:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_b2b_appliance_xb62_firmware:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_b2b_appliance_xb62_firmware:5.0.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb62:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-05-28T16:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0500", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "storwize_v7000_unified_software", "version" : { "version_data" : [ { "version_value" : "1.3.0.0", "version_affected" : "=" }, { "version_value" : "1.3.2.0", "version_affected" : "=" }, { "version_value" : "1.3.2.3", "version_affected" : "=" }, { "version_value" : "1.4.0.0", "version_affected" : "=" }, { "version_value" : "1.4.0.4", "version_affected" : "=" }, { "version_value" : "1.4.1.0", "version_affected" : "=" }, { "version_value" : "1.4.1.1", "version_affected" : "=" } ] } }, { "product_name" : "storwize_v7000_unified", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.ibm.com/support/docview.wss?uid=ssg1S1004430", "name" : "http://www.ibm.com/support/docview.wss?uid=ssg1S1004430", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/84839", "name" : "storwize-v7000-cve20130500-crossprotocol(84839)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 does not properly handle device files that are created with the NFS protocol but accessed with a non-NFS protocol, which allows remote authenticated users to obtain sensitive information, modify programs or files, or cause a denial of service (device crash) via a (1) CIFS, (2) HTTPS, (3) SCP, or (4) SFTP operation." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:storwize_v7000_unified_software:1.3.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:storwize_v7000_unified_software:1.3.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:storwize_v7000_unified_software:1.3.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:storwize_v7000_unified_software:1.4.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:storwize_v7000_unified_software:1.4.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:storwize_v7000_unified_software:1.4.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:storwize_v7000_unified_software:1.4.1.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:ibm:storwize_v7000_unified:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:M/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "MULTIPLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 5.5, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-10-17T00:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0501", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "cognos_disclosure_management", "version" : { "version_data" : [ { "version_value" : "10.2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.ibm.com/support/docview.wss?uid=swg21627070", "name" : "http://www.ibm.com/support/docview.wss?uid=swg21627070", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82345", "name" : "cdm-edrawsoft-activex(82345)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The EdrawSoft EDOFFICE.EDOfficeCtrl.1 ActiveX control, as used in Edraw Office Viewer Component, the client in IBM Cognos Disclosure Management (CDM) 10.2.0, and other products, allows remote attackers to read arbitrary files, or download an arbitrary program onto a client machine and execute this program, via a crafted web site." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:cognos_disclosure_management:10.2.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-04-12T19:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0502", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "infosphere_information_server", "version" : { "version_data" : [ { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.5", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" }, { "version_value" : "8.5.0.2", "version_affected" : "=" }, { "version_value" : "8.5.0.3", "version_affected" : "=" }, { "version_value" : "8.7", "version_affected" : "=" }, { "version_value" : "8.7.0.1", "version_affected" : "=" }, { "version_value" : "8.7.0.2", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1JR45274", "name" : "JR45274", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21632556", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21632556", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82233", "name" : "infosphere-web-console-xss(82233)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in IBM InfoSphere Information Server 8.1, 8.5 through FP3, 8.7 through FP2, and 9.1 allows remote attackers to inject arbitrary web script or HTML via a malformed URL." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_information_server:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_information_server:8.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_information_server:8.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_information_server:8.5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_information_server:8.5.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_information_server:8.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_information_server:8.7.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_information_server:8.7.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_information_server:9.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-04-01T19:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0503", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "lotus_connections", "version" : { "version_data" : [ { "version_value" : "1.0.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1.0", "version_affected" : "=" }, { "version_value" : "1.0.2.0", "version_affected" : "=" }, { "version_value" : "2.0.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1.0", "version_affected" : "=" }, { "version_value" : "2.0.1.1", "version_affected" : "=" }, { "version_value" : "2.5.0.1", "version_affected" : "=" }, { "version_value" : "2.5.0.2", "version_affected" : "=" }, { "version_value" : "2.5.0.3", "version_affected" : "=" }, { "version_value" : "3.0.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1.0", "version_affected" : "=" }, { "version_value" : "3.0.1.1", "version_affected" : "=" }, { "version_value" : "4.0.0.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1LO74182", "name" : "LO74182", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21634538", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21634538", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82265", "name" : "lotus-connections-reflected-xss(82265)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the Bookmarks component in IBM Lotus Connections before 4.0 CR3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_connections:1.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_connections:1.0.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_connections:1.0.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_connections:2.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_connections:2.0.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_connections:2.0.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_connections:2.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_connections:2.5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_connections:2.5.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_connections:3.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_connections:3.0.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_connections:3.0.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_connections:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.0.0.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-04-23T11:47Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0504", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "flash_player", "version" : { "version_data" : [ { "version_value" : "10.3", "version_affected" : "=" }, { "version_value" : "10.3.181.14", "version_affected" : "=" }, { "version_value" : "10.3.181.16", "version_affected" : "=" }, { "version_value" : "10.3.181.22", "version_affected" : "=" }, { "version_value" : "10.3.181.23", "version_affected" : "=" }, { "version_value" : "10.3.181.26", "version_affected" : "=" }, { "version_value" : "10.3.181.34", "version_affected" : "=" }, { "version_value" : "10.3.183.5", "version_affected" : "=" }, { "version_value" : "10.3.183.7", "version_affected" : "=" }, { "version_value" : "10.3.183.10", "version_affected" : "=" }, { "version_value" : "10.3.183.11", "version_affected" : "=" }, { "version_value" : "10.3.183.15", "version_affected" : "=" }, { "version_value" : "10.3.183.16", "version_affected" : "=" }, { "version_value" : "10.3.183.18", "version_affected" : "=" }, { "version_value" : "10.3.183.19", "version_affected" : "=" }, { "version_value" : "10.3.183.20", "version_affected" : "=" }, { "version_value" : "10.3.183.23", "version_affected" : "=" }, { "version_value" : "10.3.183.25", "version_affected" : "=" }, { "version_value" : "10.3.183.29", "version_affected" : "=" }, { "version_value" : "10.3.183.43", "version_affected" : "=" }, { "version_value" : "10.3.183.48", "version_affected" : "=" }, { "version_value" : "10.3.183.50", "version_affected" : "=" }, { "version_value" : "10.3.183.51", "version_affected" : "=" }, { "version_value" : "10.3.183.61", "version_affected" : "=" }, { "version_value" : "10.3.183.63", "version_affected" : "=" }, { "version_value" : "11.2.202.223", "version_affected" : "=" }, { "version_value" : "11.2.202.228", "version_affected" : "=" }, { "version_value" : "11.2.202.229", "version_affected" : "=" }, { "version_value" : "11.2.202.233", "version_affected" : "=" }, { "version_value" : "11.2.202.235", "version_affected" : "=" }, { "version_value" : "11.2.202.236", "version_affected" : "=" }, { "version_value" : "11.2.202.238", "version_affected" : "=" }, { "version_value" : "11.2.202.243", "version_affected" : "=" }, { "version_value" : "11.2.202.251", "version_affected" : "=" }, { "version_value" : "11.2.202.258", "version_affected" : "=" }, { "version_value" : "11.2.202.261", "version_affected" : "=" }, { "version_value" : "11.2.202.262", "version_affected" : "=" }, { "version_value" : "11.2.202.270", "version_affected" : "=" }, { "version_value" : "11.6.602.167", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00025.html", "name" : "openSUSE-SU-2013:0359", "refsource" : "SUSE", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00026.html", "name" : "openSUSE-SU-2013:0360", "refsource" : "SUSE", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00035.html", "name" : "SUSE-SU-2013:0373", "refsource" : "SUSE", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0574.html", "name" : "RHSA-2013:0574", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb13-08.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb13-08.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/58184", "name" : "58184", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the broker service in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows attackers to execute arbitrary code via unspecified vectors." }, { "lang" : "en", "value" : "Per: http://www.adobe.com/support/security/bulletins/apsb13-08.html\r\n\r\n'Flash Player 11.6.602.168 and earlier versions for Windows \r\nFlash Player 11.6.602.167 and earlier versions for Macintosh\r\nFlash Player 11.2.202.270 and earlier for Linux'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*", "versionStartIncluding" : "10.3", "versionEndExcluding" : "10.3.183.67" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*", "versionStartIncluding" : "11.6", "versionEndExcluding" : "11.6.602.168" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*", "versionStartIncluding" : "10.3", "versionEndExcluding" : "10.3.183.67" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*", "versionStartIncluding" : "11.2", "versionEndExcluding" : "11.2.202.273" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-02-27T00:55Z", "lastModifiedDate" : "2018-12-06T19:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0505", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "sterling_multi-channel_fulfillment_solution", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" } ] } }, { "product_name" : "sterling_selling_and_fulfillment_foundation", "version" : { "version_data" : [ { "version_value" : "8.5", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1.0", "version_affected" : "=" }, { "version_value" : "9.2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" }, { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1ID358571", "name" : "ID358571", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21631302", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21631302", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82339", "name" : "sterling-om-xpath-injection(82339)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows remote authenticated users to conduct XPath injection attacks, and read arbitrary XML files, via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_multi-channel_fulfillment_solution:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:8.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.2.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-19T18:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0506", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "sterling_multi-channel_fulfillment_solution", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" } ] } }, { "product_name" : "sterling_selling_and_fulfillment_foundation", "version" : { "version_data" : [ { "version_value" : "8.5", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1.0", "version_affected" : "=" }, { "version_value" : "9.2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC90858", "name" : "IC90858", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21631302", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21631302", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82341", "name" : "sterling-om-address-xss(82341)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_multi-channel_fulfillment_solution:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:8.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.2.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-19T18:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0507", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "infosphere_information_server", "version" : { "version_data" : [ { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.5", "version_affected" : "=" }, { "version_value" : "8.7", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-384" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/59815", "name" : "http://www.securityfocus.com/bid/59815", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "VDB Entry" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM InfoSphere Information Server 8.1, 8.5, 8.7, 9.1 has a Session Fixation Vulnerability" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_information_server:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_information_server:8.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_information_server:8.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_information_server:9.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 4.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2020-02-05T16:15Z", "lastModifiedDate" : "2020-02-07T17:06Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0508", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "tivoli_netcool_application_service_monitors", "version" : { "version_data" : [ { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" } ] } }, { "product_name" : "tivoli_netcool_system_service_monitors", "version" : { "version_data" : [ { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21638459", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21638459", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82333", "name" : "netcool-cve20130508-config-bo(82333)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple buffer overflows in IBM Tivoli Netcool System Service Monitors (SSM) and Application Service Monitors (ASM) 4.0.0 before FP14 and 4.0.1 before FP1 allow context-dependent attackers to execute arbitrary code or cause a denial of service via a long line in (1) hrfstable.idx, (2) hrdevice.idx, (3) hrstorage.idx, or (4) lotusmapfile in the SSM Config directory, or (5) .manifest.hive in the main agent directory." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_netcool_application_service_monitors:4.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_netcool_application_service_monitors:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_netcool_system_service_monitors:4.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_netcool_system_service_monitors:4.0.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.6 }, "severity" : "HIGH", "exploitabilityScore" : 4.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-06-05T03:43Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0509", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "tivoli_netcool_application_service_monitors", "version" : { "version_data" : [ { "version_value" : "4.0.0", "version_affected" : "=" } ] } }, { "product_name" : "tivoli_netcool_system_service_monitors", "version" : { "version_data" : [ { "version_value" : "4.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21638183", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21638183", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82334", "name" : "netcool-cve20130509-mib-bo(82334)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the Transaction MIB agent in IBM Tivoli Netcool System Service Monitors (SSM) and Application Service Monitors (ASM) 4.0.0 before FP14 allows remote attackers to execute arbitrary code via a SQL transaction with a long table name that is not properly handled by a packet decoder." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_netcool_application_service_monitors:4.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_netcool_system_service_monitors:4.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.6 }, "severity" : "HIGH", "exploitabilityScore" : 4.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-06-05T03:43Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0510", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "security_appscan", "version" : { "version_data" : [ { "version_value" : "5.6.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.1", "version_affected" : "=" }, { "version_value" : "8.0.0.2", "version_affected" : "=" }, { "version_value" : "8.0.1.0", "version_affected" : "=" }, { "version_value" : "8.0.1.1", "version_affected" : "=" }, { "version_value" : "8.0.11", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" }, { "version_value" : "8.6.0.0", "version_affected" : "=" }, { "version_value" : "8.6.0.1", "version_affected" : "=" }, { "version_value" : "8.6.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21626264", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21626264", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82592", "name" : "appscan-fwd-info-disclosure(82592)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 includes a security test that sends session cookies to a specific external server, which allows man-in-the-middle attackers to hijack the test account by capturing these cookies." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:5.6.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.0.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.0.2:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.1.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.1.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.11:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.5.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.5.0.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.6.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.6.0.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.6.0.2:-:enterprise:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-29T16:09Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0511", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "security_appscan", "version" : { "version_data" : [ { "version_value" : "5.6.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.1", "version_affected" : "=" }, { "version_value" : "8.0.0.2", "version_affected" : "=" }, { "version_value" : "8.0.1.0", "version_affected" : "=" }, { "version_value" : "8.0.1.1", "version_affected" : "=" }, { "version_value" : "8.0.11", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" }, { "version_value" : "8.6.0.0", "version_affected" : "=" }, { "version_value" : "8.6.0.1", "version_affected" : "=" }, { "version_value" : "8.6.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21626264", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21626264", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82344", "name" : "appscan-cve20130511-sql-injection(82344)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 allow remote authenticated users to execute arbitrary SQL commands via unspecified parameters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:5.6.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.0.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.0.2:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.1.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.1.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.11:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.5.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.5.0.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.6.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.6.0.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.6.0.2:-:enterprise:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-29T16:09Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0512", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "rational_policy_tester", "version" : { "version_data" : [ { "version_value" : "5.6.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.1", "version_affected" : "=" }, { "version_value" : "8.0.0.2", "version_affected" : "=" }, { "version_value" : "8.0.1.0", "version_affected" : "=" }, { "version_value" : "8.0.1.1", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" }, { "version_value" : "8.5.0.2", "version_affected" : "=" }, { "version_value" : "8.5.0.3", "version_affected" : "=" } ] } }, { "product_name" : "security_appscan", "version" : { "version_data" : [ { "version_value" : "5.6.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.1", "version_affected" : "=" }, { "version_value" : "8.0.0.2", "version_affected" : "=" }, { "version_value" : "8.0.1.0", "version_affected" : "=" }, { "version_value" : "8.0.1.1", "version_affected" : "=" }, { "version_value" : "8.0.11", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" }, { "version_value" : "8.6.0.0", "version_affected" : "=" }, { "version_value" : "8.6.0.1", "version_affected" : "=" }, { "version_value" : "8.6.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21626264", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21626264", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21631304", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21631304", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82593", "name" : "appscan-fme-dos(82593)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack-based buffer overflow in the Manual Explore browser plug-in for Firefox in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allows remote attackers to cause a denial of service (plug-in crash) via a crafted web page." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:5.6.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.0.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.0.2:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.1.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.1.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.11:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.5.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.5.0.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.6.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.6.0.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.6.0.2:-:enterprise:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:5.6.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.0.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.0.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.5.0.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-29T16:09Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0513", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "rational_policy_tester", "version" : { "version_data" : [ { "version_value" : "5.6.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.1", "version_affected" : "=" }, { "version_value" : "8.0.0.2", "version_affected" : "=" }, { "version_value" : "8.0.1.0", "version_affected" : "=" }, { "version_value" : "8.0.1.1", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" }, { "version_value" : "8.5.0.2", "version_affected" : "=" }, { "version_value" : "8.5.0.3", "version_affected" : "=" } ] } }, { "product_name" : "security_appscan", "version" : { "version_data" : [ { "version_value" : "5.6.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.1", "version_affected" : "=" }, { "version_value" : "8.0.0.2", "version_affected" : "=" }, { "version_value" : "8.0.1.0", "version_affected" : "=" }, { "version_value" : "8.0.1.1", "version_affected" : "=" }, { "version_value" : "8.0.11", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" }, { "version_value" : "8.6.0.0", "version_affected" : "=" }, { "version_value" : "8.6.0.1", "version_affected" : "=" }, { "version_value" : "8.6.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21626264", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21626264", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21631304", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21631304", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82594", "name" : "appscan-svc-path-priv-esc(82594)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 create a service that lacks \" (double quote) characters in the service path, which allows local users to gain privileges via a Trojan horse program, related to an \"Unquoted Service Path Enumeration\" vulnerability." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:5.6.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.0.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.0.2:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.1.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.1.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.11:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.5.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.5.0.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.6.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.6.0.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.6.0.2:-:enterprise:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:5.6.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.0.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.0.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.5.0.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-03-29T16:09Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0516", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2018-07-17T01:29Z", "lastModifiedDate" : "2018-07-17T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0517", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "sterling_external_authentication_server", "version" : { "version_data" : [ { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.3.01", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-78" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/59807", "name" : "http://www.securityfocus.com/bid/59807", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://www.ibm.com/blogs/psirt/security-bulletin-multiple-security-vulnerabilities-addressed-in-ibm-sterling-external-authentication-server-cve-2013-0514-cve-2013-0517-4/", "name" : "https://www.ibm.com/blogs/psirt/security-bulletin-multiple-security-vulnerabilities-addressed-in-ibm-sterling-external-authentication-server-cve-2013-0514-cve-2013-0517-4/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A Command Execution Vulnerability exists in IBM Sterling External Authentication Server 2.2.0, 2.3.01, 2.4.0, and 2.4.1 via an unspecified OS command, which could let a local malicious user execute arbitrary code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_external_authentication_server:2.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_external_authentication_server:2.3.01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_external_authentication_server:2.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_external_authentication_server:2.4.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2020-02-11T18:15Z", "lastModifiedDate" : "2020-02-13T15:53Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0518", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "sterling_secure_proxy", "version" : { "version_data" : [ { "version_value" : "3.2.0.0", "version_affected" : "=" }, { "version_value" : "3.3.0.1", "version_affected" : "=" }, { "version_value" : "3.4.0.0", "version_affected" : "=" }, { "version_value" : "3.4.1.0", "version_affected" : "=" }, { "version_value" : "3.4.1.2", "version_affected" : "=" }, { "version_value" : "3.4.1.5", "version_affected" : "=" }, { "version_value" : "3.4.1.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21636369", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21636369", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83128", "name" : "ssp-cve20130518-content-spoofing(83128)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 does not refuse to be rendered in different-origin frames, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_secure_proxy:3.2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_secure_proxy:3.3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_secure_proxy:3.4.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_secure_proxy:3.4.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_secure_proxy:3.4.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_secure_proxy:3.4.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_secure_proxy:3.4.1.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-05-10T11:42Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0519", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "sterling_secure_proxy", "version" : { "version_data" : [ { "version_value" : "3.2.0.0", "version_affected" : "=" }, { "version_value" : "3.3.0.1", "version_affected" : "=" }, { "version_value" : "3.4.0.0", "version_affected" : "=" }, { "version_value" : "3.4.1.0", "version_affected" : "=" }, { "version_value" : "3.4.1.2", "version_affected" : "=" }, { "version_value" : "3.4.1.5", "version_affected" : "=" }, { "version_value" : "3.4.1.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21636369", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21636369", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82654", "name" : "ssp-cve20130519-info-disclosure(82654)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 provides web-server version data in (1) an unspecified page title and (2) an unspecified HTTP header field, which allows remote attackers to obtain potentially sensitive information by reading a version string." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_secure_proxy:3.2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_secure_proxy:3.3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_secure_proxy:3.4.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_secure_proxy:3.4.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_secure_proxy:3.4.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_secure_proxy:3.4.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_secure_proxy:3.4.1.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-05-10T11:42Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0520", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "sterling_secure_proxy", "version" : { "version_data" : [ { "version_value" : "3.2.0.0", "version_affected" : "=" }, { "version_value" : "3.3.0.1", "version_affected" : "=" }, { "version_value" : "3.4.0.0", "version_affected" : "=" }, { "version_value" : "3.4.1.0", "version_affected" : "=" }, { "version_value" : "3.4.1.2", "version_affected" : "=" }, { "version_value" : "3.4.1.5", "version_affected" : "=" }, { "version_value" : "3.4.1.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21636369", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21636369", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83433", "name" : "ssp-cve20130520-info-disclosure(83433)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 allows remote authenticated users to obtain sensitive Java stack-trace information by providing invalid input data." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_secure_proxy:3.2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_secure_proxy:3.3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_secure_proxy:3.4.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_secure_proxy:3.4.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_secure_proxy:3.4.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_secure_proxy:3.4.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_secure_proxy:3.4.1.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-05-10T11:42Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0522", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "lotus_notes", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.0.1", "version_affected" : "=" }, { "version_value" : "8.0.2", "version_affected" : "=" }, { "version_value" : "8.5", "version_affected" : "=" }, { "version_value" : "8.5.1", "version_affected" : "=" }, { "version_value" : "8.5.2", "version_affected" : "=" }, { "version_value" : "8.5.3", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82531", "name" : "ibm-notes-password-retrieval(82531)", "refsource" : "XF", "tags" : [ "VDB Entry", "Vendor Advisory" ] }, { "url" : "https://www-01.ibm.com/support/docview.wss?uid=swg21634508", "name" : "https://www-01.ibm.com/support/docview.wss?uid=swg21634508", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Notes Client Single Logon feature in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3, and 9.0 on Windows allows local users to discover passwords via vectors involving an unspecified operating system communication mechanism for password transmission between Windows and Notes. IBM X-Force ID: 82531." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:9.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "HIGH", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.0, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.0, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 1.9 }, "severity" : "LOW", "exploitabilityScore" : 3.4, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2018-07-16T14:29Z", "lastModifiedDate" : "2018-09-17T17:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0523", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "websphere_commerce", "version" : { "version_data" : [ { "version_value" : "5.6.1", "version_affected" : "=" }, { "version_value" : "5.6.1.1", "version_affected" : "=" }, { "version_value" : "5.6.1.2", "version_affected" : "=" }, { "version_value" : "5.6.1.3", "version_affected" : "=" }, { "version_value" : "5.6.1.4", "version_affected" : "=" }, { "version_value" : "5.6.1.5", "version_affected" : "=" }, { "version_value" : "6.0.0.0", "version_affected" : "=" }, { "version_value" : "6.0.0.1", "version_affected" : "=" }, { "version_value" : "6.0.0.2", "version_affected" : "=" }, { "version_value" : "6.0.0.3", "version_affected" : "=" }, { "version_value" : "6.0.0.4", "version_affected" : "=" }, { "version_value" : "6.0.0.5", "version_affected" : "=" }, { "version_value" : "6.0.0.6", "version_affected" : "=" }, { "version_value" : "6.0.0.7", "version_affected" : "=" }, { "version_value" : "6.0.0.8", "version_affected" : "=" }, { "version_value" : "6.0.0.9", "version_affected" : "=" }, { "version_value" : "6.0.0.10", "version_affected" : "=" }, { "version_value" : "6.0.0.11", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.0.0.1", "version_affected" : "=" }, { "version_value" : "7.0.0.2", "version_affected" : "=" }, { "version_value" : "7.0.0.3", "version_affected" : "=" }, { "version_value" : "7.0.0.4", "version_affected" : "=" }, { "version_value" : "7.0.0.5", "version_affected" : "=" }, { "version_value" : "7.0.0.6", "version_affected" : "=" }, { "version_value" : "7.0.0.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.vsecurity.com/advisory/20130619-1.txt", "name" : "http://www.vsecurity.com/advisory/20130619-1.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.vsecurity.com/resources/advisory/20130619-1/", "name" : "http://www.vsecurity.com/resources/advisory/20130619-1/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1JR46386", "name" : "JR46386", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82541", "name" : "was-commerce-cve20130523-info-disclosure(82541)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://www-01.ibm.com/support/docview.wss?uid=swg21640597", "name" : "https://www-01.ibm.com/support/docview.wss?uid=swg21640597", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM WebSphere Commerce Enterprise 5.6.x through 5.6.1.5, 6.0.x through 6.0.0.11, and 7.0.x through 7.0.0.7 does not use a suitable encryption algorithm for storefront web requests, which allows remote attackers to obtain sensitive information via a padding oracle attack that targets certain UTF-8 processing of the krypto parameter, and leverages unspecified browser access or traffic-log access." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:5.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:5.6.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:5.6.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:5.6.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:5.6.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:5.6.1.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.11:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-06-21T19:55Z", "lastModifiedDate" : "2019-09-30T16:19Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0525", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "lotus_inotes", "version" : { "version_data" : [ { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" }, { "version_value" : "8.5.1.0", "version_affected" : "=" }, { "version_value" : "8.5.1.1", "version_affected" : "=" }, { "version_value" : "8.5.1.2", "version_affected" : "=" }, { "version_value" : "8.5.1.3", "version_affected" : "=" }, { "version_value" : "8.5.1.4", "version_affected" : "=" }, { "version_value" : "8.5.1.5", "version_affected" : "=" }, { "version_value" : "8.5.2.0", "version_affected" : "=" }, { "version_value" : "8.5.2.1", "version_affected" : "=" }, { "version_value" : "8.5.2.2", "version_affected" : "=" }, { "version_value" : "8.5.2.3", "version_affected" : "=" }, { "version_value" : "8.5.3.0", "version_affected" : "=" }, { "version_value" : "8.5.3.1", "version_affected" : "=" }, { "version_value" : "8.5.3.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21628658", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21628658", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82542", "name" : "inotes-folder-xss(82542)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in IBM iNotes 8.5.x allow local users to inject arbitrary web script or HTML via a shared mail file, aka SPR DKEN8PDNTX." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:8.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:8.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:8.5.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:8.5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:8.5.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:8.5.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:8.5.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:8.5.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:8.5.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:8.5.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:8.5.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:8.5.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:8.5.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:8.5.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:8.5.3.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 1.5 }, "severity" : "LOW", "exploitabilityScore" : 2.7, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-26T21:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0526", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "global_console_manager_16_firmware", "version" : { "version_data" : [ { "version_value" : "1.18.0.22011", "version_affected" : "<=" } ] } }, { "product_name" : "global_console_manager_32_firmware", "version" : { "version_data" : [ { "version_value" : "1.18.0.22011", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.bitcloud.es/2013/08/vulnerabilidad-en-kvms-gcm1632-de-ibm.html", "name" : "http://www.bitcloud.es/2013/08/vulnerabilidad-en-kvms-gcm1632-de-ibm.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093509", "name" : "http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093509", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/85367", "name" : "gcm-cve20130526-command-exec(85367)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ping.php in Global Console Manager 16 (GCM16) and Global Console Manager 32 (GCM32) before 1.20.0.22575 on the IBM Avocent 1754 KVM switch allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) count or (2) size parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:global_console_manager_16_firmware:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.18.0.22011" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:global_console_manager_32_firmware:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.18.0.22011" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ibm:avocent_1754_kvm:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 8.5 }, "severity" : "HIGH", "exploitabilityScore" : 6.8, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-08-21T16:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0527", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "sterling_connect_direct_user_interface", "version" : { "version_data" : [ { "version_value" : "1.4.0.0", "version_affected" : "=" }, { "version_value" : "1.4.0.2", "version_affected" : "=" }, { "version_value" : "1.4.0.3", "version_affected" : "=" }, { "version_value" : "1.4.0.6", "version_affected" : "=" }, { "version_value" : "1.4.0.7", "version_affected" : "=" }, { "version_value" : "1.4.0.10", "version_affected" : "=" }, { "version_value" : "1.5.0.0", "version_affected" : "=" }, { "version_value" : "1.5.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC90479", "name" : "IC90479", "refsource" : "AIXAPAR", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640356", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640356", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82609", "name" : "sterling-cve20130527-info-disclosure(82609)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Browser in IBM Sterling Connect:Direct 1.4 before 1.4.0.11 and 1.5 through 1.5.0.1 does not close pages upon the timeout of a session, which allows physically proximate attackers to obtain sensitive administrative-console information by reading the screen of an unattended workstation." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.10:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.5.0.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 1.9 }, "severity" : "LOW", "exploitabilityScore" : 3.4, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-06-21T14:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0528", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2018-07-17T01:29Z", "lastModifiedDate" : "2018-07-17T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0529", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "sterling_connect_direct_user_interface", "version" : { "version_data" : [ { "version_value" : "1.4.0.0", "version_affected" : "=" }, { "version_value" : "1.4.0.2", "version_affected" : "=" }, { "version_value" : "1.4.0.3", "version_affected" : "=" }, { "version_value" : "1.4.0.6", "version_affected" : "=" }, { "version_value" : "1.4.0.7", "version_affected" : "=" }, { "version_value" : "1.4.0.10", "version_affected" : "=" }, { "version_value" : "1.5.0.0", "version_affected" : "=" }, { "version_value" : "1.5.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC90478", "name" : "IC90478", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640356", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640356", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82611", "name" : "sterling-cve20130529-info-disclosure(82611)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Browser in IBM Sterling Connect:Direct 1.4 before 1.4.0.11 and 1.5 through 1.5.0.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.4.0.10:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_connect_direct_user_interface:1.5.0.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-06-21T14:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0531", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "security_appscan", "version" : { "version_data" : [ { "version_value" : "5.6.0.0", "version_affected" : "=" }, { "version_value" : "6.0.0.0", "version_affected" : "=" }, { "version_value" : "6.0.1.0", "version_affected" : "=" }, { "version_value" : "6.0.2.0", "version_affected" : "=" }, { "version_value" : "6.1.1.0", "version_affected" : "=" }, { "version_value" : "8.0.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.1", "version_affected" : "=" }, { "version_value" : "8.0.0.2", "version_affected" : "=" }, { "version_value" : "8.0.1.0", "version_affected" : "=" }, { "version_value" : "8.0.1.1", "version_affected" : "=" }, { "version_value" : "8.0.11", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" }, { "version_value" : "8.6.0.0", "version_affected" : "=" }, { "version_value" : "8.6.0.1", "version_affected" : "=" }, { "version_value" : "8.6.0.2", "version_affected" : "=" }, { "version_value" : "8.7.0.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-310" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640352", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640352", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/84707", "name" : "appscan-cve20130531-weak-ciphersuites(84707)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The SSL implementation in IBM Security AppScan Enterprise before 8.7.0.1 enables cipher suites with weak encryption algorithms, which makes it easier for remote attackers to obtain sensitive information by sniffing the network." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:5.6.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:6.0.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:6.0.1.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:6.0.2.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:6.1.1.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.0.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.0.2:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.1.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.1.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.11:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.5.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.5.0.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.6.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.6.0.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.6.0.2:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:*:-:enterprise:*:*:*:*:*", "versionEndIncluding" : "8.7.0.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-09-08T16:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0532", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "rational_policy_tester", "version" : { "version_data" : [ { "version_value" : "5.6.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.1", "version_affected" : "=" }, { "version_value" : "8.0.0.2", "version_affected" : "=" }, { "version_value" : "8.0.1.0", "version_affected" : "=" }, { "version_value" : "8.0.1.1", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" }, { "version_value" : "8.5.0.2", "version_affected" : "=" }, { "version_value" : "8.5.0.3", "version_affected" : "=" } ] } }, { "product_name" : "security_appscan", "version" : { "version_data" : [ { "version_value" : "5.6.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.1", "version_affected" : "=" }, { "version_value" : "8.0.0.2", "version_affected" : "=" }, { "version_value" : "8.0.1.0", "version_affected" : "=" }, { "version_value" : "8.0.1.1", "version_affected" : "=" }, { "version_value" : "8.0.11", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" }, { "version_value" : "8.6.0.0", "version_affected" : "=" }, { "version_value" : "8.6.0.1", "version_affected" : "=" }, { "version_value" : "8.6.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21626264", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21626264", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21631304", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21631304", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82595", "name" : "appscan-cve20130532-csrf(82595)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site request forgery (CSRF) vulnerability in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that cause a denial of service via malformed HTTP data." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:5.6.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.0.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.0.2:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.1.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.1.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.0.11:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.5.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.5.0.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.6.0.0:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.6.0.1:-:enterprise:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_appscan:8.6.0.2:-:enterprise:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:5.6.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.0.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.0.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_policy_tester:8.5.0.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-03-29T16:09Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0533", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "lotus_sametime", "version" : { "version_data" : [ { "version_value" : "8.0.2", "version_affected" : "=" }, { "version_value" : "8.0.2.1", "version_affected" : "=" }, { "version_value" : "8.5", "version_affected" : "=" }, { "version_value" : "8.5.1", "version_affected" : "=" }, { "version_value" : "8.5.1.1", "version_affected" : "=" }, { "version_value" : "8.5.2", "version_affected" : "=" }, { "version_value" : "8.5.2.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21633620", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21633620", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82655", "name" : "inotes-webmail-xss(82655)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the Sametime Links server in IBM Sametime 8.0.2 through 8.5.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_sametime:8.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_sametime:8.0.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_sametime:8.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_sametime:8.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_sametime:8.5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_sametime:8.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_sametime:8.5.2.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-04-28T03:24Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0534", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "lotus_sametime", "version" : { "version_data" : [ { "version_value" : "8.5.1", "version_affected" : "=" }, { "version_value" : "8.5.1.1", "version_affected" : "=" }, { "version_value" : "8.5.1.2", "version_affected" : "=" }, { "version_value" : "8.5.2", "version_affected" : "=" }, { "version_value" : "8.5.2.1", "version_affected" : "=" } ] } }, { "product_name" : "sametime", "version" : { "version_data" : [ { "version_value" : "8.5.1", "version_affected" : "=" }, { "version_value" : "8.5.1.1", "version_affected" : "=" }, { "version_value" : "8.5.1.2", "version_affected" : "=" }, { "version_value" : "8.5.2", "version_affected" : "=" }, { "version_value" : "8.5.2.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-255" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21635218", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21635218", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82656", "name" : "notes-cve20130534-info-disclosure(82656)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the Lotus Notes client and separately, might allow local users to obtain sensitive information by leveraging the persistence of cleartext password strings within process memory." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_sametime:8.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_sametime:8.5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_sametime:8.5.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_sametime:8.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_sametime:8.5.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sametime:8.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sametime:8.5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sametime:8.5.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sametime:8.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sametime:8.5.2.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 1.9 }, "severity" : "LOW", "exploitabilityScore" : 3.4, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-06-21T14:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0535", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "classic_meeting_server", "version" : { "version_data" : [ { "version_value" : "7.5.1.2", "version_affected" : "=" }, { "version_value" : "8.0.1", "version_affected" : "=" }, { "version_value" : "8.0.2", "version_affected" : "=" }, { "version_value" : "8.5", "version_affected" : "=" }, { "version_value" : "8.5.1.2", "version_affected" : "=" }, { "version_value" : "8.5.2.1", "version_affected" : "=" } ] } }, { "product_name" : "lotus_sametime", "version" : { "version_data" : [ { "version_value" : "7.5.1.2", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.0.1", "version_affected" : "=" }, { "version_value" : "8.0.1.1", "version_affected" : "=" }, { "version_value" : "8.0.2", "version_affected" : "=" }, { "version_value" : "8.0.2.1", "version_affected" : "=" }, { "version_value" : "8.5", "version_affected" : "=" }, { "version_value" : "8.5.1", "version_affected" : "=" }, { "version_value" : "8.5.1.1", "version_affected" : "=" }, { "version_value" : "8.5.2", "version_affected" : "=" }, { "version_value" : "8.5.2.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21635185", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21635185", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21635545", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21635545", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82657", "name" : "sametime-meeting-multiple-xss(82657)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:classic_meeting_server:7.5.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:classic_meeting_server:8.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:classic_meeting_server:8.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:classic_meeting_server:8.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:classic_meeting_server:8.5.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:classic_meeting_server:8.5.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_sametime:7.5.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_sametime:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_sametime:8.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_sametime:8.0.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_sametime:8.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_sametime:8.0.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_sametime:8.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_sametime:8.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_sametime:8.5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_sametime:8.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_sametime:8.5.2.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-05-02T18:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0536", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "lotus_inotes", "version" : { "version_data" : [ { "version_value" : "8.5.2.0", "version_affected" : "=" }, { "version_value" : "8.5.3.0", "version_affected" : "=" } ] } }, { "product_name" : "lotus_notes", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.0.1", "version_affected" : "=" }, { "version_value" : "8.0.2", "version_affected" : "=" }, { "version_value" : "8.5", "version_affected" : "=" }, { "version_value" : "8.5.1", "version_affected" : "=" } ] } }, { "product_name" : "lotus_notes_traveler", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21633827", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21633827", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82658", "name" : "notes-cve20130536-code-exec(82658)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ntmulti.exe in the Multi User Profile Cleanup service in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3 before FP5, and 9.0 before IF2 allows local users to gain privileges via vectors that arrange for code to be executed during the next login session of a different user, aka SPR PJOK959J24." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:8.5.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:8.5.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes_traveler:9.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-06-21T17:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0537", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "lotus_sametime", "version" : { "version_data" : [ { "version_value" : "8.5.2", "version_affected" : "=" }, { "version_value" : "8.5.2.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21654355", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21654355", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/84840", "name" : "sametime-ems-cve20130537-spoof(84840)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of shared links by leveraging meeting-attendance privileges." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_sametime:8.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_sametime:8.5.2.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-11-09T01:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0538", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "lotus_notes", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.0.0", "version_affected" : "=" }, { "version_value" : "8.0.1", "version_affected" : "=" }, { "version_value" : "8.0.2", "version_affected" : "=" }, { "version_value" : "8.0.2.0", "version_affected" : "=" }, { "version_value" : "8.0.2.1", "version_affected" : "=" }, { "version_value" : "8.0.2.2", "version_affected" : "=" }, { "version_value" : "8.0.2.3", "version_affected" : "=" }, { "version_value" : "8.0.2.4", "version_affected" : "=" }, { "version_value" : "8.0.2.5", "version_affected" : "=" }, { "version_value" : "8.0.2.6", "version_affected" : "=" }, { "version_value" : "8.5", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" }, { "version_value" : "8.5.1", "version_affected" : "=" }, { "version_value" : "8.5.1.0", "version_affected" : "=" }, { "version_value" : "8.5.1.1", "version_affected" : "=" }, { "version_value" : "8.5.1.2", "version_affected" : "=" }, { "version_value" : "8.5.1.3", "version_affected" : "=" }, { "version_value" : "8.5.1.4", "version_affected" : "=" }, { "version_value" : "8.5.1.5", "version_affected" : "=" }, { "version_value" : "8.5.2.0", "version_affected" : "=" }, { "version_value" : "8.5.2.1", "version_affected" : "=" }, { "version_value" : "8.5.2.2", "version_affected" : "=" }, { "version_value" : "8.5.2.3", "version_affected" : "=" }, { "version_value" : "8.5.3", "version_affected" : "=" }, { "version_value" : "8.5.3.1", "version_affected" : "=" }, { "version_value" : "8.5.3.2", "version_affected" : "=" }, { "version_value" : "8.5.3.3", "version_affected" : "=" }, { "version_value" : "9.0.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/912420", "name" : "VU#912420", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21633819", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21633819", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83270", "name" : "ibm-notes-javascript-tags(83270)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element in an HTML e-mail message, aka SPRs JMOY95BLM6 and JMOY95BN49." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:9.0.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-05-01T12:00Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0539", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "sterling_b2b_integrator", "version" : { "version_data" : [ { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" } ] } }, { "product_name" : "sterling_file_gateway", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-255" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC92007", "name" : "IC92007", "refsource" : "AIXAPAR", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640830", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640830", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82916", "name" : "sterling-b2b-cve20130539-sessionid(82916)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An unspecified third-party component in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 uses short session ID values, which makes it easier for remote attackers to hijack sessions, and consequently obtain sensitive information, via a brute-force attack." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_file_gateway:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_file_gateway:2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-07-03T13:54Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0540", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "websphere_application_server", "version" : { "version_data" : [ { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-287" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?&uid=swg21632423", "name" : "http://www-01.ibm.com/support/docview.wss?&uid=swg21632423", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM81056", "name" : "PM81056", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82695", "name" : "was-ssl-sec-bypass(82695)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM WebSphere Application Server (WAS) Liberty Profile 8.5 before 8.5.0.2, when SSL is not enabled, does not properly validate authentication cookies, which allows remote authenticated users to bypass intended access restrictions via an HTTP session." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.5.0.0:-:liberty_profile:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.5.0.1:-:liberty_profile:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-24T10:28Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0541", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "websphere_application_server", "version" : { "version_data" : [ { "version_value" : "6.1.0.0", "version_affected" : "=" }, { "version_value" : "6.1.0.1", "version_affected" : "=" }, { "version_value" : "6.1.0.2", "version_affected" : "=" }, { "version_value" : "6.1.0.3", "version_affected" : "=" }, { "version_value" : "6.1.0.5", "version_affected" : "=" }, { "version_value" : "6.1.0.7", "version_affected" : "=" }, { "version_value" : "6.1.0.9", "version_affected" : "=" }, { "version_value" : "6.1.0.11", "version_affected" : "=" }, { "version_value" : "6.1.0.12", "version_affected" : "=" }, { "version_value" : "6.1.0.13", "version_affected" : "=" }, { "version_value" : "6.1.0.14", "version_affected" : "=" }, { "version_value" : "6.1.0.15", "version_affected" : "=" }, { "version_value" : "6.1.0.17", "version_affected" : "=" }, { "version_value" : "6.1.0.19", "version_affected" : "=" }, { "version_value" : "6.1.0.21", "version_affected" : "=" }, { "version_value" : "6.1.0.23", "version_affected" : "=" }, { "version_value" : "6.1.0.25", "version_affected" : "=" }, { "version_value" : "6.1.0.27", "version_affected" : "=" }, { "version_value" : "6.1.0.29", "version_affected" : "=" }, { "version_value" : "6.1.0.31", "version_affected" : "=" }, { "version_value" : "6.1.0.33", "version_affected" : "=" }, { "version_value" : "6.1.0.35", "version_affected" : "=" }, { "version_value" : "6.1.0.37", "version_affected" : "=" }, { "version_value" : "6.1.0.39", "version_affected" : "=" }, { "version_value" : "6.1.0.41", "version_affected" : "=" }, { "version_value" : "6.1.0.43", "version_affected" : "=" }, { "version_value" : "6.1.0.45", "version_affected" : "=" }, { "version_value" : "7.0.0.1", "version_affected" : "=" }, { "version_value" : "7.0.0.2", "version_affected" : "=" }, { "version_value" : "7.0.0.3", "version_affected" : "=" }, { "version_value" : "7.0.0.4", "version_affected" : "=" }, { "version_value" : "7.0.0.5", "version_affected" : "=" }, { "version_value" : "7.0.0.6", "version_affected" : "=" }, { "version_value" : "7.0.0.7", "version_affected" : "=" }, { "version_value" : "7.0.0.8", "version_affected" : "=" }, { "version_value" : "7.0.0.9", "version_affected" : "=" }, { "version_value" : "7.0.0.11", "version_affected" : "=" }, { "version_value" : "7.0.0.13", "version_affected" : "=" }, { "version_value" : "7.0.0.15", "version_affected" : "=" }, { "version_value" : "7.0.0.17", "version_affected" : "=" }, { "version_value" : "7.0.0.19", "version_affected" : "=" }, { "version_value" : "7.0.0.21", "version_affected" : "=" }, { "version_value" : "7.0.0.23", "version_affected" : "=" }, { "version_value" : "7.0.0.25", "version_affected" : "=" }, { "version_value" : "7.0.0.27", "version_affected" : "=" }, { "version_value" : "8.0.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.1", "version_affected" : "=" }, { "version_value" : "8.0.0.2", "version_affected" : "=" }, { "version_value" : "8.0.0.3", "version_affected" : "=" }, { "version_value" : "8.0.0.4", "version_affected" : "=" }, { "version_value" : "8.0.0.5", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?&uid=swg21632423", "name" : "http://www-01.ibm.com/support/docview.wss?&uid=swg21632423", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM74909", "name" : "PM74909", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82696", "name" : "was-cve20130541-dos(82696)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 on Windows, when a localOS registry is used in conjunction with WebSphere Identity Manger (WIM), allows local users to cause a denial of service (daemon crash) via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.45:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.27:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.5.0.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 1.9 }, "severity" : "LOW", "exploitabilityScore" : 3.4, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-24T10:28Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0542", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "websphere_application_server", "version" : { "version_data" : [ { "version_value" : "6.1.0", "version_affected" : "=" }, { "version_value" : "6.1.0.0", "version_affected" : "=" }, { "version_value" : "6.1.0.1", "version_affected" : "=" }, { "version_value" : "6.1.0.2", "version_affected" : "=" }, { "version_value" : "6.1.0.3", "version_affected" : "=" }, { "version_value" : "6.1.0.5", "version_affected" : "=" }, { "version_value" : "6.1.0.7", "version_affected" : "=" }, { "version_value" : "6.1.0.9", "version_affected" : "=" }, { "version_value" : "6.1.0.11", "version_affected" : "=" }, { "version_value" : "6.1.0.12", "version_affected" : "=" }, { "version_value" : "6.1.0.13", "version_affected" : "=" }, { "version_value" : "6.1.0.14", "version_affected" : "=" }, { "version_value" : "6.1.0.15", "version_affected" : "=" }, { "version_value" : "6.1.0.17", "version_affected" : "=" }, { "version_value" : "6.1.0.19", "version_affected" : "=" }, { "version_value" : "6.1.0.21", "version_affected" : "=" }, { "version_value" : "6.1.0.23", "version_affected" : "=" }, { "version_value" : "6.1.0.25", "version_affected" : "=" }, { "version_value" : "6.1.0.27", "version_affected" : "=" }, { "version_value" : "6.1.0.29", "version_affected" : "=" }, { "version_value" : "6.1.0.31", "version_affected" : "=" }, { "version_value" : "6.1.0.33", "version_affected" : "=" }, { "version_value" : "6.1.0.35", "version_affected" : "=" }, { "version_value" : "6.1.0.37", "version_affected" : "=" }, { "version_value" : "6.1.0.39", "version_affected" : "=" }, { "version_value" : "6.1.0.41", "version_affected" : "=" }, { "version_value" : "6.1.0.43", "version_affected" : "=" }, { "version_value" : "6.1.0.45", "version_affected" : "<=" }, { "version_value" : "7.0.0.1", "version_affected" : "=" }, { "version_value" : "7.0.0.2", "version_affected" : "=" }, { "version_value" : "7.0.0.3", "version_affected" : "=" }, { "version_value" : "7.0.0.4", "version_affected" : "=" }, { "version_value" : "7.0.0.5", "version_affected" : "=" }, { "version_value" : "7.0.0.6", "version_affected" : "=" }, { "version_value" : "7.0.0.7", "version_affected" : "=" }, { "version_value" : "7.0.0.8", "version_affected" : "=" }, { "version_value" : "7.0.0.9", "version_affected" : "=" }, { "version_value" : "7.0.0.11", "version_affected" : "=" }, { "version_value" : "7.0.0.13", "version_affected" : "=" }, { "version_value" : "7.0.0.15", "version_affected" : "=" }, { "version_value" : "7.0.0.17", "version_affected" : "=" }, { "version_value" : "7.0.0.19", "version_affected" : "=" }, { "version_value" : "7.0.0.21", "version_affected" : "=" }, { "version_value" : "7.0.0.23", "version_affected" : "=" }, { "version_value" : "7.0.0.25", "version_affected" : "=" }, { "version_value" : "7.0.0.27", "version_affected" : "=" }, { "version_value" : "8.0.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.1", "version_affected" : "=" }, { "version_value" : "8.0.0.2", "version_affected" : "=" }, { "version_value" : "8.0.0.3", "version_affected" : "=" }, { "version_value" : "8.0.0.4", "version_affected" : "=" }, { "version_value" : "8.0.0.5", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?&uid=swg21632423", "name" : "http://www-01.ibm.com/support/docview.wss?&uid=swg21632423", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM81846", "name" : "PM81846", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82697", "name" : "was-cve20130542-xss(82697)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 allows remote attackers to inject arbitrary web script or HTML via crafted field values." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*", "versionEndIncluding" : "6.1.0.45" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.27:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.5.0.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-04-24T10:28Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0543", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "websphere_application_server", "version" : { "version_data" : [ { "version_value" : "6.1.0.0", "version_affected" : "=" }, { "version_value" : "6.1.0.1", "version_affected" : "=" }, { "version_value" : "6.1.0.2", "version_affected" : "=" }, { "version_value" : "6.1.0.3", "version_affected" : "=" }, { "version_value" : "6.1.0.5", "version_affected" : "=" }, { "version_value" : "6.1.0.7", "version_affected" : "=" }, { "version_value" : "6.1.0.9", "version_affected" : "=" }, { "version_value" : "6.1.0.11", "version_affected" : "=" }, { "version_value" : "6.1.0.12", "version_affected" : "=" }, { "version_value" : "6.1.0.13", "version_affected" : "=" }, { "version_value" : "6.1.0.14", "version_affected" : "=" }, { "version_value" : "6.1.0.15", "version_affected" : "=" }, { "version_value" : "6.1.0.17", "version_affected" : "=" }, { "version_value" : "6.1.0.19", "version_affected" : "=" }, { "version_value" : "6.1.0.21", "version_affected" : "=" }, { "version_value" : "6.1.0.23", "version_affected" : "=" }, { "version_value" : "6.1.0.25", "version_affected" : "=" }, { "version_value" : "6.1.0.27", "version_affected" : "=" }, { "version_value" : "6.1.0.29", "version_affected" : "=" }, { "version_value" : "6.1.0.31", "version_affected" : "=" }, { "version_value" : "6.1.0.33", "version_affected" : "=" }, { "version_value" : "6.1.0.35", "version_affected" : "=" }, { "version_value" : "6.1.0.37", "version_affected" : "=" }, { "version_value" : "6.1.0.39", "version_affected" : "=" }, { "version_value" : "6.1.0.41", "version_affected" : "=" }, { "version_value" : "6.1.0.43", "version_affected" : "=" }, { "version_value" : "6.1.0.45", "version_affected" : "=" }, { "version_value" : "7.0.0.1", "version_affected" : "=" }, { "version_value" : "7.0.0.2", "version_affected" : "=" }, { "version_value" : "7.0.0.3", "version_affected" : "=" }, { "version_value" : "7.0.0.4", "version_affected" : "=" }, { "version_value" : "7.0.0.5", "version_affected" : "=" }, { "version_value" : "7.0.0.6", "version_affected" : "=" }, { "version_value" : "7.0.0.7", "version_affected" : "=" }, { "version_value" : "7.0.0.8", "version_affected" : "=" }, { "version_value" : "7.0.0.9", "version_affected" : "=" }, { "version_value" : "7.0.0.11", "version_affected" : "=" }, { "version_value" : "7.0.0.13", "version_affected" : "=" }, { "version_value" : "7.0.0.15", "version_affected" : "=" }, { "version_value" : "7.0.0.17", "version_affected" : "=" }, { "version_value" : "7.0.0.19", "version_affected" : "=" }, { "version_value" : "7.0.0.21", "version_affected" : "=" }, { "version_value" : "7.0.0.23", "version_affected" : "=" }, { "version_value" : "7.0.0.25", "version_affected" : "=" }, { "version_value" : "7.0.0.27", "version_affected" : "=" }, { "version_value" : "8.0.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.1", "version_affected" : "=" }, { "version_value" : "8.0.0.2", "version_affected" : "=" }, { "version_value" : "8.0.0.3", "version_affected" : "=" }, { "version_value" : "8.0.0.4", "version_affected" : "=" }, { "version_value" : "8.0.0.5", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?&uid=swg21632423", "name" : "http://www-01.ibm.com/support/docview.wss?&uid=swg21632423", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM75582", "name" : "PM75582", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82759", "name" : "was-cve20130543-sec-bypass(82759)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 on Linux, Solaris, and HP-UX, when a Local OS registry is used, does not properly validate user accounts, which allows remote attackers to bypass intended access restrictions via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.45:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.27:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.5.0.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-24T10:28Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0544", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "websphere_application_server", "version" : { "version_data" : [ { "version_value" : "6.1.0.0", "version_affected" : "=" }, { "version_value" : "6.1.0.1", "version_affected" : "=" }, { "version_value" : "6.1.0.2", "version_affected" : "=" }, { "version_value" : "6.1.0.3", "version_affected" : "=" }, { "version_value" : "6.1.0.5", "version_affected" : "=" }, { "version_value" : "6.1.0.7", "version_affected" : "=" }, { "version_value" : "6.1.0.9", "version_affected" : "=" }, { "version_value" : "6.1.0.11", "version_affected" : "=" }, { "version_value" : "6.1.0.12", "version_affected" : "=" }, { "version_value" : "6.1.0.13", "version_affected" : "=" }, { "version_value" : "6.1.0.14", "version_affected" : "=" }, { "version_value" : "6.1.0.15", "version_affected" : "=" }, { "version_value" : "6.1.0.17", "version_affected" : "=" }, { "version_value" : "6.1.0.19", "version_affected" : "=" }, { "version_value" : "6.1.0.21", "version_affected" : "=" }, { "version_value" : "6.1.0.23", "version_affected" : "=" }, { "version_value" : "6.1.0.25", "version_affected" : "=" }, { "version_value" : "6.1.0.27", "version_affected" : "=" }, { "version_value" : "6.1.0.29", "version_affected" : "=" }, { "version_value" : "6.1.0.31", "version_affected" : "=" }, { "version_value" : "6.1.0.33", "version_affected" : "=" }, { "version_value" : "6.1.0.35", "version_affected" : "=" }, { "version_value" : "6.1.0.37", "version_affected" : "=" }, { "version_value" : "6.1.0.39", "version_affected" : "=" }, { "version_value" : "6.1.0.41", "version_affected" : "=" }, { "version_value" : "6.1.0.43", "version_affected" : "=" }, { "version_value" : "6.1.0.45", "version_affected" : "=" }, { "version_value" : "7.0.0.1", "version_affected" : "=" }, { "version_value" : "7.0.0.2", "version_affected" : "=" }, { "version_value" : "7.0.0.3", "version_affected" : "=" }, { "version_value" : "7.0.0.4", "version_affected" : "=" }, { "version_value" : "7.0.0.5", "version_affected" : "=" }, { "version_value" : "7.0.0.6", "version_affected" : "=" }, { "version_value" : "7.0.0.7", "version_affected" : "=" }, { "version_value" : "7.0.0.8", "version_affected" : "=" }, { "version_value" : "7.0.0.9", "version_affected" : "=" }, { "version_value" : "7.0.0.11", "version_affected" : "=" }, { "version_value" : "7.0.0.13", "version_affected" : "=" }, { "version_value" : "7.0.0.15", "version_affected" : "=" }, { "version_value" : "7.0.0.17", "version_affected" : "=" }, { "version_value" : "7.0.0.19", "version_affected" : "=" }, { "version_value" : "7.0.0.21", "version_affected" : "=" }, { "version_value" : "7.0.0.23", "version_affected" : "=" }, { "version_value" : "7.0.0.25", "version_affected" : "=" }, { "version_value" : "7.0.0.27", "version_affected" : "=" }, { "version_value" : "8.0.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.1", "version_affected" : "=" }, { "version_value" : "8.0.0.2", "version_affected" : "=" }, { "version_value" : "8.0.0.3", "version_affected" : "=" }, { "version_value" : "8.0.0.4", "version_affected" : "=" }, { "version_value" : "8.0.0.5", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?&uid=swg21632423", "name" : "http://www-01.ibm.com/support/docview.wss?&uid=swg21632423", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM82468", "name" : "PM82468", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82760", "name" : "was-cve20130544-dir-traversal(82760)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 on Linux and UNIX allows remote authenticated users to modify data via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.45:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.27:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.5.0.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-24T10:28Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0548", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "application_manager_for_smart_business", "version" : { "version_data" : [ { "version_value" : "1.2.1", "version_affected" : "=" } ] } }, { "product_name" : "tivoli_monitoring", "version" : { "version_data" : [ { "version_value" : "6.2.0", "version_affected" : "=" }, { "version_value" : "6.2.0.1", "version_affected" : "=" }, { "version_value" : "6.2.0.2", "version_affected" : "=" }, { "version_value" : "6.2.0.3", "version_affected" : "=" }, { "version_value" : "6.2.1", "version_affected" : "=" }, { "version_value" : "6.2.1.1", "version_affected" : "=" }, { "version_value" : "6.2.1.2", "version_affected" : "=" }, { "version_value" : "6.2.1.3", "version_affected" : "=" }, { "version_value" : "6.2.1.4", "version_affected" : "=" }, { "version_value" : "6.2.2", "version_affected" : "=" }, { "version_value" : "6.2.2.1", "version_affected" : "=" }, { "version_value" : "6.2.2.2", "version_affected" : "=" }, { "version_value" : "6.2.2.3", "version_affected" : "=" }, { "version_value" : "6.2.2.4", "version_affected" : "=" }, { "version_value" : "6.2.2.5", "version_affected" : "=" }, { "version_value" : "6.2.2.6", "version_affected" : "=" }, { "version_value" : "6.2.2.7", "version_affected" : "=" }, { "version_value" : "6.2.2.8", "version_affected" : "=" }, { "version_value" : "6.2.2.9", "version_affected" : "=" }, { "version_value" : "6.2.3", "version_affected" : "=" }, { "version_value" : "6.2.3.1", "version_affected" : "=" }, { "version_value" : "6.2.3.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IV27192", "name" : "IV27192", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IV30187", "name" : "IV30187", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IV40115", "name" : "IV40115", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IV40116", "name" : "IV40116", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21635080", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21635080", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640752", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640752", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82767", "name" : "itm-cve20130548-xss(82767)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the Basic Services component in IBM Tivoli Monitoring (ITM) 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business (formerly Tivoli Foundations Application Manager) 1.2.1 before 1.2.1.0-TIV-IAMSB-FP0004 and other products, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.0.3:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.9:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:application_manager_for_smart_business:1.2.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-06-21T17:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0549", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "websphere_portal", "version" : { "version_data" : [ { "version_value" : "7.0.0.0", "version_affected" : "=" }, { "version_value" : "7.0.0.1", "version_affected" : "=" }, { "version_value" : "7.0.0.2", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.0.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM84525", "name" : "PM84525", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21638984", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21638984", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82762", "name" : "was-portal-cve20130549-xss(82762)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the Web Content Manager - Web Content Viewer Portlet in the server in IBM WebSphere Portal 7.0.0.x through 7.0.0.2 CF22 and 8.0.0.x through 8.0.0.1 CF5, when the IBM Portlet API is used, allows remote attackers to inject arbitrary web script or HTML via a crafted URL." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.0:cf001:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf002:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf003:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf004:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf005:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf006:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf007:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf008:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf009:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf010:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf019:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf011:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf012:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf013:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf014:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf015:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf016:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf017:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf018:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf019:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf020:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf021:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf022:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf01:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf02:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf04:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf05:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf04:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf05:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-06-03T21:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0550", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2013. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2018-07-17T01:29Z", "lastModifiedDate" : "2018-07-17T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0551", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "application_manager_for_smart_business", "version" : { "version_data" : [ { "version_value" : "1.2.1", "version_affected" : "=" } ] } }, { "product_name" : "tivoli_monitoring", "version" : { "version_data" : [ { "version_value" : "6.2.0", "version_affected" : "=" }, { "version_value" : "6.2.0.1", "version_affected" : "=" }, { "version_value" : "6.2.0.2", "version_affected" : "=" }, { "version_value" : "6.2.0.3", "version_affected" : "=" }, { "version_value" : "6.2.1", "version_affected" : "=" }, { "version_value" : "6.2.1.1", "version_affected" : "=" }, { "version_value" : "6.2.1.2", "version_affected" : "=" }, { "version_value" : "6.2.1.3", "version_affected" : "=" }, { "version_value" : "6.2.1.4", "version_affected" : "=" }, { "version_value" : "6.2.2", "version_affected" : "=" }, { "version_value" : "6.2.2.1", "version_affected" : "=" }, { "version_value" : "6.2.2.2", "version_affected" : "=" }, { "version_value" : "6.2.2.3", "version_affected" : "=" }, { "version_value" : "6.2.2.4", "version_affected" : "=" }, { "version_value" : "6.2.2.5", "version_affected" : "=" }, { "version_value" : "6.2.2.6", "version_affected" : "=" }, { "version_value" : "6.2.2.7", "version_affected" : "=" }, { "version_value" : "6.2.2.8", "version_affected" : "=" }, { "version_value" : "6.2.2.9", "version_affected" : "=" }, { "version_value" : "6.2.3", "version_affected" : "=" }, { "version_value" : "6.2.3.1", "version_affected" : "=" }, { "version_value" : "6.2.3.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IV27192", "name" : "IV27192", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IV30187", "name" : "IV30187", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IV40115", "name" : "IV40115", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IV40116", "name" : "IV40116", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21635080", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21635080", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640752", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640752", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82768", "name" : "itm-cve20130551-dos(82768)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Basic Services component in IBM Tivoli Monitoring (ITM) 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business (formerly Tivoli Foundations Application Manager) 1.2.1 before 1.2.1.0-TIV-IAMSB-FP0004 and other products, allows remote attackers to cause a denial of service (abend) via a crafted URL." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.0.3:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.9:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:application_manager_for_smart_business:1.2.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-06-21T17:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0553", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "lotus_sametime", "version" : { "version_data" : [ { "version_value" : "8.5.1", "version_affected" : "=" }, { "version_value" : "8.5.1.1", "version_affected" : "=" } ] } }, { "product_name" : "sametime", "version" : { "version_data" : [ { "version_value" : "8.5.2.0", "version_affected" : "=" }, { "version_value" : "8.5.2.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21633618", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21633618", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/82915", "name" : "ibm-sametime-commands(82915)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The client implementation in IBM Sametime 8.5.1 through 8.5.2.1, as used in Sametime Connect client, Sametime Advanced Connect client, Sametime Advanced Web client, and other products, allows remote authenticated users to send commands to individual chat users, or to all participants in a chat room, via a crafted Sametime Instant Message (IM)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_sametime:8.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_sametime:8.5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sametime:8.5.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sametime:8.5.2.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-28T03:24Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0558", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "sterling_b2b_integrator", "version" : { "version_data" : [ { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" } ] } }, { "product_name" : "sterling_file_gateway", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC90483", "name" : "IC90483", "refsource" : "AIXAPAR", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640830", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640830", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83006", "name" : "sterling-b2b-cve20130558-infodisc(83006)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to obtain sensitive information about application implementation via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_file_gateway:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_file_gateway:2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-07-03T13:54Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0559", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "api_management", "version" : { "version_data" : [ { "version_value" : "2.0.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.ibm.com/support/docview.wss?uid=swg21643847", "name" : "http://www.ibm.com/support/docview.wss?uid=swg21643847", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1LI77499", "name" : "LI77499", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/85557", "name" : "apimgmt-cve20130559-unauth-access(85557)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in IBM API Management 2.0 before 2.0.0.1 allows remote attackers to access tenant APIs, and consequently obtain sensitive information or modify data, via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:api_management:2.0.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-07-19T14:36Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0560", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "sterling_b2b_integrator", "version" : { "version_data" : [ { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" } ] } }, { "product_name" : "sterling_file_gateway", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640830", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640830", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83012", "name" : "sterling-b2b-cve20130560-sql(83012)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2012-5766." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_file_gateway:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_file_gateway:2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-07-03T13:54Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0565", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "websphere_application_server", "version" : { "version_data" : [ { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?&uid=swg21632423", "name" : "http://www-01.ibm.com/support/docview.wss?&uid=swg21632423", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM83402", "name" : "PM83402", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83138", "name" : "was-cve20130565-xss(83138)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the RPC adapter for the Web 2.0 and Mobile toolkit in IBM WebSphere Application Server (WAS) 8.5 before 8.5.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted response." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.5.0.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-04-24T10:28Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0566", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "websphere_commerce", "version" : { "version_data" : [ { "version_value" : "5.6.1", "version_affected" : "=" }, { "version_value" : "5.6.1.1", "version_affected" : "=" }, { "version_value" : "5.6.1.2", "version_affected" : "=" }, { "version_value" : "5.6.1.3", "version_affected" : "=" }, { "version_value" : "5.6.1.4", "version_affected" : "=" }, { "version_value" : "5.6.1.5", "version_affected" : "=" }, { "version_value" : "6.0.0.0", "version_affected" : "=" }, { "version_value" : "6.0.0.1", "version_affected" : "=" }, { "version_value" : "6.0.0.2", "version_affected" : "=" }, { "version_value" : "6.0.0.3", "version_affected" : "=" }, { "version_value" : "6.0.0.4", "version_affected" : "=" }, { "version_value" : "6.0.0.5", "version_affected" : "=" }, { "version_value" : "6.0.0.6", "version_affected" : "=" }, { "version_value" : "6.0.0.7", "version_affected" : "=" }, { "version_value" : "6.0.0.8", "version_affected" : "=" }, { "version_value" : "6.0.0.9", "version_affected" : "=" }, { "version_value" : "6.0.0.10", "version_affected" : "=" }, { "version_value" : "6.0.0.11", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.0.0.1", "version_affected" : "=" }, { "version_value" : "7.0.0.2", "version_affected" : "=" }, { "version_value" : "7.0.0.3", "version_affected" : "=" }, { "version_value" : "7.0.0.4", "version_affected" : "=" }, { "version_value" : "7.0.0.5", "version_affected" : "=" }, { "version_value" : "7.0.0.6", "version_affected" : "=" }, { "version_value" : "7.0.0.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.ibm.com/support/docview.wss?uid=swg21647750", "name" : "http://www.ibm.com/support/docview.wss?uid=swg21647750", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1JR46776", "name" : "JR46776", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83139", "name" : "wscommerce-cve20130566-xss(83139)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the (1) Accelerator JSPs, (2) Organization Administration Console JSPs, and (3) Administration Console JSPs in WebSphere Commerce Tools in IBM WebSphere Commerce 5.6.1.0 through 5.6.1.5, 6.0.0.0 through 6.0.0.11, and 7.0.0.0 through 7.0.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:5.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:5.6.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:5.6.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:5.6.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:5.6.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:5.6.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:6.0.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_commerce:7.0.0.7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-08-27T03:34Z", "lastModifiedDate" : "2019-09-30T16:19Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0567", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "sterling_b2b_integrator", "version" : { "version_data" : [ { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" } ] } }, { "product_name" : "sterling_file_gateway", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC91151", "name" : "IC91151", "refsource" : "AIXAPAR", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640830", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640830", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83164", "name" : "sterling-b2b-cve20130567-infodisc(83164)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-3020, CVE-2013-0568, and CVE-2013-0475." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_file_gateway:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_file_gateway:2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-07-03T13:54Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0568", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "sterling_b2b_integrator", "version" : { "version_data" : [ { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" } ] } }, { "product_name" : "sterling_file_gateway", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640830", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21640830", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83165", "name" : "sterling-b2b-cve20130568-infodisc(83165)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-3020, CVE-2013-0475, and CVE-2013-0567." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_file_gateway:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_file_gateway:2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-07-03T13:54Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0569", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "connections", "version" : { "version_data" : [ { "version_value" : "4.5.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1LO74629", "name" : "LO74629", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21635059", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21635059", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83354", "name" : "ibm-communities-cve20130569-xss(83354)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the Communities component in IBM Connections 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:connections:4.5.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-04-27T03:16Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0570", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "network_operating_system", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83166", "name" : "ibm-networking-cve20130570(83166)", "refsource" : "XF", "tags" : [ "VDB Entry", "Vendor Advisory" ] }, { "url" : "https://www-304.ibm.com/support/docview.wss?uid=isg3T1019715", "name" : "https://www-304.ibm.com/support/docview.wss?uid=isg3T1019715", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Fibre Channel over Ethernet (FCoE) feature in IBM System Networking and Blade Network Technology (BNT) switches running IBM Networking Operating System (aka NOS, formerly BLADE Operating System) floods data frames with unknown MAC addresses out on all interfaces on the same VLAN, which might allow remote attackers to obtain sensitive information in opportunistic circumstances by eavesdropping on the broadcast domain. IBM X-Force ID: 83166." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:network_operating_system:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ibm:flex_system_fabric_cn4093:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ibm:flex_system_fabric_en4093:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ibm:flex_system_si4093_:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ibm:rackswitch_g8124:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ibm:rackswitch_g8124-e:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ibm:rackswitch_g8124-er:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ibm:rackswitch_g8264:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ibm:rackswitch_g8264-t:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ibm:rackswitch_g8264cs:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ibm:rackswitch_g8316:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ibm:virtual_fabric:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "ADJACENT_NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.6, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.9 }, "severity" : "LOW", "exploitabilityScore" : 5.5, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2018-07-13T21:29Z", "lastModifiedDate" : "2018-09-10T12:50Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0571", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "application_support_facility", "version" : { "version_data" : [ { "version_value" : "3.4.0", "version_affected" : "=" } ] } }, { "product_name" : "document_connect_for_application_support_facility", "version" : { "version_data" : [ { "version_value" : "1.0.0.1204", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21635328", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21635328", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83246", "name" : "asf-cve20130571-xss(83246)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in IBM Document Connect for Application Support Facility (aka DC4ASF) before 1.0.0.1218 in Application Support Facility (ASF) 3.4 for z/OS on Windows, Linux, and AIX allows remote attackers to inject arbitrary web script or HTML via a crafted URL." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:application_support_facility:3.4.0:-:*:*:*:aix:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:application_support_facility:3.4.0:-:*:*:*:linux_kernel:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:application_support_facility:3.4.0:-:*:*:*:windows:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:application_support_facility:3.4.0:-:*:*:*:z\\/os:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:document_connect_for_application_support_facility:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.0.0.1204" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.9 }, "severity" : "LOW", "exploitabilityScore" : 5.5, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-04-27T03:16Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0572", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "application_support_facility", "version" : { "version_data" : [ { "version_value" : "3.4.0", "version_affected" : "=" } ] } }, { "product_name" : "document_connect_for_application_support_facility", "version" : { "version_data" : [ { "version_value" : "1.0.0.1204", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21635328", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21635328", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83247", "name" : "asf-cve20130572-spoofing(83247)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in IBM Document Connect for Application Support Facility (aka DC4ASF) before 1.0.0.1218 in Application Support Facility (ASF) 3.4 for z/OS on Windows, Linux, and AIX allows remote authenticated users to inject content, and conduct phishing attacks, via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:application_support_facility:3.4.0:-:*:*:*:aix:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:application_support_facility:3.4.0:-:*:*:*:linux_kernel:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:application_support_facility:3.4.0:-:*:*:*:windows:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:application_support_facility:3.4.0:-:*:*:*:z\\/os:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:document_connect_for_application_support_facility:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.0.0.1204" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.3 }, "severity" : "LOW", "exploitabilityScore" : 4.4, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-04-27T03:16Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0576", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "tivoli_monitoring", "version" : { "version_data" : [ { "version_value" : "6.2.0", "version_affected" : "=" }, { "version_value" : "6.2.0.1", "version_affected" : "=" }, { "version_value" : "6.2.0.2", "version_affected" : "=" }, { "version_value" : "6.2.0.3", "version_affected" : "=" }, { "version_value" : "6.2.1", "version_affected" : "=" }, { "version_value" : "6.2.1.1", "version_affected" : "=" }, { "version_value" : "6.2.1.2", "version_affected" : "=" }, { "version_value" : "6.2.1.3", "version_affected" : "=" }, { "version_value" : "6.2.1.4", "version_affected" : "=" }, { "version_value" : "6.2.2", "version_affected" : "=" }, { "version_value" : "6.2.2.1", "version_affected" : "=" }, { "version_value" : "6.2.2.2", "version_affected" : "=" }, { "version_value" : "6.2.2.3", "version_affected" : "=" }, { "version_value" : "6.2.2.4", "version_affected" : "=" }, { "version_value" : "6.2.2.5", "version_affected" : "=" }, { "version_value" : "6.2.2.6", "version_affected" : "=" }, { "version_value" : "6.2.2.7", "version_affected" : "=" }, { "version_value" : "6.2.2.8", "version_affected" : "=" }, { "version_value" : "6.2.2.9", "version_affected" : "=" }, { "version_value" : "6.2.3", "version_affected" : "=" }, { "version_value" : "6.2.3.1", "version_affected" : "=" }, { "version_value" : "6.2.3.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IV32812", "name" : "IV32812", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21634920", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21634920", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83328", "name" : "ibm-tivoli-cve20130576-xss(83328)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the Tivoli Enterprise Portal browser client in IBM Tivoli Monitoring 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, and 6.2.3 through FP02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.0.3:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.9:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-05-28T15:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0577", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "infosphere_optim_data_growth_for_oracle_e-business_suite", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" }, { "version_value" : "6.3.1", "version_affected" : "=" }, { "version_value" : "6.3.2", "version_affected" : "=" }, { "version_value" : "6.3.3", "version_affected" : "=" }, { "version_value" : "6.4.0", "version_affected" : "=" }, { "version_value" : "6.4.1", "version_affected" : "=" }, { "version_value" : "6.5.0", "version_affected" : "=" }, { "version_value" : "6.5.1", "version_affected" : "=" }, { "version_value" : "7.1.0", "version_affected" : "=" }, { "version_value" : "7.1.1", "version_affected" : "=" }, { "version_value" : "7.1.2", "version_affected" : "=" }, { "version_value" : "7.2.0", "version_affected" : "=" }, { "version_value" : "7.2.1", "version_affected" : "=" }, { "version_value" : "7.2.2", "version_affected" : "=" }, { "version_value" : "7.3.0", "version_affected" : "=" }, { "version_value" : "7.3.1", "version_affected" : "=" }, { "version_value" : "9.1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21651990", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21651990", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83329", "name" : "ibm-optim-cve20130577(83329)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote authenticated users to bypass intended access restrictions and create, modify, or delete documents or scripts via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:9.1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.2 }, "severity" : "MEDIUM", "exploitabilityScore" : 5.1, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-10-10T10:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0578", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "sterling_multi-channel_fulfillment_solution", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" } ] } }, { "product_name" : "sterling_selling_and_fulfillment_foundation", "version" : { "version_data" : [ { "version_value" : "8.5", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1.0", "version_affected" : "=" }, { "version_value" : "9.1.0.1", "version_affected" : "=" }, { "version_value" : "9.1.0.2", "version_affected" : "=" }, { "version_value" : "9.1.0.3", "version_affected" : "=" }, { "version_value" : "9.1.0.4", "version_affected" : "=" }, { "version_value" : "9.1.0.5", "version_affected" : "=" }, { "version_value" : "9.1.0.6", "version_affected" : "=" }, { "version_value" : "9.1.0.7", "version_affected" : "=" }, { "version_value" : "9.1.0.8", "version_affected" : "=" }, { "version_value" : "9.1.0.9", "version_affected" : "=" }, { "version_value" : "9.1.0.10", "version_affected" : "=" }, { "version_value" : "9.1.0.11", "version_affected" : "=" }, { "version_value" : "9.1.0.12", "version_affected" : "=" }, { "version_value" : "9.1.0.13", "version_affected" : "=" }, { "version_value" : "9.1.0.14", "version_affected" : "=" }, { "version_value" : "9.1.0.15", "version_affected" : "=" }, { "version_value" : "9.1.0.16", "version_affected" : "=" }, { "version_value" : "9.1.0.17", "version_affected" : "=" }, { "version_value" : "9.1.0.18", "version_affected" : "=" }, { "version_value" : "9.1.0.19", "version_affected" : "=" }, { "version_value" : "9.1.0.20", "version_affected" : "=" }, { "version_value" : "9.1.0.21", "version_affected" : "=" }, { "version_value" : "9.1.0.22", "version_affected" : "=" }, { "version_value" : "9.1.0.23", "version_affected" : "=" }, { "version_value" : "9.1.0.24", "version_affected" : "=" }, { "version_value" : "9.1.0.25", "version_affected" : "=" }, { "version_value" : "9.1.0.26", "version_affected" : "=" }, { "version_value" : "9.1.0.27", "version_affected" : "=" }, { "version_value" : "9.1.0.28", "version_affected" : "=" }, { "version_value" : "9.1.0.29", "version_affected" : "=" }, { "version_value" : "9.1.0.30", "version_affected" : "=" }, { "version_value" : "9.1.0.31", "version_affected" : "=" }, { "version_value" : "9.1.0.32", "version_affected" : "=" }, { "version_value" : "9.1.0.33", "version_affected" : "=" }, { "version_value" : "9.1.0.34", "version_affected" : "=" }, { "version_value" : "9.1.0.35", "version_affected" : "=" }, { "version_value" : "9.1.0.36", "version_affected" : "=" }, { "version_value" : "9.1.0.37", "version_affected" : "=" }, { "version_value" : "9.1.0.38", "version_affected" : "=" }, { "version_value" : "9.1.0.39", "version_affected" : "=" }, { "version_value" : "9.1.0.40", "version_affected" : "=" }, { "version_value" : "9.1.0.41", "version_affected" : "=" }, { "version_value" : "9.1.0.42", "version_affected" : "=" }, { "version_value" : "9.1.0.43", "version_affected" : "=" }, { "version_value" : "9.1.0.44", "version_affected" : "=" }, { "version_value" : "9.2.0", "version_affected" : "=" }, { "version_value" : "9.2.0.1", "version_affected" : "=" }, { "version_value" : "9.2.0.2", "version_affected" : "=" }, { "version_value" : "9.2.0.3", "version_affected" : "=" }, { "version_value" : "9.2.0.4", "version_affected" : "=" }, { "version_value" : "9.2.0.5", "version_affected" : "=" }, { "version_value" : "9.2.0.6", "version_affected" : "=" }, { "version_value" : "9.2.0.7", "version_affected" : "=" }, { "version_value" : "9.2.0.8", "version_affected" : "=" }, { "version_value" : "9.2.0.9", "version_affected" : "=" }, { "version_value" : "9.2.0.10", "version_affected" : "=" }, { "version_value" : "9.2.0.11", "version_affected" : "=" }, { "version_value" : "9.2.0.12", "version_affected" : "=" }, { "version_value" : "9.2.0.13", "version_affected" : "=" }, { "version_value" : "9.2.0.14", "version_affected" : "=" }, { "version_value" : "9.2.0.15", "version_affected" : "=" }, { "version_value" : "9.2.0.16", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-287" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC91829", "name" : "IC91829", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21636034", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21636034", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83330", "name" : "ibm-sterling-cve20130578-info-disclosure(83330)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Sterling Order Management APIs in IBM Sterling Multi-Channel Fulfillment Solution 8.0 before HF128 and IBM Sterling Selling and Fulfillment Foundation 8.5 before HF93, 9.0 before HF73, 9.1.0 before FP45, and 9.2.0 before FP17, when the API tester is enabled, do not require administrative credentials, which allows remote authenticated users to obtain sensitive database information via a request to the API tester URI." }, { "lang" : "en", "value" : "Per: http://www-01.ibm.com/support/docview.wss?uid=swg21636034\r\n\r\n'AFFECTED PRODUCTS AND VERSIONS:\r\nIBM Sterling Selling and Fulfillment Foundation 9.2.0\r\nIBM Sterling Selling and Fulfillment Foundation 9.1.0\r\nIBM Sterling Selling and Fulfillment Foundation 9.0\r\nIBM Sterling Selling and Fulfillment Foundation 8.5\r\nIBM Sterling Multi-Channel Fulfillment Solution 8.0'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_multi-channel_fulfillment_solution:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:8.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.2.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.2.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.2.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.2.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.2.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.2.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.2.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.2.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.2.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.2.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.2.0.16:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.1.0.44:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-05-10T11:42Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0579", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "infosphere_optim_data_growth_for_oracle_e-business_suite", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" }, { "version_value" : "6.3.1", "version_affected" : "=" }, { "version_value" : "6.3.2", "version_affected" : "=" }, { "version_value" : "6.3.3", "version_affected" : "=" }, { "version_value" : "6.4.0", "version_affected" : "=" }, { "version_value" : "6.4.1", "version_affected" : "=" }, { "version_value" : "6.5.0", "version_affected" : "=" }, { "version_value" : "6.5.1", "version_affected" : "=" }, { "version_value" : "7.1.0", "version_affected" : "=" }, { "version_value" : "7.1.1", "version_affected" : "=" }, { "version_value" : "7.1.2", "version_affected" : "=" }, { "version_value" : "7.2.0", "version_affected" : "=" }, { "version_value" : "7.2.1", "version_affected" : "=" }, { "version_value" : "7.2.2", "version_affected" : "=" }, { "version_value" : "7.3.0", "version_affected" : "=" }, { "version_value" : "7.3.1", "version_affected" : "=" }, { "version_value" : "9.1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21651990", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21651990", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83331", "name" : "ibm-optim-cve20130579-session-fixation(83331)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote attackers to impersonate arbitrary users by leveraging access to a legitimate user's web browser either (1) before or (2) after authentication." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:9.1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:M/Au:N/C:P/I:P/A:N", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 5.5, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-10-10T10:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0580", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "infosphere_optim_data_growth_for_oracle_e-business_suite", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" }, { "version_value" : "6.3.1", "version_affected" : "=" }, { "version_value" : "6.3.2", "version_affected" : "=" }, { "version_value" : "6.3.3", "version_affected" : "=" }, { "version_value" : "6.4.0", "version_affected" : "=" }, { "version_value" : "6.4.1", "version_affected" : "=" }, { "version_value" : "6.5.0", "version_affected" : "=" }, { "version_value" : "6.5.1", "version_affected" : "=" }, { "version_value" : "7.1.0", "version_affected" : "=" }, { "version_value" : "7.1.1", "version_affected" : "=" }, { "version_value" : "7.1.2", "version_affected" : "=" }, { "version_value" : "7.2.0", "version_affected" : "=" }, { "version_value" : "7.2.1", "version_affected" : "=" }, { "version_value" : "7.2.2", "version_affected" : "=" }, { "version_value" : "7.3.0", "version_affected" : "=" }, { "version_value" : "7.3.1", "version_affected" : "=" }, { "version_value" : "9.1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21651990", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21651990", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83332", "name" : "ibm-optim-cve20130580-csrf(83332)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site request forgery (CSRF) vulnerability in the Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote authenticated users to hijack the authentication of arbitrary users." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:9.1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:M/Au:S/C:P/I:P/A:P", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.4, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-10-10T10:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0581", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "business_process_manager", "version" : { "version_data" : [ { "version_value" : "7.5.1.0", "version_affected" : "=" }, { "version_value" : "7.5.1.1", "version_affected" : "=" }, { "version_value" : "8.0.0.0", "version_affected" : "=" }, { "version_value" : "8.0.1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1JR45799", "name" : "JR45799", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21633593", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21633593", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83333", "name" : "bpm-cve20130581-xss(83333)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in IBM Business Process Manager (BPM) 7.5.1.x, 8.0.0.x, and 8.0.1 before FP1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving (1) ProcessPortal/jsp/socialPortal/dashboard.jsp, (2) teamworks/executeServiceByName, (3) portal/jsp/viewAdHocReportWizard.do, or (4) rest/bpm/wle/v1/process." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-07-06T13:57Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0582", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "tivoli_federated_identity_manager", "version" : { "version_data" : [ { "version_value" : "6.2.0", "version_affected" : "=" }, { "version_value" : "6.2.0.1", "version_affected" : "=" }, { "version_value" : "6.2.0.2", "version_affected" : "=" }, { "version_value" : "6.2.0.3", "version_affected" : "=" }, { "version_value" : "6.2.0.8", "version_affected" : "=" }, { "version_value" : "6.2.0.9", "version_affected" : "=" }, { "version_value" : "6.2.0.10", "version_affected" : "=" }, { "version_value" : "6.2.0.11", "version_affected" : "=" }, { "version_value" : "6.2.1", "version_affected" : "=" }, { "version_value" : "6.2.1.1", "version_affected" : "=" }, { "version_value" : "6.2.1.2", "version_affected" : "=" }, { "version_value" : "6.2.1.3", "version_affected" : "=" }, { "version_value" : "6.2.1.4", "version_affected" : "=" }, { "version_value" : "6.2.2", "version_affected" : "=" }, { "version_value" : "6.2.2.2", "version_affected" : "=" }, { "version_value" : "6.2.2.3", "version_affected" : "=" } ] } }, { "product_name" : "tivoli_federated_identity_manager_business_gateway", "version" : { "version_data" : [ { "version_value" : "6.2.0", "version_affected" : "=" }, { "version_value" : "6.2.0.1", "version_affected" : "=" }, { "version_value" : "6.2.0.2", "version_affected" : "=" }, { "version_value" : "6.2.0.3", "version_affected" : "=" }, { "version_value" : "6.2.0.8", "version_affected" : "=" }, { "version_value" : "6.2.0.9", "version_affected" : "=" }, { "version_value" : "6.2.0.10", "version_affected" : "=" }, { "version_value" : "6.2.0.11", "version_affected" : "=" }, { "version_value" : "6.2.1", "version_affected" : "=" }, { "version_value" : "6.2.1.3", "version_affected" : "=" }, { "version_value" : "6.2.1.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IV26033", "name" : "IV26033", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IV26034", "name" : "IV26034", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IV31640", "name" : "IV31640", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21635688", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21635688", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.12, 6.2.1 before 6.2.1.5, and 6.2.2 before 6.2.2.4 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.12 and 6.2.1 before 6.2.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL that triggers a SAML 2.0 response." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.0.11:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.2.3:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager_business_gateway:6.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager_business_gateway:6.2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager_business_gateway:6.2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager_business_gateway:6.2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager_business_gateway:6.2.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager_business_gateway:6.2.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager_business_gateway:6.2.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager_business_gateway:6.2.0.11:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager_business_gateway:6.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager_business_gateway:6.2.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_federated_identity_manager_business_gateway:6.2.1.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-05-02T18:55Z", "lastModifiedDate" : "2013-05-03T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0584", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "infosphere_replication_server", "version" : { "version_data" : [ { "version_value" : "9.7", "version_affected" : "=" }, { "version_value" : "10.1.0", "version_affected" : "=" }, { "version_value" : "10.1.0.1", "version_affected" : "=" }, { "version_value" : "10.1.0.2", "version_affected" : "=" }, { "version_value" : "10.1.0.3", "version_affected" : "=" }, { "version_value" : "10.1.0.4", "version_affected" : "=" }, { "version_value" : "10.2.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21634798", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21634798", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83355", "name" : "ibm-infosphere-cve20130584-info-disclosure(83355)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Data Replication Dashboard component in IBM InfoSphere Replication Server 9.7 and 10.x before 10.2.0.0-b113 allows remote attackers to obtain a list of all user accounts, along with information about whether each account requires a password, via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_replication_server:9.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_replication_server:10.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_replication_server:10.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_replication_server:10.1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_replication_server:10.1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_replication_server:10.1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_replication_server:10.2.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : true, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-23T11:47Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0585", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "infosphere_information_server", "version" : { "version_data" : [ { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.5", "version_affected" : "=" }, { "version_value" : "8.7", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21646136", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21646136", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83356", "name" : "infosphere-cve20130585-xss(83356)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to the (1) web console and (2) repository management user interfaces." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_information_server:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_information_server:8.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_information_server:8.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:infosphere_information_server:9.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-08-16T01:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0586", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "cognos_business_intelligence", "version" : { "version_data" : [ { "version_value" : "8.4.1", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.2", "version_affected" : "=" }, { "version_value" : "10.2.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21645566", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21645566", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83380", "name" : "cognosbi-cve20130586-xss(83380)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:cognos_business_intelligence:8.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:cognos_business_intelligence:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:cognos_business_intelligence:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:cognos_business_intelligence:10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:cognos_business_intelligence:10.2.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-08-27T03:34Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0587", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "websphere_portal", "version" : { "version_data" : [ { "version_value" : "5.1.0.0", "version_affected" : "=" }, { "version_value" : "5.1.0.1", "version_affected" : "=" }, { "version_value" : "5.1.0.2", "version_affected" : "=" }, { "version_value" : "5.1.0.3", "version_affected" : "=" }, { "version_value" : "5.1.0.4", "version_affected" : "=" }, { "version_value" : "5.1.0.5", "version_affected" : "=" }, { "version_value" : "6.0.0.0", "version_affected" : "=" }, { "version_value" : "6.0.0.1", "version_affected" : "=" }, { "version_value" : "6.0.0.2", "version_affected" : "=" }, { "version_value" : "6.0.0.3", "version_affected" : "=" }, { "version_value" : "6.0.0.4", "version_affected" : "=" }, { "version_value" : "6.0.1.0", "version_affected" : "=" }, { "version_value" : "6.0.1.1", "version_affected" : "=" }, { "version_value" : "6.0.1.2", "version_affected" : "=" }, { "version_value" : "6.0.1.3", "version_affected" : "=" }, { "version_value" : "6.0.1.4", "version_affected" : "=" }, { "version_value" : "6.0.1.5", "version_affected" : "=" }, { "version_value" : "6.0.1.6", "version_affected" : "=" }, { "version_value" : "6.0.1.7", "version_affected" : "=" }, { "version_value" : "6.1.0.0", "version_affected" : "=" }, { "version_value" : "6.1.0.1", "version_affected" : "=" }, { "version_value" : "6.1.0.2", "version_affected" : "=" }, { "version_value" : "6.1.0.3", "version_affected" : "=" }, { "version_value" : "6.1.5.0", "version_affected" : "=" }, { "version_value" : "7.0.0.0", "version_affected" : "=" }, { "version_value" : "7.0.0.1", "version_affected" : "=" }, { "version_value" : "7.0.0.2", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.0.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM90118", "name" : "PM90118", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21646618", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21646618", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/84345", "name" : "wsportal-cve20130587-xss(84345)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Portal before 8.0.0.1 CF07 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) Portal, (2) Portal 7.0.0.2, (3) Portal 8.0, or (4) PortalWeb2 theme." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:5.1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:5.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:5.1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:5.1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:5.1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:5.1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:6.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:6.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:6.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:6.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:6.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:6.0.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:6.0.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:6.0.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:6.0.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:6.0.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:6.0.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:6.0.1.5:wp6015_008_01:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:6.0.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:6.0.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:6.1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:6.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:6.1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:6.1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:6.1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.0:cf001:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf002:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf003:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf004:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf005:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf006:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf007:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf008:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf009:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf010:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf019:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf011:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf012:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf013:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf014:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf015:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf016:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf017:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf018:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf019:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf020:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf021:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf022:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf01:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf02:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf03:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf04:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf05:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf04:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf05:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_portal:*:cf06:*:*:*:*:*:*", "versionEndIncluding" : "8.0.0.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-08-16T01:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0589", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "inotes", "version" : { "version_data" : [ { "version_value" : "8.0.0.0", "version_affected" : "=" }, { "version_value" : "8.0.1.0", "version_affected" : "=" }, { "version_value" : "8.0.2.0", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.1.0", "version_affected" : "=" }, { "version_value" : "8.5.2.0", "version_affected" : "=" }, { "version_value" : "8.5.3.0", "version_affected" : "=" }, { "version_value" : "9.0.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83371", "name" : "ibm-inotes-cve20130589-info-disclosure(83371)", "refsource" : "XF", "tags" : [ "VDB Entry", "Vendor Advisory" ] }, { "url" : "https://www-01.ibm.com/support/docview.wss?uid=swg21671622", "name" : "https://www-01.ibm.com/support/docview.wss?uid=swg21671622", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM iNotes before 8.5.3 Fix Pack 6 and 9.x before 9.0.1 allows remote attackers to bypass the remote image filtering mechanism and obtain sensitive information via a crafted e-mail message. IBM X-Force ID: 83371." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:inotes:8.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:inotes:8.0.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:inotes:8.0.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:inotes:8.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:inotes:8.5.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:inotes:8.5.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:inotes:8.5.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:inotes:9.0.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2018-07-11T16:29Z", "lastModifiedDate" : "2018-09-04T18:11Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0590", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "lotus_domino", "version" : { "version_data" : [ { "version_value" : "8.5.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" }, { "version_value" : "8.5.1", "version_affected" : "=" }, { "version_value" : "8.5.1.1", "version_affected" : "=" }, { "version_value" : "8.5.1.2", "version_affected" : "=" }, { "version_value" : "8.5.1.3", "version_affected" : "=" }, { "version_value" : "8.5.1.4", "version_affected" : "=" }, { "version_value" : "8.5.1.5", "version_affected" : "=" }, { "version_value" : "8.5.2.0", "version_affected" : "=" }, { "version_value" : "8.5.2.1", "version_affected" : "=" }, { "version_value" : "8.5.2.2", "version_affected" : "=" }, { "version_value" : "8.5.2.3", "version_affected" : "=" }, { "version_value" : "8.5.2.4", "version_affected" : "=" }, { "version_value" : "8.5.3.0", "version_affected" : "=" }, { "version_value" : "8.5.3.1", "version_affected" : "=" }, { "version_value" : "8.5.3.2", "version_affected" : "=" }, { "version_value" : "8.5.3.3", "version_affected" : "=" }, { "version_value" : "8.5.3.4", "version_affected" : "=" } ] } }, { "product_name" : "lotus_inotes", "version" : { "version_data" : [ { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.1.0", "version_affected" : "=" }, { "version_value" : "8.5.2.0", "version_affected" : "=" }, { "version_value" : "8.5.3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21647740", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21647740", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83814", "name" : "inotes-cve20130590-xss(83814)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in iNotes 8.5.x in IBM Lotus Domino 8.5 before 8.5.3 FP5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN95XNR3, a different vulnerability than CVE-2013-0591." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:8.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:8.5.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:8.5.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:8.5.3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-08-27T03:34Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0591", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "lotus_domino", "version" : { "version_data" : [ { "version_value" : "8.5.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" }, { "version_value" : "8.5.1", "version_affected" : "=" }, { "version_value" : "8.5.1.1", "version_affected" : "=" }, { "version_value" : "8.5.1.2", "version_affected" : "=" }, { "version_value" : "8.5.1.3", "version_affected" : "=" }, { "version_value" : "8.5.1.4", "version_affected" : "=" }, { "version_value" : "8.5.1.5", "version_affected" : "=" }, { "version_value" : "8.5.2.0", "version_affected" : "=" }, { "version_value" : "8.5.2.1", "version_affected" : "=" }, { "version_value" : "8.5.2.2", "version_affected" : "=" }, { "version_value" : "8.5.2.3", "version_affected" : "=" }, { "version_value" : "8.5.2.4", "version_affected" : "=" }, { "version_value" : "8.5.3.0", "version_affected" : "=" }, { "version_value" : "8.5.3.1", "version_affected" : "=" }, { "version_value" : "8.5.3.2", "version_affected" : "=" }, { "version_value" : "8.5.3.3", "version_affected" : "=" }, { "version_value" : "8.5.3.4", "version_affected" : "=" } ] } }, { "product_name" : "lotus_inotes", "version" : { "version_data" : [ { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.1.0", "version_affected" : "=" }, { "version_value" : "8.5.2.0", "version_affected" : "=" }, { "version_value" : "8.5.3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21647740", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21647740", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83381", "name" : "inotes-cve20130591-xss(83381)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in iNotes 8.5.x in IBM Lotus Domino 8.5 before 8.5.3 FP5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN95XNR3, a different vulnerability than CVE-2013-0590." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:8.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:8.5.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:8.5.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:8.5.3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-08-27T03:34Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0592", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "inotes", "version" : { "version_data" : [ { "version_value" : "8.0.0.0", "version_affected" : "=" }, { "version_value" : "8.0.1.0", "version_affected" : "=" }, { "version_value" : "8.0.2.0", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.1.0", "version_affected" : "=" }, { "version_value" : "8.5.2.0", "version_affected" : "=" }, { "version_value" : "8.5.3.0", "version_affected" : "=" }, { "version_value" : "9.0.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83815", "name" : "ibm-inotes-cve20130592-xss(83815)", "refsource" : "XF", "tags" : [ "VDB Entry", "Vendor Advisory" ] }, { "url" : "https://www-01.ibm.com/support/docview.wss?uid=swg21671622", "name" : "https://www-01.ibm.com/support/docview.wss?uid=swg21671622", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in IBM iNotes before 8.5.3 Fix Pack 6 and 9.x before 9.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 83815." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:inotes:8.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:inotes:8.0.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:inotes:8.0.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:inotes:8.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:inotes:8.5.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:inotes:8.5.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:inotes:8.5.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:inotes:9.0.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.4, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.3, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2018-07-11T16:29Z", "lastModifiedDate" : "2018-09-04T17:39Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0593", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "spss_samplepower", "version" : { "version_data" : [ { "version_value" : "3.0.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21635503", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21635503", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83382", "name" : "ibm-spss-cve20130593-code-exec(83382)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the olch2x32 ActiveX control in IBM SPSS SamplePower 3.0 before 3.0-IM-S3SAMPC-WIN32-FP001 allows remote attackers to execute arbitrary code via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:spss_samplepower:3.0.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-04-27T03:16Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0594", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "inotes", "version" : { "version_data" : [ { "version_value" : "8.0.0.0", "version_affected" : "=" }, { "version_value" : "8.0.1.0", "version_affected" : "=" }, { "version_value" : "8.0.2.0", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.1.0", "version_affected" : "=" }, { "version_value" : "8.5.2.0", "version_affected" : "=" }, { "version_value" : "8.5.3.0", "version_affected" : "=" }, { "version_value" : "9.0.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-601" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83383", "name" : "ibm-inotes-cve20130594-open-redirect(83383)", "refsource" : "XF", "tags" : [ "VDB Entry", "Vendor Advisory" ] }, { "url" : "https://www-01.ibm.com/support/docview.wss?uid=swg21671622", "name" : "https://www-01.ibm.com/support/docview.wss?uid=swg21671622", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Open redirect vulnerability in IBM iNotes before 8.5.3 Fix Pack 6 and 9.x before 9.0.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. IBM X-Force ID: 83383." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:inotes:8.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:inotes:8.0.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:inotes:8.0.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:inotes:8.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:inotes:8.5.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:inotes:8.5.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:inotes:8.5.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:inotes:9.0.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2018-07-11T16:29Z", "lastModifiedDate" : "2018-09-04T17:49Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0595", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "lotus_domino", "version" : { "version_data" : [ { "version_value" : "8.5.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" }, { "version_value" : "8.5.1", "version_affected" : "=" }, { "version_value" : "8.5.1.1", "version_affected" : "=" }, { "version_value" : "8.5.1.2", "version_affected" : "=" }, { "version_value" : "8.5.1.3", "version_affected" : "=" }, { "version_value" : "8.5.1.4", "version_affected" : "=" }, { "version_value" : "8.5.1.5", "version_affected" : "=" }, { "version_value" : "8.5.2.0", "version_affected" : "=" }, { "version_value" : "8.5.2.1", "version_affected" : "=" }, { "version_value" : "8.5.2.2", "version_affected" : "=" }, { "version_value" : "8.5.2.3", "version_affected" : "=" }, { "version_value" : "8.5.2.4", "version_affected" : "=" }, { "version_value" : "8.5.3.0", "version_affected" : "=" }, { "version_value" : "8.5.3.1", "version_affected" : "=" }, { "version_value" : "8.5.3.2", "version_affected" : "=" }, { "version_value" : "8.5.3.3", "version_affected" : "=" }, { "version_value" : "8.5.3.4", "version_affected" : "=" } ] } }, { "product_name" : "lotus_inotes", "version" : { "version_data" : [ { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.1.0", "version_affected" : "=" }, { "version_value" : "8.5.2.0", "version_affected" : "=" }, { "version_value" : "8.5.3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21647740", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21647740", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83431", "name" : "inotes-cve20130595-xss(83431)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://www-01.ibm.com/support/docview.wss?uid=swg21671622", "name" : "https://www-01.ibm.com/support/docview.wss?uid=swg21671622", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in iNotes 8.5.x in IBM Lotus Domino 8.5 before 8.5.3 FP5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN95XNR3." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:8.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:8.5.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:8.5.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:8.5.3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-08-27T03:34Z", "lastModifiedDate" : "2018-07-12T01:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0596", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "websphere_application_server", "version" : { "version_data" : [ { "version_value" : "6.1", "version_affected" : "=" }, { "version_value" : "6.1.0", "version_affected" : "=" }, { "version_value" : "6.1.0.0", "version_affected" : "=" }, { "version_value" : "6.1.0.1", "version_affected" : "=" }, { "version_value" : "6.1.0.2", "version_affected" : "=" }, { "version_value" : "6.1.0.3", "version_affected" : "=" }, { "version_value" : "6.1.0.5", "version_affected" : "=" }, { "version_value" : "6.1.0.7", "version_affected" : "=" }, { "version_value" : "6.1.0.9", "version_affected" : "=" }, { "version_value" : "6.1.0.11", "version_affected" : "=" }, { "version_value" : "6.1.0.12", "version_affected" : "=" }, { "version_value" : "6.1.0.13", "version_affected" : "=" }, { "version_value" : "6.1.0.14", "version_affected" : "=" }, { "version_value" : "6.1.0.15", "version_affected" : "=" }, { "version_value" : "6.1.0.17", "version_affected" : "=" }, { "version_value" : "6.1.0.19", "version_affected" : "=" }, { "version_value" : "6.1.0.21", "version_affected" : "=" }, { "version_value" : "6.1.0.23", "version_affected" : "=" }, { "version_value" : "6.1.0.25", "version_affected" : "=" }, { "version_value" : "6.1.0.27", "version_affected" : "=" }, { "version_value" : "6.1.0.29", "version_affected" : "=" }, { "version_value" : "6.1.0.31", "version_affected" : "=" }, { "version_value" : "6.1.0.33", "version_affected" : "=" }, { "version_value" : "6.1.0.35", "version_affected" : "=" }, { "version_value" : "6.1.0.37", "version_affected" : "=" }, { "version_value" : "6.1.0.39", "version_affected" : "=" }, { "version_value" : "6.1.0.41", "version_affected" : "=" }, { "version_value" : "6.1.0.43", "version_affected" : "=" }, { "version_value" : "6.1.0.45", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.ibm.com/support/docview.wss?uid=swg21647522", "name" : "http://www.ibm.com/support/docview.wss?uid=swg21647522", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM73445", "name" : "PM73445", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83608", "name" : "was-cve20130596-xss(83608)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:6.1.0.45:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-09-20T21:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0597", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "websphere_application_server", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.0.0.1", "version_affected" : "=" }, { "version_value" : "7.0.0.2", "version_affected" : "=" }, { "version_value" : "7.0.0.3", "version_affected" : "=" }, { "version_value" : "7.0.0.4", "version_affected" : "=" }, { "version_value" : "7.0.0.5", "version_affected" : "=" }, { "version_value" : "7.0.0.6", "version_affected" : "=" }, { "version_value" : "7.0.0.7", "version_affected" : "=" }, { "version_value" : "7.0.0.8", "version_affected" : "=" }, { "version_value" : "7.0.0.9", "version_affected" : "=" }, { "version_value" : "7.0.0.10", "version_affected" : "=" }, { "version_value" : "7.0.0.11", "version_affected" : "=" }, { "version_value" : "7.0.0.12", "version_affected" : "=" }, { "version_value" : "7.0.0.13", "version_affected" : "=" }, { "version_value" : "7.0.0.14", "version_affected" : "=" }, { "version_value" : "7.0.0.15", "version_affected" : "=" }, { "version_value" : "7.0.0.16", "version_affected" : "=" }, { "version_value" : "7.0.0.17", "version_affected" : "=" }, { "version_value" : "7.0.0.18", "version_affected" : "=" }, { "version_value" : "7.0.0.19", "version_affected" : "=" }, { "version_value" : "7.0.0.21", "version_affected" : "=" }, { "version_value" : "7.0.0.22", "version_affected" : "=" }, { "version_value" : "7.0.0.23", "version_affected" : "=" }, { "version_value" : "7.0.0.24", "version_affected" : "=" }, { "version_value" : "7.0.0.25", "version_affected" : "=" }, { "version_value" : "7.0.0.27", "version_affected" : "=" }, { "version_value" : "8.0.0.0", "version_affected" : "=" }, { "version_value" : "8.0.0.1", "version_affected" : "=" }, { "version_value" : "8.0.0.2", "version_affected" : "=" }, { "version_value" : "8.0.0.3", "version_affected" : "=" }, { "version_value" : "8.0.0.4", "version_affected" : "=" }, { "version_value" : "8.0.0.5", "version_affected" : "=" }, { "version_value" : "8.0.0.6", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" }, { "version_value" : "8.5.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM85834", "name" : "PM85834", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM87131", "name" : "PM87131", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21644047", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21644047", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83609", "name" : "was-cve20130597-xss(83609)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.29, 8.0 before 8.0.0.7, and 8.5 before 8.5.5.0, when OAuth is used, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.5.0.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:8.0.0.6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_application_server:7.0.0.27:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-08-21T21:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0598", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "rational_clearquest", "version" : { "version_data" : [ { "version_value" : "7.1.1.1", "version_affected" : "=" }, { "version_value" : "7.1.1.2", "version_affected" : "=" }, { "version_value" : "7.1.1.3", "version_affected" : "=" }, { "version_value" : "7.1.1.4", "version_affected" : "=" }, { "version_value" : "7.1.1.5", "version_affected" : "=" }, { "version_value" : "7.1.1.6", "version_affected" : "=" }, { "version_value" : "7.1.1.7", "version_affected" : "=" }, { "version_value" : "7.1.1.8", "version_affected" : "=" }, { "version_value" : "7.1.2", "version_affected" : "=" }, { "version_value" : "7.1.2.1", "version_affected" : "=" }, { "version_value" : "7.1.2.2", "version_affected" : "=" }, { "version_value" : "7.1.2.3", "version_affected" : "=" }, { "version_value" : "7.1.2.4", "version_affected" : "=" }, { "version_value" : "7.1.2.5", "version_affected" : "=" }, { "version_value" : "7.1.2.6", "version_affected" : "=" }, { "version_value" : "7.1.2.7", "version_affected" : "=" }, { "version_value" : "7.1.2.8", "version_affected" : "=" }, { "version_value" : "7.1.2.9", "version_affected" : "=" }, { "version_value" : "7.1.2.10", "version_affected" : "=" }, { "version_value" : "7.1.2.11", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.0.0.1", "version_affected" : "=" }, { "version_value" : "8.0.0.2", "version_affected" : "=" }, { "version_value" : "8.0.0.3", "version_affected" : "=" }, { "version_value" : "8.0.0.4", "version_affected" : "=" }, { "version_value" : "8.0.0.5", "version_affected" : "=" }, { "version_value" : "8.0.0.6", "version_affected" : "=" }, { "version_value" : "8.0.0.7", "version_affected" : "=" }, { "version_value" : "8.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM88185", "name" : "PM88185", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21648665", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21648665", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83611", "name" : "clearquest-cve20130598-csrf(83611)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site request forgery (CSRF) vulnerability in the Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to hijack the authentication of arbitrary users." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_clearquest:7.1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_clearquest:7.1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_clearquest:7.1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_clearquest:7.1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_clearquest:7.1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_clearquest:7.1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_clearquest:7.1.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_clearquest:7.1.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_clearquest:7.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_clearquest:7.1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_clearquest:7.1.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_clearquest:7.1.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_clearquest:7.1.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_clearquest:7.1.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_clearquest:7.1.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_clearquest:7.1.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_clearquest:7.1.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_clearquest:7.1.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_clearquest:7.1.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_clearquest:7.1.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_clearquest:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_clearquest:8.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_clearquest:8.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_clearquest:8.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_clearquest:8.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_clearquest:8.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_clearquest:8.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_clearquest:8.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_clearquest:8.0.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-09-28T03:40Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0599", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "rational_directory_server", "version" : { "version_data" : [ { "version_value" : "5.1.1", "version_affected" : "=" }, { "version_value" : "5.1.1.1", "version_affected" : "=" }, { "version_value" : "5.1.1.2", "version_affected" : "<=" }, { "version_value" : "5.2", "version_affected" : "=" }, { "version_value" : "5.2.0.1", "version_affected" : "=" }, { "version_value" : "5.2.0.2", "version_affected" : "=" }, { "version_value" : "5.2.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/60107", "name" : "60107", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21637151", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21637151", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/83613", "name" : "ibm-iehs-cve20130599-info-disclosure(83613)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM Eclipse Help System (IEHS), as used in IBM Rational Directory Server 5.1.1 through 5.1.1.2 and 5.2 through 5.2.1 and other products, allows remote attackers to obtain sensitive information by providing a crafted parameter path and then reading the debug information associated with the 500 HTTP status code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_directory_server:5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_directory_server:5.1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_directory_server:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.1.1.2" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_directory_server:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_directory_server:5.2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_directory_server:5.2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_directory_server:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.2.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-05-28T16:55Z", "lastModifiedDate" : "2017-08-29T01:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0600", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "websphere_datapower_xc10_appliance", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "websphere_datapower_xc10_appliance_firmware", "version" : { "version_data" : [ { "version_value" : "2.0.0.0", "version_affected" : "=" }, { "version_value" : "2.0.0.1", "version_affected" : "=" }, { "version_value" : "2.0.0.2", "version_affected" : "=" }, { "version_value" : "2.0.0.3", "version_affected" : "=" }, { "version_value" : "2.1.0.0", "version_affected" : "=" }, { "version_value" : "2.1.0.1", "version_affected" : "=" }, { "version_value" : "2.1.0.2", "version_affected" : "=" }, { "version_value" : "2.1.0.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC91726", "name" : "IC91726", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21636324", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21636324", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability on IBM WebSphere DataPower XC10 Appliance devices 2.0 and 2.1 through 2.1 FP3 allows remote attackers to bypass authentication and perform administrative actions via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_xc10_appliance_firmware:2.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_xc10_appliance_firmware:2.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_xc10_appliance_firmware:2.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_xc10_appliance_firmware:2.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_xc10_appliance_firmware:2.1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_xc10_appliance_firmware:2.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_xc10_appliance_firmware:2.1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ibm:websphere_datapower_xc10_appliance_firmware:2.1.0.3:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:ibm:websphere_datapower_xc10_appliance:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-05-09T12:31Z", "lastModifiedDate" : "2013-05-09T12:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0601", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html", "name" : "SUSE-SU-2013:0044", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html", "name" : "SUSE-SU-2013:0047", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html", "name" : "openSUSE-SU-2013:0138", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html", "name" : "openSUSE-SU-2013:0193", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0150.html", "name" : "RHSA-2013:0150", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-03.xml", "name" : "GLSA-201308-03", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16380", "name" : "oval:org.mitre.oval:def:16380", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-1530, CVE-2013-0605, CVE-2013-0616, CVE-2013-0619, CVE-2013-0620, and CVE-2013-0623." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:11.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:11.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-10T11:56Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0602", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html", "name" : "SUSE-SU-2013:0044", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html", "name" : "SUSE-SU-2013:0047", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html", "name" : "openSUSE-SU-2013:0138", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html", "name" : "openSUSE-SU-2013:0193", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0150.html", "name" : "RHSA-2013:0150", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-03.xml", "name" : "GLSA-201308-03", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16449", "name" : "oval:org.mitre.oval:def:16449", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:11.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:11.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-10T11:56Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0603", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html", "name" : "SUSE-SU-2013:0044", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html", "name" : "SUSE-SU-2013:0047", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html", "name" : "openSUSE-SU-2013:0138", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html", "name" : "openSUSE-SU-2013:0193", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0150.html", "name" : "RHSA-2013:0150", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-03.xml", "name" : "GLSA-201308-03", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16200", "name" : "oval:org.mitre.oval:def:16200", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0604." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:11.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:11.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-10T11:56Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0604", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html", "name" : "SUSE-SU-2013:0044", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html", "name" : "SUSE-SU-2013:0047", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html", "name" : "openSUSE-SU-2013:0138", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html", "name" : "openSUSE-SU-2013:0193", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0150.html", "name" : "RHSA-2013:0150", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-03.xml", "name" : "GLSA-201308-03", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16008", "name" : "oval:org.mitre.oval:def:16008", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0603." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:11.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:11.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-10T11:56Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0605", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html", "name" : "SUSE-SU-2013:0044", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html", "name" : "SUSE-SU-2013:0047", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html", "name" : "openSUSE-SU-2013:0138", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html", "name" : "openSUSE-SU-2013:0193", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0150.html", "name" : "RHSA-2013:0150", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-03.xml", "name" : "GLSA-201308-03", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16266", "name" : "oval:org.mitre.oval:def:16266", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-1530, CVE-2013-0601, CVE-2013-0616, CVE-2013-0619, CVE-2013-0620, and CVE-2013-0623." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:11.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:11.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-10T11:56Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0606", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html", "name" : "SUSE-SU-2013:0044", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html", "name" : "SUSE-SU-2013:0047", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html", "name" : "openSUSE-SU-2013:0138", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html", "name" : "openSUSE-SU-2013:0193", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0150.html", "name" : "RHSA-2013:0150", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-03.xml", "name" : "GLSA-201308-03", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16196", "name" : "oval:org.mitre.oval:def:16196", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0612, CVE-2013-0615, CVE-2013-0617, and CVE-2013-0621." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:11.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:11.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-10T11:56Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0607", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html", "name" : "SUSE-SU-2013:0044", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html", "name" : "SUSE-SU-2013:0047", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html", "name" : "openSUSE-SU-2013:0138", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html", "name" : "openSUSE-SU-2013:0193", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0150.html", "name" : "RHSA-2013:0150", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-03.xml", "name" : "GLSA-201308-03", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15499", "name" : "oval:org.mitre.oval:def:15499", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code via unspecified vectors, related to a \"logic error,\" a different vulnerability than CVE-2013-0608, CVE-2013-0611, CVE-2013-0614, and CVE-2013-0618." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:11.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:11.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-10T11:56Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0608", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html", "name" : "SUSE-SU-2013:0044", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html", "name" : "SUSE-SU-2013:0047", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html", "name" : "openSUSE-SU-2013:0138", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html", "name" : "openSUSE-SU-2013:0193", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0150.html", "name" : "RHSA-2013:0150", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-03.xml", "name" : "GLSA-201308-03", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16037", "name" : "oval:org.mitre.oval:def:16037", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code via unspecified vectors, related to a \"logic error,\" a different vulnerability than CVE-2013-0607, CVE-2013-0611, CVE-2013-0614, and CVE-2013-0618." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:11.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:11.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-10T11:56Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0609", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-189" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html", "name" : "SUSE-SU-2013:0044", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html", "name" : "SUSE-SU-2013:0047", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html", "name" : "openSUSE-SU-2013:0138", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html", "name" : "openSUSE-SU-2013:0193", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0150.html", "name" : "RHSA-2013:0150", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-03.xml", "name" : "GLSA-201308-03", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16120", "name" : "oval:org.mitre.oval:def:16120", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0613." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:11.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:11.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-10T11:56Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0610", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html", "name" : "SUSE-SU-2013:0044", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html", "name" : "SUSE-SU-2013:0047", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html", "name" : "openSUSE-SU-2013:0138", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html", "name" : "openSUSE-SU-2013:0193", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0150.html", "name" : "RHSA-2013:0150", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-03.xml", "name" : "GLSA-201308-03", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16331", "name" : "oval:org.mitre.oval:def:16331", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0626." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:11.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:11.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-10T11:56Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0611", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html", "name" : "SUSE-SU-2013:0044", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html", "name" : "SUSE-SU-2013:0047", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html", "name" : "openSUSE-SU-2013:0138", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html", "name" : "openSUSE-SU-2013:0193", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0150.html", "name" : "RHSA-2013:0150", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-03.xml", "name" : "GLSA-201308-03", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16452", "name" : "oval:org.mitre.oval:def:16452", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code via unspecified vectors, related to a \"logic error,\" a different vulnerability than CVE-2013-0607, CVE-2013-0608, CVE-2013-0614, and CVE-2013-0618." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:11.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:11.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-10T11:56Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0612", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html", "name" : "SUSE-SU-2013:0044", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html", "name" : "SUSE-SU-2013:0047", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html", "name" : "openSUSE-SU-2013:0138", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html", "name" : "openSUSE-SU-2013:0193", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0150.html", "name" : "RHSA-2013:0150", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-03.xml", "name" : "GLSA-201308-03", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16295", "name" : "oval:org.mitre.oval:def:16295", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0606, CVE-2013-0615, CVE-2013-0617, and CVE-2013-0621." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:11.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:11.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-10T11:56Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0613", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-189" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html", "name" : "SUSE-SU-2013:0044", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html", "name" : "SUSE-SU-2013:0047", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html", "name" : "openSUSE-SU-2013:0138", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html", "name" : "openSUSE-SU-2013:0193", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0150.html", "name" : "RHSA-2013:0150", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-03.xml", "name" : "GLSA-201308-03", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16461", "name" : "oval:org.mitre.oval:def:16461", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0609." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:11.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:11.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-10T11:56Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0614", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html", "name" : "SUSE-SU-2013:0044", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html", "name" : "SUSE-SU-2013:0047", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html", "name" : "openSUSE-SU-2013:0138", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html", "name" : "openSUSE-SU-2013:0193", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0150.html", "name" : "RHSA-2013:0150", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-03.xml", "name" : "GLSA-201308-03", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16491", "name" : "oval:org.mitre.oval:def:16491", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code via unspecified vectors, related to a \"logic error,\" a different vulnerability than CVE-2013-0607, CVE-2013-0608, CVE-2013-0611, and CVE-2013-0618." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:11.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:11.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-10T11:56Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0615", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html", "name" : "SUSE-SU-2013:0044", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html", "name" : "SUSE-SU-2013:0047", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html", "name" : "openSUSE-SU-2013:0138", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html", "name" : "openSUSE-SU-2013:0193", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0150.html", "name" : "RHSA-2013:0150", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-03.xml", "name" : "GLSA-201308-03", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16290", "name" : "oval:org.mitre.oval:def:16290", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0606, CVE-2013-0612, CVE-2013-0617, and CVE-2013-0621." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:11.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:11.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-10T11:56Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0616", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html", "name" : "SUSE-SU-2013:0044", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html", "name" : "SUSE-SU-2013:0047", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html", "name" : "openSUSE-SU-2013:0138", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html", "name" : "openSUSE-SU-2013:0193", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0150.html", "name" : "RHSA-2013:0150", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-03.xml", "name" : "GLSA-201308-03", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16305", "name" : "oval:org.mitre.oval:def:16305", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-1530, CVE-2013-0601, CVE-2013-0605, CVE-2013-0619, CVE-2013-0620, and CVE-2013-0623." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:11.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:11.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-10T11:56Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0617", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html", "name" : "SUSE-SU-2013:0044", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html", "name" : "SUSE-SU-2013:0047", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html", "name" : "openSUSE-SU-2013:0138", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html", "name" : "openSUSE-SU-2013:0193", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0150.html", "name" : "RHSA-2013:0150", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-03.xml", "name" : "GLSA-201308-03", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16138", "name" : "oval:org.mitre.oval:def:16138", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0606, CVE-2013-0612, CVE-2013-0615, and CVE-2013-0621." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:11.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:11.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-10T11:56Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0618", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html", "name" : "SUSE-SU-2013:0044", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html", "name" : "SUSE-SU-2013:0047", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html", "name" : "openSUSE-SU-2013:0138", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html", "name" : "openSUSE-SU-2013:0193", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0150.html", "name" : "RHSA-2013:0150", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-03.xml", "name" : "GLSA-201308-03", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15822", "name" : "oval:org.mitre.oval:def:15822", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code via unspecified vectors, related to a \"logic error,\" a different vulnerability than CVE-2013-0607, CVE-2013-0608, CVE-2013-0611, and CVE-2013-0614." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:11.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:11.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-10T11:56Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0619", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html", "name" : "SUSE-SU-2013:0044", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html", "name" : "SUSE-SU-2013:0047", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html", "name" : "openSUSE-SU-2013:0138", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html", "name" : "openSUSE-SU-2013:0193", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0150.html", "name" : "RHSA-2013:0150", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-03.xml", "name" : "GLSA-201308-03", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16413", "name" : "oval:org.mitre.oval:def:16413", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-1530, CVE-2013-0601, CVE-2013-0605, CVE-2013-0616, CVE-2013-0620, and CVE-2013-0623." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:11.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:11.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-10T11:56Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0620", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html", "name" : "SUSE-SU-2013:0044", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html", "name" : "SUSE-SU-2013:0047", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html", "name" : "openSUSE-SU-2013:0138", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html", "name" : "openSUSE-SU-2013:0193", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0150.html", "name" : "RHSA-2013:0150", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-03.xml", "name" : "GLSA-201308-03", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16275", "name" : "oval:org.mitre.oval:def:16275", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-1530, CVE-2013-0601, CVE-2013-0605, CVE-2013-0616, CVE-2013-0619, and CVE-2013-0623." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:11.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:11.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-10T11:56Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0621", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html", "name" : "SUSE-SU-2013:0044", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html", "name" : "SUSE-SU-2013:0047", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html", "name" : "openSUSE-SU-2013:0138", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html", "name" : "openSUSE-SU-2013:0193", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0150.html", "name" : "RHSA-2013:0150", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-03.xml", "name" : "GLSA-201308-03", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16226", "name" : "oval:org.mitre.oval:def:16226", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0606, CVE-2013-0612, CVE-2013-0615, and CVE-2013-0617." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:11.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:11.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-10T11:56Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0622", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html", "name" : "SUSE-SU-2013:0044", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html", "name" : "SUSE-SU-2013:0047", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html", "name" : "openSUSE-SU-2013:0138", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html", "name" : "openSUSE-SU-2013:0193", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-03.xml", "name" : "GLSA-201308-03", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16484", "name" : "oval:org.mitre.oval:def:16484", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2013-0624." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.6:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:10.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:11.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:11.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-01-10T11:56Z", "lastModifiedDate" : "2017-09-19T01:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0623", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html", "name" : "SUSE-SU-2013:0044", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html", "name" : "SUSE-SU-2013:0047", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html", "name" : "openSUSE-SU-2013:0138", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html", "name" : "openSUSE-SU-2013:0193", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-0150.html", "name" : "RHSA-2013:0150", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201308-03.xml", "name" : "GLSA-201308-03", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb13-02.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15670", "name" : "oval:org.mitre.oval:def:15670", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-1530, CVE-2013-0601, CVE-2013-0605, CVE-2013-0616, CVE-2013-0619, and CVE-2013-0620." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:-:pro:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.4.5:-:*:*:*:*:*:*"