cpe:/a:gnu:gzip:1.2.4 cpe:/a:gnu:gzip:1.2.4a cpe:/a:gnu:gzip:1.3 cpe:/a:gnu:gzip:1.3.1 cpe:/a:gnu:gzip:1.3.2 cpe:/a:gnu:gzip:1.3.3 cpe:/a:gnu:gzip:1.3.4 cpe:/a:gnu:gzip:1.3.5 cpe:/a:gnu:gzip:1.3.6 cpe:/a:gnu:gzip:1.3.7 cpe:/a:gnu:gzip:1.3.8 cpe:/a:gnu:gzip:1.3.9 cpe:/a:gnu:gzip:1.3.10 cpe:/a:gnu:gzip:1.3.11 cpe:/a:gnu:gzip:1.3.12 cpe:/a:gnu:gzip:1.3.13

CVE-2010-0001

2010-01-29T13:30:00.947-05:00

2017-09-18T21:30:09.343-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://git.savannah.gnu.org/cgit/gzip.git/commit/?id=a3db5806d012082b9e25cc36d09f19cd736a468f HP SSRT100018 CONFIRM http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 APPLE APPLE-SA-2010-11-10-1 SUSE SUSE-SA:2010:008 CONFIRM http://ncompress.sourceforge.net/#status CONFIRM http://savannah.gnu.org/forum/forum.php?forum_id=6153 SECTRACK 1023490 CONFIRM http://support.apple.com/kb/HT4435 DEBIAN DSA-1974 DEBIAN DSA-2074 MANDRIVA MDVSA-2010:019 MANDRIVA MDVSA-2010:020 MANDRIVA MDVSA-2011:152 REDHAT RHSA-2010:0061 UBUNTU USN-889-1 VUPEN ADV-2010-0185 VUPEN ADV-2010-1796 VUPEN ADV-2010-1872 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=554418 REDHAT RHSA-2010:0095 Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted archive that uses LZW compression, leading to an array index error.

cpe:/a:gnu:bash:2.05:b cpe:/a:gnu:bash:3.0 cpe:/a:gnu:bash:3.2 cpe:/a:gnu:bash:3.2.48 cpe:/a:gnu:bash:4.0

CVE-2010-0002

2010-01-14T13:30:00.467-05:00

2011-08-08T00:00:00.000-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-01-15T09:31:00.000-05:00

MANDRIVA MDVSA-2010:004 CONFIRM https://qa.mandriva.com/show_bug.cgi?id=56882 The /etc/profile.d/60alias.sh script in the Mandriva bash package for Bash 2.05b, 3.0, 3.2, 3.2.48, and 4.0 enables the --show-control-chars option in LS_OPTIONS, which allows local users to send escape sequences to terminal emulators, or hide the existence of a file, via a crafted filename.

cpe:/o:debian:debian_linux:4.0 cpe:/o:debian:debian_linux:5.0 cpe:/o:linux:linux_kernel:- cpe:/o:linux:linux_kernel:1.2.0 cpe:/o:linux:linux_kernel:1.3.0 cpe:/o:linux:linux_kernel:2.0.0 cpe:/o:linux:linux_kernel:2.0.1 cpe:/o:linux:linux_kernel:2.0.2 cpe:/o:linux:linux_kernel:2.0.3 cpe:/o:linux:linux_kernel:2.0.4 cpe:/o:linux:linux_kernel:2.0.5 cpe:/o:linux:linux_kernel:2.0.6 cpe:/o:linux:linux_kernel:2.0.7 cpe:/o:linux:linux_kernel:2.0.8 cpe:/o:linux:linux_kernel:2.0.9 cpe:/o:linux:linux_kernel:2.0.10 cpe:/o:linux:linux_kernel:2.0.11 cpe:/o:linux:linux_kernel:2.0.12 cpe:/o:linux:linux_kernel:2.0.13 cpe:/o:linux:linux_kernel:2.0.14 cpe:/o:linux:linux_kernel:2.0.15 cpe:/o:linux:linux_kernel:2.0.16 cpe:/o:linux:linux_kernel:2.0.17 cpe:/o:linux:linux_kernel:2.0.18 cpe:/o:linux:linux_kernel:2.0.19 cpe:/o:linux:linux_kernel:2.0.20 cpe:/o:linux:linux_kernel:2.0.21 cpe:/o:linux:linux_kernel:2.0.22 cpe:/o:linux:linux_kernel:2.0.23 cpe:/o:linux:linux_kernel:2.0.24 cpe:/o:linux:linux_kernel:2.0.25 cpe:/o:linux:linux_kernel:2.0.26 cpe:/o:linux:linux_kernel:2.0.27 cpe:/o:linux:linux_kernel:2.0.28 cpe:/o:linux:linux_kernel:2.0.29 cpe:/o:linux:linux_kernel:2.0.30 cpe:/o:linux:linux_kernel:2.0.31 cpe:/o:linux:linux_kernel:2.0.32 cpe:/o:linux:linux_kernel:2.0.33 cpe:/o:linux:linux_kernel:2.0.34 cpe:/o:linux:linux_kernel:2.0.35 cpe:/o:linux:linux_kernel:2.0.36 cpe:/o:linux:linux_kernel:2.0.37 cpe:/o:linux:linux_kernel:2.0.38 cpe:/o:linux:linux_kernel:2.0.39 cpe:/o:linux:linux_kernel:2.1.0 cpe:/o:linux:linux_kernel:2.1.1 cpe:/o:linux:linux_kernel:2.1.2 cpe:/o:linux:linux_kernel:2.1.3 cpe:/o:linux:linux_kernel:2.1.4 cpe:/o:linux:linux_kernel:2.1.5 cpe:/o:linux:linux_kernel:2.1.6 cpe:/o:linux:linux_kernel:2.1.7 cpe:/o:linux:linux_kernel:2.1.8 cpe:/o:linux:linux_kernel:2.1.9 cpe:/o:linux:linux_kernel:2.1.10 cpe:/o:linux:linux_kernel:2.1.11 cpe:/o:linux:linux_kernel:2.1.12 cpe:/o:linux:linux_kernel:2.1.13 cpe:/o:linux:linux_kernel:2.1.14 cpe:/o:linux:linux_kernel:2.1.15 cpe:/o:linux:linux_kernel:2.1.16 cpe:/o:linux:linux_kernel:2.1.17 cpe:/o:linux:linux_kernel:2.1.18 cpe:/o:linux:linux_kernel:2.1.19 cpe:/o:linux:linux_kernel:2.1.20 cpe:/o:linux:linux_kernel:2.1.21 cpe:/o:linux:linux_kernel:2.1.22 cpe:/o:linux:linux_kernel:2.1.23 cpe:/o:linux:linux_kernel:2.1.24 cpe:/o:linux:linux_kernel:2.1.25 cpe:/o:linux:linux_kernel:2.1.26 cpe:/o:linux:linux_kernel:2.1.27 cpe:/o:linux:linux_kernel:2.1.28 cpe:/o:linux:linux_kernel:2.1.29 cpe:/o:linux:linux_kernel:2.1.30 cpe:/o:linux:linux_kernel:2.1.31 cpe:/o:linux:linux_kernel:2.1.32 cpe:/o:linux:linux_kernel:2.1.33 cpe:/o:linux:linux_kernel:2.1.34 cpe:/o:linux:linux_kernel:2.1.35 cpe:/o:linux:linux_kernel:2.1.36 cpe:/o:linux:linux_kernel:2.1.37 cpe:/o:linux:linux_kernel:2.1.38 cpe:/o:linux:linux_kernel:2.1.39 cpe:/o:linux:linux_kernel:2.1.40 cpe:/o:linux:linux_kernel:2.1.41 cpe:/o:linux:linux_kernel:2.1.42 cpe:/o:linux:linux_kernel:2.1.43 cpe:/o:linux:linux_kernel:2.1.44 cpe:/o:linux:linux_kernel:2.1.45 cpe:/o:linux:linux_kernel:2.1.46 cpe:/o:linux:linux_kernel:2.1.47 cpe:/o:linux:linux_kernel:2.1.48 cpe:/o:linux:linux_kernel:2.1.49 cpe:/o:linux:linux_kernel:2.1.50 cpe:/o:linux:linux_kernel:2.1.51 cpe:/o:linux:linux_kernel:2.1.52 cpe:/o:linux:linux_kernel:2.1.53 cpe:/o:linux:linux_kernel:2.1.54 cpe:/o:linux:linux_kernel:2.1.55 cpe:/o:linux:linux_kernel:2.1.56 cpe:/o:linux:linux_kernel:2.1.57 cpe:/o:linux:linux_kernel:2.1.58 cpe:/o:linux:linux_kernel:2.1.59 cpe:/o:linux:linux_kernel:2.1.60 cpe:/o:linux:linux_kernel:2.1.61 cpe:/o:linux:linux_kernel:2.1.62 cpe:/o:linux:linux_kernel:2.1.63 cpe:/o:linux:linux_kernel:2.1.64 cpe:/o:linux:linux_kernel:2.1.65 cpe:/o:linux:linux_kernel:2.1.66 cpe:/o:linux:linux_kernel:2.1.67 cpe:/o:linux:linux_kernel:2.1.68 cpe:/o:linux:linux_kernel:2.1.69 cpe:/o:linux:linux_kernel:2.1.70 cpe:/o:linux:linux_kernel:2.1.71 cpe:/o:linux:linux_kernel:2.1.72 cpe:/o:linux:linux_kernel:2.1.73 cpe:/o:linux:linux_kernel:2.1.74 cpe:/o:linux:linux_kernel:2.1.75 cpe:/o:linux:linux_kernel:2.1.76 cpe:/o:linux:linux_kernel:2.1.77 cpe:/o:linux:linux_kernel:2.1.78 cpe:/o:linux:linux_kernel:2.1.79 cpe:/o:linux:linux_kernel:2.1.80 cpe:/o:linux:linux_kernel:2.1.81 cpe:/o:linux:linux_kernel:2.1.82 cpe:/o:linux:linux_kernel:2.1.83 cpe:/o:linux:linux_kernel:2.1.84 cpe:/o:linux:linux_kernel:2.1.85 cpe:/o:linux:linux_kernel:2.1.86 cpe:/o:linux:linux_kernel:2.1.87 cpe:/o:linux:linux_kernel:2.1.88 cpe:/o:linux:linux_kernel:2.1.89 cpe:/o:linux:linux_kernel:2.1.90 cpe:/o:linux:linux_kernel:2.1.91 cpe:/o:linux:linux_kernel:2.1.92 cpe:/o:linux:linux_kernel:2.1.93 cpe:/o:linux:linux_kernel:2.1.94 cpe:/o:linux:linux_kernel:2.1.95 cpe:/o:linux:linux_kernel:2.1.96 cpe:/o:linux:linux_kernel:2.1.97 cpe:/o:linux:linux_kernel:2.1.98 cpe:/o:linux:linux_kernel:2.1.99 cpe:/o:linux:linux_kernel:2.1.100 cpe:/o:linux:linux_kernel:2.1.101 cpe:/o:linux:linux_kernel:2.1.102 cpe:/o:linux:linux_kernel:2.1.103 cpe:/o:linux:linux_kernel:2.1.104 cpe:/o:linux:linux_kernel:2.1.105 cpe:/o:linux:linux_kernel:2.1.106 cpe:/o:linux:linux_kernel:2.1.107 cpe:/o:linux:linux_kernel:2.1.108 cpe:/o:linux:linux_kernel:2.1.109 cpe:/o:linux:linux_kernel:2.1.110 cpe:/o:linux:linux_kernel:2.1.111 cpe:/o:linux:linux_kernel:2.1.112 cpe:/o:linux:linux_kernel:2.1.113 cpe:/o:linux:linux_kernel:2.1.114 cpe:/o:linux:linux_kernel:2.1.115 cpe:/o:linux:linux_kernel:2.1.116 cpe:/o:linux:linux_kernel:2.1.117 cpe:/o:linux:linux_kernel:2.1.118 cpe:/o:linux:linux_kernel:2.1.119 cpe:/o:linux:linux_kernel:2.1.120 cpe:/o:linux:linux_kernel:2.1.121 cpe:/o:linux:linux_kernel:2.1.122 cpe:/o:linux:linux_kernel:2.1.123 cpe:/o:linux:linux_kernel:2.1.124 cpe:/o:linux:linux_kernel:2.1.125 cpe:/o:linux:linux_kernel:2.1.126 cpe:/o:linux:linux_kernel:2.1.127 cpe:/o:linux:linux_kernel:2.1.128 cpe:/o:linux:linux_kernel:2.1.129 cpe:/o:linux:linux_kernel:2.1.130 cpe:/o:linux:linux_kernel:2.1.131 cpe:/o:linux:linux_kernel:2.1.132 cpe:/o:linux:linux_kernel:2.2.0 cpe:/o:linux:linux_kernel:2.2.1 cpe:/o:linux:linux_kernel:2.2.2 cpe:/o:linux:linux_kernel:2.2.3 cpe:/o:linux:linux_kernel:2.2.4 cpe:/o:linux:linux_kernel:2.2.4:rc1 cpe:/o:linux:linux_kernel:2.2.5 cpe:/o:linux:linux_kernel:2.2.6 cpe:/o:linux:linux_kernel:2.2.7 cpe:/o:linux:linux_kernel:2.2.8 cpe:/o:linux:linux_kernel:2.2.9 cpe:/o:linux:linux_kernel:2.2.10 cpe:/o:linux:linux_kernel:2.2.11 cpe:/o:linux:linux_kernel:2.2.12 cpe:/o:linux:linux_kernel:2.2.13 cpe:/o:linux:linux_kernel:2.2.13:pre15 cpe:/o:linux:linux_kernel:2.2.14 cpe:/o:linux:linux_kernel:2.2.15 cpe:/o:linux:linux_kernel:2.2.15:pre16 cpe:/o:linux:linux_kernel:2.2.16 cpe:/o:linux:linux_kernel:2.2.16:pre5 cpe:/o:linux:linux_kernel:2.2.16:pre6 cpe:/o:linux:linux_kernel:2.2.17 cpe:/o:linux:linux_kernel:2.2.17:pre14 cpe:/o:linux:linux_kernel:2.2.18 cpe:/o:linux:linux_kernel:2.2.19 cpe:/o:linux:linux_kernel:2.2.20 cpe:/o:linux:linux_kernel:2.2.21 cpe:/o:linux:linux_kernel:2.2.21:pre1 cpe:/o:linux:linux_kernel:2.2.21:pre2 cpe:/o:linux:linux_kernel:2.2.21:pre3 cpe:/o:linux:linux_kernel:2.2.21:pre4 cpe:/o:linux:linux_kernel:2.2.21:rc1 cpe:/o:linux:linux_kernel:2.2.21:rc2 cpe:/o:linux:linux_kernel:2.2.21:rc3 cpe:/o:linux:linux_kernel:2.2.21:rc4 cpe:/o:linux:linux_kernel:2.2.22 cpe:/o:linux:linux_kernel:2.2.22:rc1 cpe:/o:linux:linux_kernel:2.2.22:rc2 cpe:/o:linux:linux_kernel:2.2.22:rc3 cpe:/o:linux:linux_kernel:2.2.23 cpe:/o:linux:linux_kernel:2.2.23:rc1 cpe:/o:linux:linux_kernel:2.2.23:rc2 cpe:/o:linux:linux_kernel:2.2.24 cpe:/o:linux:linux_kernel:2.2.24:rc2 cpe:/o:linux:linux_kernel:2.2.24:rc3 cpe:/o:linux:linux_kernel:2.2.24:rc4 cpe:/o:linux:linux_kernel:2.2.24:rc5 cpe:/o:linux:linux_kernel:2.2.25 cpe:/o:linux:linux_kernel:2.2.26 cpe:/o:linux:linux_kernel:2.2.27:pre1 cpe:/o:linux:linux_kernel:2.2.27:pre2 cpe:/o:linux:linux_kernel:2.2.27:rc1 cpe:/o:linux:linux_kernel:2.2.27:rc2 cpe:/o:linux:linux_kernel:2.3.0 cpe:/o:linux:linux_kernel:2.3.1 cpe:/o:linux:linux_kernel:2.3.2 cpe:/o:linux:linux_kernel:2.3.3 cpe:/o:linux:linux_kernel:2.3.4 cpe:/o:linux:linux_kernel:2.3.5 cpe:/o:linux:linux_kernel:2.3.6 cpe:/o:linux:linux_kernel:2.3.7 cpe:/o:linux:linux_kernel:2.3.8 cpe:/o:linux:linux_kernel:2.3.9 cpe:/o:linux:linux_kernel:2.3.10 cpe:/o:linux:linux_kernel:2.3.11 cpe:/o:linux:linux_kernel:2.3.12 cpe:/o:linux:linux_kernel:2.3.13 cpe:/o:linux:linux_kernel:2.3.14 cpe:/o:linux:linux_kernel:2.3.15 cpe:/o:linux:linux_kernel:2.3.16 cpe:/o:linux:linux_kernel:2.3.17 cpe:/o:linux:linux_kernel:2.3.18 cpe:/o:linux:linux_kernel:2.3.19 cpe:/o:linux:linux_kernel:2.3.20 cpe:/o:linux:linux_kernel:2.3.21 cpe:/o:linux:linux_kernel:2.3.22 cpe:/o:linux:linux_kernel:2.3.23 cpe:/o:linux:linux_kernel:2.3.24 cpe:/o:linux:linux_kernel:2.3.25 cpe:/o:linux:linux_kernel:2.3.26 cpe:/o:linux:linux_kernel:2.3.27 cpe:/o:linux:linux_kernel:2.3.28 cpe:/o:linux:linux_kernel:2.3.29 cpe:/o:linux:linux_kernel:2.3.30 cpe:/o:linux:linux_kernel:2.3.31 cpe:/o:linux:linux_kernel:2.3.32 cpe:/o:linux:linux_kernel:2.3.33 cpe:/o:linux:linux_kernel:2.3.34 cpe:/o:linux:linux_kernel:2.3.35 cpe:/o:linux:linux_kernel:2.3.36 cpe:/o:linux:linux_kernel:2.3.37 cpe:/o:linux:linux_kernel:2.3.38 cpe:/o:linux:linux_kernel:2.3.39 cpe:/o:linux:linux_kernel:2.3.40 cpe:/o:linux:linux_kernel:2.3.41 cpe:/o:linux:linux_kernel:2.3.42 cpe:/o:linux:linux_kernel:2.3.43 cpe:/o:linux:linux_kernel:2.3.44 cpe:/o:linux:linux_kernel:2.3.45 cpe:/o:linux:linux_kernel:2.3.46 cpe:/o:linux:linux_kernel:2.3.47 cpe:/o:linux:linux_kernel:2.3.48 cpe:/o:linux:linux_kernel:2.3.49 cpe:/o:linux:linux_kernel:2.3.50 cpe:/o:linux:linux_kernel:2.3.51 cpe:/o:linux:linux_kernel:2.3.99 cpe:/o:linux:linux_kernel:2.3.99:pre1 cpe:/o:linux:linux_kernel:2.3.99:pre2 cpe:/o:linux:linux_kernel:2.3.99:pre3 cpe:/o:linux:linux_kernel:2.3.99:pre4 cpe:/o:linux:linux_kernel:2.3.99:pre5 cpe:/o:linux:linux_kernel:2.3.99:pre6 cpe:/o:linux:linux_kernel:2.3.99:pre7 cpe:/o:linux:linux_kernel:2.3.99:pre8 cpe:/o:linux:linux_kernel:2.3.99:pre9 cpe:/o:linux:linux_kernel:2.4.0 cpe:/o:linux:linux_kernel:2.4.0:test1 cpe:/o:linux:linux_kernel:2.4.0:test10 cpe:/o:linux:linux_kernel:2.4.0:test11 cpe:/o:linux:linux_kernel:2.4.0:test12 cpe:/o:linux:linux_kernel:2.4.0:test2 cpe:/o:linux:linux_kernel:2.4.0:test3 cpe:/o:linux:linux_kernel:2.4.0:test4 cpe:/o:linux:linux_kernel:2.4.0:test5 cpe:/o:linux:linux_kernel:2.4.0:test6 cpe:/o:linux:linux_kernel:2.4.0:test7 cpe:/o:linux:linux_kernel:2.4.0:test8 cpe:/o:linux:linux_kernel:2.4.0:test9 cpe:/o:linux:linux_kernel:2.4.1 cpe:/o:linux:linux_kernel:2.4.2 cpe:/o:linux:linux_kernel:2.4.3 cpe:/o:linux:linux_kernel:2.4.3:pre3 cpe:/o:linux:linux_kernel:2.4.4 cpe:/o:linux:linux_kernel:2.4.5 cpe:/o:linux:linux_kernel:2.4.6 cpe:/o:linux:linux_kernel:2.4.7 cpe:/o:linux:linux_kernel:2.4.8 cpe:/o:linux:linux_kernel:2.4.9 cpe:/o:linux:linux_kernel:2.4.10 cpe:/o:linux:linux_kernel:2.4.11 cpe:/o:linux:linux_kernel:2.4.11:pre3 cpe:/o:linux:linux_kernel:2.4.12 cpe:/o:linux:linux_kernel:2.4.13 cpe:/o:linux:linux_kernel:2.4.14 cpe:/o:linux:linux_kernel:2.4.15 cpe:/o:linux:linux_kernel:2.4.16 cpe:/o:linux:linux_kernel:2.4.17 cpe:/o:linux:linux_kernel:2.4.18 cpe:/o:linux:linux_kernel:2.4.18:pre1 cpe:/o:linux:linux_kernel:2.4.18:pre2 cpe:/o:linux:linux_kernel:2.4.18:pre3 cpe:/o:linux:linux_kernel:2.4.18:pre4 cpe:/o:linux:linux_kernel:2.4.18:pre5 cpe:/o:linux:linux_kernel:2.4.18:pre6 cpe:/o:linux:linux_kernel:2.4.18:pre7 cpe:/o:linux:linux_kernel:2.4.18:pre8 cpe:/o:linux:linux_kernel:2.4.18:pre9 cpe:/o:linux:linux_kernel:2.4.19 cpe:/o:linux:linux_kernel:2.4.19:pre1 cpe:/o:linux:linux_kernel:2.4.19:pre2 cpe:/o:linux:linux_kernel:2.4.19:pre3 cpe:/o:linux:linux_kernel:2.4.19:pre4 cpe:/o:linux:linux_kernel:2.4.19:pre5 cpe:/o:linux:linux_kernel:2.4.19:pre6 cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.4.21 cpe:/o:linux:linux_kernel:2.4.21:pre1 cpe:/o:linux:linux_kernel:2.4.21:pre4 cpe:/o:linux:linux_kernel:2.4.21:pre7 cpe:/o:linux:linux_kernel:2.4.22 cpe:/o:linux:linux_kernel:2.4.22:pre10 cpe:/o:linux:linux_kernel:2.4.23 cpe:/o:linux:linux_kernel:2.4.23:pre9 cpe:/o:linux:linux_kernel:2.4.24 cpe:/o:linux:linux_kernel:2.4.25 cpe:/o:linux:linux_kernel:2.4.26 cpe:/o:linux:linux_kernel:2.4.27 cpe:/o:linux:linux_kernel:2.4.27:pre1 cpe:/o:linux:linux_kernel:2.4.27:pre2 cpe:/o:linux:linux_kernel:2.4.27:pre3 cpe:/o:linux:linux_kernel:2.4.27:pre4 cpe:/o:linux:linux_kernel:2.4.27:pre5 cpe:/o:linux:linux_kernel:2.4.28 cpe:/o:linux:linux_kernel:2.4.29 cpe:/o:linux:linux_kernel:2.4.29:rc1 cpe:/o:linux:linux_kernel:2.4.29:rc2 cpe:/o:linux:linux_kernel:2.4.30 cpe:/o:linux:linux_kernel:2.4.30:rc2 cpe:/o:linux:linux_kernel:2.4.30:rc3 cpe:/o:linux:linux_kernel:2.4.31 cpe:/o:linux:linux_kernel:2.4.31:pre1 cpe:/o:linux:linux_kernel:2.4.32 cpe:/o:linux:linux_kernel:2.4.32:pre1 cpe:/o:linux:linux_kernel:2.4.32:pre2 cpe:/o:linux:linux_kernel:2.4.33 cpe:/o:linux:linux_kernel:2.4.33:pre1 cpe:/o:linux:linux_kernel:2.4.33.1 cpe:/o:linux:linux_kernel:2.4.33.2 cpe:/o:linux:linux_kernel:2.4.33.3 cpe:/o:linux:linux_kernel:2.4.33.4 cpe:/o:linux:linux_kernel:2.4.33.5 cpe:/o:linux:linux_kernel:2.4.34 cpe:/o:linux:linux_kernel:2.4.34:rc3 cpe:/o:linux:linux_kernel:2.4.34.1 cpe:/o:linux:linux_kernel:2.4.34.2 cpe:/o:linux:linux_kernel:2.4.35 cpe:/o:linux:linux_kernel:2.4.35.2 cpe:/o:linux:linux_kernel:2.5.0 cpe:/o:linux:linux_kernel:2.5.1 cpe:/o:linux:linux_kernel:2.5.2 cpe:/o:linux:linux_kernel:2.5.3 cpe:/o:linux:linux_kernel:2.5.4 cpe:/o:linux:linux_kernel:2.5.5 cpe:/o:linux:linux_kernel:2.5.6 cpe:/o:linux:linux_kernel:2.5.7 cpe:/o:linux:linux_kernel:2.5.8 cpe:/o:linux:linux_kernel:2.5.9 cpe:/o:linux:linux_kernel:2.5.10 cpe:/o:linux:linux_kernel:2.5.11 cpe:/o:linux:linux_kernel:2.5.12 cpe:/o:linux:linux_kernel:2.5.13 cpe:/o:linux:linux_kernel:2.5.14 cpe:/o:linux:linux_kernel:2.5.15 cpe:/o:linux:linux_kernel:2.5.16 cpe:/o:linux:linux_kernel:2.5.17 cpe:/o:linux:linux_kernel:2.5.18 cpe:/o:linux:linux_kernel:2.5.19 cpe:/o:linux:linux_kernel:2.5.20 cpe:/o:linux:linux_kernel:2.5.21 cpe:/o:linux:linux_kernel:2.5.22 cpe:/o:linux:linux_kernel:2.5.23 cpe:/o:linux:linux_kernel:2.5.24 cpe:/o:linux:linux_kernel:2.5.25 cpe:/o:linux:linux_kernel:2.5.26 cpe:/o:linux:linux_kernel:2.5.27 cpe:/o:linux:linux_kernel:2.5.28 cpe:/o:linux:linux_kernel:2.5.29 cpe:/o:linux:linux_kernel:2.5.30 cpe:/o:linux:linux_kernel:2.5.31 cpe:/o:linux:linux_kernel:2.5.32 cpe:/o:linux:linux_kernel:2.5.33 cpe:/o:linux:linux_kernel:2.5.34 cpe:/o:linux:linux_kernel:2.5.35 cpe:/o:linux:linux_kernel:2.5.36 cpe:/o:linux:linux_kernel:2.5.37 cpe:/o:linux:linux_kernel:2.5.38 cpe:/o:linux:linux_kernel:2.5.39 cpe:/o:linux:linux_kernel:2.5.40 cpe:/o:linux:linux_kernel:2.5.41 cpe:/o:linux:linux_kernel:2.5.42 cpe:/o:linux:linux_kernel:2.5.43 cpe:/o:linux:linux_kernel:2.5.44 cpe:/o:linux:linux_kernel:2.5.45 cpe:/o:linux:linux_kernel:2.5.46 cpe:/o:linux:linux_kernel:2.5.47 cpe:/o:linux:linux_kernel:2.5.48 cpe:/o:linux:linux_kernel:2.5.49 cpe:/o:linux:linux_kernel:2.5.50 cpe:/o:linux:linux_kernel:2.5.51 cpe:/o:linux:linux_kernel:2.5.52 cpe:/o:linux:linux_kernel:2.5.53 cpe:/o:linux:linux_kernel:2.5.54 cpe:/o:linux:linux_kernel:2.5.55 cpe:/o:linux:linux_kernel:2.5.56 cpe:/o:linux:linux_kernel:2.5.57 cpe:/o:linux:linux_kernel:2.5.58 cpe:/o:linux:linux_kernel:2.5.59 cpe:/o:linux:linux_kernel:2.5.60 cpe:/o:linux:linux_kernel:2.5.61 cpe:/o:linux:linux_kernel:2.5.62 cpe:/o:linux:linux_kernel:2.5.63 cpe:/o:linux:linux_kernel:2.5.64 cpe:/o:linux:linux_kernel:2.5.65 cpe:/o:linux:linux_kernel:2.5.66 cpe:/o:linux:linux_kernel:2.5.67 cpe:/o:linux:linux_kernel:2.5.68 cpe:/o:linux:linux_kernel:2.5.69 cpe:/o:linux:linux_kernel:2.5.75 cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.0:test1 cpe:/o:linux:linux_kernel:2.6.0:test10 cpe:/o:linux:linux_kernel:2.6.0:test11 cpe:/o:linux:linux_kernel:2.6.0:test2 cpe:/o:linux:linux_kernel:2.6.0:test3 cpe:/o:linux:linux_kernel:2.6.0:test4 cpe:/o:linux:linux_kernel:2.6.0:test5 cpe:/o:linux:linux_kernel:2.6.0:test6 cpe:/o:linux:linux_kernel:2.6.0:test7 cpe:/o:linux:linux_kernel:2.6.0:test8 cpe:/o:linux:linux_kernel:2.6.0:test9 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.1:rc1 cpe:/o:linux:linux_kernel:2.6.1:rc2 cpe:/o:linux:linux_kernel:2.6.1:rc3 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.2:rc1 cpe:/o:linux:linux_kernel:2.6.2:rc2 cpe:/o:linux:linux_kernel:2.6.2:rc3 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.3:rc1 cpe:/o:linux:linux_kernel:2.6.3:rc2 cpe:/o:linux:linux_kernel:2.6.3:rc3 cpe:/o:linux:linux_kernel:2.6.3:rc4 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.4:rc1 cpe:/o:linux:linux_kernel:2.6.4:rc2 cpe:/o:linux:linux_kernel:2.6.4:rc3 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.5:rc1 cpe:/o:linux:linux_kernel:2.6.5:rc2 cpe:/o:linux:linux_kernel:2.6.5:rc3 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.6:rc1 cpe:/o:linux:linux_kernel:2.6.6:rc2 cpe:/o:linux:linux_kernel:2.6.6:rc3 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.7:rc1 cpe:/o:linux:linux_kernel:2.6.7:rc2 cpe:/o:linux:linux_kernel:2.6.7:rc3 cpe:/o:linux:linux_kernel:2.6.8 cpe:/o:linux:linux_kernel:2.6.8:rc1 cpe:/o:linux:linux_kernel:2.6.8:rc2 cpe:/o:linux:linux_kernel:2.6.8:rc3 cpe:/o:linux:linux_kernel:2.6.8:rc4 cpe:/o:linux:linux_kernel:2.6.8.1 cpe:/o:linux:linux_kernel:2.6.9 cpe:/o:linux:linux_kernel:2.6.9:final cpe:/o:linux:linux_kernel:2.6.9:rc1 cpe:/o:linux:linux_kernel:2.6.9:rc2 cpe:/o:linux:linux_kernel:2.6.9:rc3 cpe:/o:linux:linux_kernel:2.6.9:rc4 cpe:/o:linux:linux_kernel:2.6.10 cpe:/o:linux:linux_kernel:2.6.10:rc1 cpe:/o:linux:linux_kernel:2.6.10:rc2 cpe:/o:linux:linux_kernel:2.6.10:rc3 cpe:/o:linux:linux_kernel:2.6.11 cpe:/o:linux:linux_kernel:2.6.11:rc1 cpe:/o:linux:linux_kernel:2.6.11:rc2 cpe:/o:linux:linux_kernel:2.6.11:rc3 cpe:/o:linux:linux_kernel:2.6.11:rc4 cpe:/o:linux:linux_kernel:2.6.11:rc5 cpe:/o:linux:linux_kernel:2.6.11.1 cpe:/o:linux:linux_kernel:2.6.11.2 cpe:/o:linux:linux_kernel:2.6.11.3 cpe:/o:linux:linux_kernel:2.6.11.4 cpe:/o:linux:linux_kernel:2.6.11.5 cpe:/o:linux:linux_kernel:2.6.11.6 cpe:/o:linux:linux_kernel:2.6.11.7 cpe:/o:linux:linux_kernel:2.6.11.8 cpe:/o:linux:linux_kernel:2.6.11.9 cpe:/o:linux:linux_kernel:2.6.11.10 cpe:/o:linux:linux_kernel:2.6.11.11 cpe:/o:linux:linux_kernel:2.6.11.12 cpe:/o:linux:linux_kernel:2.6.12 cpe:/o:linux:linux_kernel:2.6.12:rc1 cpe:/o:linux:linux_kernel:2.6.12:rc2 cpe:/o:linux:linux_kernel:2.6.12:rc3 cpe:/o:linux:linux_kernel:2.6.12:rc4 cpe:/o:linux:linux_kernel:2.6.12:rc5 cpe:/o:linux:linux_kernel:2.6.12:rc6 cpe:/o:linux:linux_kernel:2.6.12.1 cpe:/o:linux:linux_kernel:2.6.12.2 cpe:/o:linux:linux_kernel:2.6.12.3 cpe:/o:linux:linux_kernel:2.6.12.4 cpe:/o:linux:linux_kernel:2.6.12.5 cpe:/o:linux:linux_kernel:2.6.12.6 cpe:/o:linux:linux_kernel:2.6.13 cpe:/o:linux:linux_kernel:2.6.13:rc1 cpe:/o:linux:linux_kernel:2.6.13:rc2 cpe:/o:linux:linux_kernel:2.6.13:rc3 cpe:/o:linux:linux_kernel:2.6.13:rc4 cpe:/o:linux:linux_kernel:2.6.13:rc5 cpe:/o:linux:linux_kernel:2.6.13:rc6 cpe:/o:linux:linux_kernel:2.6.13:rc7 cpe:/o:linux:linux_kernel:2.6.13.1 cpe:/o:linux:linux_kernel:2.6.13.2 cpe:/o:linux:linux_kernel:2.6.13.3 cpe:/o:linux:linux_kernel:2.6.13.4 cpe:/o:linux:linux_kernel:2.6.13.5 cpe:/o:linux:linux_kernel:2.6.14 cpe:/o:linux:linux_kernel:2.6.14:rc1 cpe:/o:linux:linux_kernel:2.6.14:rc2 cpe:/o:linux:linux_kernel:2.6.14:rc3 cpe:/o:linux:linux_kernel:2.6.14:rc4 cpe:/o:linux:linux_kernel:2.6.14:rc5 cpe:/o:linux:linux_kernel:2.6.14.1 cpe:/o:linux:linux_kernel:2.6.14.2 cpe:/o:linux:linux_kernel:2.6.14.3 cpe:/o:linux:linux_kernel:2.6.14.4 cpe:/o:linux:linux_kernel:2.6.14.5 cpe:/o:linux:linux_kernel:2.6.14.6 cpe:/o:linux:linux_kernel:2.6.14.7 cpe:/o:linux:linux_kernel:2.6.15 cpe:/o:linux:linux_kernel:2.6.15:rc1 cpe:/o:linux:linux_kernel:2.6.15:rc2 cpe:/o:linux:linux_kernel:2.6.15:rc3 cpe:/o:linux:linux_kernel:2.6.15:rc4 cpe:/o:linux:linux_kernel:2.6.15:rc5 cpe:/o:linux:linux_kernel:2.6.15:rc6 cpe:/o:linux:linux_kernel:2.6.15:rc7 cpe:/o:linux:linux_kernel:2.6.15.1 cpe:/o:linux:linux_kernel:2.6.15.2 cpe:/o:linux:linux_kernel:2.6.15.3 cpe:/o:linux:linux_kernel:2.6.15.4 cpe:/o:linux:linux_kernel:2.6.15.5 cpe:/o:linux:linux_kernel:2.6.15.6 cpe:/o:linux:linux_kernel:2.6.15.7 cpe:/o:linux:linux_kernel:2.6.15.8 cpe:/o:linux:linux_kernel:2.6.15.9 cpe:/o:linux:linux_kernel:2.6.15.10 cpe:/o:linux:linux_kernel:2.6.15.11 cpe:/o:linux:linux_kernel:2.6.16 cpe:/o:linux:linux_kernel:2.6.16:rc1 cpe:/o:linux:linux_kernel:2.6.16:rc2 cpe:/o:linux:linux_kernel:2.6.16:rc3 cpe:/o:linux:linux_kernel:2.6.16:rc4 cpe:/o:linux:linux_kernel:2.6.16:rc5 cpe:/o:linux:linux_kernel:2.6.16:rc6 cpe:/o:linux:linux_kernel:2.6.16:rc7 cpe:/o:linux:linux_kernel:2.6.16.1 cpe:/o:linux:linux_kernel:2.6.16.2 cpe:/o:linux:linux_kernel:2.6.16.3 cpe:/o:linux:linux_kernel:2.6.16.4 cpe:/o:linux:linux_kernel:2.6.16.5 cpe:/o:linux:linux_kernel:2.6.16.6 cpe:/o:linux:linux_kernel:2.6.16.7 cpe:/o:linux:linux_kernel:2.6.16.8 cpe:/o:linux:linux_kernel:2.6.16.9 cpe:/o:linux:linux_kernel:2.6.16.10 cpe:/o:linux:linux_kernel:2.6.16.11 cpe:/o:linux:linux_kernel:2.6.16.12 cpe:/o:linux:linux_kernel:2.6.16.13 cpe:/o:linux:linux_kernel:2.6.16.14 cpe:/o:linux:linux_kernel:2.6.16.15 cpe:/o:linux:linux_kernel:2.6.16.16 cpe:/o:linux:linux_kernel:2.6.16.17 cpe:/o:linux:linux_kernel:2.6.16.18 cpe:/o:linux:linux_kernel:2.6.16.19 cpe:/o:linux:linux_kernel:2.6.16.20 cpe:/o:linux:linux_kernel:2.6.16.21 cpe:/o:linux:linux_kernel:2.6.16.22 cpe:/o:linux:linux_kernel:2.6.16.23 cpe:/o:linux:linux_kernel:2.6.16.24 cpe:/o:linux:linux_kernel:2.6.16.25 cpe:/o:linux:linux_kernel:2.6.16.26 cpe:/o:linux:linux_kernel:2.6.16.27 cpe:/o:linux:linux_kernel:2.6.16.28 cpe:/o:linux:linux_kernel:2.6.16.29 cpe:/o:linux:linux_kernel:2.6.16.30 cpe:/o:linux:linux_kernel:2.6.16.31 cpe:/o:linux:linux_kernel:2.6.16.32 cpe:/o:linux:linux_kernel:2.6.16.33 cpe:/o:linux:linux_kernel:2.6.16.34 cpe:/o:linux:linux_kernel:2.6.16.35 cpe:/o:linux:linux_kernel:2.6.16.36 cpe:/o:linux:linux_kernel:2.6.16.37 cpe:/o:linux:linux_kernel:2.6.16.38 cpe:/o:linux:linux_kernel:2.6.16.39 cpe:/o:linux:linux_kernel:2.6.16.40 cpe:/o:linux:linux_kernel:2.6.16.41 cpe:/o:linux:linux_kernel:2.6.16.42 cpe:/o:linux:linux_kernel:2.6.16.43 cpe:/o:linux:linux_kernel:2.6.16.44 cpe:/o:linux:linux_kernel:2.6.16.45 cpe:/o:linux:linux_kernel:2.6.16.46 cpe:/o:linux:linux_kernel:2.6.16.47 cpe:/o:linux:linux_kernel:2.6.16.48 cpe:/o:linux:linux_kernel:2.6.16.49 cpe:/o:linux:linux_kernel:2.6.16.50 cpe:/o:linux:linux_kernel:2.6.16.51 cpe:/o:linux:linux_kernel:2.6.16.52 cpe:/o:linux:linux_kernel:2.6.16.53 cpe:/o:linux:linux_kernel:2.6.16.54 cpe:/o:linux:linux_kernel:2.6.16.55 cpe:/o:linux:linux_kernel:2.6.16.56 cpe:/o:linux:linux_kernel:2.6.16.57 cpe:/o:linux:linux_kernel:2.6.16.58 cpe:/o:linux:linux_kernel:2.6.16.59 cpe:/o:linux:linux_kernel:2.6.16.60 cpe:/o:linux:linux_kernel:2.6.16.61 cpe:/o:linux:linux_kernel:2.6.16.62 cpe:/o:linux:linux_kernel:2.6.17 cpe:/o:linux:linux_kernel:2.6.17:rc1 cpe:/o:linux:linux_kernel:2.6.17:rc2 cpe:/o:linux:linux_kernel:2.6.17:rc3 cpe:/o:linux:linux_kernel:2.6.17:rc4 cpe:/o:linux:linux_kernel:2.6.17:rc5 cpe:/o:linux:linux_kernel:2.6.17:rc6 cpe:/o:linux:linux_kernel:2.6.17.1 cpe:/o:linux:linux_kernel:2.6.17.2 cpe:/o:linux:linux_kernel:2.6.17.3 cpe:/o:linux:linux_kernel:2.6.17.4 cpe:/o:linux:linux_kernel:2.6.17.5 cpe:/o:linux:linux_kernel:2.6.17.6 cpe:/o:linux:linux_kernel:2.6.17.7 cpe:/o:linux:linux_kernel:2.6.17.8 cpe:/o:linux:linux_kernel:2.6.17.9 cpe:/o:linux:linux_kernel:2.6.17.10 cpe:/o:linux:linux_kernel:2.6.17.11 cpe:/o:linux:linux_kernel:2.6.17.12 cpe:/o:linux:linux_kernel:2.6.17.13 cpe:/o:linux:linux_kernel:2.6.17.14 cpe:/o:linux:linux_kernel:2.6.18 cpe:/o:linux:linux_kernel:2.6.18:rc1 cpe:/o:linux:linux_kernel:2.6.18:rc2 cpe:/o:linux:linux_kernel:2.6.18:rc3 cpe:/o:linux:linux_kernel:2.6.18:rc4 cpe:/o:linux:linux_kernel:2.6.18:rc5 cpe:/o:linux:linux_kernel:2.6.18:rc6 cpe:/o:linux:linux_kernel:2.6.18:rc7 cpe:/o:linux:linux_kernel:2.6.18.1 cpe:/o:linux:linux_kernel:2.6.18.2 cpe:/o:linux:linux_kernel:2.6.18.3 cpe:/o:linux:linux_kernel:2.6.18.4 cpe:/o:linux:linux_kernel:2.6.18.5 cpe:/o:linux:linux_kernel:2.6.18.6 cpe:/o:linux:linux_kernel:2.6.18.7 cpe:/o:linux:linux_kernel:2.6.18.8 cpe:/o:linux:linux_kernel:2.6.19 cpe:/o:linux:linux_kernel:2.6.19:rc1 cpe:/o:linux:linux_kernel:2.6.19:rc2 cpe:/o:linux:linux_kernel:2.6.19:rc3 cpe:/o:linux:linux_kernel:2.6.19:rc4 cpe:/o:linux:linux_kernel:2.6.19:rc5 cpe:/o:linux:linux_kernel:2.6.19:rc6 cpe:/o:linux:linux_kernel:2.6.19.0 cpe:/o:linux:linux_kernel:2.6.19.1 cpe:/o:linux:linux_kernel:2.6.19.2 cpe:/o:linux:linux_kernel:2.6.19.3 cpe:/o:linux:linux_kernel:2.6.19.4 cpe:/o:linux:linux_kernel:2.6.19.5 cpe:/o:linux:linux_kernel:2.6.19.6 cpe:/o:linux:linux_kernel:2.6.19.7 cpe:/o:linux:linux_kernel:2.6.20 cpe:/o:linux:linux_kernel:2.6.20:rc1 cpe:/o:linux:linux_kernel:2.6.20:rc2 cpe:/o:linux:linux_kernel:2.6.20:rc3 cpe:/o:linux:linux_kernel:2.6.20:rc4 cpe:/o:linux:linux_kernel:2.6.20:rc5 cpe:/o:linux:linux_kernel:2.6.20:rc6 cpe:/o:linux:linux_kernel:2.6.20:rc7 cpe:/o:linux:linux_kernel:2.6.20.1 cpe:/o:linux:linux_kernel:2.6.20.2 cpe:/o:linux:linux_kernel:2.6.20.3 cpe:/o:linux:linux_kernel:2.6.20.4 cpe:/o:linux:linux_kernel:2.6.20.5 cpe:/o:linux:linux_kernel:2.6.20.6 cpe:/o:linux:linux_kernel:2.6.20.7 cpe:/o:linux:linux_kernel:2.6.20.8 cpe:/o:linux:linux_kernel:2.6.20.9 cpe:/o:linux:linux_kernel:2.6.20.10 cpe:/o:linux:linux_kernel:2.6.20.11 cpe:/o:linux:linux_kernel:2.6.20.12 cpe:/o:linux:linux_kernel:2.6.20.13 cpe:/o:linux:linux_kernel:2.6.20.14 cpe:/o:linux:linux_kernel:2.6.20.15 cpe:/o:linux:linux_kernel:2.6.20.16 cpe:/o:linux:linux_kernel:2.6.20.17 cpe:/o:linux:linux_kernel:2.6.20.18 cpe:/o:linux:linux_kernel:2.6.20.19 cpe:/o:linux:linux_kernel:2.6.20.20 cpe:/o:linux:linux_kernel:2.6.20.21 cpe:/o:linux:linux_kernel:2.6.21 cpe:/o:linux:linux_kernel:2.6.21:git1 cpe:/o:linux:linux_kernel:2.6.21:git2 cpe:/o:linux:linux_kernel:2.6.21:git3 cpe:/o:linux:linux_kernel:2.6.21:git4 cpe:/o:linux:linux_kernel:2.6.21:git5 cpe:/o:linux:linux_kernel:2.6.21:git6 cpe:/o:linux:linux_kernel:2.6.21:git7 cpe:/o:linux:linux_kernel:2.6.21:rc1 cpe:/o:linux:linux_kernel:2.6.21:rc2 cpe:/o:linux:linux_kernel:2.6.21:rc3 cpe:/o:linux:linux_kernel:2.6.21:rc4 cpe:/o:linux:linux_kernel:2.6.21:rc5 cpe:/o:linux:linux_kernel:2.6.21:rc6 cpe:/o:linux:linux_kernel:2.6.21:rc7 cpe:/o:linux:linux_kernel:2.6.21.1 cpe:/o:linux:linux_kernel:2.6.21.2 cpe:/o:linux:linux_kernel:2.6.21.3 cpe:/o:linux:linux_kernel:2.6.21.4 cpe:/o:linux:linux_kernel:2.6.21.5 cpe:/o:linux:linux_kernel:2.6.21.6 cpe:/o:linux:linux_kernel:2.6.21.7 cpe:/o:linux:linux_kernel:2.6.22 cpe:/o:linux:linux_kernel:2.6.22:rc1 cpe:/o:linux:linux_kernel:2.6.22:rc2 cpe:/o:linux:linux_kernel:2.6.22:rc3 cpe:/o:linux:linux_kernel:2.6.22:rc4 cpe:/o:linux:linux_kernel:2.6.22:rc5 cpe:/o:linux:linux_kernel:2.6.22:rc6 cpe:/o:linux:linux_kernel:2.6.22:rc7 cpe:/o:linux:linux_kernel:2.6.22.1 cpe:/o:linux:linux_kernel:2.6.22.2 cpe:/o:linux:linux_kernel:2.6.22.3 cpe:/o:linux:linux_kernel:2.6.22.4 cpe:/o:linux:linux_kernel:2.6.22.5 cpe:/o:linux:linux_kernel:2.6.22.6 cpe:/o:linux:linux_kernel:2.6.22.7 cpe:/o:linux:linux_kernel:2.6.22.8 cpe:/o:linux:linux_kernel:2.6.22.9 cpe:/o:linux:linux_kernel:2.6.22.10 cpe:/o:linux:linux_kernel:2.6.22.11 cpe:/o:linux:linux_kernel:2.6.22.12 cpe:/o:linux:linux_kernel:2.6.22.13 cpe:/o:linux:linux_kernel:2.6.22.14 cpe:/o:linux:linux_kernel:2.6.22.15 cpe:/o:linux:linux_kernel:2.6.22.16 cpe:/o:linux:linux_kernel:2.6.22.17 cpe:/o:linux:linux_kernel:2.6.22.18 cpe:/o:linux:linux_kernel:2.6.22.19 cpe:/o:linux:linux_kernel:2.6.22.20 cpe:/o:linux:linux_kernel:2.6.22.21 cpe:/o:linux:linux_kernel:2.6.22.22 cpe:/o:linux:linux_kernel:2.6.23 cpe:/o:linux:linux_kernel:2.6.23:rc1 cpe:/o:linux:linux_kernel:2.6.23:rc2 cpe:/o:linux:linux_kernel:2.6.23:rc3 cpe:/o:linux:linux_kernel:2.6.23:rc4 cpe:/o:linux:linux_kernel:2.6.23:rc5 cpe:/o:linux:linux_kernel:2.6.23:rc6 cpe:/o:linux:linux_kernel:2.6.23:rc7 cpe:/o:linux:linux_kernel:2.6.23:rc8 cpe:/o:linux:linux_kernel:2.6.23:rc9 cpe:/o:linux:linux_kernel:2.6.23.1 cpe:/o:linux:linux_kernel:2.6.23.2 cpe:/o:linux:linux_kernel:2.6.23.3 cpe:/o:linux:linux_kernel:2.6.23.4 cpe:/o:linux:linux_kernel:2.6.23.5 cpe:/o:linux:linux_kernel:2.6.23.6 cpe:/o:linux:linux_kernel:2.6.23.7 cpe:/o:linux:linux_kernel:2.6.23.8 cpe:/o:linux:linux_kernel:2.6.23.9 cpe:/o:linux:linux_kernel:2.6.23.10 cpe:/o:linux:linux_kernel:2.6.23.11 cpe:/o:linux:linux_kernel:2.6.23.12 cpe:/o:linux:linux_kernel:2.6.23.13 cpe:/o:linux:linux_kernel:2.6.23.14 cpe:/o:linux:linux_kernel:2.6.23.15 cpe:/o:linux:linux_kernel:2.6.23.16 cpe:/o:linux:linux_kernel:2.6.23.17 cpe:/o:linux:linux_kernel:2.6.24 cpe:/o:linux:linux_kernel:2.6.24:rc1 cpe:/o:linux:linux_kernel:2.6.24:rc2 cpe:/o:linux:linux_kernel:2.6.24:rc3 cpe:/o:linux:linux_kernel:2.6.24:rc4 cpe:/o:linux:linux_kernel:2.6.24:rc5 cpe:/o:linux:linux_kernel:2.6.24:rc6 cpe:/o:linux:linux_kernel:2.6.24:rc7 cpe:/o:linux:linux_kernel:2.6.24:rc8 cpe:/o:linux:linux_kernel:2.6.24.1 cpe:/o:linux:linux_kernel:2.6.24.2 cpe:/o:linux:linux_kernel:2.6.24.3 cpe:/o:linux:linux_kernel:2.6.24.4 cpe:/o:linux:linux_kernel:2.6.24.5 cpe:/o:linux:linux_kernel:2.6.24.6 cpe:/o:linux:linux_kernel:2.6.24.7 cpe:/o:linux:linux_kernel:2.6.25 cpe:/o:linux:linux_kernel:2.6.25:rc1 cpe:/o:linux:linux_kernel:2.6.25:rc2 cpe:/o:linux:linux_kernel:2.6.25:rc3 cpe:/o:linux:linux_kernel:2.6.25:rc4 cpe:/o:linux:linux_kernel:2.6.25:rc5 cpe:/o:linux:linux_kernel:2.6.25:rc6 cpe:/o:linux:linux_kernel:2.6.25:rc7 cpe:/o:linux:linux_kernel:2.6.25:rc8 cpe:/o:linux:linux_kernel:2.6.25:rc9 cpe:/o:linux:linux_kernel:2.6.25.1 cpe:/o:linux:linux_kernel:2.6.25.2 cpe:/o:linux:linux_kernel:2.6.25.3 cpe:/o:linux:linux_kernel:2.6.25.4 cpe:/o:linux:linux_kernel:2.6.25.5 cpe:/o:linux:linux_kernel:2.6.25.6 cpe:/o:linux:linux_kernel:2.6.25.7 cpe:/o:linux:linux_kernel:2.6.25.8 cpe:/o:linux:linux_kernel:2.6.25.9 cpe:/o:linux:linux_kernel:2.6.25.10 cpe:/o:linux:linux_kernel:2.6.25.11 cpe:/o:linux:linux_kernel:2.6.25.12 cpe:/o:linux:linux_kernel:2.6.25.13 cpe:/o:linux:linux_kernel:2.6.25.14 cpe:/o:linux:linux_kernel:2.6.25.15 cpe:/o:linux:linux_kernel:2.6.25.16 cpe:/o:linux:linux_kernel:2.6.25.17 cpe:/o:linux:linux_kernel:2.6.25.18 cpe:/o:linux:linux_kernel:2.6.25.19 cpe:/o:linux:linux_kernel:2.6.25.20 cpe:/o:linux:linux_kernel:2.6.26 cpe:/o:linux:linux_kernel:2.6.26:rc1 cpe:/o:linux:linux_kernel:2.6.26:rc2 cpe:/o:linux:linux_kernel:2.6.26:rc3 cpe:/o:linux:linux_kernel:2.6.26:rc4 cpe:/o:linux:linux_kernel:2.6.26:rc5 cpe:/o:linux:linux_kernel:2.6.26:rc6 cpe:/o:linux:linux_kernel:2.6.26:rc7 cpe:/o:linux:linux_kernel:2.6.26:rc8 cpe:/o:linux:linux_kernel:2.6.26:rc9 cpe:/o:linux:linux_kernel:2.6.26.1 cpe:/o:linux:linux_kernel:2.6.26.2 cpe:/o:linux:linux_kernel:2.6.26.3 cpe:/o:linux:linux_kernel:2.6.26.4 cpe:/o:linux:linux_kernel:2.6.26.5 cpe:/o:linux:linux_kernel:2.6.26.6 cpe:/o:linux:linux_kernel:2.6.26.7 cpe:/o:linux:linux_kernel:2.6.26.8 cpe:/o:linux:linux_kernel:2.6.27 cpe:/o:linux:linux_kernel:2.6.27:rc1 cpe:/o:linux:linux_kernel:2.6.27:rc2 cpe:/o:linux:linux_kernel:2.6.27:rc3 cpe:/o:linux:linux_kernel:2.6.27:rc4 cpe:/o:linux:linux_kernel:2.6.27:rc5 cpe:/o:linux:linux_kernel:2.6.27:rc6 cpe:/o:linux:linux_kernel:2.6.27:rc7 cpe:/o:linux:linux_kernel:2.6.27:rc8 cpe:/o:linux:linux_kernel:2.6.27:rc9 cpe:/o:linux:linux_kernel:2.6.27.1 cpe:/o:linux:linux_kernel:2.6.27.2 cpe:/o:linux:linux_kernel:2.6.27.3 cpe:/o:linux:linux_kernel:2.6.27.4 cpe:/o:linux:linux_kernel:2.6.27.5 cpe:/o:linux:linux_kernel:2.6.27.6 cpe:/o:linux:linux_kernel:2.6.27.7 cpe:/o:linux:linux_kernel:2.6.27.8 cpe:/o:linux:linux_kernel:2.6.27.9 cpe:/o:linux:linux_kernel:2.6.27.10 cpe:/o:linux:linux_kernel:2.6.27.11 cpe:/o:linux:linux_kernel:2.6.27.12 cpe:/o:linux:linux_kernel:2.6.27.13 cpe:/o:linux:linux_kernel:2.6.27.14 cpe:/o:linux:linux_kernel:2.6.27.15 cpe:/o:linux:linux_kernel:2.6.27.16 cpe:/o:linux:linux_kernel:2.6.27.17 cpe:/o:linux:linux_kernel:2.6.27.18 cpe:/o:linux:linux_kernel:2.6.27.19 cpe:/o:linux:linux_kernel:2.6.27.20 cpe:/o:linux:linux_kernel:2.6.27.21 cpe:/o:linux:linux_kernel:2.6.27.22 cpe:/o:linux:linux_kernel:2.6.27.23 cpe:/o:linux:linux_kernel:2.6.27.24 cpe:/o:linux:linux_kernel:2.6.27.25 cpe:/o:linux:linux_kernel:2.6.27.26 cpe:/o:linux:linux_kernel:2.6.27.27 cpe:/o:linux:linux_kernel:2.6.27.28 cpe:/o:linux:linux_kernel:2.6.27.29 cpe:/o:linux:linux_kernel:2.6.27.30 cpe:/o:linux:linux_kernel:2.6.27.31 cpe:/o:linux:linux_kernel:2.6.27.32 cpe:/o:linux:linux_kernel:2.6.27.33 cpe:/o:linux:linux_kernel:2.6.27.34 cpe:/o:linux:linux_kernel:2.6.27.35 cpe:/o:linux:linux_kernel:2.6.27.36 cpe:/o:linux:linux_kernel:2.6.27.37 cpe:/o:linux:linux_kernel:2.6.27.38 cpe:/o:linux:linux_kernel:2.6.27.39 cpe:/o:linux:linux_kernel:2.6.27.40 cpe:/o:linux:linux_kernel:2.6.27.41 cpe:/o:linux:linux_kernel:2.6.27.42 cpe:/o:linux:linux_kernel:2.6.27.43 cpe:/o:linux:linux_kernel:2.6.27.44 cpe:/o:linux:linux_kernel:2.6.27.45 cpe:/o:linux:linux_kernel:2.6.27.46 cpe:/o:linux:linux_kernel:2.6.27.47 cpe:/o:linux:linux_kernel:2.6.27.48 cpe:/o:linux:linux_kernel:2.6.27.49 cpe:/o:linux:linux_kernel:2.6.27.50 cpe:/o:linux:linux_kernel:2.6.27.51 cpe:/o:linux:linux_kernel:2.6.27.52 cpe:/o:linux:linux_kernel:2.6.27.53 cpe:/o:linux:linux_kernel:2.6.27.54 cpe:/o:linux:linux_kernel:2.6.27.55 cpe:/o:linux:linux_kernel:2.6.27.56 cpe:/o:linux:linux_kernel:2.6.27.57 cpe:/o:linux:linux_kernel:2.6.27.58 cpe:/o:linux:linux_kernel:2.6.27.59 cpe:/o:linux:linux_kernel:2.6.27.60 cpe:/o:linux:linux_kernel:2.6.27.61 cpe:/o:linux:linux_kernel:2.6.27.62 cpe:/o:linux:linux_kernel:2.6.28 cpe:/o:linux:linux_kernel:2.6.28:rc1 cpe:/o:linux:linux_kernel:2.6.28:rc2 cpe:/o:linux:linux_kernel:2.6.28:rc3 cpe:/o:linux:linux_kernel:2.6.28:rc4 cpe:/o:linux:linux_kernel:2.6.28:rc5 cpe:/o:linux:linux_kernel:2.6.28:rc6 cpe:/o:linux:linux_kernel:2.6.28:rc7 cpe:/o:linux:linux_kernel:2.6.28:rc8 cpe:/o:linux:linux_kernel:2.6.28:rc9 cpe:/o:linux:linux_kernel:2.6.28.1 cpe:/o:linux:linux_kernel:2.6.28.2 cpe:/o:linux:linux_kernel:2.6.28.3 cpe:/o:linux:linux_kernel:2.6.28.4 cpe:/o:linux:linux_kernel:2.6.28.5 cpe:/o:linux:linux_kernel:2.6.28.6 cpe:/o:linux:linux_kernel:2.6.28.7 cpe:/o:linux:linux_kernel:2.6.28.8 cpe:/o:linux:linux_kernel:2.6.28.9 cpe:/o:linux:linux_kernel:2.6.28.10 cpe:/o:linux:linux_kernel:2.6.29 cpe:/o:linux:linux_kernel:2.6.29:rc1 cpe:/o:linux:linux_kernel:2.6.29:rc2 cpe:/o:linux:linux_kernel:2.6.29:rc3 cpe:/o:linux:linux_kernel:2.6.29:rc4 cpe:/o:linux:linux_kernel:2.6.29:rc5 cpe:/o:linux:linux_kernel:2.6.29:rc6 cpe:/o:linux:linux_kernel:2.6.29:rc7 cpe:/o:linux:linux_kernel:2.6.29:rc8 cpe:/o:linux:linux_kernel:2.6.29.1 cpe:/o:linux:linux_kernel:2.6.29.2 cpe:/o:linux:linux_kernel:2.6.29.3 cpe:/o:linux:linux_kernel:2.6.29.4 cpe:/o:linux:linux_kernel:2.6.29.5 cpe:/o:linux:linux_kernel:2.6.29.6 cpe:/o:linux:linux_kernel:2.6.30 cpe:/o:linux:linux_kernel:2.6.30:rc1 cpe:/o:linux:linux_kernel:2.6.30:rc2 cpe:/o:linux:linux_kernel:2.6.30:rc3 cpe:/o:linux:linux_kernel:2.6.30:rc4 cpe:/o:linux:linux_kernel:2.6.30:rc5 cpe:/o:linux:linux_kernel:2.6.30:rc6 cpe:/o:linux:linux_kernel:2.6.30:rc7 cpe:/o:linux:linux_kernel:2.6.30:rc8 cpe:/o:linux:linux_kernel:2.6.30.1 cpe:/o:linux:linux_kernel:2.6.30.2 cpe:/o:linux:linux_kernel:2.6.30.3 cpe:/o:linux:linux_kernel:2.6.30.4 cpe:/o:linux:linux_kernel:2.6.30.5 cpe:/o:linux:linux_kernel:2.6.30.6 cpe:/o:linux:linux_kernel:2.6.30.7 cpe:/o:linux:linux_kernel:2.6.30.8 cpe:/o:linux:linux_kernel:2.6.30.9 cpe:/o:linux:linux_kernel:2.6.30.10 cpe:/o:linux:linux_kernel:2.6.31 cpe:/o:linux:linux_kernel:2.6.31:rc1 cpe:/o:linux:linux_kernel:2.6.31:rc2 cpe:/o:linux:linux_kernel:2.6.31:rc3 cpe:/o:linux:linux_kernel:2.6.31:rc4 cpe:/o:linux:linux_kernel:2.6.31:rc5 cpe:/o:linux:linux_kernel:2.6.31:rc6 cpe:/o:linux:linux_kernel:2.6.31:rc7 cpe:/o:linux:linux_kernel:2.6.31:rc8 cpe:/o:linux:linux_kernel:2.6.31:rc9 cpe:/o:linux:linux_kernel:2.6.31.1 cpe:/o:linux:linux_kernel:2.6.31.2 cpe:/o:linux:linux_kernel:2.6.31.3 cpe:/o:linux:linux_kernel:2.6.31.4 cpe:/o:linux:linux_kernel:2.6.31.5 cpe:/o:linux:linux_kernel:2.6.31.6 cpe:/o:linux:linux_kernel:2.6.31.7 cpe:/o:linux:linux_kernel:2.6.31.8 cpe:/o:linux:linux_kernel:2.6.31.9 cpe:/o:linux:linux_kernel:2.6.31.10 cpe:/o:linux:linux_kernel:2.6.31.11 cpe:/o:linux:linux_kernel:2.6.31.12 cpe:/o:linux:linux_kernel:2.6.31.13 cpe:/o:linux:linux_kernel:2.6.31.14 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:2.6.32:rc1 cpe:/o:linux:linux_kernel:2.6.32:rc2 cpe:/o:linux:linux_kernel:2.6.32:rc3 cpe:/o:linux:linux_kernel:2.6.32:rc4 cpe:/o:linux:linux_kernel:2.6.32:rc5 cpe:/o:linux:linux_kernel:2.6.32:rc6 cpe:/o:linux:linux_kernel:2.6.32:rc7 cpe:/o:linux:linux_kernel:2.6.32:rc8 cpe:/o:linux:linux_kernel:2.6.32.1 cpe:/o:linux:linux_kernel:2.6.32.2 cpe:/o:linux:linux_kernel:2.6.32.3

CVE-2010-0003

2010-01-26T13:30:01.010-05:00

2018-11-16T10:53:56.650-05:00

5.4

LOCAL

MEDIUM

NONE

PARTIAL

NONE

COMPLETE

http://nvd.nist.gov

2018-11-13T11:16:44.187-05:00

CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=b45c6e76bc2c72f6426c14bed64fdcbc9bf37cb0 FEDORA FEDORA-2010-0919 SUSE SUSE-SA:2010:010 SUSE SUSE-SA:2010:012 SUSE SUSE-SA:2010:014 CONFIRM http://patchwork.kernel.org/patch/69752/ DEBIAN DSA-1996 DEBIAN DSA-2005 CONFIRM http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.4 MLIST [oss-security] 20100112 CVE request - kernel: infoleak if print-fatal-signals=1 MLIST [oss-security] 20100113 Re: CVE request - kernel: infoleak if print-fatal-signals=1 REDHAT RHSA-2010:0147 REDHAT RHSA-2010:0161 BUGTRAQ 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX BID 37724 CONFIRM http://www.vmware.com/security/advisories/VMSA-2011-0003.html CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=554578 REDHAT RHSA-2010:0146 The print_fatal_signal function in kernel/signal.c in the Linux kernel before 2.6.32.4 on the i386 platform, when print-fatal-signals is enabled, allows local users to discover the contents of arbitrary memory locations by jumping to an address and then reading a log file, and might allow local users to cause a denial of service (system slowdown or crash) by jumping to an address.

cpe:/a:viewvc:viewvc:1.0.1 cpe:/a:viewvc:viewvc:1.0.2 cpe:/a:viewvc:viewvc:1.0.3 cpe:/a:viewvc:viewvc:1.0.4 cpe:/a:viewvc:viewvc:1.0.5 cpe:/a:viewvc:viewvc:1.0.6 cpe:/a:viewvc:viewvc:1.0.7 cpe:/a:viewvc:viewvc:1.0.8 cpe:/a:viewvc:viewvc:1.1.0 cpe:/a:viewvc:viewvc:1.1.1 cpe:/a:viewvc:viewvc:1.1.2

CVE-2010-0004

2010-01-29T13:30:00.997-05:00

2018-08-13T17:47:34.510-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SUSE SUSE-SA:2010:008 CONFIRM http://viewvc.tigris.org/source/browse/*checkout*/viewvc/trunk/docs/release-notes/1.1.0.html?revision=2222 CONFIRM http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?r1=2242&r2=2313&pathrev=HEAD CONFIRM http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2300 MLIST [oss-security] 20100111 CVE Request: viewvc MLIST [oss-security] 20100113 Re: CVE Request: viewvc MLIST [oss-security] 20100114 Re: CVE Request: viewvc FEDORA FEDORA-2009-13610 FEDORA FEDORA-2009-13634 ViewVC before 1.1.3 composes the root listing view without using the authorizer for each root, which might allow remote attackers to discover private root names by reading this view.

CVE-2010-0005

2010-01-29T13:30:01.057-05:00

2010-02-02T00:00:00.000-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-02-01T09:25:00.000-05:00

SUSE SUSE-SA:2010:008 CONFIRM http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?r1=2242&r2=2313&pathrev=HEAD CONFIRM http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2300 MLIST [oss-security] 20100111 CVE Request: viewvc MLIST [oss-security] 20100113 Re: CVE Request: viewvc FEDORA FEDORA-2009-13610 FEDORA FEDORA-2009-13634 query.py in the query interface in ViewVC before 1.1.3 does not reject configurations that specify an unsupported authorizer for a root, which might allow remote attackers to bypass intended access restrictions via a query.

cpe:/o:linux:linux_kernel:- cpe:/o:linux:linux_kernel:1.2.0 cpe:/o:linux:linux_kernel:1.3.0 cpe:/o:linux:linux_kernel:2.0.0 cpe:/o:linux:linux_kernel:2.0.1 cpe:/o:linux:linux_kernel:2.0.2 cpe:/o:linux:linux_kernel:2.0.3 cpe:/o:linux:linux_kernel:2.0.4 cpe:/o:linux:linux_kernel:2.0.5 cpe:/o:linux:linux_kernel:2.0.6 cpe:/o:linux:linux_kernel:2.0.7 cpe:/o:linux:linux_kernel:2.0.8 cpe:/o:linux:linux_kernel:2.0.9 cpe:/o:linux:linux_kernel:2.0.10 cpe:/o:linux:linux_kernel:2.0.11 cpe:/o:linux:linux_kernel:2.0.12 cpe:/o:linux:linux_kernel:2.0.13 cpe:/o:linux:linux_kernel:2.0.14 cpe:/o:linux:linux_kernel:2.0.15 cpe:/o:linux:linux_kernel:2.0.16 cpe:/o:linux:linux_kernel:2.0.17 cpe:/o:linux:linux_kernel:2.0.18 cpe:/o:linux:linux_kernel:2.0.19 cpe:/o:linux:linux_kernel:2.0.20 cpe:/o:linux:linux_kernel:2.0.21 cpe:/o:linux:linux_kernel:2.0.22 cpe:/o:linux:linux_kernel:2.0.23 cpe:/o:linux:linux_kernel:2.0.24 cpe:/o:linux:linux_kernel:2.0.25 cpe:/o:linux:linux_kernel:2.0.26 cpe:/o:linux:linux_kernel:2.0.27 cpe:/o:linux:linux_kernel:2.0.28 cpe:/o:linux:linux_kernel:2.0.29 cpe:/o:linux:linux_kernel:2.0.30 cpe:/o:linux:linux_kernel:2.0.31 cpe:/o:linux:linux_kernel:2.0.32 cpe:/o:linux:linux_kernel:2.0.33 cpe:/o:linux:linux_kernel:2.0.34 cpe:/o:linux:linux_kernel:2.0.35 cpe:/o:linux:linux_kernel:2.0.36 cpe:/o:linux:linux_kernel:2.0.37 cpe:/o:linux:linux_kernel:2.0.38 cpe:/o:linux:linux_kernel:2.0.39 cpe:/o:linux:linux_kernel:2.1.0 cpe:/o:linux:linux_kernel:2.1.1 cpe:/o:linux:linux_kernel:2.1.2 cpe:/o:linux:linux_kernel:2.1.3 cpe:/o:linux:linux_kernel:2.1.4 cpe:/o:linux:linux_kernel:2.1.5 cpe:/o:linux:linux_kernel:2.1.6 cpe:/o:linux:linux_kernel:2.1.7 cpe:/o:linux:linux_kernel:2.1.8 cpe:/o:linux:linux_kernel:2.1.9 cpe:/o:linux:linux_kernel:2.1.10 cpe:/o:linux:linux_kernel:2.1.11 cpe:/o:linux:linux_kernel:2.1.12 cpe:/o:linux:linux_kernel:2.1.13 cpe:/o:linux:linux_kernel:2.1.14 cpe:/o:linux:linux_kernel:2.1.15 cpe:/o:linux:linux_kernel:2.1.16 cpe:/o:linux:linux_kernel:2.1.17 cpe:/o:linux:linux_kernel:2.1.18 cpe:/o:linux:linux_kernel:2.1.19 cpe:/o:linux:linux_kernel:2.1.20 cpe:/o:linux:linux_kernel:2.1.21 cpe:/o:linux:linux_kernel:2.1.22 cpe:/o:linux:linux_kernel:2.1.23 cpe:/o:linux:linux_kernel:2.1.24 cpe:/o:linux:linux_kernel:2.1.25 cpe:/o:linux:linux_kernel:2.1.26 cpe:/o:linux:linux_kernel:2.1.27 cpe:/o:linux:linux_kernel:2.1.28 cpe:/o:linux:linux_kernel:2.1.29 cpe:/o:linux:linux_kernel:2.1.30 cpe:/o:linux:linux_kernel:2.1.31 cpe:/o:linux:linux_kernel:2.1.32 cpe:/o:linux:linux_kernel:2.1.33 cpe:/o:linux:linux_kernel:2.1.34 cpe:/o:linux:linux_kernel:2.1.35 cpe:/o:linux:linux_kernel:2.1.36 cpe:/o:linux:linux_kernel:2.1.37 cpe:/o:linux:linux_kernel:2.1.38 cpe:/o:linux:linux_kernel:2.1.39 cpe:/o:linux:linux_kernel:2.1.40 cpe:/o:linux:linux_kernel:2.1.41 cpe:/o:linux:linux_kernel:2.1.42 cpe:/o:linux:linux_kernel:2.1.43 cpe:/o:linux:linux_kernel:2.1.44 cpe:/o:linux:linux_kernel:2.1.45 cpe:/o:linux:linux_kernel:2.1.46 cpe:/o:linux:linux_kernel:2.1.47 cpe:/o:linux:linux_kernel:2.1.48 cpe:/o:linux:linux_kernel:2.1.49 cpe:/o:linux:linux_kernel:2.1.50 cpe:/o:linux:linux_kernel:2.1.51 cpe:/o:linux:linux_kernel:2.1.52 cpe:/o:linux:linux_kernel:2.1.53 cpe:/o:linux:linux_kernel:2.1.54 cpe:/o:linux:linux_kernel:2.1.55 cpe:/o:linux:linux_kernel:2.1.56 cpe:/o:linux:linux_kernel:2.1.57 cpe:/o:linux:linux_kernel:2.1.58 cpe:/o:linux:linux_kernel:2.1.59 cpe:/o:linux:linux_kernel:2.1.60 cpe:/o:linux:linux_kernel:2.1.61 cpe:/o:linux:linux_kernel:2.1.62 cpe:/o:linux:linux_kernel:2.1.63 cpe:/o:linux:linux_kernel:2.1.64 cpe:/o:linux:linux_kernel:2.1.65 cpe:/o:linux:linux_kernel:2.1.66 cpe:/o:linux:linux_kernel:2.1.67 cpe:/o:linux:linux_kernel:2.1.68 cpe:/o:linux:linux_kernel:2.1.69 cpe:/o:linux:linux_kernel:2.1.70 cpe:/o:linux:linux_kernel:2.1.71 cpe:/o:linux:linux_kernel:2.1.72 cpe:/o:linux:linux_kernel:2.1.73 cpe:/o:linux:linux_kernel:2.1.74 cpe:/o:linux:linux_kernel:2.1.75 cpe:/o:linux:linux_kernel:2.1.76 cpe:/o:linux:linux_kernel:2.1.77 cpe:/o:linux:linux_kernel:2.1.78 cpe:/o:linux:linux_kernel:2.1.79 cpe:/o:linux:linux_kernel:2.1.80 cpe:/o:linux:linux_kernel:2.1.81 cpe:/o:linux:linux_kernel:2.1.82 cpe:/o:linux:linux_kernel:2.1.83 cpe:/o:linux:linux_kernel:2.1.84 cpe:/o:linux:linux_kernel:2.1.85 cpe:/o:linux:linux_kernel:2.1.86 cpe:/o:linux:linux_kernel:2.1.87 cpe:/o:linux:linux_kernel:2.1.88 cpe:/o:linux:linux_kernel:2.1.89 cpe:/o:linux:linux_kernel:2.1.90 cpe:/o:linux:linux_kernel:2.1.91 cpe:/o:linux:linux_kernel:2.1.92 cpe:/o:linux:linux_kernel:2.1.93 cpe:/o:linux:linux_kernel:2.1.94 cpe:/o:linux:linux_kernel:2.1.95 cpe:/o:linux:linux_kernel:2.1.96 cpe:/o:linux:linux_kernel:2.1.97 cpe:/o:linux:linux_kernel:2.1.98 cpe:/o:linux:linux_kernel:2.1.99 cpe:/o:linux:linux_kernel:2.1.100 cpe:/o:linux:linux_kernel:2.1.101 cpe:/o:linux:linux_kernel:2.1.102 cpe:/o:linux:linux_kernel:2.1.103 cpe:/o:linux:linux_kernel:2.1.104 cpe:/o:linux:linux_kernel:2.1.105 cpe:/o:linux:linux_kernel:2.1.106 cpe:/o:linux:linux_kernel:2.1.107 cpe:/o:linux:linux_kernel:2.1.108 cpe:/o:linux:linux_kernel:2.1.109 cpe:/o:linux:linux_kernel:2.1.110 cpe:/o:linux:linux_kernel:2.1.111 cpe:/o:linux:linux_kernel:2.1.112 cpe:/o:linux:linux_kernel:2.1.113 cpe:/o:linux:linux_kernel:2.1.114 cpe:/o:linux:linux_kernel:2.1.115 cpe:/o:linux:linux_kernel:2.1.116 cpe:/o:linux:linux_kernel:2.1.117 cpe:/o:linux:linux_kernel:2.1.118 cpe:/o:linux:linux_kernel:2.1.119 cpe:/o:linux:linux_kernel:2.1.120 cpe:/o:linux:linux_kernel:2.1.121 cpe:/o:linux:linux_kernel:2.1.122 cpe:/o:linux:linux_kernel:2.1.123 cpe:/o:linux:linux_kernel:2.1.124 cpe:/o:linux:linux_kernel:2.1.125 cpe:/o:linux:linux_kernel:2.1.126 cpe:/o:linux:linux_kernel:2.1.127 cpe:/o:linux:linux_kernel:2.1.128 cpe:/o:linux:linux_kernel:2.1.129 cpe:/o:linux:linux_kernel:2.1.130 cpe:/o:linux:linux_kernel:2.1.131 cpe:/o:linux:linux_kernel:2.1.132 cpe:/o:linux:linux_kernel:2.2.0 cpe:/o:linux:linux_kernel:2.2.1 cpe:/o:linux:linux_kernel:2.2.2 cpe:/o:linux:linux_kernel:2.2.3 cpe:/o:linux:linux_kernel:2.2.4 cpe:/o:linux:linux_kernel:2.2.4:rc1 cpe:/o:linux:linux_kernel:2.2.5 cpe:/o:linux:linux_kernel:2.2.6 cpe:/o:linux:linux_kernel:2.2.7 cpe:/o:linux:linux_kernel:2.2.8 cpe:/o:linux:linux_kernel:2.2.9 cpe:/o:linux:linux_kernel:2.2.10 cpe:/o:linux:linux_kernel:2.2.11 cpe:/o:linux:linux_kernel:2.2.12 cpe:/o:linux:linux_kernel:2.2.13 cpe:/o:linux:linux_kernel:2.2.13:pre15 cpe:/o:linux:linux_kernel:2.2.14 cpe:/o:linux:linux_kernel:2.2.15 cpe:/o:linux:linux_kernel:2.2.15:pre16 cpe:/o:linux:linux_kernel:2.2.16 cpe:/o:linux:linux_kernel:2.2.16:pre5 cpe:/o:linux:linux_kernel:2.2.16:pre6 cpe:/o:linux:linux_kernel:2.2.17 cpe:/o:linux:linux_kernel:2.2.17:pre14 cpe:/o:linux:linux_kernel:2.2.18 cpe:/o:linux:linux_kernel:2.2.19 cpe:/o:linux:linux_kernel:2.2.20 cpe:/o:linux:linux_kernel:2.2.21 cpe:/o:linux:linux_kernel:2.2.21:pre1 cpe:/o:linux:linux_kernel:2.2.21:pre2 cpe:/o:linux:linux_kernel:2.2.21:pre3 cpe:/o:linux:linux_kernel:2.2.21:pre4 cpe:/o:linux:linux_kernel:2.2.21:rc1 cpe:/o:linux:linux_kernel:2.2.21:rc2 cpe:/o:linux:linux_kernel:2.2.21:rc3 cpe:/o:linux:linux_kernel:2.2.21:rc4 cpe:/o:linux:linux_kernel:2.2.22 cpe:/o:linux:linux_kernel:2.2.22:rc1 cpe:/o:linux:linux_kernel:2.2.22:rc2 cpe:/o:linux:linux_kernel:2.2.22:rc3 cpe:/o:linux:linux_kernel:2.2.23 cpe:/o:linux:linux_kernel:2.2.23:rc1 cpe:/o:linux:linux_kernel:2.2.23:rc2 cpe:/o:linux:linux_kernel:2.2.24 cpe:/o:linux:linux_kernel:2.2.24:rc2 cpe:/o:linux:linux_kernel:2.2.24:rc3 cpe:/o:linux:linux_kernel:2.2.24:rc4 cpe:/o:linux:linux_kernel:2.2.24:rc5 cpe:/o:linux:linux_kernel:2.2.25 cpe:/o:linux:linux_kernel:2.2.26 cpe:/o:linux:linux_kernel:2.2.27:pre1 cpe:/o:linux:linux_kernel:2.2.27:pre2 cpe:/o:linux:linux_kernel:2.2.27:rc1 cpe:/o:linux:linux_kernel:2.2.27:rc2 cpe:/o:linux:linux_kernel:2.3.0 cpe:/o:linux:linux_kernel:2.3.1 cpe:/o:linux:linux_kernel:2.3.2 cpe:/o:linux:linux_kernel:2.3.3 cpe:/o:linux:linux_kernel:2.3.4 cpe:/o:linux:linux_kernel:2.3.5 cpe:/o:linux:linux_kernel:2.3.6 cpe:/o:linux:linux_kernel:2.3.7 cpe:/o:linux:linux_kernel:2.3.8 cpe:/o:linux:linux_kernel:2.3.9 cpe:/o:linux:linux_kernel:2.3.10 cpe:/o:linux:linux_kernel:2.3.11 cpe:/o:linux:linux_kernel:2.3.12 cpe:/o:linux:linux_kernel:2.3.13 cpe:/o:linux:linux_kernel:2.3.14 cpe:/o:linux:linux_kernel:2.3.15 cpe:/o:linux:linux_kernel:2.3.16 cpe:/o:linux:linux_kernel:2.3.17 cpe:/o:linux:linux_kernel:2.3.18 cpe:/o:linux:linux_kernel:2.3.19 cpe:/o:linux:linux_kernel:2.3.20 cpe:/o:linux:linux_kernel:2.3.21 cpe:/o:linux:linux_kernel:2.3.22 cpe:/o:linux:linux_kernel:2.3.23 cpe:/o:linux:linux_kernel:2.3.24 cpe:/o:linux:linux_kernel:2.3.25 cpe:/o:linux:linux_kernel:2.3.26 cpe:/o:linux:linux_kernel:2.3.27 cpe:/o:linux:linux_kernel:2.3.28 cpe:/o:linux:linux_kernel:2.3.29 cpe:/o:linux:linux_kernel:2.3.30 cpe:/o:linux:linux_kernel:2.3.31 cpe:/o:linux:linux_kernel:2.3.32 cpe:/o:linux:linux_kernel:2.3.33 cpe:/o:linux:linux_kernel:2.3.34 cpe:/o:linux:linux_kernel:2.3.35 cpe:/o:linux:linux_kernel:2.3.36 cpe:/o:linux:linux_kernel:2.3.37 cpe:/o:linux:linux_kernel:2.3.38 cpe:/o:linux:linux_kernel:2.3.39 cpe:/o:linux:linux_kernel:2.3.40 cpe:/o:linux:linux_kernel:2.3.41 cpe:/o:linux:linux_kernel:2.3.42 cpe:/o:linux:linux_kernel:2.3.43 cpe:/o:linux:linux_kernel:2.3.44 cpe:/o:linux:linux_kernel:2.3.45 cpe:/o:linux:linux_kernel:2.3.46 cpe:/o:linux:linux_kernel:2.3.47 cpe:/o:linux:linux_kernel:2.3.48 cpe:/o:linux:linux_kernel:2.3.49 cpe:/o:linux:linux_kernel:2.3.50 cpe:/o:linux:linux_kernel:2.3.51 cpe:/o:linux:linux_kernel:2.3.99 cpe:/o:linux:linux_kernel:2.3.99:pre1 cpe:/o:linux:linux_kernel:2.3.99:pre2 cpe:/o:linux:linux_kernel:2.3.99:pre3 cpe:/o:linux:linux_kernel:2.3.99:pre4 cpe:/o:linux:linux_kernel:2.3.99:pre5 cpe:/o:linux:linux_kernel:2.3.99:pre6 cpe:/o:linux:linux_kernel:2.3.99:pre7 cpe:/o:linux:linux_kernel:2.3.99:pre8 cpe:/o:linux:linux_kernel:2.3.99:pre9 cpe:/o:linux:linux_kernel:2.4.0 cpe:/o:linux:linux_kernel:2.4.0:test1 cpe:/o:linux:linux_kernel:2.4.0:test10 cpe:/o:linux:linux_kernel:2.4.0:test11 cpe:/o:linux:linux_kernel:2.4.0:test12 cpe:/o:linux:linux_kernel:2.4.0:test2 cpe:/o:linux:linux_kernel:2.4.0:test3 cpe:/o:linux:linux_kernel:2.4.0:test4 cpe:/o:linux:linux_kernel:2.4.0:test5 cpe:/o:linux:linux_kernel:2.4.0:test6 cpe:/o:linux:linux_kernel:2.4.0:test7 cpe:/o:linux:linux_kernel:2.4.0:test8 cpe:/o:linux:linux_kernel:2.4.0:test9 cpe:/o:linux:linux_kernel:2.4.1 cpe:/o:linux:linux_kernel:2.4.2 cpe:/o:linux:linux_kernel:2.4.3 cpe:/o:linux:linux_kernel:2.4.3:pre3 cpe:/o:linux:linux_kernel:2.4.4 cpe:/o:linux:linux_kernel:2.4.5 cpe:/o:linux:linux_kernel:2.4.6 cpe:/o:linux:linux_kernel:2.4.7 cpe:/o:linux:linux_kernel:2.4.8 cpe:/o:linux:linux_kernel:2.4.9 cpe:/o:linux:linux_kernel:2.4.10 cpe:/o:linux:linux_kernel:2.4.11 cpe:/o:linux:linux_kernel:2.4.11:pre3 cpe:/o:linux:linux_kernel:2.4.12 cpe:/o:linux:linux_kernel:2.4.13 cpe:/o:linux:linux_kernel:2.4.14 cpe:/o:linux:linux_kernel:2.4.15 cpe:/o:linux:linux_kernel:2.4.16 cpe:/o:linux:linux_kernel:2.4.17 cpe:/o:linux:linux_kernel:2.4.18 cpe:/o:linux:linux_kernel:2.4.18:pre1 cpe:/o:linux:linux_kernel:2.4.18:pre2 cpe:/o:linux:linux_kernel:2.4.18:pre3 cpe:/o:linux:linux_kernel:2.4.18:pre4 cpe:/o:linux:linux_kernel:2.4.18:pre5 cpe:/o:linux:linux_kernel:2.4.18:pre6 cpe:/o:linux:linux_kernel:2.4.18:pre7 cpe:/o:linux:linux_kernel:2.4.18:pre8 cpe:/o:linux:linux_kernel:2.4.18:pre9 cpe:/o:linux:linux_kernel:2.4.19 cpe:/o:linux:linux_kernel:2.4.19:pre1 cpe:/o:linux:linux_kernel:2.4.19:pre2 cpe:/o:linux:linux_kernel:2.4.19:pre3 cpe:/o:linux:linux_kernel:2.4.19:pre4 cpe:/o:linux:linux_kernel:2.4.19:pre5 cpe:/o:linux:linux_kernel:2.4.19:pre6 cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.4.21 cpe:/o:linux:linux_kernel:2.4.21:pre1 cpe:/o:linux:linux_kernel:2.4.21:pre4 cpe:/o:linux:linux_kernel:2.4.21:pre7 cpe:/o:linux:linux_kernel:2.4.22 cpe:/o:linux:linux_kernel:2.4.22:pre10 cpe:/o:linux:linux_kernel:2.4.23 cpe:/o:linux:linux_kernel:2.4.23:pre9 cpe:/o:linux:linux_kernel:2.4.24 cpe:/o:linux:linux_kernel:2.4.25 cpe:/o:linux:linux_kernel:2.4.26 cpe:/o:linux:linux_kernel:2.4.27 cpe:/o:linux:linux_kernel:2.4.27:pre1 cpe:/o:linux:linux_kernel:2.4.27:pre2 cpe:/o:linux:linux_kernel:2.4.27:pre3 cpe:/o:linux:linux_kernel:2.4.27:pre4 cpe:/o:linux:linux_kernel:2.4.27:pre5 cpe:/o:linux:linux_kernel:2.4.28 cpe:/o:linux:linux_kernel:2.4.29 cpe:/o:linux:linux_kernel:2.4.29:rc1 cpe:/o:linux:linux_kernel:2.4.29:rc2 cpe:/o:linux:linux_kernel:2.4.30 cpe:/o:linux:linux_kernel:2.4.30:rc2 cpe:/o:linux:linux_kernel:2.4.30:rc3 cpe:/o:linux:linux_kernel:2.4.31 cpe:/o:linux:linux_kernel:2.4.31:pre1 cpe:/o:linux:linux_kernel:2.4.32 cpe:/o:linux:linux_kernel:2.4.32:pre1 cpe:/o:linux:linux_kernel:2.4.32:pre2 cpe:/o:linux:linux_kernel:2.4.33 cpe:/o:linux:linux_kernel:2.4.33:pre1 cpe:/o:linux:linux_kernel:2.4.33.1 cpe:/o:linux:linux_kernel:2.4.33.2 cpe:/o:linux:linux_kernel:2.4.33.3 cpe:/o:linux:linux_kernel:2.4.33.4 cpe:/o:linux:linux_kernel:2.4.33.5 cpe:/o:linux:linux_kernel:2.4.34 cpe:/o:linux:linux_kernel:2.4.34:rc3 cpe:/o:linux:linux_kernel:2.4.34.1 cpe:/o:linux:linux_kernel:2.4.34.2 cpe:/o:linux:linux_kernel:2.4.35 cpe:/o:linux:linux_kernel:2.4.35.2 cpe:/o:linux:linux_kernel:2.5.0 cpe:/o:linux:linux_kernel:2.5.1 cpe:/o:linux:linux_kernel:2.5.2 cpe:/o:linux:linux_kernel:2.5.3 cpe:/o:linux:linux_kernel:2.5.4 cpe:/o:linux:linux_kernel:2.5.5 cpe:/o:linux:linux_kernel:2.5.6 cpe:/o:linux:linux_kernel:2.5.7 cpe:/o:linux:linux_kernel:2.5.8 cpe:/o:linux:linux_kernel:2.5.9 cpe:/o:linux:linux_kernel:2.5.10 cpe:/o:linux:linux_kernel:2.5.11 cpe:/o:linux:linux_kernel:2.5.12 cpe:/o:linux:linux_kernel:2.5.13 cpe:/o:linux:linux_kernel:2.5.14 cpe:/o:linux:linux_kernel:2.5.15 cpe:/o:linux:linux_kernel:2.5.16 cpe:/o:linux:linux_kernel:2.5.17 cpe:/o:linux:linux_kernel:2.5.18 cpe:/o:linux:linux_kernel:2.5.19 cpe:/o:linux:linux_kernel:2.5.20 cpe:/o:linux:linux_kernel:2.5.21 cpe:/o:linux:linux_kernel:2.5.22 cpe:/o:linux:linux_kernel:2.5.23 cpe:/o:linux:linux_kernel:2.5.24 cpe:/o:linux:linux_kernel:2.5.25 cpe:/o:linux:linux_kernel:2.5.26 cpe:/o:linux:linux_kernel:2.5.27 cpe:/o:linux:linux_kernel:2.5.28 cpe:/o:linux:linux_kernel:2.5.29 cpe:/o:linux:linux_kernel:2.5.30 cpe:/o:linux:linux_kernel:2.5.31 cpe:/o:linux:linux_kernel:2.5.32 cpe:/o:linux:linux_kernel:2.5.33 cpe:/o:linux:linux_kernel:2.5.34 cpe:/o:linux:linux_kernel:2.5.35 cpe:/o:linux:linux_kernel:2.5.36 cpe:/o:linux:linux_kernel:2.5.37 cpe:/o:linux:linux_kernel:2.5.38 cpe:/o:linux:linux_kernel:2.5.39 cpe:/o:linux:linux_kernel:2.5.40 cpe:/o:linux:linux_kernel:2.5.41 cpe:/o:linux:linux_kernel:2.5.42 cpe:/o:linux:linux_kernel:2.5.43 cpe:/o:linux:linux_kernel:2.5.44 cpe:/o:linux:linux_kernel:2.5.45 cpe:/o:linux:linux_kernel:2.5.46 cpe:/o:linux:linux_kernel:2.5.47 cpe:/o:linux:linux_kernel:2.5.48 cpe:/o:linux:linux_kernel:2.5.49 cpe:/o:linux:linux_kernel:2.5.50 cpe:/o:linux:linux_kernel:2.5.51 cpe:/o:linux:linux_kernel:2.5.52 cpe:/o:linux:linux_kernel:2.5.53 cpe:/o:linux:linux_kernel:2.5.54 cpe:/o:linux:linux_kernel:2.5.55 cpe:/o:linux:linux_kernel:2.5.56 cpe:/o:linux:linux_kernel:2.5.57 cpe:/o:linux:linux_kernel:2.5.58 cpe:/o:linux:linux_kernel:2.5.59 cpe:/o:linux:linux_kernel:2.5.60 cpe:/o:linux:linux_kernel:2.5.61 cpe:/o:linux:linux_kernel:2.5.62 cpe:/o:linux:linux_kernel:2.5.63 cpe:/o:linux:linux_kernel:2.5.64 cpe:/o:linux:linux_kernel:2.5.65 cpe:/o:linux:linux_kernel:2.5.66 cpe:/o:linux:linux_kernel:2.5.67 cpe:/o:linux:linux_kernel:2.5.68 cpe:/o:linux:linux_kernel:2.5.69 cpe:/o:linux:linux_kernel:2.5.75 cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.0:test1 cpe:/o:linux:linux_kernel:2.6.0:test10 cpe:/o:linux:linux_kernel:2.6.0:test11 cpe:/o:linux:linux_kernel:2.6.0:test2 cpe:/o:linux:linux_kernel:2.6.0:test3 cpe:/o:linux:linux_kernel:2.6.0:test4 cpe:/o:linux:linux_kernel:2.6.0:test5 cpe:/o:linux:linux_kernel:2.6.0:test6 cpe:/o:linux:linux_kernel:2.6.0:test7 cpe:/o:linux:linux_kernel:2.6.0:test8 cpe:/o:linux:linux_kernel:2.6.0:test9 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.1:rc1 cpe:/o:linux:linux_kernel:2.6.1:rc2 cpe:/o:linux:linux_kernel:2.6.1:rc3 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.2:rc1 cpe:/o:linux:linux_kernel:2.6.2:rc2 cpe:/o:linux:linux_kernel:2.6.2:rc3 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.3:rc1 cpe:/o:linux:linux_kernel:2.6.3:rc2 cpe:/o:linux:linux_kernel:2.6.3:rc3 cpe:/o:linux:linux_kernel:2.6.3:rc4 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.4:rc1 cpe:/o:linux:linux_kernel:2.6.4:rc2 cpe:/o:linux:linux_kernel:2.6.4:rc3 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.5:rc1 cpe:/o:linux:linux_kernel:2.6.5:rc2 cpe:/o:linux:linux_kernel:2.6.5:rc3 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.6:rc1 cpe:/o:linux:linux_kernel:2.6.6:rc2 cpe:/o:linux:linux_kernel:2.6.6:rc3 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.7:rc1 cpe:/o:linux:linux_kernel:2.6.7:rc2 cpe:/o:linux:linux_kernel:2.6.7:rc3 cpe:/o:linux:linux_kernel:2.6.8 cpe:/o:linux:linux_kernel:2.6.8:rc1 cpe:/o:linux:linux_kernel:2.6.8:rc2 cpe:/o:linux:linux_kernel:2.6.8:rc3 cpe:/o:linux:linux_kernel:2.6.8:rc4 cpe:/o:linux:linux_kernel:2.6.8.1 cpe:/o:linux:linux_kernel:2.6.9 cpe:/o:linux:linux_kernel:2.6.9:final cpe:/o:linux:linux_kernel:2.6.9:rc1 cpe:/o:linux:linux_kernel:2.6.9:rc2 cpe:/o:linux:linux_kernel:2.6.9:rc3 cpe:/o:linux:linux_kernel:2.6.9:rc4 cpe:/o:linux:linux_kernel:2.6.10 cpe:/o:linux:linux_kernel:2.6.10:rc1 cpe:/o:linux:linux_kernel:2.6.10:rc2 cpe:/o:linux:linux_kernel:2.6.10:rc3 cpe:/o:linux:linux_kernel:2.6.11 cpe:/o:linux:linux_kernel:2.6.11:rc1 cpe:/o:linux:linux_kernel:2.6.11:rc2 cpe:/o:linux:linux_kernel:2.6.11:rc3 cpe:/o:linux:linux_kernel:2.6.11:rc4 cpe:/o:linux:linux_kernel:2.6.11:rc5 cpe:/o:linux:linux_kernel:2.6.11.1 cpe:/o:linux:linux_kernel:2.6.11.2 cpe:/o:linux:linux_kernel:2.6.11.3 cpe:/o:linux:linux_kernel:2.6.11.4 cpe:/o:linux:linux_kernel:2.6.11.5 cpe:/o:linux:linux_kernel:2.6.11.6 cpe:/o:linux:linux_kernel:2.6.11.7 cpe:/o:linux:linux_kernel:2.6.11.8 cpe:/o:linux:linux_kernel:2.6.11.9 cpe:/o:linux:linux_kernel:2.6.11.10 cpe:/o:linux:linux_kernel:2.6.11.11 cpe:/o:linux:linux_kernel:2.6.11.12 cpe:/o:linux:linux_kernel:2.6.12 cpe:/o:linux:linux_kernel:2.6.12:rc1 cpe:/o:linux:linux_kernel:2.6.12:rc2 cpe:/o:linux:linux_kernel:2.6.12:rc3 cpe:/o:linux:linux_kernel:2.6.12:rc4 cpe:/o:linux:linux_kernel:2.6.12:rc5 cpe:/o:linux:linux_kernel:2.6.12:rc6 cpe:/o:linux:linux_kernel:2.6.12.1 cpe:/o:linux:linux_kernel:2.6.12.2 cpe:/o:linux:linux_kernel:2.6.12.3 cpe:/o:linux:linux_kernel:2.6.12.4 cpe:/o:linux:linux_kernel:2.6.12.5 cpe:/o:linux:linux_kernel:2.6.12.6 cpe:/o:linux:linux_kernel:2.6.13 cpe:/o:linux:linux_kernel:2.6.13:rc1 cpe:/o:linux:linux_kernel:2.6.13:rc2 cpe:/o:linux:linux_kernel:2.6.13:rc3 cpe:/o:linux:linux_kernel:2.6.13:rc4 cpe:/o:linux:linux_kernel:2.6.13:rc5 cpe:/o:linux:linux_kernel:2.6.13:rc6 cpe:/o:linux:linux_kernel:2.6.13:rc7 cpe:/o:linux:linux_kernel:2.6.13.1 cpe:/o:linux:linux_kernel:2.6.13.2 cpe:/o:linux:linux_kernel:2.6.13.3 cpe:/o:linux:linux_kernel:2.6.13.4 cpe:/o:linux:linux_kernel:2.6.13.5 cpe:/o:linux:linux_kernel:2.6.14 cpe:/o:linux:linux_kernel:2.6.14:rc1 cpe:/o:linux:linux_kernel:2.6.14:rc2 cpe:/o:linux:linux_kernel:2.6.14:rc3 cpe:/o:linux:linux_kernel:2.6.14:rc4 cpe:/o:linux:linux_kernel:2.6.14:rc5 cpe:/o:linux:linux_kernel:2.6.14.1 cpe:/o:linux:linux_kernel:2.6.14.2 cpe:/o:linux:linux_kernel:2.6.14.3 cpe:/o:linux:linux_kernel:2.6.14.4 cpe:/o:linux:linux_kernel:2.6.14.5 cpe:/o:linux:linux_kernel:2.6.14.6 cpe:/o:linux:linux_kernel:2.6.14.7 cpe:/o:linux:linux_kernel:2.6.15 cpe:/o:linux:linux_kernel:2.6.15:rc1 cpe:/o:linux:linux_kernel:2.6.15:rc2 cpe:/o:linux:linux_kernel:2.6.15:rc3 cpe:/o:linux:linux_kernel:2.6.15:rc4 cpe:/o:linux:linux_kernel:2.6.15:rc5 cpe:/o:linux:linux_kernel:2.6.15:rc6 cpe:/o:linux:linux_kernel:2.6.15:rc7 cpe:/o:linux:linux_kernel:2.6.15.1 cpe:/o:linux:linux_kernel:2.6.15.2 cpe:/o:linux:linux_kernel:2.6.15.3 cpe:/o:linux:linux_kernel:2.6.15.4 cpe:/o:linux:linux_kernel:2.6.15.5 cpe:/o:linux:linux_kernel:2.6.15.6 cpe:/o:linux:linux_kernel:2.6.15.7 cpe:/o:linux:linux_kernel:2.6.15.8 cpe:/o:linux:linux_kernel:2.6.15.9 cpe:/o:linux:linux_kernel:2.6.15.10 cpe:/o:linux:linux_kernel:2.6.15.11 cpe:/o:linux:linux_kernel:2.6.16 cpe:/o:linux:linux_kernel:2.6.16:rc1 cpe:/o:linux:linux_kernel:2.6.16:rc2 cpe:/o:linux:linux_kernel:2.6.16:rc3 cpe:/o:linux:linux_kernel:2.6.16:rc4 cpe:/o:linux:linux_kernel:2.6.16:rc5 cpe:/o:linux:linux_kernel:2.6.16:rc6 cpe:/o:linux:linux_kernel:2.6.16:rc7 cpe:/o:linux:linux_kernel:2.6.16.1 cpe:/o:linux:linux_kernel:2.6.16.2 cpe:/o:linux:linux_kernel:2.6.16.3 cpe:/o:linux:linux_kernel:2.6.16.4 cpe:/o:linux:linux_kernel:2.6.16.5 cpe:/o:linux:linux_kernel:2.6.16.6 cpe:/o:linux:linux_kernel:2.6.16.7 cpe:/o:linux:linux_kernel:2.6.16.8 cpe:/o:linux:linux_kernel:2.6.16.9 cpe:/o:linux:linux_kernel:2.6.16.10 cpe:/o:linux:linux_kernel:2.6.16.11 cpe:/o:linux:linux_kernel:2.6.16.12 cpe:/o:linux:linux_kernel:2.6.16.13 cpe:/o:linux:linux_kernel:2.6.16.14 cpe:/o:linux:linux_kernel:2.6.16.15 cpe:/o:linux:linux_kernel:2.6.16.16 cpe:/o:linux:linux_kernel:2.6.16.17 cpe:/o:linux:linux_kernel:2.6.16.18 cpe:/o:linux:linux_kernel:2.6.16.19 cpe:/o:linux:linux_kernel:2.6.16.20 cpe:/o:linux:linux_kernel:2.6.16.21 cpe:/o:linux:linux_kernel:2.6.16.22 cpe:/o:linux:linux_kernel:2.6.16.23 cpe:/o:linux:linux_kernel:2.6.16.24 cpe:/o:linux:linux_kernel:2.6.16.25 cpe:/o:linux:linux_kernel:2.6.16.26 cpe:/o:linux:linux_kernel:2.6.16.27 cpe:/o:linux:linux_kernel:2.6.16.28 cpe:/o:linux:linux_kernel:2.6.16.29 cpe:/o:linux:linux_kernel:2.6.16.30 cpe:/o:linux:linux_kernel:2.6.16.31 cpe:/o:linux:linux_kernel:2.6.16.32 cpe:/o:linux:linux_kernel:2.6.16.33 cpe:/o:linux:linux_kernel:2.6.16.34 cpe:/o:linux:linux_kernel:2.6.16.35 cpe:/o:linux:linux_kernel:2.6.16.36 cpe:/o:linux:linux_kernel:2.6.16.37 cpe:/o:linux:linux_kernel:2.6.16.38 cpe:/o:linux:linux_kernel:2.6.16.39 cpe:/o:linux:linux_kernel:2.6.16.40 cpe:/o:linux:linux_kernel:2.6.16.41 cpe:/o:linux:linux_kernel:2.6.16.42 cpe:/o:linux:linux_kernel:2.6.16.43 cpe:/o:linux:linux_kernel:2.6.16.44 cpe:/o:linux:linux_kernel:2.6.16.45 cpe:/o:linux:linux_kernel:2.6.16.46 cpe:/o:linux:linux_kernel:2.6.16.47 cpe:/o:linux:linux_kernel:2.6.16.48 cpe:/o:linux:linux_kernel:2.6.16.49 cpe:/o:linux:linux_kernel:2.6.16.50 cpe:/o:linux:linux_kernel:2.6.16.51 cpe:/o:linux:linux_kernel:2.6.16.52 cpe:/o:linux:linux_kernel:2.6.16.53 cpe:/o:linux:linux_kernel:2.6.16.54 cpe:/o:linux:linux_kernel:2.6.16.55 cpe:/o:linux:linux_kernel:2.6.16.56 cpe:/o:linux:linux_kernel:2.6.16.57 cpe:/o:linux:linux_kernel:2.6.16.58 cpe:/o:linux:linux_kernel:2.6.16.59 cpe:/o:linux:linux_kernel:2.6.16.60 cpe:/o:linux:linux_kernel:2.6.16.61 cpe:/o:linux:linux_kernel:2.6.16.62 cpe:/o:linux:linux_kernel:2.6.17 cpe:/o:linux:linux_kernel:2.6.17:rc1 cpe:/o:linux:linux_kernel:2.6.17:rc2 cpe:/o:linux:linux_kernel:2.6.17:rc3 cpe:/o:linux:linux_kernel:2.6.17:rc4 cpe:/o:linux:linux_kernel:2.6.17:rc5 cpe:/o:linux:linux_kernel:2.6.17:rc6 cpe:/o:linux:linux_kernel:2.6.17.1 cpe:/o:linux:linux_kernel:2.6.17.2 cpe:/o:linux:linux_kernel:2.6.17.3 cpe:/o:linux:linux_kernel:2.6.17.4 cpe:/o:linux:linux_kernel:2.6.17.5 cpe:/o:linux:linux_kernel:2.6.17.6 cpe:/o:linux:linux_kernel:2.6.17.7 cpe:/o:linux:linux_kernel:2.6.17.8 cpe:/o:linux:linux_kernel:2.6.17.9 cpe:/o:linux:linux_kernel:2.6.17.10 cpe:/o:linux:linux_kernel:2.6.17.11 cpe:/o:linux:linux_kernel:2.6.17.12 cpe:/o:linux:linux_kernel:2.6.17.13 cpe:/o:linux:linux_kernel:2.6.17.14 cpe:/o:linux:linux_kernel:2.6.18 cpe:/o:linux:linux_kernel:2.6.18:rc1 cpe:/o:linux:linux_kernel:2.6.18:rc2 cpe:/o:linux:linux_kernel:2.6.18:rc3 cpe:/o:linux:linux_kernel:2.6.18:rc4 cpe:/o:linux:linux_kernel:2.6.18:rc5 cpe:/o:linux:linux_kernel:2.6.18:rc6 cpe:/o:linux:linux_kernel:2.6.18:rc7 cpe:/o:linux:linux_kernel:2.6.18.1 cpe:/o:linux:linux_kernel:2.6.18.2 cpe:/o:linux:linux_kernel:2.6.18.3 cpe:/o:linux:linux_kernel:2.6.18.4 cpe:/o:linux:linux_kernel:2.6.18.5 cpe:/o:linux:linux_kernel:2.6.18.6 cpe:/o:linux:linux_kernel:2.6.18.7 cpe:/o:linux:linux_kernel:2.6.18.8 cpe:/o:linux:linux_kernel:2.6.19 cpe:/o:linux:linux_kernel:2.6.19:rc1 cpe:/o:linux:linux_kernel:2.6.19:rc2 cpe:/o:linux:linux_kernel:2.6.19:rc3 cpe:/o:linux:linux_kernel:2.6.19:rc4 cpe:/o:linux:linux_kernel:2.6.19:rc5 cpe:/o:linux:linux_kernel:2.6.19:rc6 cpe:/o:linux:linux_kernel:2.6.19.0 cpe:/o:linux:linux_kernel:2.6.19.1 cpe:/o:linux:linux_kernel:2.6.19.2 cpe:/o:linux:linux_kernel:2.6.19.3 cpe:/o:linux:linux_kernel:2.6.19.4 cpe:/o:linux:linux_kernel:2.6.19.5 cpe:/o:linux:linux_kernel:2.6.19.6 cpe:/o:linux:linux_kernel:2.6.19.7 cpe:/o:linux:linux_kernel:2.6.20 cpe:/o:linux:linux_kernel:2.6.20:rc1 cpe:/o:linux:linux_kernel:2.6.20:rc2 cpe:/o:linux:linux_kernel:2.6.20:rc3 cpe:/o:linux:linux_kernel:2.6.20:rc4 cpe:/o:linux:linux_kernel:2.6.20:rc5 cpe:/o:linux:linux_kernel:2.6.20:rc6 cpe:/o:linux:linux_kernel:2.6.20:rc7 cpe:/o:linux:linux_kernel:2.6.20.1 cpe:/o:linux:linux_kernel:2.6.20.2 cpe:/o:linux:linux_kernel:2.6.20.3 cpe:/o:linux:linux_kernel:2.6.20.4 cpe:/o:linux:linux_kernel:2.6.20.5 cpe:/o:linux:linux_kernel:2.6.20.6 cpe:/o:linux:linux_kernel:2.6.20.7 cpe:/o:linux:linux_kernel:2.6.20.8 cpe:/o:linux:linux_kernel:2.6.20.9 cpe:/o:linux:linux_kernel:2.6.20.10 cpe:/o:linux:linux_kernel:2.6.20.11 cpe:/o:linux:linux_kernel:2.6.20.12 cpe:/o:linux:linux_kernel:2.6.20.13 cpe:/o:linux:linux_kernel:2.6.20.14 cpe:/o:linux:linux_kernel:2.6.20.15 cpe:/o:linux:linux_kernel:2.6.20.16 cpe:/o:linux:linux_kernel:2.6.20.17 cpe:/o:linux:linux_kernel:2.6.20.18 cpe:/o:linux:linux_kernel:2.6.20.19 cpe:/o:linux:linux_kernel:2.6.20.20 cpe:/o:linux:linux_kernel:2.6.20.21 cpe:/o:linux:linux_kernel:2.6.21 cpe:/o:linux:linux_kernel:2.6.21:git1 cpe:/o:linux:linux_kernel:2.6.21:git2 cpe:/o:linux:linux_kernel:2.6.21:git3 cpe:/o:linux:linux_kernel:2.6.21:git4 cpe:/o:linux:linux_kernel:2.6.21:git5 cpe:/o:linux:linux_kernel:2.6.21:git6 cpe:/o:linux:linux_kernel:2.6.21:git7 cpe:/o:linux:linux_kernel:2.6.21:rc1 cpe:/o:linux:linux_kernel:2.6.21:rc2 cpe:/o:linux:linux_kernel:2.6.21:rc3 cpe:/o:linux:linux_kernel:2.6.21:rc4 cpe:/o:linux:linux_kernel:2.6.21:rc5 cpe:/o:linux:linux_kernel:2.6.21:rc6 cpe:/o:linux:linux_kernel:2.6.21:rc7 cpe:/o:linux:linux_kernel:2.6.21.1 cpe:/o:linux:linux_kernel:2.6.21.2 cpe:/o:linux:linux_kernel:2.6.21.3 cpe:/o:linux:linux_kernel:2.6.21.4 cpe:/o:linux:linux_kernel:2.6.21.5 cpe:/o:linux:linux_kernel:2.6.21.6 cpe:/o:linux:linux_kernel:2.6.21.7 cpe:/o:linux:linux_kernel:2.6.22 cpe:/o:linux:linux_kernel:2.6.22:rc1 cpe:/o:linux:linux_kernel:2.6.22:rc2 cpe:/o:linux:linux_kernel:2.6.22:rc3 cpe:/o:linux:linux_kernel:2.6.22:rc4 cpe:/o:linux:linux_kernel:2.6.22:rc5 cpe:/o:linux:linux_kernel:2.6.22:rc6 cpe:/o:linux:linux_kernel:2.6.22:rc7 cpe:/o:linux:linux_kernel:2.6.22.1 cpe:/o:linux:linux_kernel:2.6.22.2 cpe:/o:linux:linux_kernel:2.6.22.3 cpe:/o:linux:linux_kernel:2.6.22.4 cpe:/o:linux:linux_kernel:2.6.22.5 cpe:/o:linux:linux_kernel:2.6.22.6 cpe:/o:linux:linux_kernel:2.6.22.7 cpe:/o:linux:linux_kernel:2.6.22.8 cpe:/o:linux:linux_kernel:2.6.22.9 cpe:/o:linux:linux_kernel:2.6.22.10 cpe:/o:linux:linux_kernel:2.6.22.11 cpe:/o:linux:linux_kernel:2.6.22.12 cpe:/o:linux:linux_kernel:2.6.22.13 cpe:/o:linux:linux_kernel:2.6.22.14 cpe:/o:linux:linux_kernel:2.6.22.15 cpe:/o:linux:linux_kernel:2.6.22.16 cpe:/o:linux:linux_kernel:2.6.22.17 cpe:/o:linux:linux_kernel:2.6.22.18 cpe:/o:linux:linux_kernel:2.6.22.19 cpe:/o:linux:linux_kernel:2.6.22.20 cpe:/o:linux:linux_kernel:2.6.22.21 cpe:/o:linux:linux_kernel:2.6.22.22 cpe:/o:linux:linux_kernel:2.6.23 cpe:/o:linux:linux_kernel:2.6.23:rc1 cpe:/o:linux:linux_kernel:2.6.23:rc2 cpe:/o:linux:linux_kernel:2.6.23:rc3 cpe:/o:linux:linux_kernel:2.6.23:rc4 cpe:/o:linux:linux_kernel:2.6.23:rc5 cpe:/o:linux:linux_kernel:2.6.23:rc6 cpe:/o:linux:linux_kernel:2.6.23:rc7 cpe:/o:linux:linux_kernel:2.6.23:rc8 cpe:/o:linux:linux_kernel:2.6.23:rc9 cpe:/o:linux:linux_kernel:2.6.23.1 cpe:/o:linux:linux_kernel:2.6.23.2 cpe:/o:linux:linux_kernel:2.6.23.3 cpe:/o:linux:linux_kernel:2.6.23.4 cpe:/o:linux:linux_kernel:2.6.23.5 cpe:/o:linux:linux_kernel:2.6.23.6 cpe:/o:linux:linux_kernel:2.6.23.7 cpe:/o:linux:linux_kernel:2.6.23.8 cpe:/o:linux:linux_kernel:2.6.23.9 cpe:/o:linux:linux_kernel:2.6.23.10 cpe:/o:linux:linux_kernel:2.6.23.11 cpe:/o:linux:linux_kernel:2.6.23.12 cpe:/o:linux:linux_kernel:2.6.23.13 cpe:/o:linux:linux_kernel:2.6.23.14 cpe:/o:linux:linux_kernel:2.6.23.15 cpe:/o:linux:linux_kernel:2.6.23.16 cpe:/o:linux:linux_kernel:2.6.23.17 cpe:/o:linux:linux_kernel:2.6.24 cpe:/o:linux:linux_kernel:2.6.24:rc1 cpe:/o:linux:linux_kernel:2.6.24:rc2 cpe:/o:linux:linux_kernel:2.6.24:rc3 cpe:/o:linux:linux_kernel:2.6.24:rc4 cpe:/o:linux:linux_kernel:2.6.24:rc5 cpe:/o:linux:linux_kernel:2.6.24:rc6 cpe:/o:linux:linux_kernel:2.6.24:rc7 cpe:/o:linux:linux_kernel:2.6.24:rc8 cpe:/o:linux:linux_kernel:2.6.24.1 cpe:/o:linux:linux_kernel:2.6.24.2 cpe:/o:linux:linux_kernel:2.6.24.3 cpe:/o:linux:linux_kernel:2.6.24.4 cpe:/o:linux:linux_kernel:2.6.24.5 cpe:/o:linux:linux_kernel:2.6.24.6 cpe:/o:linux:linux_kernel:2.6.24.7 cpe:/o:linux:linux_kernel:2.6.25 cpe:/o:linux:linux_kernel:2.6.25:rc1 cpe:/o:linux:linux_kernel:2.6.25:rc2 cpe:/o:linux:linux_kernel:2.6.25:rc3 cpe:/o:linux:linux_kernel:2.6.25:rc4 cpe:/o:linux:linux_kernel:2.6.25:rc5 cpe:/o:linux:linux_kernel:2.6.25:rc6 cpe:/o:linux:linux_kernel:2.6.25:rc7 cpe:/o:linux:linux_kernel:2.6.25:rc8 cpe:/o:linux:linux_kernel:2.6.25:rc9 cpe:/o:linux:linux_kernel:2.6.25.1 cpe:/o:linux:linux_kernel:2.6.25.2 cpe:/o:linux:linux_kernel:2.6.25.3 cpe:/o:linux:linux_kernel:2.6.25.4 cpe:/o:linux:linux_kernel:2.6.25.5 cpe:/o:linux:linux_kernel:2.6.25.6 cpe:/o:linux:linux_kernel:2.6.25.7 cpe:/o:linux:linux_kernel:2.6.25.8 cpe:/o:linux:linux_kernel:2.6.25.9 cpe:/o:linux:linux_kernel:2.6.25.10 cpe:/o:linux:linux_kernel:2.6.25.11 cpe:/o:linux:linux_kernel:2.6.25.12 cpe:/o:linux:linux_kernel:2.6.25.13 cpe:/o:linux:linux_kernel:2.6.25.14 cpe:/o:linux:linux_kernel:2.6.25.15 cpe:/o:linux:linux_kernel:2.6.25.16 cpe:/o:linux:linux_kernel:2.6.25.17 cpe:/o:linux:linux_kernel:2.6.25.18 cpe:/o:linux:linux_kernel:2.6.25.19 cpe:/o:linux:linux_kernel:2.6.25.20 cpe:/o:linux:linux_kernel:2.6.26 cpe:/o:linux:linux_kernel:2.6.26:rc1 cpe:/o:linux:linux_kernel:2.6.26:rc2 cpe:/o:linux:linux_kernel:2.6.26:rc3 cpe:/o:linux:linux_kernel:2.6.26:rc4 cpe:/o:linux:linux_kernel:2.6.26:rc5 cpe:/o:linux:linux_kernel:2.6.26:rc6 cpe:/o:linux:linux_kernel:2.6.26:rc7 cpe:/o:linux:linux_kernel:2.6.26:rc8 cpe:/o:linux:linux_kernel:2.6.26:rc9 cpe:/o:linux:linux_kernel:2.6.26.1 cpe:/o:linux:linux_kernel:2.6.26.2 cpe:/o:linux:linux_kernel:2.6.26.3 cpe:/o:linux:linux_kernel:2.6.26.4 cpe:/o:linux:linux_kernel:2.6.26.5 cpe:/o:linux:linux_kernel:2.6.26.6 cpe:/o:linux:linux_kernel:2.6.26.7 cpe:/o:linux:linux_kernel:2.6.26.8 cpe:/o:linux:linux_kernel:2.6.27 cpe:/o:linux:linux_kernel:2.6.27:rc1 cpe:/o:linux:linux_kernel:2.6.27:rc2 cpe:/o:linux:linux_kernel:2.6.27:rc3 cpe:/o:linux:linux_kernel:2.6.27:rc4 cpe:/o:linux:linux_kernel:2.6.27:rc5 cpe:/o:linux:linux_kernel:2.6.27:rc6 cpe:/o:linux:linux_kernel:2.6.27:rc7 cpe:/o:linux:linux_kernel:2.6.27:rc8 cpe:/o:linux:linux_kernel:2.6.27:rc9 cpe:/o:linux:linux_kernel:2.6.27.1 cpe:/o:linux:linux_kernel:2.6.27.2 cpe:/o:linux:linux_kernel:2.6.27.3 cpe:/o:linux:linux_kernel:2.6.27.4 cpe:/o:linux:linux_kernel:2.6.27.5 cpe:/o:linux:linux_kernel:2.6.27.6 cpe:/o:linux:linux_kernel:2.6.27.7 cpe:/o:linux:linux_kernel:2.6.27.8 cpe:/o:linux:linux_kernel:2.6.27.9 cpe:/o:linux:linux_kernel:2.6.27.10 cpe:/o:linux:linux_kernel:2.6.27.11 cpe:/o:linux:linux_kernel:2.6.27.12 cpe:/o:linux:linux_kernel:2.6.27.13 cpe:/o:linux:linux_kernel:2.6.27.14 cpe:/o:linux:linux_kernel:2.6.27.15 cpe:/o:linux:linux_kernel:2.6.27.16 cpe:/o:linux:linux_kernel:2.6.27.17 cpe:/o:linux:linux_kernel:2.6.27.18 cpe:/o:linux:linux_kernel:2.6.27.19 cpe:/o:linux:linux_kernel:2.6.27.20 cpe:/o:linux:linux_kernel:2.6.27.21 cpe:/o:linux:linux_kernel:2.6.27.22 cpe:/o:linux:linux_kernel:2.6.27.23 cpe:/o:linux:linux_kernel:2.6.27.24 cpe:/o:linux:linux_kernel:2.6.27.25 cpe:/o:linux:linux_kernel:2.6.27.26 cpe:/o:linux:linux_kernel:2.6.27.27 cpe:/o:linux:linux_kernel:2.6.27.28 cpe:/o:linux:linux_kernel:2.6.27.29 cpe:/o:linux:linux_kernel:2.6.27.30 cpe:/o:linux:linux_kernel:2.6.27.31 cpe:/o:linux:linux_kernel:2.6.27.32 cpe:/o:linux:linux_kernel:2.6.27.33 cpe:/o:linux:linux_kernel:2.6.27.34 cpe:/o:linux:linux_kernel:2.6.27.35 cpe:/o:linux:linux_kernel:2.6.27.36 cpe:/o:linux:linux_kernel:2.6.27.37 cpe:/o:linux:linux_kernel:2.6.27.38 cpe:/o:linux:linux_kernel:2.6.27.39 cpe:/o:linux:linux_kernel:2.6.27.40 cpe:/o:linux:linux_kernel:2.6.27.41 cpe:/o:linux:linux_kernel:2.6.27.42 cpe:/o:linux:linux_kernel:2.6.27.43 cpe:/o:linux:linux_kernel:2.6.27.44 cpe:/o:linux:linux_kernel:2.6.27.45 cpe:/o:linux:linux_kernel:2.6.27.46 cpe:/o:linux:linux_kernel:2.6.27.47 cpe:/o:linux:linux_kernel:2.6.27.48 cpe:/o:linux:linux_kernel:2.6.27.49 cpe:/o:linux:linux_kernel:2.6.27.50 cpe:/o:linux:linux_kernel:2.6.27.51 cpe:/o:linux:linux_kernel:2.6.27.52 cpe:/o:linux:linux_kernel:2.6.27.53 cpe:/o:linux:linux_kernel:2.6.27.54 cpe:/o:linux:linux_kernel:2.6.27.55 cpe:/o:linux:linux_kernel:2.6.27.56 cpe:/o:linux:linux_kernel:2.6.27.57 cpe:/o:linux:linux_kernel:2.6.27.58 cpe:/o:linux:linux_kernel:2.6.27.59 cpe:/o:linux:linux_kernel:2.6.27.60 cpe:/o:linux:linux_kernel:2.6.27.61 cpe:/o:linux:linux_kernel:2.6.27.62 cpe:/o:linux:linux_kernel:2.6.28 cpe:/o:linux:linux_kernel:2.6.28:rc1 cpe:/o:linux:linux_kernel:2.6.28:rc2 cpe:/o:linux:linux_kernel:2.6.28:rc3 cpe:/o:linux:linux_kernel:2.6.28:rc4 cpe:/o:linux:linux_kernel:2.6.28:rc5 cpe:/o:linux:linux_kernel:2.6.28:rc6 cpe:/o:linux:linux_kernel:2.6.28:rc7 cpe:/o:linux:linux_kernel:2.6.28:rc8 cpe:/o:linux:linux_kernel:2.6.28:rc9 cpe:/o:linux:linux_kernel:2.6.28.1 cpe:/o:linux:linux_kernel:2.6.28.2 cpe:/o:linux:linux_kernel:2.6.28.3 cpe:/o:linux:linux_kernel:2.6.28.4 cpe:/o:linux:linux_kernel:2.6.28.5 cpe:/o:linux:linux_kernel:2.6.28.6 cpe:/o:linux:linux_kernel:2.6.28.7 cpe:/o:linux:linux_kernel:2.6.28.8 cpe:/o:linux:linux_kernel:2.6.28.9 cpe:/o:linux:linux_kernel:2.6.28.10 cpe:/o:linux:linux_kernel:2.6.29 cpe:/o:linux:linux_kernel:2.6.29:rc1 cpe:/o:linux:linux_kernel:2.6.29:rc2 cpe:/o:linux:linux_kernel:2.6.29:rc3 cpe:/o:linux:linux_kernel:2.6.29:rc4 cpe:/o:linux:linux_kernel:2.6.29:rc5 cpe:/o:linux:linux_kernel:2.6.29:rc6 cpe:/o:linux:linux_kernel:2.6.29:rc7 cpe:/o:linux:linux_kernel:2.6.29:rc8 cpe:/o:linux:linux_kernel:2.6.29.1 cpe:/o:linux:linux_kernel:2.6.29.2 cpe:/o:linux:linux_kernel:2.6.29.3 cpe:/o:linux:linux_kernel:2.6.29.4 cpe:/o:linux:linux_kernel:2.6.29.5 cpe:/o:linux:linux_kernel:2.6.29.6 cpe:/o:linux:linux_kernel:2.6.30 cpe:/o:linux:linux_kernel:2.6.30:rc1 cpe:/o:linux:linux_kernel:2.6.30:rc2 cpe:/o:linux:linux_kernel:2.6.30:rc3 cpe:/o:linux:linux_kernel:2.6.30:rc4 cpe:/o:linux:linux_kernel:2.6.30:rc5 cpe:/o:linux:linux_kernel:2.6.30:rc6 cpe:/o:linux:linux_kernel:2.6.30:rc7 cpe:/o:linux:linux_kernel:2.6.30:rc8 cpe:/o:linux:linux_kernel:2.6.30.1 cpe:/o:linux:linux_kernel:2.6.30.2 cpe:/o:linux:linux_kernel:2.6.30.3 cpe:/o:linux:linux_kernel:2.6.30.4 cpe:/o:linux:linux_kernel:2.6.30.5 cpe:/o:linux:linux_kernel:2.6.30.6 cpe:/o:linux:linux_kernel:2.6.30.7 cpe:/o:linux:linux_kernel:2.6.30.8 cpe:/o:linux:linux_kernel:2.6.30.9 cpe:/o:linux:linux_kernel:2.6.30.10 cpe:/o:linux:linux_kernel:2.6.31 cpe:/o:linux:linux_kernel:2.6.31:rc1 cpe:/o:linux:linux_kernel:2.6.31:rc2 cpe:/o:linux:linux_kernel:2.6.31:rc3 cpe:/o:linux:linux_kernel:2.6.31:rc4 cpe:/o:linux:linux_kernel:2.6.31:rc5 cpe:/o:linux:linux_kernel:2.6.31:rc6 cpe:/o:linux:linux_kernel:2.6.31:rc7 cpe:/o:linux:linux_kernel:2.6.31:rc8 cpe:/o:linux:linux_kernel:2.6.31:rc9 cpe:/o:linux:linux_kernel:2.6.31.1 cpe:/o:linux:linux_kernel:2.6.31.2 cpe:/o:linux:linux_kernel:2.6.31.3 cpe:/o:linux:linux_kernel:2.6.31.4 cpe:/o:linux:linux_kernel:2.6.31.5 cpe:/o:linux:linux_kernel:2.6.31.6 cpe:/o:linux:linux_kernel:2.6.31.7 cpe:/o:linux:linux_kernel:2.6.31.8 cpe:/o:linux:linux_kernel:2.6.31.9 cpe:/o:linux:linux_kernel:2.6.31.10 cpe:/o:linux:linux_kernel:2.6.31.11 cpe:/o:linux:linux_kernel:2.6.31.12 cpe:/o:linux:linux_kernel:2.6.31.13 cpe:/o:linux:linux_kernel:2.6.31.14 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:2.6.32:rc1 cpe:/o:linux:linux_kernel:2.6.32:rc2 cpe:/o:linux:linux_kernel:2.6.32:rc3 cpe:/o:linux:linux_kernel:2.6.32:rc4 cpe:/o:linux:linux_kernel:2.6.32:rc5 cpe:/o:linux:linux_kernel:2.6.32:rc6 cpe:/o:linux:linux_kernel:2.6.32:rc7 cpe:/o:linux:linux_kernel:2.6.32:rc8 cpe:/o:linux:linux_kernel:2.6.32.1 cpe:/o:linux:linux_kernel:2.6.32.2 cpe:/o:linux:linux_kernel:2.6.32.3

CVE-2010-0006

2010-01-26T13:30:01.057-05:00

2018-11-13T11:41:44.990-05:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2010-01-27T09:19:00.000-05:00

CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=300951 MISC http://cert.fi/en/reports/2010/vulnerability341748.html CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=2570a4f5428bcdb1077622342181755741e7fa60 FEDORA FEDORA-2010-0919 SUSE SUSE-SA:2010:010 MLIST [linux-netdev] 20100114 [PATCH]: ipv6: skb_dst() can be NULL in ipv6_hop_jumbo(). CONFIRM http://security-tracker.debian.org/tracker/CVE-2010-0006 CONFIRM http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.4 MLIST [oss-security] 20100114 CVE-2010-0006 - kernel: ipv6: skb_dst() can be NULL in ipv6_hop_jumbo() BID 37810 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=555217 The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.32.4, when network namespaces are enabled, allows remote attackers to cause a denial of service (NULL pointer dereference) via an invalid IPv6 jumbogram, a related issue to CVE-2007-4567.

CVE-2010-0007

2010-01-19T11:30:01.057-05:00

2018-10-10T15:49:43.670-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=dce766af541f6605fa9889892c0280bab31c66ab FEDORA FEDORA-2010-0919 SUSE SUSE-SA:2010:007 SUSE SUSE-SA:2010:010 SUSE SUSE-SA:2010:012 SUSE SUSE-SA:2010:013 SUSE SUSE-SA:2010:014 DEBIAN DSA-1996 DEBIAN DSA-2005 CONFIRM http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.33-rc4 MANDRIVA MDVSA-2011:051 MLIST [oss-security] 20100113 CVE Request: kernel ebtables perm check MLIST [oss-security] 20100114 Re: CVE Request: kernel ebtables perm check REDHAT RHSA-2010:0147 REDHAT RHSA-2010:0161 BUGTRAQ 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX BID 37762 CONFIRM http://www.vmware.com/security/advisories/VMSA-2011-0003.html VUPEN ADV-2010-0109 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=555238 XF kernel-ebtables-security-bypass(55602) REDHAT RHSA-2010:0146 net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure arbitrary network-traffic filtering via a modified ebtables application.

cpe:/o:linux:linux_kernel:2.6 cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.10 cpe:/o:linux:linux_kernel:2.6.11 cpe:/o:linux:linux_kernel:2.6.11.1 cpe:/o:linux:linux_kernel:2.6.11.2 cpe:/o:linux:linux_kernel:2.6.11.3 cpe:/o:linux:linux_kernel:2.6.11.4 cpe:/o:linux:linux_kernel:2.6.11.5 cpe:/o:linux:linux_kernel:2.6.11.6 cpe:/o:linux:linux_kernel:2.6.11.7 cpe:/o:linux:linux_kernel:2.6.11.8 cpe:/o:linux:linux_kernel:2.6.11.9 cpe:/o:linux:linux_kernel:2.6.11.10 cpe:/o:linux:linux_kernel:2.6.11.11 cpe:/o:linux:linux_kernel:2.6.11.12 cpe:/o:linux:linux_kernel:2.6.12 cpe:/o:linux:linux_kernel:2.6.12.1 cpe:/o:linux:linux_kernel:2.6.12.2 cpe:/o:linux:linux_kernel:2.6.12.3 cpe:/o:linux:linux_kernel:2.6.12.4 cpe:/o:linux:linux_kernel:2.6.12.5 cpe:/o:linux:linux_kernel:2.6.12.6 cpe:/o:linux:linux_kernel:2.6.13 cpe:/o:linux:linux_kernel:2.6.13.1 cpe:/o:linux:linux_kernel:2.6.13.2 cpe:/o:linux:linux_kernel:2.6.13.3 cpe:/o:linux:linux_kernel:2.6.13.4 cpe:/o:linux:linux_kernel:2.6.13.5 cpe:/o:linux:linux_kernel:2.6.14 cpe:/o:linux:linux_kernel:2.6.14.1 cpe:/o:linux:linux_kernel:2.6.14.2 cpe:/o:linux:linux_kernel:2.6.14.3 cpe:/o:linux:linux_kernel:2.6.14.4 cpe:/o:linux:linux_kernel:2.6.14.5 cpe:/o:linux:linux_kernel:2.6.14.6 cpe:/o:linux:linux_kernel:2.6.14.7 cpe:/o:linux:linux_kernel:2.6.15 cpe:/o:linux:linux_kernel:2.6.15.1 cpe:/o:linux:linux_kernel:2.6.15.2 cpe:/o:linux:linux_kernel:2.6.15.3 cpe:/o:linux:linux_kernel:2.6.15.4 cpe:/o:linux:linux_kernel:2.6.15.5 cpe:/o:linux:linux_kernel:2.6.15.6 cpe:/o:linux:linux_kernel:2.6.15.7 cpe:/o:linux:linux_kernel:2.6.16 cpe:/o:linux:linux_kernel:2.6.16.1 cpe:/o:linux:linux_kernel:2.6.16.2 cpe:/o:linux:linux_kernel:2.6.16.3 cpe:/o:linux:linux_kernel:2.6.16.4 cpe:/o:linux:linux_kernel:2.6.16.5 cpe:/o:linux:linux_kernel:2.6.16.6 cpe:/o:linux:linux_kernel:2.6.16.7 cpe:/o:linux:linux_kernel:2.6.16.8 cpe:/o:linux:linux_kernel:2.6.16.9 cpe:/o:linux:linux_kernel:2.6.16.10 cpe:/o:linux:linux_kernel:2.6.16.11 cpe:/o:linux:linux_kernel:2.6.16.12 cpe:/o:linux:linux_kernel:2.6.16.13 cpe:/o:linux:linux_kernel:2.6.16.14 cpe:/o:linux:linux_kernel:2.6.16.15 cpe:/o:linux:linux_kernel:2.6.16.16 cpe:/o:linux:linux_kernel:2.6.16.17 cpe:/o:linux:linux_kernel:2.6.16.18 cpe:/o:linux:linux_kernel:2.6.16.19 cpe:/o:linux:linux_kernel:2.6.16.20 cpe:/o:linux:linux_kernel:2.6.16.21 cpe:/o:linux:linux_kernel:2.6.16.22 cpe:/o:linux:linux_kernel:2.6.16.23 cpe:/o:linux:linux_kernel:2.6.16.24 cpe:/o:linux:linux_kernel:2.6.16.25 cpe:/o:linux:linux_kernel:2.6.16.26 cpe:/o:linux:linux_kernel:2.6.16.27 cpe:/o:linux:linux_kernel:2.6.16.28 cpe:/o:linux:linux_kernel:2.6.16.29 cpe:/o:linux:linux_kernel:2.6.16.30 cpe:/o:linux:linux_kernel:2.6.16.31 cpe:/o:linux:linux_kernel:2.6.16.32 cpe:/o:linux:linux_kernel:2.6.16.33 cpe:/o:linux:linux_kernel:2.6.16.34 cpe:/o:linux:linux_kernel:2.6.16.35 cpe:/o:linux:linux_kernel:2.6.16.36 cpe:/o:linux:linux_kernel:2.6.16.37 cpe:/o:linux:linux_kernel:2.6.16.38 cpe:/o:linux:linux_kernel:2.6.16.39 cpe:/o:linux:linux_kernel:2.6.16.40 cpe:/o:linux:linux_kernel:2.6.16.41 cpe:/o:linux:linux_kernel:2.6.16.42 cpe:/o:linux:linux_kernel:2.6.16.43 cpe:/o:linux:linux_kernel:2.6.16.44 cpe:/o:linux:linux_kernel:2.6.16.45 cpe:/o:linux:linux_kernel:2.6.16.46 cpe:/o:linux:linux_kernel:2.6.16.47 cpe:/o:linux:linux_kernel:2.6.16.48 cpe:/o:linux:linux_kernel:2.6.16.49 cpe:/o:linux:linux_kernel:2.6.16.50 cpe:/o:linux:linux_kernel:2.6.16.51 cpe:/o:linux:linux_kernel:2.6.16.52 cpe:/o:linux:linux_kernel:2.6.16.53 cpe:/o:linux:linux_kernel:2.6.16.54 cpe:/o:linux:linux_kernel:2.6.16.55 cpe:/o:linux:linux_kernel:2.6.16.56 cpe:/o:linux:linux_kernel:2.6.16.57 cpe:/o:linux:linux_kernel:2.6.16.58 cpe:/o:linux:linux_kernel:2.6.16.59 cpe:/o:linux:linux_kernel:2.6.16.60 cpe:/o:linux:linux_kernel:2.6.16.61 cpe:/o:linux:linux_kernel:2.6.16.62 cpe:/o:linux:linux_kernel:2.6.17 cpe:/o:linux:linux_kernel:2.6.17.1 cpe:/o:linux:linux_kernel:2.6.17.2 cpe:/o:linux:linux_kernel:2.6.17.3 cpe:/o:linux:linux_kernel:2.6.17.4 cpe:/o:linux:linux_kernel:2.6.17.5 cpe:/o:linux:linux_kernel:2.6.17.6 cpe:/o:linux:linux_kernel:2.6.17.7 cpe:/o:linux:linux_kernel:2.6.17.8 cpe:/o:linux:linux_kernel:2.6.17.9 cpe:/o:linux:linux_kernel:2.6.17.10 cpe:/o:linux:linux_kernel:2.6.17.11 cpe:/o:linux:linux_kernel:2.6.17.12 cpe:/o:linux:linux_kernel:2.6.17.13 cpe:/o:linux:linux_kernel:2.6.17.14 cpe:/o:linux:linux_kernel:2.6.18 cpe:/o:linux:linux_kernel:2.6.18:rc1 cpe:/o:linux:linux_kernel:2.6.18:rc2 cpe:/o:linux:linux_kernel:2.6.18:rc3 cpe:/o:linux:linux_kernel:2.6.18:rc4 cpe:/o:linux:linux_kernel:2.6.18:rc5 cpe:/o:linux:linux_kernel:2.6.18:rc6 cpe:/o:linux:linux_kernel:2.6.18:rc7 cpe:/o:linux:linux_kernel:2.6.18.1 cpe:/o:linux:linux_kernel:2.6.18.2 cpe:/o:linux:linux_kernel:2.6.18.3 cpe:/o:linux:linux_kernel:2.6.18.4 cpe:/o:linux:linux_kernel:2.6.18.5 cpe:/o:linux:linux_kernel:2.6.18.6 cpe:/o:linux:linux_kernel:2.6.18.7 cpe:/o:linux:linux_kernel:2.6.18.8 cpe:/o:linux:linux_kernel:2.6.19 cpe:/o:linux:linux_kernel:2.6.19.1 cpe:/o:linux:linux_kernel:2.6.19.2 cpe:/o:linux:linux_kernel:2.6.19.3 cpe:/o:linux:linux_kernel:2.6.19.4 cpe:/o:linux:linux_kernel:2.6.19.5 cpe:/o:linux:linux_kernel:2.6.19.6 cpe:/o:linux:linux_kernel:2.6.19.7 cpe:/o:linux:linux_kernel:2.6.20 cpe:/o:linux:linux_kernel:2.6.20.1 cpe:/o:linux:linux_kernel:2.6.20.2 cpe:/o:linux:linux_kernel:2.6.20.3 cpe:/o:linux:linux_kernel:2.6.20.4 cpe:/o:linux:linux_kernel:2.6.20.5 cpe:/o:linux:linux_kernel:2.6.20.6 cpe:/o:linux:linux_kernel:2.6.20.7 cpe:/o:linux:linux_kernel:2.6.20.8 cpe:/o:linux:linux_kernel:2.6.20.9 cpe:/o:linux:linux_kernel:2.6.20.10 cpe:/o:linux:linux_kernel:2.6.20.11 cpe:/o:linux:linux_kernel:2.6.20.12 cpe:/o:linux:linux_kernel:2.6.20.13 cpe:/o:linux:linux_kernel:2.6.20.14 cpe:/o:linux:linux_kernel:2.6.20.15 cpe:/o:linux:linux_kernel:2.6.20.16 cpe:/o:linux:linux_kernel:2.6.20.17 cpe:/o:linux:linux_kernel:2.6.20.18 cpe:/o:linux:linux_kernel:2.6.20.19 cpe:/o:linux:linux_kernel:2.6.20.20 cpe:/o:linux:linux_kernel:2.6.20.21 cpe:/o:linux:linux_kernel:2.6.21 cpe:/o:linux:linux_kernel:2.6.21.1 cpe:/o:linux:linux_kernel:2.6.21.2 cpe:/o:linux:linux_kernel:2.6.21.3 cpe:/o:linux:linux_kernel:2.6.21.4 cpe:/o:linux:linux_kernel:2.6.21.5 cpe:/o:linux:linux_kernel:2.6.21.6 cpe:/o:linux:linux_kernel:2.6.21.7 cpe:/o:linux:linux_kernel:2.6.22 cpe:/o:linux:linux_kernel:2.6.22.1 cpe:/o:linux:linux_kernel:2.6.22.2 cpe:/o:linux:linux_kernel:2.6.22.3 cpe:/o:linux:linux_kernel:2.6.22.4 cpe:/o:linux:linux_kernel:2.6.22.5 cpe:/o:linux:linux_kernel:2.6.22.6 cpe:/o:linux:linux_kernel:2.6.22.7 cpe:/o:linux:linux_kernel:2.6.22.8 cpe:/o:linux:linux_kernel:2.6.22.9 cpe:/o:linux:linux_kernel:2.6.22.10 cpe:/o:linux:linux_kernel:2.6.22.11 cpe:/o:linux:linux_kernel:2.6.22.12 cpe:/o:linux:linux_kernel:2.6.22.13 cpe:/o:linux:linux_kernel:2.6.22.14 cpe:/o:linux:linux_kernel:2.6.22.15 cpe:/o:linux:linux_kernel:2.6.22.16 cpe:/o:linux:linux_kernel:2.6.22.17 cpe:/o:linux:linux_kernel:2.6.22.18 cpe:/o:linux:linux_kernel:2.6.22.19

CVE-2010-0008

2010-03-19T15:30:00.360-04:00

2018-10-10T15:49:48.187-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ece25dfa0991f65c4e1d26beb1c3c45bda4239b8 CONFIRM http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23 MLIST [oss-security] 20100317 CVE-2010-0008 kernel: sctp remote denial of service REDHAT RHSA-2010:0147 REDHAT RHSA-2010:0342 BUGTRAQ 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX CONFIRM http://www.vmware.com/security/advisories/VMSA-2011-0003.html CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=555658 REDHAT RHSA-2010:0146 The sctp_rcv_ootb function in the SCTP implementation in the Linux kernel before 2.6.23 allows remote attackers to cause a denial of service (infinite loop) via (1) an Out Of The Blue (OOTB) chunk or (2) a chunk of zero length.

cpe:/a:apache:couchdb:0.8.0 cpe:/a:apache:couchdb:0.8.1 cpe:/a:apache:couchdb:0.9.0 cpe:/a:apache:couchdb:0.9.1 cpe:/a:apache:couchdb:0.9.2 cpe:/a:apache:couchdb:0.10.0 cpe:/a:apache:couchdb:0.10.1

CVE-2010-0009

2010-04-05T12:30:00.547-04:00

2018-10-10T15:49:50.013-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20100331 [SECURITY] CVE-2008-2370: Apache CouchDB Timing Attack Vulnerability CONFIRM http://couchdb.apache.org/security.html BUGTRAQ 20100331 [SECURITY] CVE-2008-2370: Apache CouchDB Timing Attack Vulnerability BID 39116 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=578572 Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify (1) hashes or (2) passwords.

cpe:/a:apache:http_server:0.8.11 cpe:/a:apache:http_server:0.8.14 cpe:/a:apache:http_server:1.0 cpe:/a:apache:http_server:1.0.3 cpe:/a:apache:http_server:1.0.5 cpe:/a:apache:http_server:1.1 cpe:/a:apache:http_server:1.2 cpe:/a:apache:http_server:1.2.4 cpe:/a:apache:http_server:1.2.5 cpe:/a:apache:http_server:1.2.6 cpe:/a:apache:http_server:1.3 cpe:/a:apache:http_server:1.3.0 cpe:/a:apache:http_server:1.3.1 cpe:/a:apache:http_server:1.3.2 cpe:/a:apache:http_server:1.3.3 cpe:/a:apache:http_server:1.3.4 cpe:/a:apache:http_server:1.3.10 cpe:/a:apache:http_server:1.3.11 cpe:/a:apache:http_server:1.3.12 cpe:/a:apache:http_server:1.3.13 cpe:/a:apache:http_server:1.3.14 cpe:/a:apache:http_server:1.3.15 cpe:/a:apache:http_server:1.3.17 cpe:/a:apache:http_server:1.3.18 cpe:/a:apache:http_server:1.3.19 cpe:/a:apache:http_server:1.3.20 cpe:/a:apache:http_server:1.3.22 cpe:/a:apache:http_server:1.3.23 cpe:/a:apache:http_server:1.3.24 cpe:/a:apache:http_server:1.3.25 cpe:/a:apache:http_server:1.3.26 cpe:/a:apache:http_server:1.3.27 cpe:/a:apache:http_server:1.3.28 cpe:/a:apache:http_server:1.3.29 cpe:/a:apache:http_server:1.3.30 cpe:/a:apache:http_server:1.3.31 cpe:/a:apache:http_server:1.3.32 cpe:/a:apache:http_server:1.3.33 cpe:/a:apache:http_server:1.3.34 cpe:/a:apache:http_server:1.3.35 cpe:/a:apache:http_server:1.3.36 cpe:/a:apache:http_server:1.3.37 cpe:/a:apache:http_server:1.3.38 cpe:/a:apache:http_server:1.3.39 cpe:/a:apache:http_server:1.3.40 cpe:/a:apache:http_server:1.3.41

CVE-2010-0010

2010-02-02T11:30:02.437-05:00

2018-10-10T15:49:50.513-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov FULLDISC 20100127 Mod_proxy from apache 1.3 - Integer overflow which causes heap overflow. MISC http://blog.pi3.com.pl/?p=69 CONFIRM http://httpd.apache.org/dev/dist/CHANGES_1.3.42 SUSE SUSE-SR:2010:010 HP SSRT090208 MISC http://packetstormsecurity.org/1001-exploits/modproxy-overflow.txt MISC http://site.pi3.com.pl/adv/mod_proxy.txt BUGTRAQ 20100127 Mod_proxy from apache 1.3 - Integer overflow which causes heap overflow. BID 37966 SECTRACK 1023533 VUPEN ADV-2010-0240 VUPEN ADV-2010-1001 XF modproxy-approxysendfb-bo(55941) Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the Apache HTTP Server before 1.3.42 on 64-bit platforms allows remote origin servers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a large chunk size that triggers a heap-based buffer overflow.

cpe:/a:uzbl:uzbl:2009.12.22

CVE-2010-0011

2010-02-25T14:30:00.437-05:00

2017-08-16T21:31:51.600-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://github.com/Dieterbe/uzbl/commit/1958b52d41cba96956dc1995660de49525ed1047 CONFIRM http://github.com/Dieterbe/uzbl/downloads MLIST [uzbl-dev] 20100102 Fw: Uzbl: security issue MLIST [oss-security] 20100106 CVE request - uzbl remote code execution MLIST [oss-security] 20100106 Re: CVE request - uzbl remote code execution CONFIRM http://www.uzbl.org/news.php?id=22 XF uzbl-evaljs-command-execution(56612) The eval_js function in uzbl-core.c in Uzbl before 2010.01.05 exposes the run method of the Uzbl object, which allows remote attackers to execute arbitrary commands via JavaScript code.

cpe:/a:transmissionbt:transmission:1.22 cpe:/a:transmissionbt:transmission:1.34 cpe:/a:transmissionbt:transmission:1.75 cpe:/a:transmissionbt:transmission:1.76

CVE-2010-0012

2010-01-08T12:30:02.317-05:00

2017-08-16T21:31:51.663-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov SUSE SUSE-SA:2010:008 CONFIRM http://security.debian.org/pool/updates/main/t/transmission/transmission_1.22-1+lenny2.diff.gz CONFIRM http://trac.transmissionbt.com/changeset/9829/ CONFIRM http://trac.transmissionbt.com/wiki/Changes#version-1.77 DEBIAN DSA-1967 MLIST [debian-devel-changes] 20100105 Accepted transmission 1.77-1 (source all amd64) MLIST [oss-security] 20100106 CVE Request: Transmission MLIST [oss-security] 20100106 Re: CVE Request: Transmission VUPEN ADV-2010-0071 XF transmission-name-directory-traversal(55454) CONFIRM https://launchpad.net/bugs/500625 Directory traversal vulnerability in libtransmission/metainfo.c in Transmission 1.22, 1.34, 1.75, and 1.76 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a pathname within a .torrent file.

cpe:/a:adium:adium:1.3.8 cpe:/a:pidgin:pidgin:2.6.4

CVE-2010-0013

2010-01-09T13:30:01.697-05:00

2017-09-18T21:30:09.797-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://d.pidgin.im/viewmtn/revision/info/3d02401cf232459fc80c0837d31e05fae7ae5467 MISC http://d.pidgin.im/viewmtn/revision/info/4be2df4f72bd8a55cdae7f2554b73342a497c92f CONFIRM http://d.pidgin.im/viewmtn/revision/info/c64a1adc8bda2b4aeaae1f273541afbc4f71b810 CONFIRM http://developer.pidgin.im/viewmtn/revision/diff/3d02401cf232459fc80c0837d31e05fae7ae5467/with/c64a1adc8bda2b4aeaae1f273541afbc4f71b810/libpurple/protocols/msn/slp.c MISC http://events.ccc.de/congress/2009/Fahrplan/events/3596.en.html FEDORA FEDORA-2010-0368 FEDORA FEDORA-2010-0429 SUSE SUSE-SR:2010:006 SUNALERT 277450 SUNALERT 1022203 MANDRIVA MDVSA-2010:085 MLIST [oss-security] 20100102 CVE request - pidgin MSN arbitrary file upload MLIST [oss-security] 20100107 Re: CVE request - pidgin MSN arbitrary file upload MLIST [oss-security] 20100107 Re: CVE request - pidgin MSN arbitrary file upload VUPEN ADV-2009-3662 VUPEN ADV-2009-3663 VUPEN ADV-2010-1020 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=552483 Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in an application/x-msnmsgrp2p MSN emoticon (aka custom smiley) request, a related issue to CVE-2004-0122. NOTE: it could be argued that this is resultant from a vulnerability in which an emoticon download request is processed even without a preceding text/x-mms-emoticon message that announced availability of the emoticon.

cpe:/a:fedoraproject:sssd:0.2.1 cpe:/a:fedoraproject:sssd:0.3.0 cpe:/a:fedoraproject:sssd:0.3.1 cpe:/a:fedoraproject:sssd:0.3.2 cpe:/a:fedoraproject:sssd:0.3.3 cpe:/a:fedoraproject:sssd:0.4.0 cpe:/a:fedoraproject:sssd:0.4.1 cpe:/a:fedoraproject:sssd:0.5.0 cpe:/a:fedoraproject:sssd:0.6.0 cpe:/a:fedoraproject:sssd:0.6.1 cpe:/a:fedoraproject:sssd:0.7.0 cpe:/a:fedoraproject:sssd:0.7.1 cpe:/a:fedoraproject:sssd:0.99.0 cpe:/a:fedoraproject:sssd:0.99.1 cpe:/a:fedoraproject:sssd:1.0.0

CVE-2010-0014

2010-01-14T13:30:00.513-05:00

2010-01-15T00:00:00.000-05:00

3.7

LOCAL

HIGH

NONE

PARTIAL

http://nvd.nist.gov

2010-01-15T09:43:00.000-05:00

BID 37747 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=553233 CONFIRM https://fedorahosted.org/sssd/wiki/Releases/Notes-1.0.1 System Security Services Daemon (SSSD) before 1.0.1, when the krb5 auth_provider is configured but the KDC is unreachable, allows physically proximate attackers to authenticate, via an arbitrary password, to the screen-locking program on a workstation that has any user's Kerberos ticket-granting ticket (TGT); and might allow remote attackers to bypass intended access restrictions via vectors involving an arbitrary password in conjunction with a valid TGT.

cpe:/a:gnu:glibc:2.7 cpe:/a:gnu:glibc:2.10.2

CVE-2010-0015

2010-01-14T13:30:00.577-05:00

2016-12-06T21:59:49.473-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560333 MLIST [oss-security] 20100111 Re: CVE id request: GNU libc: NIS shadow password leakage MLIST [oss-security] 20100111 Re: CVE id request: GNU libc: NIS shadow password leakage MISC http://sourceware.org/bugzilla/show_bug.cgi?id=11134 CONFIRM http://svn.debian.org/viewsvn/pkg-glibc/glibc-package/trunk/debian/patches/any/submitted-nis-shadow.diff?revision=4062&view=markup MANDRIVA MDVSA-2010:111 MANDRIVA MDVSA-2010:112 MLIST [oss-security] 20100107 CVE id request: GNU libc: NIS shadow password leakage MLIST [oss-security] 20100108 Re: CVE id request: GNU libc: NIS shadow password leakage MLIST [oss-security] 20100109 Re: CVE id request: GNU libc: NIS shadow password leakage MLIST [oss-security] 20100111 Re: CVE id request: GNU libc: NIS shadow password leakage SUSE SUSE-SA:2010:052 nis/nss_nis/nis-pwd.c in the GNU C Library (aka glibc or libc6) 2.7 and Embedded GLIBC (EGLIBC) 2.10.2 adds information from the passwd.adjunct.byname map to entries in the passwd map, which allows remote attackers to obtain the encrypted passwords of NIS accounts by calling the getpwnam function.

cpe:/o:microsoft:windows_2000:-:sp4 cpe:/o:microsoft:windows_server_2003::sp2 cpe:/o:microsoft:windows_xp::sp2:professional_x64 cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_xp:-:sp2:home cpe:/o:microsoft:windows_xp:-:sp3:home

CVE-2010-0016

2010-02-10T13:30:00.877-05:00

2019-02-26T09:04:00.993-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CERT TA10-040A MS MS10-006 The SMB client implementation in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate response fields, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted response, aka "SMB Client Pool Corruption Vulnerability."

cpe:/o:microsoft:windows_7:- cpe:/o:microsoft:windows_server_2008:::itanium cpe:/o:microsoft:windows_server_2008:::x32 cpe:/o:microsoft:windows_server_2008:::x64 cpe:/o:microsoft:windows_server_2008:-:sp2:itanium cpe:/o:microsoft:windows_server_2008:-:sp2:x64 cpe:/o:microsoft:windows_server_2008:r2 cpe:/o:microsoft:windows_vista cpe:/o:microsoft:windows_vista::sp1:x64 cpe:/o:microsoft:windows_vista::sp2:x64 cpe:/o:microsoft:windows_vista:-:-:x64

CVE-2010-0017

2010-02-10T13:30:00.923-05:00

2018-10-30T12:28:01.187-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CERT TA10-040A MS MS10-006 Race condition in the SMB client implementation in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code, and in the SMB client implementation in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows local users to gain privileges, via a crafted SMB Negotiate response, aka "SMB Client Race Condition Vulnerability."

cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server::sp2 cpe:/o:microsoft:windows_2003_server::sp2:itanium cpe:/o:microsoft:windows_2003_server::sp2:x64 cpe:/o:microsoft:windows_7:- cpe:/o:microsoft:windows_server_2008:::itanium cpe:/o:microsoft:windows_server_2008:::x32 cpe:/o:microsoft:windows_server_2008:::x64 cpe:/o:microsoft:windows_server_2008::r2:itanium cpe:/o:microsoft:windows_server_2008::r2:x64 cpe:/o:microsoft:windows_server_2008::sp2:x32 cpe:/o:microsoft:windows_server_2008::sp2:x64 cpe:/o:microsoft:windows_server_2008:-:sp2:itanium cpe:/o:microsoft:windows_vista cpe:/o:microsoft:windows_vista:::x64 cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_vista::sp1:x64 cpe:/o:microsoft:windows_vista::sp2 cpe:/o:microsoft:windows_vista::sp2:x64 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_xp:-:sp2:x64

CVE-2010-0018

2010-01-13T14:30:00.640-05:00

2018-10-30T12:27:21.030-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://blogs.technet.com/srd/archive/2010/01/12/ms10-001-font-file-decompression-vulnerability.aspx BID 37671 SECTRACK 1023432 CERT TA10-012B VUPEN ADV-2010-0095 MS MS10-001 Integer overflow in the Embedded OpenType (EOT) Font Engine (t2embed.dll) in Microsoft Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code via compressed data that represents a crafted EOT font, aka "Microtype Express Compressed Fonts Integer Flaw in the LZCOMP Decompressor Vulnerability."

cpe:/a:microsoft:silverlight:3.0.40624.00 cpe:/a:microsoft:silverlight:3.0.40723.0 cpe:/a:microsoft:silverlight:3.0.40818.0 cpe:/a:microsoft:silverlight:3.0.50106.0

CVE-2010-0019

2010-08-11T14:47:49.813-04:00

2018-10-12T17:56:13.160-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CERT TA10-222A MS MS10-060 Microsoft Silverlight 3 before 3.0.50611.0 on Windows, and before 3.0.41130.0 on Mac OS X, does not properly handle pointers, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and framework outage) via a crafted web site, aka "Microsoft Silverlight Memory Corruption Vulnerability."

cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server::sp2 cpe:/o:microsoft:windows_2003_server::sp2:itanium cpe:/o:microsoft:windows_2003_server:-:sp2:x64 cpe:/o:microsoft:windows_7:- cpe:/o:microsoft:windows_server_2008:::itanium cpe:/o:microsoft:windows_server_2008:::x32 cpe:/o:microsoft:windows_server_2008:::x64 cpe:/o:microsoft:windows_server_2008::r2:itanium cpe:/o:microsoft:windows_server_2008::r2:x64 cpe:/o:microsoft:windows_server_2008::sp2:x32 cpe:/o:microsoft:windows_server_2008::sp2:x64 cpe:/o:microsoft:windows_server_2008:-:sp2:itanium cpe:/o:microsoft:windows_vista cpe:/o:microsoft:windows_vista:::x64 cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_vista::sp1:x64 cpe:/o:microsoft:windows_vista::sp2 cpe:/o:microsoft:windows_vista::sp2:x64 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_xp::sp2:pro_x64 cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_xp:-:sp2:x64

CVE-2010-0020

2010-02-10T13:30:00.957-05:00

2018-10-30T12:27:21.030-04:00

9.0

NETWORK

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CERT TA10-040A MS MS10-012 The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate request fields, which allows remote authenticated users to execute arbitrary code via a malformed request, aka "SMB Pathname Overflow Vulnerability."

cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server::sp2 cpe:/o:microsoft:windows_2003_server::sp2:itanium cpe:/o:microsoft:windows_2003_server:-:sp2:x64 cpe:/o:microsoft:windows_7:- cpe:/o:microsoft:windows_server_2008:::itanium cpe:/o:microsoft:windows_server_2008:::x32 cpe:/o:microsoft:windows_server_2008:::x64 cpe:/o:microsoft:windows_server_2008::r2:itanium cpe:/o:microsoft:windows_server_2008::r2:x64 cpe:/o:microsoft:windows_server_2008::sp2:x32 cpe:/o:microsoft:windows_server_2008::sp2:x64 cpe:/o:microsoft:windows_server_2008:-:sp2:itanium cpe:/o:microsoft:windows_vista cpe:/o:microsoft:windows_vista:::x64 cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_vista::sp1:x64 cpe:/o:microsoft:windows_vista::sp2 cpe:/o:microsoft:windows_vista::sp2:x64 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_xp::sp2:pro_x64 cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_xp:-:sp2:x64

CVE-2010-0021

2010-02-10T13:30:00.987-05:00

2018-10-30T12:27:21.030-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CERT TA10-040A MS MS10-012 Multiple race conditions in the SMB implementation in the Server service in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allow remote attackers to cause a denial of service (system hang) via a crafted (1) SMBv1 or (2) SMBv2 Negotiate packet, aka "SMB Memory Corruption Vulnerability."

cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server::sp2 cpe:/o:microsoft:windows_2003_server::sp2:itanium cpe:/o:microsoft:windows_2003_server:-:sp2:x64 cpe:/o:microsoft:windows_7:- cpe:/o:microsoft:windows_server_2008:::itanium cpe:/o:microsoft:windows_server_2008:::x32 cpe:/o:microsoft:windows_server_2008:::x64 cpe:/o:microsoft:windows_server_2008::r2:itanium cpe:/o:microsoft:windows_server_2008::r2:x64 cpe:/o:microsoft:windows_server_2008::sp2:x32 cpe:/o:microsoft:windows_server_2008::sp2:x64 cpe:/o:microsoft:windows_server_2008:-:sp2:itanium cpe:/o:microsoft:windows_vista cpe:/o:microsoft:windows_vista:::x64 cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_vista::sp1:x64 cpe:/o:microsoft:windows_vista::sp2 cpe:/o:microsoft:windows_vista::sp2:x64 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_xp::sp2:pro_x64 cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_xp:-:sp2:x64

CVE-2010-0022

2010-02-10T13:30:01.017-05:00

2018-10-30T12:27:21.030-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CERT TA10-040A MS MS10-012 The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate the share and servername fields in SMB packets, which allows remote attackers to cause a denial of service (system hang) via a crafted packet, aka "SMB Null Pointer Vulnerability."

CVE-2010-0023

2010-02-10T13:30:01.050-05:00

2018-10-12T17:56:14.833-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CERT TA10-040A MS MS10-011 The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout the logout of one user and the login session of the next user, aka "CSRSS Local Privilege Elevation Vulnerability."

cpe:/a:microsoft:exchange_server:2000:sp3 cpe:/a:microsoft:exchange_server:2003:sp2 cpe:/a:microsoft:exchange_server:2007:sp1:x64 cpe:/a:microsoft:exchange_server:2007:sp2:x64 cpe:/a:microsoft:exchange_server:2010:-:x64 cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server::sp2 cpe:/o:microsoft:windows_2003_server::sp2:itanium cpe:/o:microsoft:windows_server_2003::sp2 cpe:/o:microsoft:windows_server_2008:::x64 cpe:/o:microsoft:windows_server_2008::r2:x64 cpe:/o:microsoft:windows_server_2008:-:sp2 cpe:/o:microsoft:windows_server_2008:-:sp2:x64 cpe:/o:microsoft:windows_server_2008:-:sp2:x86 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_xp:-:sp2:x64

CVE-2010-0024

2010-04-14T12:00:00.587-04:00

2019-02-26T09:04:00.993-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CERT TA10-103A MS MS10-024 The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2003 SP2, does not properly parse MX records, which allows remote DNS servers to cause a denial of service (service outage) via a crafted response to a DNS MX record query, aka "SMTP Server MX Record Vulnerability."

CVE-2010-0025

2010-04-14T12:00:00.633-04:00

2019-02-26T09:04:00.993-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CERT TA10-103A MS MS10-024 The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2000 SP3, does not properly allocate memory for SMTP command replies, which allows remote attackers to read fragments of e-mail messages by sending a series of invalid commands and then sending a STARTTLS command, aka "SMTP Memory Allocation Vulnerability."

cpe:/o:microsoft:windows_server_2008:::x64 cpe:/o:microsoft:windows_server_2008::r2:x64 cpe:/o:microsoft:windows_server_2008::sp2:x64

CVE-2010-0026

2010-02-10T13:30:01.063-05:00

2018-10-12T17:56:16.333-04:00

4.0

LOCAL

HIGH

NONE

COMPLETE

http://nvd.nist.gov CERT TA10-040A MS MS10-010 The Hyper-V server implementation in Microsoft Windows Server 2008 Gold, SP2, and R2 on the x64 platform allows guest OS users to cause a denial of service (host OS hang) via a crafted application that executes a malformed series of machine instructions, aka "Hyper-V Instruction Set Validation Vulnerability."

cpe:/a:microsoft:ie:5.01:sp4 cpe:/a:microsoft:ie:6 cpe:/a:microsoft:ie:6:sp1 cpe:/a:microsoft:ie:7 cpe:/a:microsoft:ie:7.0 cpe:/a:microsoft:ie:7.0.5730:unknown:gold cpe:/a:microsoft:ie:7.0.5730.11 cpe:/a:microsoft:ie:7.00.5730.1100 cpe:/a:microsoft:ie:7.00.6000.16386 cpe:/a:microsoft:ie:7.00.6000.16441 cpe:/a:microsoft:ie:8 cpe:/a:microsoft:ie:8.0.6001 cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server::sp2 cpe:/o:microsoft:windows_2003_server::sp2:itanium cpe:/o:microsoft:windows_7:- cpe:/o:microsoft:windows_server_2003::sp2 cpe:/o:microsoft:windows_server_2008:::x32 cpe:/o:microsoft:windows_server_2008:::x64 cpe:/o:microsoft:windows_server_2008::r2:itanium cpe:/o:microsoft:windows_server_2008::r2:x64 cpe:/o:microsoft:windows_server_2008::sp2:x32 cpe:/o:microsoft:windows_server_2008::sp2:x64 cpe:/o:microsoft:windows_vista cpe:/o:microsoft:windows_vista:::x64 cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_vista::sp1:x64 cpe:/o:microsoft:windows_vista::sp2 cpe:/o:microsoft:windows_vista::sp2:x64 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_xp:-:sp2:x64

CVE-2010-0027

2010-01-22T17:00:00.350-05:00

2019-02-26T09:04:00.993-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BUGTRAQ 20100209 ZDI-10-016: Microsoft Windows ShellExecute Improper Sanitization Code Execution Vulnerability CERT TA10-040A MISC http://www.zerodayinitiative.com/advisories/ZDI-10-016/ MS MS10-002 MS MS10-007 XF ie-url-code-execution(55773) The URL validation functionality in Microsoft Internet Explorer 5.01, 6, 6 SP1, 7 and 8, and the ShellExecute API function in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, does not properly process input parameters, which allows remote attackers to execute arbitrary local programs via a crafted URL, aka "URL Validation Vulnerability."

cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_server_2003::sp2 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_xp:-:sp2:x64

CVE-2010-0028

2010-02-10T13:30:01.097-05:00

2019-02-26T09:04:00.993-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CERT TA10-040A MS MS10-005 Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted JPEG (.JPG) file, aka "MS Paint Integer Overflow Vulnerability."

cpe:/a:microsoft:powerpoint:2002:sp3

CVE-2010-0029

2010-02-10T13:30:01.127-05:00

2018-10-12T17:56:18.850-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1023563 CERT TA10-040A MS MS10-004 Buffer overflow in Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint File Path Handling Buffer Overflow Vulnerability."

cpe:/a:microsoft:powerpoint:2002:sp3 cpe:/a:microsoft:powerpoint:2003:sp3

CVE-2010-0030

2010-02-10T13:30:01.157-05:00

2018-10-12T17:56:19.380-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1023563 CERT TA10-040A MS MS10-004 Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint LinkedSlideAtom Heap Overflow Vulnerability."

cpe:/a:microsoft:office:2004::mac cpe:/a:microsoft:powerpoint:2002:sp3 cpe:/a:microsoft:powerpoint:2003:sp3

CVE-2010-0031

2010-02-10T13:30:01.173-05:00

2018-10-12T17:56:19.897-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1023563 CERT TA10-040A MS MS10-004 Array index error in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Office 2004 for Mac, allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint OEPlaceholderAtom 'placementId' Invalid Array Indexing Vulnerability."

cpe:/a:microsoft:powerpoint:2002:sp3 cpe:/a:microsoft:powerpoint:2003:sp3

CVE-2010-0032

2010-02-10T13:30:01.267-05:00

2018-10-12T17:56:20.317-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1023563 CERT TA10-040A MS MS10-004 Use-after-free vulnerability in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "OEPlaceholderAtom Use After Free Vulnerability."

cpe:/a:microsoft:powerpoint:2003:sp3

CVE-2010-0033

2010-02-10T13:30:01.300-05:00

2018-10-12T17:56:20.897-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1023563 CERT TA10-040A MS MS10-004 Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint Viewer TextBytesAtom Record Stack Overflow Vulnerability."

cpe:/a:microsoft:powerpoint:2003:sp3

CVE-2010-0034

2010-02-10T13:30:01.330-05:00

2018-10-12T17:56:21.363-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1023563 CERT TA10-040A MS MS10-004 Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "Office PowerPoint Viewer TextCharsAtom Record Stack Overflow Vulnerability."

cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_server_2003::sp2 cpe:/o:microsoft:windows_server_2008:::x64 cpe:/o:microsoft:windows_server_2008::sp2:x64

CVE-2010-0035

2010-02-10T13:30:01.347-05:00

2019-04-30T10:27:13.913-04:00

6.3

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

COMPLETE

http://nvd.nist.gov CERT TA10-040A MS MS10-014 The Key Distribution Center (KDC) in Kerberos in Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2, when a trust relationship with a non-Windows Kerberos realm exists, allows remote authenticated users to cause a denial of service (NULL pointer dereference and domain controller outage) via a crafted Ticket Granting Ticket (TGT) renewal request, aka "Kerberos Null Pointer Dereference Vulnerability."

cpe:/o:apple:mac_os_x:10.5.8 cpe:/o:apple:mac_os_x:10.6.2 cpe:/o:apple:mac_os_x_server:10.5.8 cpe:/o:apple:mac_os_x_server:10.6.2

CVE-2010-0036

2010-01-20T11:30:00.367-05:00

2017-08-16T21:31:51.803-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov APPLE APPLE-SA-2010-02-02-1 APPLE APPLE-SA-2010-01-19-1 CONFIRM http://support.apple.com/kb/HT4004 CONFIRM http://support.apple.com/kb/HT4013 BID 37868 SECTRACK 1023472 VUPEN ADV-2010-0173 XF macos-coreaudio-mp4-bo(55746) Buffer overflow in CoreAudio in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MP4 audio file.

cpe:/o:apple:mac_os_x:10.5.8 cpe:/o:apple:mac_os_x:10.6.2 cpe:/o:apple:mac_os_x_server:10.5.8 cpe:/o:apple:mac_os_x_server:10.6.2

CVE-2010-0037

2010-01-20T11:30:00.413-05:00

2017-08-16T21:31:51.850-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov APPLE APPLE-SA-2010-01-19-1 CONFIRM http://support.apple.com/kb/HT4004 BID 37869 SECTRACK 1023473 VUPEN ADV-2010-0173 XF macos-imageraw-dng-bo(55747) Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted DNG image.

cpe:/o:apple:iphone_os:1.0 cpe:/o:apple:iphone_os:1.0.0 cpe:/o:apple:iphone_os:1.0.0:-:iphone cpe:/o:apple:iphone_os:1.0.1 cpe:/o:apple:iphone_os:1.0.1:-:iphone cpe:/o:apple:iphone_os:1.0.2 cpe:/o:apple:iphone_os:1.0.2:-:iphone cpe:/o:apple:iphone_os:1.1 cpe:/o:apple:iphone_os:1.1.0 cpe:/o:apple:iphone_os:1.1.0:-:iphone cpe:/o:apple:iphone_os:1.1.0:-:ipodtouch cpe:/o:apple:iphone_os:1.1.1 cpe:/o:apple:iphone_os:1.1.1:-:iphone cpe:/o:apple:iphone_os:1.1.2 cpe:/o:apple:iphone_os:1.1.2:-:iphone cpe:/o:apple:iphone_os:1.1.2:-:ipodtouch cpe:/o:apple:iphone_os:1.1.3 cpe:/o:apple:iphone_os:1.1.3:-:iphone cpe:/o:apple:iphone_os:1.1.3:-:ipodtouch cpe:/o:apple:iphone_os:1.1.4 cpe:/o:apple:iphone_os:1.1.4:-:iphone cpe:/o:apple:iphone_os:1.1.4:-:ipodtouch cpe:/o:apple:iphone_os:1.1.5 cpe:/o:apple:iphone_os:1.1.5:-:iphone cpe:/o:apple:iphone_os:1.1.5:-:ipodtouch cpe:/o:apple:iphone_os:2.0 cpe:/o:apple:iphone_os:2.0.0 cpe:/o:apple:iphone_os:2.0.0:-:iphone cpe:/o:apple:iphone_os:2.0.0:-:ipodtouch cpe:/o:apple:iphone_os:2.0.1 cpe:/o:apple:iphone_os:2.0.1:-:iphone cpe:/o:apple:iphone_os:2.0.1:-:ipodtouch cpe:/o:apple:iphone_os:2.0.2 cpe:/o:apple:iphone_os:2.0.2:-:iphone cpe:/o:apple:iphone_os:2.0.2:-:ipodtouch cpe:/o:apple:iphone_os:2.1 cpe:/o:apple:iphone_os:2.1:-:iphone cpe:/o:apple:iphone_os:2.1:-:ipodtouch cpe:/o:apple:iphone_os:2.1.1 cpe:/o:apple:iphone_os:2.2 cpe:/o:apple:iphone_os:2.2:-:iphone cpe:/o:apple:iphone_os:2.2:-:ipodtouch cpe:/o:apple:iphone_os:2.2.1 cpe:/o:apple:iphone_os:2.2.1:-:iphone cpe:/o:apple:iphone_os:2.2.1:-:ipodtouch cpe:/o:apple:iphone_os:3.0 cpe:/o:apple:iphone_os:3.0:-:ipodtouch cpe:/o:apple:iphone_os:3.0.1 cpe:/o:apple:iphone_os:3.0.1:-:iphone cpe:/o:apple:iphone_os:3.1.2 cpe:/o:apple:iphone_os:3.1.2:-:ipodtouch

CVE-2010-0038

2010-02-03T14:30:00.437-05:00

2019-09-26T13:05:06.420-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2010-02-02-1 CONFIRM http://support.apple.com/kb/HT4013 BID 38040 Recovery Mode in Apple iPhone OS 1.0 through 3.1.2, and iPhone OS for iPod touch 1.1 through 3.1.2, allows physically proximate attackers to bypass device locking, and read or modify arbitrary data, via a USB control message that triggers memory corruption.

cpe:/h:apple:airport_express cpe:/h:apple:airport_express_base_station_firmware:3.84 cpe:/h:apple:airport_express_base_station_firmware:4.0.9 cpe:/h:apple:airport_express_base_station_firmware:6.1 cpe:/h:apple:airport_express_base_station_firmware:6.3 cpe:/h:apple:airport_express_base_station_firmware:7.3.2 cpe:/h:apple:airport_express_base_station_firmware:7.4.1 cpe:/h:apple:airport_express_base_station_firmware:7.4.2 cpe:/h:apple:airport_extreme cpe:/h:apple:airport_extreme_base_station_firmware:5.5 cpe:/h:apple:airport_extreme_base_station_firmware:5.7 cpe:/h:apple:time_capsule

CVE-2010-0039

2010-12-21T22:00:01.390-05:00

2011-01-19T01:53:52.307-05:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov APPLE APPLE-SA-2010-12-16-1 CONFIRM http://support.apple.com/kb/HT4298 SECTRACK 1024907 The Application-Level Gateway (ALG) on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 modifies PORT commands in incoming FTP traffic, which allows remote attackers to use the device's IP address for arbitrary intranet TCP traffic by leveraging write access to an intranet FTP server.

cpe:/a:apple:safari:4.0 cpe:/a:apple:safari:4.0.0b cpe:/a:apple:safari:4.0.1 cpe:/a:apple:safari:4.0.2 cpe:/a:apple:safari:4.0.3 cpe:/a:apple:safari:4.0.4

CVE-2010-0040

2010-03-15T09:28:25.277-04:00

2017-09-18T21:30:11.267-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov APPLE APPLE-SA-2010-03-30-2 APPLE APPLE-SA-2010-03-11-1 CONFIRM http://support.apple.com/kb/HT4070 CONFIRM http://support.apple.com/kb/HT4105 BID 38671 BID 38674 SECTRACK 1023706 XF safari-colorsync-bo(56826) Integer overflow in ColorSync in Apple Safari before 4.0.5 on Windows, and iTunes before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an image with a crafted color profile that triggers a heap-based buffer overflow.

cpe:/a:apple:safari:4.0 cpe:/a:apple:safari:4.0.0b cpe:/a:apple:safari:4.0.1 cpe:/a:apple:safari:4.0.2 cpe:/a:apple:safari:4.0.3 cpe:/a:apple:safari:4.0.4

CVE-2010-0041

2010-03-15T09:28:25.370-04:00

2017-09-18T21:30:11.330-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov APPLE APPLE-SA-2010-03-29-1 APPLE APPLE-SA-2010-03-30-2 APPLE APPLE-SA-2010-06-21-1 APPLE APPLE-SA-2010-03-11-1 CONFIRM http://support.apple.com/kb/HT4070 CONFIRM http://support.apple.com/kb/HT4077 CONFIRM http://support.apple.com/kb/HT4105 CONFIRM http://support.apple.com/kb/HT4225 BID 38671 BID 38676 SECTRACK 1023706 ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows does not ensure that memory access is associated with initialized memory, which allows remote attackers to obtain potentially sensitive information from process memory via a crafted BMP image.

cpe:/a:apple:safari:4.0 cpe:/a:apple:safari:4.0.0b cpe:/a:apple:safari:4.0.1 cpe:/a:apple:safari:4.0.2 cpe:/a:apple:safari:4.0.3 cpe:/a:apple:safari:4.0.4

CVE-2010-0042

2010-03-15T09:28:25.403-04:00

2017-09-18T21:30:11.390-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov APPLE APPLE-SA-2010-03-29-1 APPLE APPLE-SA-2010-03-30-2 APPLE APPLE-SA-2010-11-22-1 APPLE APPLE-SA-2010-06-21-1 APPLE APPLE-SA-2010-03-11-1 CONFIRM http://support.apple.com/kb/HT4070 CONFIRM http://support.apple.com/kb/HT4077 CONFIRM http://support.apple.com/kb/HT4105 CONFIRM http://support.apple.com/kb/HT4225 CONFIRM http://support.apple.com/kb/HT4456 BID 38671 BID 38677 SECTRACK 1023706 ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows does not ensure that memory access is associated with initialized memory, which allows remote attackers to obtain potentially sensitive information from process memory via a crafted TIFF image.

cpe:/a:apple:safari:4.0 cpe:/a:apple:safari:4.0.0b cpe:/a:apple:safari:4.0.1 cpe:/a:apple:safari:4.0.2 cpe:/a:apple:safari:4.0.3 cpe:/a:apple:safari:4.0.4

CVE-2010-0043

2010-03-15T09:28:25.433-04:00

2017-09-18T21:30:11.453-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov APPLE APPLE-SA-2010-03-29-1 APPLE APPLE-SA-2010-03-30-2 APPLE APPLE-SA-2010-06-21-1 APPLE APPLE-SA-2010-03-11-1 CONFIRM http://support.apple.com/kb/HT4070 CONFIRM http://support.apple.com/kb/HT4077 CONFIRM http://support.apple.com/kb/HT4105 CONFIRM http://support.apple.com/kb/HT4225 BID 38671 BID 38673 SECTRACK 1023706 ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted TIFF image.

cpe:/a:apple:safari:4.0 cpe:/a:apple:safari:4.0.0b cpe:/a:apple:safari:4.0.1 cpe:/a:apple:safari:4.0.2 cpe:/a:apple:safari:4.0.3 cpe:/a:apple:safari:4.0.4

CVE-2010-0044

2010-03-15T09:28:25.467-04:00

2017-09-18T21:30:11.517-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov APPLE APPLE-SA-2010-03-11-1 CONFIRM http://support.apple.com/kb/HT4070 BID 38671 BID 38675 XF safari-pubsub-security-bypass(56830) PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier for remote web servers to track users by setting a cookie in a (1) RSS or (2) Atom feed.

cpe:/a:apple:safari:4.0 cpe:/a:apple:safari:4.0:beta cpe:/a:apple:safari:4.0.1 cpe:/a:apple:safari:4.0.2 cpe:/a:apple:safari:4.0.3 cpe:/a:apple:safari:4.0.4

CVE-2010-0045

2010-03-15T09:28:25.497-04:00

2017-09-18T21:30:11.563-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov APPLE APPLE-SA-2010-03-11-1 CONFIRM http://support.apple.com/kb/HT4070 BID 38671 SECTRACK 1023706 Apple Safari before 4.0.5 on Windows does not properly validate external URL schemes, which allows remote attackers to open local files and execute arbitrary code via a crafted HTML document.

cpe:/a:apple:safari:4.0 cpe:/a:apple:safari:4.0.0b cpe:/a:apple:safari:4.0.1 cpe:/a:apple:safari:4.0.2 cpe:/a:apple:safari:4.0.3 cpe:/a:apple:safari:4.0.4

CVE-2010-0046

2010-03-15T09:28:25.527-04:00

2017-09-18T21:30:11.627-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov APPLE APPLE-SA-2010-06-21-1 APPLE APPLE-SA-2010-03-11-1 FEDORA FEDORA-2010-8360 FEDORA FEDORA-2010-8379 FEDORA FEDORA-2010-8423 SUSE SUSE-SR:2011:002 CONFIRM http://support.apple.com/kb/HT4070 CONFIRM http://support.apple.com/kb/HT4225 MANDRIVA MDVSA-2011:039 BID 38671 SECTRACK 1023708 UBUNTU USN-1006-1 VUPEN ADV-2010-2722 VUPEN ADV-2011-0212 VUPEN ADV-2011-0552 The Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted format arguments.

cpe:/a:apple:safari:4.0 cpe:/a:apple:safari:4.0.0b cpe:/a:apple:safari:4.0.1 cpe:/a:apple:safari:4.0.2 cpe:/a:apple:safari:4.0.3 cpe:/a:apple:safari:4.0.4

CVE-2010-0047

2010-03-15T09:28:25.560-04:00

2017-09-18T21:30:11.703-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov APPLE APPLE-SA-2010-06-21-1 APPLE APPLE-SA-2010-03-11-1 FEDORA FEDORA-2010-8360 FEDORA FEDORA-2010-8379 FEDORA FEDORA-2010-8423 SUSE SUSE-SR:2011:002 CONFIRM http://support.apple.com/kb/HT4070 CONFIRM http://support.apple.com/kb/HT4225 MANDRIVA MDVSA-2011:039 BID 38671 SECTRACK 1023708 UBUNTU USN-1006-1 VUPEN ADV-2010-2722 VUPEN ADV-2011-0212 VUPEN ADV-2011-0552 Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to "HTML object element fallback content."

cpe:/a:apple:safari:4.0 cpe:/a:apple:safari:4.0:beta cpe:/a:apple:safari:4.0.1 cpe:/a:apple:safari:4.0.2 cpe:/a:apple:safari:4.0.3 cpe:/a:apple:safari:4.0.4

CVE-2010-0048

2010-03-15T09:28:25.590-04:00

2017-09-18T21:30:11.767-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov APPLE APPLE-SA-2010-06-21-1 APPLE APPLE-SA-2010-03-11-1 FEDORA FEDORA-2010-8360 FEDORA FEDORA-2010-8379 FEDORA FEDORA-2010-8423 SUSE SUSE-SR:2011:002 CONFIRM http://support.apple.com/kb/HT4070 CONFIRM http://support.apple.com/kb/HT4225 MANDRIVA MDVSA-2011:039 BID 38671 SECTRACK 1023708 UBUNTU USN-1006-1 VUPEN ADV-2010-2722 VUPEN ADV-2011-0212 VUPEN ADV-2011-0552 Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted XML document.

cpe:/a:apple:safari:4.0 cpe:/a:apple:safari:4.0:beta cpe:/a:apple:safari:4.0.0b cpe:/a:apple:safari:4.0.1 cpe:/a:apple:safari:4.0.2 cpe:/a:apple:safari:4.0.3 cpe:/a:apple:safari:4.0.4

CVE-2010-0049

2010-03-15T10:15:32.043-04:00

2017-09-18T21:30:11.843-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov IDEFENSE 20100311 Multiple Vendor WebKit HTML Element Use After Free Vulnerability APPLE APPLE-SA-2010-06-21-1 APPLE APPLE-SA-2010-03-11-1 FEDORA FEDORA-2010-8360 FEDORA FEDORA-2010-8379 FEDORA FEDORA-2010-8423 SUSE SUSE-SR:2011:002 CONFIRM http://support.apple.com/kb/HT4070 CONFIRM http://support.apple.com/kb/HT4225 MANDRIVA MDVSA-2011:039 BID 38671 SECTRACK 1023708 UBUNTU USN-1006-1 VUPEN ADV-2010-2722 VUPEN ADV-2011-0212 VUPEN ADV-2011-0552 Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via HTML elements with right-to-left (RTL) text directionality.

cpe:/a:apple:safari:4.0 cpe:/a:apple:safari:4.0.0b cpe:/a:apple:safari:4.0.1 cpe:/a:apple:safari:4.0.2 cpe:/a:apple:safari:4.0.3 cpe:/a:apple:safari:4.0.4

CVE-2010-0050

2010-03-15T10:15:32.073-04:00

2017-09-18T21:30:11.907-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov APPLE APPLE-SA-2010-06-21-1 APPLE APPLE-SA-2010-03-11-1 FEDORA FEDORA-2010-8360 FEDORA FEDORA-2010-8379 FEDORA FEDORA-2010-8423 SUSE SUSE-SR:2011:002 CONFIRM http://support.apple.com/kb/HT4070 CONFIRM http://support.apple.com/kb/HT4225 MANDRIVA MDVSA-2011:039 BID 38671 SECTRACK 1023708 UBUNTU USN-1006-1 VUPEN ADV-2010-2722 VUPEN ADV-2011-0212 VUPEN ADV-2011-0552 XF safari-nested-html-code-exec(56836) Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an HTML document with improperly nested tags.

cpe:/a:apple:safari:4.0 cpe:/a:apple:safari:4.0.0b cpe:/a:apple:safari:4.0.1 cpe:/a:apple:safari:4.0.2 cpe:/a:apple:safari:4.0.3 cpe:/a:apple:safari:4.0.4

CVE-2010-0051

2010-03-15T10:15:32.120-04:00

2017-09-18T21:30:11.970-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://code.google.com/p/chromium/issues/detail?id=9877 APPLE APPLE-SA-2010-11-22-1 APPLE APPLE-SA-2010-06-21-1 APPLE APPLE-SA-2010-03-11-1 SUSE SUSE-SR:2011:002 MISC http://scarybeastsecurity.blogspot.com/2009/12/generic-cross-browser-cross-domain.html CONFIRM http://support.apple.com/kb/HT4070 CONFIRM http://support.apple.com/kb/HT4225 CONFIRM http://support.apple.com/kb/HT4456 MISC http://websec.sv.cmu.edu/css/css.pdf MANDRIVA MDVSA-2011:039 BID 38671 SECTRACK 1023708 UBUNTU USN-1006-1 VUPEN ADV-2010-2722 VUPEN ADV-2011-0212 VUPEN ADV-2011-0552 XF safari-stylesheet-info-disclosure(56837) WebKit in Apple Safari before 4.0.5 does not properly validate the cross-origin loading of stylesheets, which allows remote attackers to obtain sensitive information via a crafted HTML document. NOTE: this might overlap CVE-2010-0651.

cpe:/a:apple:safari:4.0 cpe:/a:apple:safari:4.0:beta cpe:/a:apple:safari:4.0.0b cpe:/a:apple:safari:4.0.1 cpe:/a:apple:safari:4.0.2 cpe:/a:apple:safari:4.0.3 cpe:/a:apple:safari:4.0.4

CVE-2010-0052

2010-03-15T10:15:32.153-04:00

2017-09-18T21:30:12.047-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov APPLE APPLE-SA-2010-06-21-1 APPLE APPLE-SA-2010-03-11-1 FEDORA FEDORA-2010-8360 FEDORA FEDORA-2010-8379 FEDORA FEDORA-2010-8423 SUSE SUSE-SR:2011:002 CONFIRM http://support.apple.com/kb/HT4070 CONFIRM http://support.apple.com/kb/HT4225 MANDRIVA MDVSA-2011:039 BID 38671 SECTRACK 1023708 UBUNTU USN-1006-1 VUPEN ADV-2010-2722 VUPEN ADV-2011-0212 VUPEN ADV-2011-0552 Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to "callbacks for HTML elements."

cpe:/a:apple:safari:4.0 cpe:/a:apple:safari:4.0:beta cpe:/a:apple:safari:4.0.0b cpe:/a:apple:safari:4.0.1 cpe:/a:apple:safari:4.0.2 cpe:/a:apple:safari:4.0.3 cpe:/a:apple:safari:4.0.4

CVE-2010-0053

2010-03-15T10:15:32.167-04:00

2017-09-18T21:30:12.110-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov APPLE APPLE-SA-2010-06-21-1 APPLE APPLE-SA-2010-03-11-1 FEDORA FEDORA-2010-8360 FEDORA FEDORA-2010-8379 FEDORA FEDORA-2010-8423 SUSE SUSE-SR:2011:002 CONFIRM http://support.apple.com/kb/HT4070 CONFIRM http://support.apple.com/kb/HT4225 MANDRIVA MDVSA-2011:039 BID 38671 SECTRACK 1023708 UBUNTU USN-1006-1 VUPEN ADV-2010-2722 VUPEN ADV-2011-0212 VUPEN ADV-2011-0552 Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to the run-in Cascading Style Sheets (CSS) display property.

cpe:/a:apple:safari:4.0 cpe:/a:apple:safari:4.0.0b cpe:/a:apple:safari:4.0.1 cpe:/a:apple:safari:4.0.2 cpe:/a:apple:safari:4.0.3 cpe:/a:apple:safari:4.0.4

CVE-2010-0054

2010-03-15T10:15:32.200-04:00

2017-09-18T21:30:12.173-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov APPLE APPLE-SA-2010-06-21-1 APPLE APPLE-SA-2010-03-11-1 FEDORA FEDORA-2010-8360 FEDORA FEDORA-2010-8379 FEDORA FEDORA-2010-8423 SUSE SUSE-SR:2011:002 CONFIRM http://support.apple.com/kb/HT4070 CONFIRM http://support.apple.com/kb/HT4225 MANDRIVA MDVSA-2011:039 BID 38671 SECTRACK 1023708 UBUNTU USN-1006-1 VUPEN ADV-2010-2722 VUPEN ADV-2011-0212 VUPEN ADV-2011-0552 Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving HTML IMG elements.

cpe:/o:apple:mac_os_x:10.5.8 cpe:/o:apple:mac_os_x_server:10.5.8

CVE-2010-0055

2010-03-30T14:30:00.327-04:00

2010-03-31T00:00:00.000-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2010-03-31T10:44:00.000-04:00

APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 xar in Apple Mac OS X 10.5.8 does not properly validate package signatures, which allows attackers to have an unspecified impact via a modified package.

cpe:/o:apple:mac_os_x:10.5.8 cpe:/o:apple:mac_os_x_server:10.5.8

CVE-2010-0056

2010-03-30T13:30:00.407-04:00

2010-03-31T00:00:00.000-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2010-03-31T09:17:00.000-04:00

APPLE APPLE-SA-2010-03-29-1 Buffer overflow in Cocoa spell checking in AppKit in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted document.

cpe:/o:apple:mac_os_x:10.5 cpe:/o:apple:mac_os_x:10.5.0 cpe:/o:apple:mac_os_x:10.5.1 cpe:/o:apple:mac_os_x:10.5.2 cpe:/o:apple:mac_os_x:10.5.3 cpe:/o:apple:mac_os_x:10.5.4 cpe:/o:apple:mac_os_x:10.5.5 cpe:/o:apple:mac_os_x:10.5.6 cpe:/o:apple:mac_os_x:10.5.7 cpe:/o:apple:mac_os_x:10.5.8 cpe:/o:apple:mac_os_x:10.6.0 cpe:/o:apple:mac_os_x:10.6.1 cpe:/o:apple:mac_os_x:10.6.2 cpe:/o:apple:mac_os_x_server:10.5 cpe:/o:apple:mac_os_x_server:10.5.0 cpe:/o:apple:mac_os_x_server:10.5.1 cpe:/o:apple:mac_os_x_server:10.5.2 cpe:/o:apple:mac_os_x_server:10.5.3 cpe:/o:apple:mac_os_x_server:10.5.4 cpe:/o:apple:mac_os_x_server:10.5.5 cpe:/o:apple:mac_os_x_server:10.5.6 cpe:/o:apple:mac_os_x_server:10.5.7 cpe:/o:apple:mac_os_x_server:10.5.8 cpe:/o:apple:mac_os_x_server:10.6.0 cpe:/o:apple:mac_os_x_server:10.6.1 cpe:/o:apple:mac_os_x_server:10.6.2

CVE-2010-0057

2010-03-30T13:30:00.483-04:00

2010-03-31T00:00:00.000-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-03-31T09:39:00.000-04:00

APPLE APPLE-SA-2010-03-29-1 AFP Server in Apple Mac OS X before 10.6.3 does not prevent guest use of AFP shares when guest access is disabled, which allows remote attackers to bypass intended access restrictions via a mount request.

cpe:/o:apple:mac_os_x:10.5.8 cpe:/o:apple:mac_os_x_server:10.5.8

CVE-2010-0058

2010-03-30T13:30:00.517-04:00

2010-03-31T00:00:00.000-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-03-31T10:02:00.000-04:00

APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 freshclam in ClamAV in Apple Mac OS X 10.5.8 with Security Update 2009-005 has an incorrect launchd.plist ProgramArguments key and consequently does not run, which might allow remote attackers to introduce viruses into the system.

cpe:/o:apple:mac_os_x:10.6.0 cpe:/o:apple:mac_os_x:10.6.1 cpe:/o:apple:mac_os_x:10.6.2 cpe:/o:apple:mac_os_x_server:10.6.0 cpe:/o:apple:mac_os_x_server:10.6.1 cpe:/o:apple:mac_os_x_server:10.6.2

CVE-2010-0059

2010-03-30T13:30:00.563-04:00

2018-10-10T15:49:53.060-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2010-03-29-1 APPLE APPLE-SA-2010-03-30-1 CONFIRM http://support.apple.com/kb/HT4077 BUGTRAQ 20100402 ZDI-10-041: Apple QuickTime QDM2/QDCA Atom Remote Code Execution Vulnerability MISC http://www.zerodayinitiative.com/advisories/ZDI-10-041 CoreAudio in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted audio content with QDM2 encoding, which triggers a buffer overflow due to inconsistent length fields, related to QDCA.

cpe:/o:apple:mac_os_x:10.6.0 cpe:/o:apple:mac_os_x:10.6.1 cpe:/o:apple:mac_os_x:10.6.2 cpe:/o:apple:mac_os_x_server:10.6.0 cpe:/o:apple:mac_os_x_server:10.6.1 cpe:/o:apple:mac_os_x_server:10.6.2

CVE-2010-0060

2010-03-30T14:30:00.360-04:00

2017-09-18T21:30:12.313-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2010-03-29-1 APPLE APPLE-SA-2010-03-30-1 CONFIRM http://support.apple.com/kb/HT4077 CoreAudio in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted audio content with QDMC encoding.

cpe:/o:apple:mac_os_x:10.6.0 cpe:/o:apple:mac_os_x:10.6.1 cpe:/o:apple:mac_os_x:10.6.2 cpe:/o:apple:mac_os_x_server:10.6.0 cpe:/o:apple:mac_os_x_server:10.6.1 cpe:/o:apple:mac_os_x_server:10.6.2

CVE-2010-0062

2010-03-30T14:30:00.390-04:00

2018-10-10T15:49:54.407-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2010-03-29-1 APPLE APPLE-SA-2010-03-30-1 CONFIRM http://support.apple.com/kb/HT4077 BUGTRAQ 20100402 ZDI-10-036: Apple QuickTime H.263 PictureHeader Remote Code Execution Vulnerability MISC http://www.zerodayinitiative.com/advisories/ZDI-10-036 Heap-based buffer overflow in quicktime.qts in CoreMedia and QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed .3g2 movie file with H.263 encoding that triggers an incorrect buffer length calculation.

CVE-2010-0063

2010-03-30T14:30:00.420-04:00

2010-03-31T00:00:00.000-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2010-03-31T11:05:00.000-04:00

APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.6.3 makes it easier for user-assisted remote attackers to execute arbitrary JavaScript via a web page that offers a download with a Content-Type value that is not on the list of possibly unsafe content types for Safari, as demonstrated by the values for the (1) .ibplugin and (2) .url extensions.

cpe:/o:apple:mac_os_x:10.6.0 cpe:/o:apple:mac_os_x:10.6.1 cpe:/o:apple:mac_os_x:10.6.2 cpe:/o:apple:mac_os_x_server:10.6.0 cpe:/o:apple:mac_os_x_server:10.6.1 cpe:/o:apple:mac_os_x_server:10.6.2

CVE-2010-0064

2010-03-30T14:30:00.453-04:00

2010-03-31T00:00:00.000-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2010-03-31T11:16:00.000-04:00

APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 DesktopServices in Apple Mac OS X 10.6 before 10.6.3 preserves file ownership during an authenticated Finder copy, which might allow local users to bypass intended disk-quota restrictions and have unspecified other impact by copying files owned by other users.

CVE-2010-0065

2010-03-30T14:30:00.483-04:00

2010-03-31T00:00:00.000-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2010-03-31T11:21:00.000-04:00

APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 Disk Images in Apple Mac OS X before 10.6.3 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted disk image with bzip2 compression.

cpe:/a:oracle:application_server:7.0.4.3 cpe:/a:oracle:application_server:10.1.4.2

CVE-2010-0066

2010-01-12T20:30:00.937-05:00

2012-10-22T23:17:02.383-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html SECTRACK 1023438 CERT TA10-012A Unspecified vulnerability in the Access Manager Identity Server component in Oracle Application Server 7.0.4.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors.

cpe:/a:oracle:application_server:10.1.2.3 cpe:/a:oracle:application_server:10.1.3.4

CVE-2010-0067

2010-01-12T20:30:00.953-05:00

2012-10-22T23:17:03.647-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html SECTRACK 1023438 CERT TA10-012A Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Application Server 10.1.2.3 and 10.1.3.4 allows remote attackers to affect confidentiality via unknown vectors.

cpe:/a:oracle:bea_product_suite:9.0 cpe:/a:oracle:bea_product_suite:9.1 cpe:/a:oracle:bea_product_suite:9.2:mp2 cpe:/a:oracle:bea_product_suite:10.0

CVE-2010-0068

2010-01-12T20:30:00.983-05:00

2012-10-22T23:17:03.883-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html CERT TA10-012A Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP2, and 10.0 allows remote attackers to affect confidentiality via unknown vectors.

cpe:/a:oracle:bea_product_suite:7.0 cpe:/a:oracle:bea_product_suite:7.0:sp7 cpe:/a:oracle:bea_product_suite:8.1:sp6 cpe:/a:oracle:bea_product_suite:9.0 cpe:/a:oracle:bea_product_suite:9.1 cpe:/a:oracle:bea_product_suite:9.2:mp3 cpe:/a:oracle:bea_product_suite:10.0:mp1 cpe:/a:oracle:bea_product_suite:10.3.0

CVE-2010-0069

2010-01-12T20:30:01.013-05:00

2012-10-22T23:17:04.100-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html CERT TA10-012A Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0, SP7, 8.1SP6, 9.0, 9.1, 9.2MP3, 10.0MP1, and 10.3.0 allows remote attackers to affect integrity via unknown vectors.

cpe:/a:oracle:application_server:10.1.2.3 cpe:/a:oracle:application_server:10.1.3.4

CVE-2010-0070

2010-01-12T20:30:01.047-05:00

2012-10-22T23:17:04.273-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html SECTRACK 1023438 CERT TA10-012A Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Application Server 10.1.2.3 and 10.1.3.4 allows remote attackers to affect integrity via unknown vectors.

cpe:/a:oracle:database_server:9.2.0.8 cpe:/a:oracle:database_server:9.2.0.8dv cpe:/a:oracle:database_server:10.1.0.5 cpe:/a:oracle:database_server:10.2.0.4 cpe:/a:oracle:database_server:11.1.0.7

CVE-2010-0071

2010-01-12T20:30:01.077-05:00

2012-10-22T23:17:04.477-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html CERT TA10-012A Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

cpe:/a:oracle:secure_backup:10.2.0.3

CVE-2010-0072

2010-01-12T20:30:01.107-05:00

2012-10-22T23:17:04.633-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html CERT TA10-012A Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a buffer overflow in observiced.exe that allows remote attackers to execute arbitrary code via vectors related to a "reverse lookup of connections" to TCP port 10000.

cpe:/a:oracle:weblogic_server cpe:/a:oracle:weblogic_server:10.3.0.0.0 cpe:/a:oracle:weblogic_server_component cpe:/a:oracle:weblogic_server_component:6.1 cpe:/a:oracle:weblogic_server_component:6.1:sp7 cpe:/a:oracle:weblogic_server_component:7.0 cpe:/a:oracle:weblogic_server_component:7.0:sp7 cpe:/a:oracle:weblogic_server_component:8.1 cpe:/a:oracle:weblogic_server_component:8.1:sp6 cpe:/a:oracle:weblogic_server_component:9.0 cpe:/a:oracle:weblogic_server_component:9.1 cpe:/a:oracle:weblogic_server_component:9.2 cpe:/a:oracle:weblogic_server_component:9.2:mp3 cpe:/a:oracle:weblogic_server_component:10.0 cpe:/a:oracle:weblogic_server_component:10.0:mp1 cpe:/a:oracle:weblogic_server_component:10.3

CVE-2010-0073

2010-04-14T13:30:00.367-04:00

2018-10-30T12:27:31.827-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technology/deploy/security/alerts/alert-cve-2010-0073.html CERT TA10-103B VUPEN ADV-2010-0216 Unspecified vulnerability in the WebLogic Server in Oracle WebLogic Server 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, 10.0 MP2, and 10.3.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

cpe:/a:oracle:bea_product_suite:7.0:sp7 cpe:/a:oracle:bea_product_suite:8.1:sp6 cpe:/a:oracle:bea_product_suite:9.0 cpe:/a:oracle:bea_product_suite:9.1 cpe:/a:oracle:bea_product_suite:9.2:mp3 cpe:/a:oracle:bea_product_suite:10.0:mp2 cpe:/a:oracle:bea_product_suite:10.3.1

CVE-2010-0074

2010-01-12T20:30:01.140-05:00

2012-10-22T23:17:04.930-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html CERT TA10-012A Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0SP7, 8.1SP6, 9.0, 9.1, 9.2MP3, 10.0MP2, and 10.3.1 allows remote attackers to affect availability via unknown vectors.

cpe:/a:oracle:e-business_suite:11.5.10.2 cpe:/a:oracle:e-business_suite:12.0.6 cpe:/a:oracle:e-business_suite:12.1.1

CVE-2010-0075

2010-01-12T20:30:01.170-05:00

2012-10-22T23:17:05.147-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html CERT TA10-012A Unspecified vulnerability in the Oracle HRMS (Self Service) component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows remote attackers to affect confidentiality via unknown vectors.

cpe:/a:oracle:database:3.2.1.00.10

CVE-2010-0076

2010-01-12T20:30:01.187-05:00

2012-10-22T23:17:05.320-04:00

6.0

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html CERT TA10-012A Unspecified vulnerability in the Application Express Application Builder component in Oracle Database 3.2.1.00.10 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

cpe:/a:oracle:e-business_suite:11.5.10.2 cpe:/a:oracle:e-business_suite:12.0.6 cpe:/a:oracle:e-business_suite:12.1.2

CVE-2010-0077

2010-01-12T20:30:01.217-05:00

2012-10-22T23:17:05.490-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html CERT TA10-012A Unspecified vulnerability in the CRM Technical Foundation (mobile) component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect confidentiality and integrity via unknown vectors.

cpe:/a:oracle:bea_product_suite:9.0 cpe:/a:oracle:bea_product_suite:9.1 cpe:/a:oracle:bea_product_suite:9.2:mp3 cpe:/a:oracle:bea_product_suite:10.0:mp2 cpe:/a:oracle:bea_product_suite:10.3.1

CVE-2010-0078

2010-01-12T20:30:01.250-05:00

2012-10-22T23:17:05.693-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html CERT TA10-012A Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP3, 10.0MP2, and 10.3.1 allows remote attackers to affect availability via unknown vectors.

cpe:/a:oracle:bea_product_suite:r27.6.5

CVE-2010-0079

2010-01-12T20:30:01.280-05:00

2012-10-22T23:17:05.943-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html CERT TA10-012A Multiple vulnerabilities in the JRockit component in BEA Product Suite R27.6.5 using JRE/JDK 1.4.2, 5, and 6 allow remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: this CVE identifier overlaps CVE-2009-3867, CVE-2009-3868, CVE-2009-3869, CVE-2009-3871, CVE-2009-3872, CVE-2009-3873, CVE-2009-3874, CVE-2009-3875, CVE-2009-3876, and CVE-2009-3877.

cpe:/a:oracle:jd_edwards_enterpriseone:8.9:bundle21 cpe:/a:oracle:jd_edwards_enterpriseone:9.0:bundle11 cpe:/a:oracle:peoplesoft_enterprise

CVE-2010-0080

2010-01-12T20:30:01.310-05:00

2012-10-22T23:17:06.133-04:00

4.9

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html CERT TA10-012A Unspecified vulnerability in the PeopleSoft Enterprise HCM - eProfile component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9 Bundle, #21 and 9.0 Bundle #11 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

cpe:/a:oracle:fusion_middleware:10.1.2.3 cpe:/a:oracle:fusion_middleware:10.1.4.0.1

CVE-2010-0081

2010-07-13T17:30:00.920-04:00

2016-11-23T13:19:57.777-05:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov

2016-11-23T12:41:26.510-05:00

CONFIRM http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html Unspecified vulnerability in the Application Server Control component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.0.1 allows remote authenticated users to affect integrity via unknown vectors, a different vulnerability than CVE-2010-2381.

cpe:/a:sun:jdk:1.3.0 cpe:/a:sun:jdk:1.3.0_01 cpe:/a:sun:jdk:1.3.0_02 cpe:/a:sun:jdk:1.3.0_03 cpe:/a:sun:jdk:1.3.0_04 cpe:/a:sun:jdk:1.3.0_05 cpe:/a:sun:jdk:1.3.1 cpe:/a:sun:jdk:1.3.1_01 cpe:/a:sun:jdk:1.3.1_01a cpe:/a:sun:jdk:1.3.1_02 cpe:/a:sun:jdk:1.3.1_03 cpe:/a:sun:jdk:1.3.1_04 cpe:/a:sun:jdk:1.3.1_05 cpe:/a:sun:jdk:1.3.1_06 cpe:/a:sun:jdk:1.3.1_07 cpe:/a:sun:jdk:1.3.1_08 cpe:/a:sun:jdk:1.3.1_09 cpe:/a:sun:jdk:1.3.1_10 cpe:/a:sun:jdk:1.3.1_11 cpe:/a:sun:jdk:1.3.1_12 cpe:/a:sun:jdk:1.3.1_13 cpe:/a:sun:jdk:1.3.1_14 cpe:/a:sun:jdk:1.3.1_15 cpe:/a:sun:jdk:1.3.1_16 cpe:/a:sun:jdk:1.3.1_17 cpe:/a:sun:jdk:1.3.1_18 cpe:/a:sun:jdk:1.3.1_19 cpe:/a:sun:jdk:1.3.1_20 cpe:/a:sun:jdk:1.3.1_21 cpe:/a:sun:jdk:1.3.1_22 cpe:/a:sun:jdk:1.3.1_23 cpe:/a:sun:jdk:1.3.1_24 cpe:/a:sun:jdk:1.3.1_25 cpe:/a:sun:jdk:1.3.1_26 cpe:/a:sun:jdk:1.3.1_27 cpe:/a:sun:jdk:1.5.0 cpe:/a:sun:jdk:1.5.0:update1 cpe:/a:sun:jdk:1.5.0:update10 cpe:/a:sun:jdk:1.5.0:update11 cpe:/a:sun:jdk:1.5.0:update12 cpe:/a:sun:jdk:1.5.0:update13 cpe:/a:sun:jdk:1.5.0:update14 cpe:/a:sun:jdk:1.5.0:update15 cpe:/a:sun:jdk:1.5.0:update16 cpe:/a:sun:jdk:1.5.0:update17 cpe:/a:sun:jdk:1.5.0:update18 cpe:/a:sun:jdk:1.5.0:update19 cpe:/a:sun:jdk:1.5.0:update2 cpe:/a:sun:jdk:1.5.0:update20 cpe:/a:sun:jdk:1.5.0:update21 cpe:/a:sun:jdk:1.5.0:update23 cpe:/a:sun:jdk:1.5.0:update3 cpe:/a:sun:jdk:1.5.0:update4 cpe:/a:sun:jdk:1.5.0:update5 cpe:/a:sun:jdk:1.5.0:update6 cpe:/a:sun:jdk:1.5.0:update7 cpe:/a:sun:jdk:1.5.0:update8 cpe:/a:sun:jdk:1.5.0:update9 cpe:/a:sun:jdk:1.6.0 cpe:/a:sun:jdk:1.6.0:update1 cpe:/a:sun:jdk:1.6.0:update1_b06 cpe:/a:sun:jdk:1.6.0:update2 cpe:/a:sun:jdk:1.6.0:update_10 cpe:/a:sun:jdk:1.6.0:update_11 cpe:/a:sun:jdk:1.6.0:update_12 cpe:/a:sun:jdk:1.6.0:update_13 cpe:/a:sun:jdk:1.6.0:update_14 cpe:/a:sun:jdk:1.6.0:update_15 cpe:/a:sun:jdk:1.6.0:update_16 cpe:/a:sun:jdk:1.6.0:update_17 cpe:/a:sun:jdk:1.6.0:update_18 cpe:/a:sun:jdk:1.6.0:update_3 cpe:/a:sun:jdk:1.6.0:update_4 cpe:/a:sun:jdk:1.6.0:update_5 cpe:/a:sun:jdk:1.6.0:update_6 cpe:/a:sun:jdk:1.6.0:update_7 cpe:/a:sun:jre:1.3.0 cpe:/a:sun:jre:1.3.0:update1 cpe:/a:sun:jre:1.3.0:update2 cpe:/a:sun:jre:1.3.0:update3 cpe:/a:sun:jre:1.3.0:update4 cpe:/a:sun:jre:1.3.0:update5 cpe:/a:sun:jre:1.3.1 cpe:/a:sun:jre:1.3.1:update1 cpe:/a:sun:jre:1.3.1:update2 cpe:/a:sun:jre:1.3.1_2 cpe:/a:sun:jre:1.3.1_03 cpe:/a:sun:jre:1.3.1_04 cpe:/a:sun:jre:1.3.1_05 cpe:/a:sun:jre:1.3.1_06 cpe:/a:sun:jre:1.3.1_07 cpe:/a:sun:jre:1.3.1_08 cpe:/a:sun:jre:1.3.1_09 cpe:/a:sun:jre:1.3.1_10 cpe:/a:sun:jre:1.3.1_11 cpe:/a:sun:jre:1.3.1_12 cpe:/a:sun:jre:1.3.1_13 cpe:/a:sun:jre:1.3.1_14 cpe:/a:sun:jre:1.3.1_15 cpe:/a:sun:jre:1.3.1_16 cpe:/a:sun:jre:1.3.1_17 cpe:/a:sun:jre:1.3.1_18 cpe:/a:sun:jre:1.3.1_19 cpe:/a:sun:jre:1.3.1_20 cpe:/a:sun:jre:1.3.1_21 cpe:/a:sun:jre:1.3.1_22 cpe:/a:sun:jre:1.3.1_23 cpe:/a:sun:jre:1.3.1_24 cpe:/a:sun:jre:1.3.1_25 cpe:/a:sun:jre:1.3.1_26 cpe:/a:sun:jre:1.3.1_27 cpe:/a:sun:jre:1.4.2 cpe:/a:sun:jre:1.4.2_1 cpe:/a:sun:jre:1.4.2_2 cpe:/a:sun:jre:1.4.2_3 cpe:/a:sun:jre:1.4.2_4 cpe:/a:sun:jre:1.4.2_5 cpe:/a:sun:jre:1.4.2_6 cpe:/a:sun:jre:1.4.2_7 cpe:/a:sun:jre:1.4.2_8 cpe:/a:sun:jre:1.4.2_9 cpe:/a:sun:jre:1.4.2_10 cpe:/a:sun:jre:1.4.2_11 cpe:/a:sun:jre:1.4.2_12 cpe:/a:sun:jre:1.4.2_13 cpe:/a:sun:jre:1.4.2_14 cpe:/a:sun:jre:1.4.2_15 cpe:/a:sun:jre:1.4.2_16 cpe:/a:sun:jre:1.4.2_17 cpe:/a:sun:jre:1.4.2_18 cpe:/a:sun:jre:1.4.2_19 cpe:/a:sun:jre:1.4.2_20 cpe:/a:sun:jre:1.4.2_21 cpe:/a:sun:jre:1.4.2_22 cpe:/a:sun:jre:1.4.2_23 cpe:/a:sun:jre:1.4.2_24 cpe:/a:sun:jre:1.4.2_25 cpe:/a:sun:jre:1.5.0 cpe:/a:sun:jre:1.5.0:update1 cpe:/a:sun:jre:1.5.0:update10 cpe:/a:sun:jre:1.5.0:update11 cpe:/a:sun:jre:1.5.0:update12 cpe:/a:sun:jre:1.5.0:update13 cpe:/a:sun:jre:1.5.0:update14 cpe:/a:sun:jre:1.5.0:update15 cpe:/a:sun:jre:1.5.0:update16 cpe:/a:sun:jre:1.5.0:update17 cpe:/a:sun:jre:1.5.0:update18 cpe:/a:sun:jre:1.5.0:update19 cpe:/a:sun:jre:1.5.0:update2 cpe:/a:sun:jre:1.5.0:update20 cpe:/a:sun:jre:1.5.0:update21 cpe:/a:sun:jre:1.5.0:update23 cpe:/a:sun:jre:1.5.0:update3 cpe:/a:sun:jre:1.5.0:update4 cpe:/a:sun:jre:1.5.0:update5 cpe:/a:sun:jre:1.5.0:update6 cpe:/a:sun:jre:1.5.0:update7 cpe:/a:sun:jre:1.5.0:update8 cpe:/a:sun:jre:1.5.0:update9 cpe:/a:sun:jre:1.6.0 cpe:/a:sun:jre:1.6.0:update_1 cpe:/a:sun:jre:1.6.0:update_10 cpe:/a:sun:jre:1.6.0:update_11 cpe:/a:sun:jre:1.6.0:update_12 cpe:/a:sun:jre:1.6.0:update_13 cpe:/a:sun:jre:1.6.0:update_14 cpe:/a:sun:jre:1.6.0:update_15 cpe:/a:sun:jre:1.6.0:update_16 cpe:/a:sun:jre:1.6.0:update_17 cpe:/a:sun:jre:1.6.0:update_18 cpe:/a:sun:jre:1.6.0:update_2 cpe:/a:sun:jre:1.6.0:update_3 cpe:/a:sun:jre:1.6.0:update_4 cpe:/a:sun:jre:1.6.0:update_5 cpe:/a:sun:jre:1.6.0:update_6 cpe:/a:sun:jre:1.6.0:update_7 cpe:/a:sun:sdk:1.3.0 cpe:/a:sun:sdk:1.3.0_01 cpe:/a:sun:sdk:1.3.0_02 cpe:/a:sun:sdk:1.3.0_03 cpe:/a:sun:sdk:1.3.0_04 cpe:/a:sun:sdk:1.3.0_05 cpe:/a:sun:sdk:1.3.1 cpe:/a:sun:sdk:1.3.1_01 cpe:/a:sun:sdk:1.3.1_01a cpe:/a:sun:sdk:1.3.1_02 cpe:/a:sun:sdk:1.3.1_03 cpe:/a:sun:sdk:1.3.1_04 cpe:/a:sun:sdk:1.3.1_05 cpe:/a:sun:sdk:1.3.1_06 cpe:/a:sun:sdk:1.3.1_07 cpe:/a:sun:sdk:1.3.1_08 cpe:/a:sun:sdk:1.3.1_09 cpe:/a:sun:sdk:1.3.1_10 cpe:/a:sun:sdk:1.3.1_11 cpe:/a:sun:sdk:1.3.1_12 cpe:/a:sun:sdk:1.3.1_13 cpe:/a:sun:sdk:1.3.1_14 cpe:/a:sun:sdk:1.3.1_15 cpe:/a:sun:sdk:1.3.1_16 cpe:/a:sun:sdk:1.3.1_17 cpe:/a:sun:sdk:1.3.1_18 cpe:/a:sun:sdk:1.3.1_19 cpe:/a:sun:sdk:1.3.1_20 cpe:/a:sun:sdk:1.3.1_21 cpe:/a:sun:sdk:1.3.1_22 cpe:/a:sun:sdk:1.3.1_23 cpe:/a:sun:sdk:1.3.1_24 cpe:/a:sun:sdk:1.3.1_25 cpe:/a:sun:sdk:1.3.1_26 cpe:/a:sun:sdk:1.3.1_27 cpe:/a:sun:sdk:1.4.2 cpe:/a:sun:sdk:1.4.2_1 cpe:/a:sun:sdk:1.4.2_02 cpe:/a:sun:sdk:1.4.2_3 cpe:/a:sun:sdk:1.4.2_4 cpe:/a:sun:sdk:1.4.2_5 cpe:/a:sun:sdk:1.4.2_6 cpe:/a:sun:sdk:1.4.2_7 cpe:/a:sun:sdk:1.4.2_8 cpe:/a:sun:sdk:1.4.2_9 cpe:/a:sun:sdk:1.4.2_10 cpe:/a:sun:sdk:1.4.2_11 cpe:/a:sun:sdk:1.4.2_12 cpe:/a:sun:sdk:1.4.2_13 cpe:/a:sun:sdk:1.4.2_14 cpe:/a:sun:sdk:1.4.2_15 cpe:/a:sun:sdk:1.4.2_16 cpe:/a:sun:sdk:1.4.2_17 cpe:/a:sun:sdk:1.4.2_18 cpe:/a:sun:sdk:1.4.2_19 cpe:/a:sun:sdk:1.4.2_20 cpe:/a:sun:sdk:1.4.2_21 cpe:/a:sun:sdk:1.4.2_22 cpe:/a:sun:sdk:1.4.2_23 cpe:/a:sun:sdk:1.4.2_24 cpe:/a:sun:sdk:1.4.2_25

CVE-2010-0082

2010-04-01T12:30:00.343-04:00

2018-10-30T12:26:21.390-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

cpe:/o:oracle:opensolaris:8 cpe:/o:oracle:opensolaris:9 cpe:/o:oracle:opensolaris:10

CVE-2010-0083

2010-07-13T18:30:01.547-04:00

2012-10-22T23:17:06.897-04:00

7.6

NETWORK

HIGH

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html Unspecified vulnerability in Oracle OpenSolaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

cpe:/a:sun:jdk:1.5.0 cpe:/a:sun:jdk:1.5.0:update1 cpe:/a:sun:jdk:1.5.0:update10 cpe:/a:sun:jdk:1.5.0:update11 cpe:/a:sun:jdk:1.5.0:update12 cpe:/a:sun:jdk:1.5.0:update13 cpe:/a:sun:jdk:1.5.0:update14 cpe:/a:sun:jdk:1.5.0:update15 cpe:/a:sun:jdk:1.5.0:update16 cpe:/a:sun:jdk:1.5.0:update17 cpe:/a:sun:jdk:1.5.0:update18 cpe:/a:sun:jdk:1.5.0:update19 cpe:/a:sun:jdk:1.5.0:update2 cpe:/a:sun:jdk:1.5.0:update20 cpe:/a:sun:jdk:1.5.0:update21 cpe:/a:sun:jdk:1.5.0:update23 cpe:/a:sun:jdk:1.5.0:update3 cpe:/a:sun:jdk:1.5.0:update4 cpe:/a:sun:jdk:1.5.0:update5 cpe:/a:sun:jdk:1.5.0:update6 cpe:/a:sun:jdk:1.5.0:update7 cpe:/a:sun:jdk:1.5.0:update8 cpe:/a:sun:jdk:1.5.0:update9 cpe:/a:sun:jdk:1.6.0 cpe:/a:sun:jdk:1.6.0:update1 cpe:/a:sun:jdk:1.6.0:update1_b06 cpe:/a:sun:jdk:1.6.0:update2 cpe:/a:sun:jdk:1.6.0:update_10 cpe:/a:sun:jdk:1.6.0:update_11 cpe:/a:sun:jdk:1.6.0:update_12 cpe:/a:sun:jdk:1.6.0:update_13 cpe:/a:sun:jdk:1.6.0:update_14 cpe:/a:sun:jdk:1.6.0:update_15 cpe:/a:sun:jdk:1.6.0:update_16 cpe:/a:sun:jdk:1.6.0:update_17 cpe:/a:sun:jdk:1.6.0:update_18 cpe:/a:sun:jdk:1.6.0:update_3 cpe:/a:sun:jdk:1.6.0:update_4 cpe:/a:sun:jdk:1.6.0:update_5 cpe:/a:sun:jdk:1.6.0:update_6 cpe:/a:sun:jdk:1.6.0:update_7 cpe:/a:sun:jre:1.4.2 cpe:/a:sun:jre:1.4.2_1 cpe:/a:sun:jre:1.4.2_2 cpe:/a:sun:jre:1.4.2_3 cpe:/a:sun:jre:1.4.2_4 cpe:/a:sun:jre:1.4.2_5 cpe:/a:sun:jre:1.4.2_6 cpe:/a:sun:jre:1.4.2_7 cpe:/a:sun:jre:1.4.2_8 cpe:/a:sun:jre:1.4.2_9 cpe:/a:sun:jre:1.4.2_10 cpe:/a:sun:jre:1.4.2_11 cpe:/a:sun:jre:1.4.2_12 cpe:/a:sun:jre:1.4.2_13 cpe:/a:sun:jre:1.4.2_14 cpe:/a:sun:jre:1.4.2_15 cpe:/a:sun:jre:1.4.2_16 cpe:/a:sun:jre:1.4.2_17 cpe:/a:sun:jre:1.4.2_18 cpe:/a:sun:jre:1.4.2_19 cpe:/a:sun:jre:1.4.2_20 cpe:/a:sun:jre:1.4.2_21 cpe:/a:sun:jre:1.4.2_22 cpe:/a:sun:jre:1.4.2_23 cpe:/a:sun:jre:1.4.2_24 cpe:/a:sun:jre:1.4.2_25 cpe:/a:sun:jre:1.5.0 cpe:/a:sun:jre:1.5.0:update1 cpe:/a:sun:jre:1.5.0:update10 cpe:/a:sun:jre:1.5.0:update11 cpe:/a:sun:jre:1.5.0:update12 cpe:/a:sun:jre:1.5.0:update13 cpe:/a:sun:jre:1.5.0:update14 cpe:/a:sun:jre:1.5.0:update15 cpe:/a:sun:jre:1.5.0:update16 cpe:/a:sun:jre:1.5.0:update17 cpe:/a:sun:jre:1.5.0:update18 cpe:/a:sun:jre:1.5.0:update19 cpe:/a:sun:jre:1.5.0:update2 cpe:/a:sun:jre:1.5.0:update20 cpe:/a:sun:jre:1.5.0:update21 cpe:/a:sun:jre:1.5.0:update23 cpe:/a:sun:jre:1.5.0:update3 cpe:/a:sun:jre:1.5.0:update4 cpe:/a:sun:jre:1.5.0:update5 cpe:/a:sun:jre:1.5.0:update6 cpe:/a:sun:jre:1.5.0:update7 cpe:/a:sun:jre:1.5.0:update8 cpe:/a:sun:jre:1.5.0:update9 cpe:/a:sun:jre:1.6.0 cpe:/a:sun:jre:1.6.0:update_1 cpe:/a:sun:jre:1.6.0:update_10 cpe:/a:sun:jre:1.6.0:update_11 cpe:/a:sun:jre:1.6.0:update_12 cpe:/a:sun:jre:1.6.0:update_13 cpe:/a:sun:jre:1.6.0:update_14 cpe:/a:sun:jre:1.6.0:update_15 cpe:/a:sun:jre:1.6.0:update_16 cpe:/a:sun:jre:1.6.0:update_17 cpe:/a:sun:jre:1.6.0:update_18 cpe:/a:sun:jre:1.6.0:update_2 cpe:/a:sun:jre:1.6.0:update_3 cpe:/a:sun:jre:1.6.0:update_4 cpe:/a:sun:jre:1.6.0:update_5 cpe:/a:sun:jre:1.6.0:update_6 cpe:/a:sun:jre:1.6.0:update_7 cpe:/a:sun:sdk:1.4.2 cpe:/a:sun:sdk:1.4.2_1 cpe:/a:sun:sdk:1.4.2_02 cpe:/a:sun:sdk:1.4.2_3 cpe:/a:sun:sdk:1.4.2_4 cpe:/a:sun:sdk:1.4.2_5 cpe:/a:sun:sdk:1.4.2_6 cpe:/a:sun:sdk:1.4.2_7 cpe:/a:sun:sdk:1.4.2_8 cpe:/a:sun:sdk:1.4.2_9 cpe:/a:sun:sdk:1.4.2_10 cpe:/a:sun:sdk:1.4.2_11 cpe:/a:sun:sdk:1.4.2_12 cpe:/a:sun:sdk:1.4.2_13 cpe:/a:sun:sdk:1.4.2_14 cpe:/a:sun:sdk:1.4.2_15 cpe:/a:sun:sdk:1.4.2_16 cpe:/a:sun:sdk:1.4.2_17 cpe:/a:sun:sdk:1.4.2_18 cpe:/a:sun:sdk:1.4.2_19 cpe:/a:sun:sdk:1.4.2_20 cpe:/a:sun:sdk:1.4.2_21 cpe:/a:sun:sdk:1.4.2_22 cpe:/a:sun:sdk:1.4.2_23 cpe:/a:sun:sdk:1.4.2_24 cpe:/a:sun:sdk:1.4.2_25

CVE-2010-0084

2010-04-01T12:30:00.437-04:00

2018-10-30T12:26:21.390-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov HP SSRT100179 APPLE APPLE-SA-2010-05-18-1 APPLE APPLE-SA-2010-05-18-2 SUSE SUSE-SR:2010:008 SUSE SUSE-SR:2010:011 SUSE SUSE-SR:2010:017 HP SSRT100089 HP HPSBMU02799 CONFIRM http://support.apple.com/kb/HT4170 CONFIRM http://support.apple.com/kb/HT4171 UBUNTU USN-923-1 MANDRIVA MDVSA-2010:084 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html CONFIRM http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html REDHAT RHSA-2010:0337 REDHAT RHSA-2010:0338 REDHAT RHSA-2010:0339 REDHAT RHSA-2010:0383 REDHAT RHSA-2010:0471 BUGTRAQ 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX CONFIRM http://www.vmware.com/security/advisories/VMSA-2011-0003.html CONFIRM http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html VUPEN ADV-2010-1107 VUPEN ADV-2010-1191 VUPEN ADV-2010-1454 VUPEN ADV-2010-1793 Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2010-0091.

CVE-2010-0085

2010-04-01T12:30:00.530-04:00

2018-10-30T12:26:21.390-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov HP SSRT100179 APPLE APPLE-SA-2010-05-18-1 APPLE APPLE-SA-2010-05-18-2 SUSE SUSE-SR:2010:008 SUSE SUSE-SR:2010:011 SUSE SUSE-SR:2010:017 HP SSRT100089 HP HPSBMU02799 CONFIRM http://support.apple.com/kb/HT4170 CONFIRM http://support.apple.com/kb/HT4171 UBUNTU USN-923-1 MANDRIVA MDVSA-2010:084 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html CONFIRM http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html REDHAT RHSA-2010:0337 REDHAT RHSA-2010:0338 REDHAT RHSA-2010:0339 REDHAT RHSA-2010:0383 REDHAT RHSA-2010:0471 BUGTRAQ 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX CONFIRM http://www.vmware.com/security/advisories/VMSA-2011-0003.html CONFIRM http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html VUPEN ADV-2010-1107 VUPEN ADV-2010-1191 VUPEN ADV-2010-1454 VUPEN ADV-2010-1793 Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0088.

cpe:/a:oracle:fusion_middleware:10.1.2.3

CVE-2010-0086

2010-04-13T18:30:00.337-04:00

2016-11-18T22:02:15.437-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html SECTRACK 1023869 CERT TA10-103B Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-0855.

CVE-2010-0087

2010-04-01T12:30:00.563-04:00

2018-10-30T12:26:21.390-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov HP SSRT100179 APPLE APPLE-SA-2010-05-18-1 APPLE APPLE-SA-2010-05-18-2 SUSE SUSE-SR:2010:008 SUSE SUSE-SR:2010:017 HP SSRT100089 HP HPSBMU02799 CONFIRM http://support.apple.com/kb/HT4170 CONFIRM http://support.apple.com/kb/HT4171 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html CONFIRM http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html REDHAT RHSA-2010:0337 REDHAT RHSA-2010:0338 REDHAT RHSA-2010:0383 REDHAT RHSA-2010:0471 BUGTRAQ 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX CONFIRM http://www.vmware.com/security/advisories/VMSA-2011-0003.html CONFIRM http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html VUPEN ADV-2010-1191 VUPEN ADV-2010-1454 VUPEN ADV-2010-1793 Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVE-2010-0088

2010-04-01T12:30:00.593-04:00

2018-10-30T12:26:21.390-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov HP SSRT100179 APPLE APPLE-SA-2010-05-18-1 APPLE APPLE-SA-2010-05-18-2 SUSE SUSE-SR:2010:008 SUSE SUSE-SR:2010:011 SUSE SUSE-SR:2010:017 HP SSRT100089 HP HPSBMU02799 CONFIRM http://support.apple.com/kb/HT4170 CONFIRM http://support.apple.com/kb/HT4171 UBUNTU USN-923-1 MANDRIVA MDVSA-2010:084 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html CONFIRM http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html REDHAT RHSA-2010:0337 REDHAT RHSA-2010:0338 REDHAT RHSA-2010:0339 REDHAT RHSA-2010:0383 REDHAT RHSA-2010:0471 BUGTRAQ 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX CONFIRM http://www.vmware.com/security/advisories/VMSA-2011-0003.html CONFIRM http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html VUPEN ADV-2010-1107 VUPEN ADV-2010-1191 VUPEN ADV-2010-1454 VUPEN ADV-2010-1793 Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0085.

CVE-2010-0089

2010-04-01T12:30:00.627-04:00

2018-10-30T12:26:21.390-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov HP SSRT100179 APPLE APPLE-SA-2010-05-18-1 APPLE APPLE-SA-2010-05-18-2 SUSE SUSE-SR:2010:008 SUSE SUSE-SR:2010:017 HP SSRT100089 HP HPSBMU02799 CONFIRM http://support.apple.com/kb/HT4170 CONFIRM http://support.apple.com/kb/HT4171 CONFIRM http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html REDHAT RHSA-2010:0337 REDHAT RHSA-2010:0338 REDHAT RHSA-2010:0383 REDHAT RHSA-2010:0471 BUGTRAQ 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX CONFIRM http://www.vmware.com/security/advisories/VMSA-2011-0003.html CONFIRM http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html VUPEN ADV-2010-1191 VUPEN ADV-2010-1454 VUPEN ADV-2010-1793 Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect availability via unknown vectors.

cpe:/a:sun:jdk:1.6.0 cpe:/a:sun:jdk:1.6.0:update1 cpe:/a:sun:jdk:1.6.0:update1_b06 cpe:/a:sun:jdk:1.6.0:update2 cpe:/a:sun:jdk:1.6.0:update_10 cpe:/a:sun:jdk:1.6.0:update_11 cpe:/a:sun:jdk:1.6.0:update_12 cpe:/a:sun:jdk:1.6.0:update_13 cpe:/a:sun:jdk:1.6.0:update_14 cpe:/a:sun:jdk:1.6.0:update_15 cpe:/a:sun:jdk:1.6.0:update_16 cpe:/a:sun:jdk:1.6.0:update_17 cpe:/a:sun:jdk:1.6.0:update_18 cpe:/a:sun:jdk:1.6.0:update_3 cpe:/a:sun:jdk:1.6.0:update_4 cpe:/a:sun:jdk:1.6.0:update_5 cpe:/a:sun:jdk:1.6.0:update_6 cpe:/a:sun:jdk:1.6.0:update_7 cpe:/a:sun:jre:1.6.0 cpe:/a:sun:jre:1.6.0:update_1 cpe:/a:sun:jre:1.6.0:update_10 cpe:/a:sun:jre:1.6.0:update_11 cpe:/a:sun:jre:1.6.0:update_12 cpe:/a:sun:jre:1.6.0:update_13 cpe:/a:sun:jre:1.6.0:update_14 cpe:/a:sun:jre:1.6.0:update_15 cpe:/a:sun:jre:1.6.0:update_16 cpe:/a:sun:jre:1.6.0:update_17 cpe:/a:sun:jre:1.6.0:update_18 cpe:/a:sun:jre:1.6.0:update_2 cpe:/a:sun:jre:1.6.0:update_3 cpe:/a:sun:jre:1.6.0:update_4 cpe:/a:sun:jre:1.6.0:update_5 cpe:/a:sun:jre:1.6.0:update_6 cpe:/a:sun:jre:1.6.0:update_7

CVE-2010-0090

2010-04-01T12:30:00.640-04:00

2018-10-10T15:50:35.147-04:00

5.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov HP SSRT100179 APPLE APPLE-SA-2010-05-18-1 APPLE APPLE-SA-2010-05-18-2 SUSE SUSE-SR:2010:008 HP HPSBMU02799 CONFIRM http://support.apple.com/kb/HT4170 CONFIRM http://support.apple.com/kb/HT4171 CONFIRM http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html REDHAT RHSA-2010:0337 REDHAT RHSA-2010:0383 REDHAT RHSA-2010:0471 BUGTRAQ 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX CONFIRM http://www.vmware.com/security/advisories/VMSA-2011-0003.html CONFIRM http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html VUPEN ADV-2010-1191 VUPEN ADV-2010-1454 VUPEN ADV-2010-1793 Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18 allows remote attackers to affect integrity and availability via unknown vectors.

CVE-2010-0091

2010-04-01T12:30:00.687-04:00

2018-10-30T12:26:21.390-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

CVE-2010-0092

2010-04-01T12:30:00.703-04:00

2018-10-10T15:50:43.537-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

CVE-2010-0093

2010-04-01T12:30:00.733-04:00

2018-10-30T12:26:21.390-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

CVE-2010-0094

2010-04-01T12:30:00.767-04:00

2018-10-10T15:50:52.457-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov HP SSRT100179 APPLE APPLE-SA-2010-05-18-1 APPLE APPLE-SA-2010-05-18-2 SUSE SUSE-SR:2010:008 SUSE SUSE-SR:2010:011 HP SSRT100089 HP HPSBMU02799 CONFIRM http://support.apple.com/kb/HT4170 CONFIRM http://support.apple.com/kb/HT4171 UBUNTU USN-923-1 MANDRIVA MDVSA-2010:084 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html CONFIRM http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html REDHAT RHSA-2010:0337 REDHAT RHSA-2010:0338 REDHAT RHSA-2010:0339 REDHAT RHSA-2010:0383 REDHAT RHSA-2010:0471 BUGTRAQ 20100405 ZDI-10-051: Sun Java Runtime RMIConnectionImpl Privileged Context Remote Code Execution Vulnerability BUGTRAQ 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX CONFIRM http://www.vmware.com/security/advisories/VMSA-2011-0003.html CONFIRM http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html VUPEN ADV-2010-1107 VUPEN ADV-2010-1191 VUPEN ADV-2010-1454 VUPEN ADV-2010-1793 MISC http://www.zerodayinitiative.com/advisories/ZDI-10-051 Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is due to missing privilege checks during deserialization of RMIConnectionImpl objects, which allows remote attackers to call system-level Java functions via the ClassLoader of a constructor that is being deserialized.

CVE-2010-0095

2010-04-01T12:30:00.797-04:00

2018-10-30T12:26:21.390-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov HP SSRT100179 APPLE APPLE-SA-2010-05-18-1 APPLE APPLE-SA-2010-05-18-2 SUSE SUSE-SR:2010:008 SUSE SUSE-SR:2010:011 SUSE SUSE-SR:2010:017 HP SSRT100089 HP HPSBMU02799 CONFIRM http://support.apple.com/kb/HT4170 CONFIRM http://support.apple.com/kb/HT4171 UBUNTU USN-923-1 MANDRIVA MDVSA-2010:084 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html CONFIRM http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html REDHAT RHSA-2010:0337 REDHAT RHSA-2010:0338 REDHAT RHSA-2010:0339 REDHAT RHSA-2010:0383 REDHAT RHSA-2010:0471 BUGTRAQ 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX CONFIRM http://www.vmware.com/security/advisories/VMSA-2011-0003.html CONFIRM http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html VUPEN ADV-2010-1107 VUPEN ADV-2010-1191 VUPEN ADV-2010-1454 VUPEN ADV-2010-1793 Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0093.

cpe:/a:isc:bind:9.0 cpe:/a:isc:bind:9.0.0:rc1 cpe:/a:isc:bind:9.0.0:rc2 cpe:/a:isc:bind:9.0.0:rc3 cpe:/a:isc:bind:9.0.0:rc4 cpe:/a:isc:bind:9.0.0:rc5 cpe:/a:isc:bind:9.0.0:rc6 cpe:/a:isc:bind:9.0.1 cpe:/a:isc:bind:9.0.1:rc1 cpe:/a:isc:bind:9.0.1:rc2 cpe:/a:isc:bind:9.1 cpe:/a:isc:bind:9.1.0:rc1 cpe:/a:isc:bind:9.1.1 cpe:/a:isc:bind:9.1.1:rc1 cpe:/a:isc:bind:9.1.1:rc2 cpe:/a:isc:bind:9.1.1:rc3 cpe:/a:isc:bind:9.1.1:rc4 cpe:/a:isc:bind:9.1.1:rc5 cpe:/a:isc:bind:9.1.1:rc6 cpe:/a:isc:bind:9.1.1:rc7 cpe:/a:isc:bind:9.1.2 cpe:/a:isc:bind:9.1.2:rc1 cpe:/a:isc:bind:9.1.3 cpe:/a:isc:bind:9.1.3:rc1 cpe:/a:isc:bind:9.1.3:rc2 cpe:/a:isc:bind:9.1.3:rc3 cpe:/a:isc:bind:9.2 cpe:/a:isc:bind:9.2.0 cpe:/a:isc:bind:9.2.0:a1 cpe:/a:isc:bind:9.2.0:a2 cpe:/a:isc:bind:9.2.0:a3 cpe:/a:isc:bind:9.2.0:b1 cpe:/a:isc:bind:9.2.0:b2 cpe:/a:isc:bind:9.2.0:rc1 cpe:/a:isc:bind:9.2.0:rc10 cpe:/a:isc:bind:9.2.0:rc2 cpe:/a:isc:bind:9.2.0:rc3 cpe:/a:isc:bind:9.2.0:rc4 cpe:/a:isc:bind:9.2.0:rc5 cpe:/a:isc:bind:9.2.0:rc6 cpe:/a:isc:bind:9.2.0:rc7 cpe:/a:isc:bind:9.2.0:rc8 cpe:/a:isc:bind:9.2.0:rc9 cpe:/a:isc:bind:9.2.1 cpe:/a:isc:bind:9.2.1:rc1 cpe:/a:isc:bind:9.2.1:rc2 cpe:/a:isc:bind:9.2.2 cpe:/a:isc:bind:9.2.2:p2 cpe:/a:isc:bind:9.2.2:p3 cpe:/a:isc:bind:9.2.2:rc1 cpe:/a:isc:bind:9.2.3 cpe:/a:isc:bind:9.2.3:rc1 cpe:/a:isc:bind:9.2.3:rc2 cpe:/a:isc:bind:9.2.3:rc3 cpe:/a:isc:bind:9.2.3:rc4 cpe:/a:isc:bind:9.2.4 cpe:/a:isc:bind:9.2.4:rc2 cpe:/a:isc:bind:9.2.4:rc3 cpe:/a:isc:bind:9.2.4:rc4 cpe:/a:isc:bind:9.2.4:rc5 cpe:/a:isc:bind:9.2.4:rc6 cpe:/a:isc:bind:9.2.4:rc7 cpe:/a:isc:bind:9.2.4:rc8 cpe:/a:isc:bind:9.2.5 cpe:/a:isc:bind:9.2.5:b2 cpe:/a:isc:bind:9.2.5:rc1 cpe:/a:isc:bind:9.2.6 cpe:/a:isc:bind:9.2.6:rc1 cpe:/a:isc:bind:9.2.7 cpe:/a:isc:bind:9.2.7:rc1 cpe:/a:isc:bind:9.2.7:rc2 cpe:/a:isc:bind:9.2.7:rc3 cpe:/a:isc:bind:9.2.8 cpe:/a:isc:bind:9.2.9 cpe:/a:isc:bind:9.2.9:rc1 cpe:/a:isc:bind:9.3 cpe:/a:isc:bind:9.3.0 cpe:/a:isc:bind:9.3.0:b2 cpe:/a:isc:bind:9.3.0:b3 cpe:/a:isc:bind:9.3.0:b4 cpe:/a:isc:bind:9.3.0:rc1 cpe:/a:isc:bind:9.3.0:rc2 cpe:/a:isc:bind:9.3.0:rc3 cpe:/a:isc:bind:9.3.0:rc4 cpe:/a:isc:bind:9.3.1 cpe:/a:isc:bind:9.3.1:b2 cpe:/a:isc:bind:9.3.1:rc1 cpe:/a:isc:bind:9.3.2 cpe:/a:isc:bind:9.3.2:rc1 cpe:/a:isc:bind:9.3.3 cpe:/a:isc:bind:9.3.3:rc1 cpe:/a:isc:bind:9.3.3:rc2 cpe:/a:isc:bind:9.3.3:rc3 cpe:/a:isc:bind:9.3.4 cpe:/a:isc:bind:9.3.5 cpe:/a:isc:bind:9.3.5:rc1 cpe:/a:isc:bind:9.3.5:rc2 cpe:/a:isc:bind:9.3.6 cpe:/a:isc:bind:9.3.6:rc1 cpe:/a:isc:bind:9.4 cpe:/a:isc:bind:9.4::~~esv~~~ cpe:/a:isc:bind:9.4:b1:~~esv~~~ cpe:/a:isc:bind:9.4:r1:~~esv~~~ cpe:/a:isc:bind:9.4:r2:~~esv~~~ cpe:/a:isc:bind:9.4:r3:~~esv~~~ cpe:/a:isc:bind:9.4:r4:~~esv~~~ cpe:/a:isc:bind:9.4:r4-p1:~~esv~~~ cpe:/a:isc:bind:9.4:r5:~~esv~~~ cpe:/a:isc:bind:9.4:r5-b1:~~esv~~~ cpe:/a:isc:bind:9.4:r5-p1:~~esv~~~ cpe:/a:isc:bind:9.4:r5-rc1:~~esv~~~ cpe:/a:isc:bind:9.4.0 cpe:/a:isc:bind:9.4.0:a1 cpe:/a:isc:bind:9.4.0:a2 cpe:/a:isc:bind:9.4.0:a3 cpe:/a:isc:bind:9.4.0:a4 cpe:/a:isc:bind:9.4.0:a5 cpe:/a:isc:bind:9.4.0:a6 cpe:/a:isc:bind:9.4.0:b1 cpe:/a:isc:bind:9.4.0:b2 cpe:/a:isc:bind:9.4.0:b3 cpe:/a:isc:bind:9.4.0:b4 cpe:/a:isc:bind:9.4.0:rc1 cpe:/a:isc:bind:9.4.0:rc2 cpe:/a:isc:bind:9.4.1 cpe:/a:isc:bind:9.4.2 cpe:/a:isc:bind:9.4.2:rc1 cpe:/a:isc:bind:9.4.2:rc2 cpe:/a:isc:bind:9.4.3 cpe:/a:isc:bind:9.4.3:b1 cpe:/a:isc:bind:9.4.3:b2 cpe:/a:isc:bind:9.4.3:b3 cpe:/a:isc:bind:9.4.3:p2 cpe:/a:isc:bind:9.4.3:rc1 cpe:/a:isc:bind:9.5 cpe:/a:isc:bind:9.5.0 cpe:/a:isc:bind:9.5.0:a1 cpe:/a:isc:bind:9.5.0:a2 cpe:/a:isc:bind:9.5.0:a3 cpe:/a:isc:bind:9.5.0:a4 cpe:/a:isc:bind:9.5.0:a5 cpe:/a:isc:bind:9.5.0:a6 cpe:/a:isc:bind:9.5.0:a7 cpe:/a:isc:bind:9.5.0:b1 cpe:/a:isc:bind:9.5.0:b2 cpe:/a:isc:bind:9.5.0:b3 cpe:/a:isc:bind:9.5.0:p1 cpe:/a:isc:bind:9.5.0:p2 cpe:/a:isc:bind:9.5.0:p2_w1 cpe:/a:isc:bind:9.5.0:p2_w2 cpe:/a:isc:bind:9.5.0:rc1 cpe:/a:isc:bind:9.5.1 cpe:/a:isc:bind:9.5.1:b1 cpe:/a:isc:bind:9.5.1:b2 cpe:/a:isc:bind:9.5.1:b3 cpe:/a:isc:bind:9.5.1:rc1 cpe:/a:isc:bind:9.5.1:rc2 cpe:/a:isc:bind:9.5.2 cpe:/a:isc:bind:9.5.2:b1 cpe:/a:isc:bind:9.5.2:p1 cpe:/a:isc:bind:9.6::~~esv~~~ cpe:/a:isc:bind:9.6:r1:~~esv~~~ cpe:/a:isc:bind:9.6:r2:~~esv~~~ cpe:/a:isc:bind:9.6:r3:~~esv~~~ cpe:/a:isc:bind:9.6:r4:~~esv~~~ cpe:/a:isc:bind:9.6:r4_p1:~~esv~~~ cpe:/a:isc:bind:9.6:r5:~~esv~~~ cpe:/a:isc:bind:9.6:r5_b1:~~esv~~~ cpe:/a:isc:bind:9.6:r5_p1:~~esv~~~ cpe:/a:isc:bind:9.6:r6:~~esv~~~ cpe:/a:isc:bind:9.6:r6_b1:~~esv~~~ cpe:/a:isc:bind:9.6:r6_rc1:~~esv~~~ cpe:/a:isc:bind:9.6:r6_rc2:~~esv~~~ cpe:/a:isc:bind:9.6:r7:~~esv~~~ cpe:/a:isc:bind:9.6:r7_p1:~~esv~~~ cpe:/a:isc:bind:9.6:r7_p2:~~esv~~~ cpe:/a:isc:bind:9.6:r9:~~esv~~~ cpe:/a:isc:bind:9.6:r9_p1:~~esv~~~ cpe:/a:isc:bind:9.6.0 cpe:/a:isc:bind:9.6.0:a1 cpe:/a:isc:bind:9.6.0:b1 cpe:/a:isc:bind:9.6.0:p1 cpe:/a:isc:bind:9.6.0:rc1 cpe:/a:isc:bind:9.6.0:rc2 cpe:/a:isc:bind:9.6.1 cpe:/a:isc:bind:9.6.1:b1 cpe:/a:isc:bind:9.6.1:p1 cpe:/a:isc:bind:9.6.1:p2 cpe:/a:isc:bind:9.7.0

CVE-2010-0097

2010-01-22T17:00:00.397-05:00

2017-09-18T21:30:14.000-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM ftp://ftp.sco.com/pub/unixware7/714/security/p535243_uw7/p535243b.txt APPLE APPLE-SA-2011-10-12-3 FEDORA FEDORA-2010-0861 FEDORA FEDORA-2010-0868 SUSE SUSE-SA:2010:008 HP SSRT100004 SECTRACK 1023474 SUNALERT 1021798 CONFIRM http://support.apple.com/kb/HT5002 CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018 DEBIAN DSA-2054 CERT-VN VU#360341 MANDRIVA MDVSA-2010:021 BID 37865 UBUNTU USN-888-1 VUPEN ADV-2010-0176 VUPEN ADV-2010-0622 VUPEN ADV-2010-0981 VUPEN ADV-2010-1352 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=554851 XF bind-dnssecnsec-cache-poisoning(55753) CONFIRM https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488 REDHAT RHSA-2010:0062 REDHAT RHSA-2010:0095 CONFIRM https://www.isc.org/advisories/CVE-2010-0097 ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC (1) NSEC and (2) NSEC3 records, which allows remote attackers to add the Authenticated Data (AD) flag to a forged NXDOMAIN response for an existing domain.

cpe:/a:clamav:clamav:0.01 cpe:/a:clamav:clamav:0.02 cpe:/a:clamav:clamav:0.03 cpe:/a:clamav:clamav:0.05 cpe:/a:clamav:clamav:0.9:rc1 cpe:/a:clamav:clamav:0.10 cpe:/a:clamav:clamav:0.12 cpe:/a:clamav:clamav:0.13 cpe:/a:clamav:clamav:0.14 cpe:/a:clamav:clamav:0.14:pre cpe:/a:clamav:clamav:0.15 cpe:/a:clamav:clamav:0.20 cpe:/a:clamav:clamav:0.21 cpe:/a:clamav:clamav:0.22 cpe:/a:clamav:clamav:0.23 cpe:/a:clamav:clamav:0.24 cpe:/a:clamav:clamav:0.51 cpe:/a:clamav:clamav:0.52 cpe:/a:clamav:clamav:0.53 cpe:/a:clamav:clamav:0.54 cpe:/a:clamav:clamav:0.60 cpe:/a:clamav:clamav:0.60p cpe:/a:clamav:clamav:0.65 cpe:/a:clamav:clamav:0.66 cpe:/a:clamav:clamav:0.67 cpe:/a:clamav:clamav:0.67-1 cpe:/a:clamav:clamav:0.68 cpe:/a:clamav:clamav:0.68.1 cpe:/a:clamav:clamav:0.70 cpe:/a:clamav:clamav:0.70:rc cpe:/a:clamav:clamav:0.71 cpe:/a:clamav:clamav:0.72 cpe:/a:clamav:clamav:0.73 cpe:/a:clamav:clamav:0.74 cpe:/a:clamav:clamav:0.75 cpe:/a:clamav:clamav:0.75.1 cpe:/a:clamav:clamav:0.80 cpe:/a:clamav:clamav:0.80:rc cpe:/a:clamav:clamav:0.80:rc2 cpe:/a:clamav:clamav:0.80:rc3 cpe:/a:clamav:clamav:0.80:rc4 cpe:/a:clamav:clamav:0.81 cpe:/a:clamav:clamav:0.82 cpe:/a:clamav:clamav:0.83 cpe:/a:clamav:clamav:0.84 cpe:/a:clamav:clamav:0.84:rc1 cpe:/a:clamav:clamav:0.84:rc2 cpe:/a:clamav:clamav:0.85 cpe:/a:clamav:clamav:0.85.1 cpe:/a:clamav:clamav:0.86 cpe:/a:clamav:clamav:0.86:rc1 cpe:/a:clamav:clamav:0.86.1 cpe:/a:clamav:clamav:0.86.2 cpe:/a:clamav:clamav:0.87 cpe:/a:clamav:clamav:0.87.1 cpe:/a:clamav:clamav:0.88 cpe:/a:clamav:clamav:0.88.1 cpe:/a:clamav:clamav:0.88.2 cpe:/a:clamav:clamav:0.88.3 cpe:/a:clamav:clamav:0.88.4 cpe:/a:clamav:clamav:0.88.5 cpe:/a:clamav:clamav:0.88.6 cpe:/a:clamav:clamav:0.88.7 cpe:/a:clamav:clamav:0.90 cpe:/a:clamav:clamav:0.90:rc1 cpe:/a:clamav:clamav:0.90:rc1.1 cpe:/a:clamav:clamav:0.90:rc2 cpe:/a:clamav:clamav:0.90:rc3 cpe:/a:clamav:clamav:0.90.1 cpe:/a:clamav:clamav:0.90.2 cpe:/a:clamav:clamav:0.90.3 cpe:/a:clamav:clamav:0.91 cpe:/a:clamav:clamav:0.91:rc1 cpe:/a:clamav:clamav:0.91:rc2 cpe:/a:clamav:clamav:0.91.1 cpe:/a:clamav:clamav:0.91.2 cpe:/a:clamav:clamav:0.92 cpe:/a:clamav:clamav:0.92.1 cpe:/a:clamav:clamav:0.93 cpe:/a:clamav:clamav:0.93.1 cpe:/a:clamav:clamav:0.93.2 cpe:/a:clamav:clamav:0.93.3 cpe:/a:clamav:clamav:0.94 cpe:/a:clamav:clamav:0.94.1 cpe:/a:clamav:clamav:0.94.2 cpe:/a:clamav:clamav:0.95 cpe:/a:clamav:clamav:0.95:rc1 cpe:/a:clamav:clamav:0.95:rc2 cpe:/a:clamav:clamav:0.95.1 cpe:/a:clamav:clamav:0.95.2 cpe:/a:clamav:clamav:0.95.3 cpe:/a:clamav:clamav:0.96:rc1 cpe:/a:clamav:clamav:0.96:rc2 cpe:/a:clamavs:clamav:0.04 cpe:/a:clamavs:clamav:0.06

CVE-2010-0098

2010-04-08T13:30:00.313-04:00

2010-08-31T01:41:20.807-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://git.clamav.net/gitweb?p=clamav-devel.git;a=blob_plain;f=ChangeLog;hb=clamav-0.96 APPLE APPLE-SA-2010-08-24-1 SUSE SUSE-SR:2010:010 CONFIRM http://support.apple.com/kb/HT4312 MANDRIVA MDVSA-2010:082 MLIST [oss-security] 20100406 ClamAV small issues MLIST [oss-security] 20100407 Re: ClamAV small issues BID 39262 UBUNTU USN-926-1 VUPEN ADV-2010-0827 VUPEN ADV-2010-0832 VUPEN ADV-2010-0909 VUPEN ADV-2010-1001 VUPEN ADV-2010-1206 CONFIRM https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1826 ClamAV before 0.96 does not properly handle the (1) CAB and (2) 7z file formats, which allows remote attackers to bypass virus detection via a crafted archive that is compatible with standard archive utilities.

CVE-2010-0099

2010-07-22T12:30:01.017-04:00

2010-07-22T12:30:01.297-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-0092. Reason: This candidate is a duplicate of CVE-2010-0092. Notes: All CVE users should reference CVE-2010-0092 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

cpe:/h:lexmark:25xxn cpe:/h:lexmark:c510 cpe:/h:lexmark:c52x cpe:/h:lexmark:c53x cpe:/h:lexmark:c540 cpe:/h:lexmark:c543 cpe:/h:lexmark:c544 cpe:/h:lexmark:c546 cpe:/h:lexmark:c73x cpe:/h:lexmark:c77x cpe:/h:lexmark:c78x cpe:/h:lexmark:c920 cpe:/h:lexmark:c935dn cpe:/h:lexmark:e120 cpe:/h:lexmark:e238 cpe:/h:lexmark:e23x cpe:/h:lexmark:e240 cpe:/h:lexmark:e240n cpe:/h:lexmark:e250 cpe:/h:lexmark:e260 cpe:/h:lexmark:e33x cpe:/h:lexmark:e34x cpe:/h:lexmark:e350 cpe:/h:lexmark:e360d cpe:/h:lexmark:e360dn cpe:/h:lexmark:e450 cpe:/h:lexmark:e460 cpe:/h:lexmark:e462 cpe:/h:lexmark:n4000 cpe:/h:lexmark:n4050e cpe:/h:lexmark:n70xxe cpe:/h:lexmark:n8120 cpe:/h:lexmark:n8130 cpe:/h:lexmark:t430 cpe:/h:lexmark:t64x cpe:/h:lexmark:t650 cpe:/h:lexmark:t652 cpe:/h:lexmark:t654 cpe:/h:lexmark:t656 cpe:/h:lexmark:w840 cpe:/h:lexmark:w850 cpe:/h:lexmark:x20x cpe:/h:lexmark:x26x cpe:/h:lexmark:x34x cpe:/h:lexmark:x36x cpe:/h:lexmark:x422 cpe:/h:lexmark:x46x cpe:/h:lexmark:x543 cpe:/h:lexmark:x544 cpe:/h:lexmark:x546 cpe:/h:lexmark:x642 cpe:/h:lexmark:x644 cpe:/h:lexmark:x646 cpe:/h:lexmark:x64xef cpe:/h:lexmark:x65x cpe:/h:lexmark:x73x cpe:/h:lexmark:x772e cpe:/h:lexmark:x782e cpe:/h:lexmark:x85x cpe:/h:lexmark:x86x cpe:/h:lexmark:x94x

CVE-2010-0101

2010-05-04T12:00:35.230-04:00

2010-05-07T00:00:00.000-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2010-05-04T14:25:00.000-04:00

CONFIRM http://support.lexmark.com/index?page=content&id=TE87&locale=EN&userlocale=EN_US The embedded HTTP server in multiple Lexmark laser and inkjet printers and MarkNet devices, including X94x, W840, T656, N4000, E462, C935dn, 25xxN, and other models, allows remote attackers to cause a denial of service (operating system halt) via a malformed HTTP Authorization header.

cpe:/a:energizer:duo_usb

CVE-2010-0103

2010-03-10T15:13:02.667-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2010-03-10T17:30:00.000-05:00

CERT-VN VU#154421 MISC http://www.marketwatch.com/story/energizer-announces-duo-charger-and-usb-charger-software-problem-2010-03-05 BID 38571 MISC http://www.symantec.com/connect/blogs/trojan-found-usb-battery-charger-software UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Arucer.dll file in the %WINDIR%\system32 directory, which allows remote attackers to download arbitrary programs onto a Windows PC, and execute these programs, via a request to TCP port 7777.

cpe:/h:broadcom:broadcom:integrated_nic_management_firmware:1.24.0.9 cpe:/h:broadcom:broadcom:integrated_nic_management_firmware:8.0.4

CVE-2010-0104

2010-03-18T13:30:00.383-04:00

2019-10-09T18:59:54.793-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov HP HPSBGN02511 SECTRACK 1023710 CERT-VN VU#512705 BID 38759 VUPEN ADV-2010-0631 Unspecified vulnerability in the Broadcom Integrated NIC Management Firmware 1.x before 1.40.0.0 and 8.x before 8.08 on the HP Small Form Factor and Microtower platforms allows remote attackers to execute arbitrary code via unknown vectors.

cpe:/o:apple:mac_os_x:10.5.8 cpe:/o:apple:mac_os_x:10.6.0 cpe:/o:apple:mac_os_x:10.6.1 cpe:/o:apple:mac_os_x:10.6.2 cpe:/o:apple:mac_os_x:10.6.3 cpe:/o:apple:mac_os_x:10.6.4

CVE-2010-0105

2010-04-27T11:30:01.217-04:00

2010-12-10T00:00:00.000-05:00

4.9

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2010-04-28T13:46:00.000-04:00

APPLE APPLE-SA-2010-11-10-1 SREASONRES 20100423 MacOS X 10.6.3 filesystem hfs Denial of Service Vulnerability CONFIRM http://support.apple.com/kb/HT4435 BID 39658 SECTRACK 1024723 The hfs implementation in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 supports hard links to directories and does not prevent certain deeply nested directory structures, which allows local users to cause a denial of service (filesystem corruption) via a crafted application that calls the mkdir and link functions, related to the fsck_hfs program in the diskdev_cmds component.

cpe:/a:symantec:antivirus:10.0 cpe:/a:symantec:antivirus:10.0.1 cpe:/a:symantec:antivirus:10.0.1.1 cpe:/a:symantec:antivirus:10.0.2 cpe:/a:symantec:antivirus:10.0.2.1 cpe:/a:symantec:antivirus:10.0.2.2 cpe:/a:symantec:antivirus:10.0.3 cpe:/a:symantec:antivirus:10.0.4 cpe:/a:symantec:antivirus:10.0.5 cpe:/a:symantec:antivirus:10.0.6 cpe:/a:symantec:antivirus:10.0.7 cpe:/a:symantec:antivirus:10.0.8 cpe:/a:symantec:antivirus:10.0.9 cpe:/a:symantec:antivirus:10.1 cpe:/a:symantec:antivirus:10.1::corporate cpe:/a:symantec:antivirus:10.1:mp1:corporate cpe:/a:symantec:antivirus:10.1:mr4:corporate cpe:/a:symantec:antivirus:10.1:mr5:corporate cpe:/a:symantec:antivirus:10.1:mr7:corporate cpe:/a:symantec:antivirus:10.1.0.1::corporate cpe:/a:symantec:antivirus:10.1.4::corporate cpe:/a:symantec:antivirus:10.1.4.1::corporate cpe:/a:symantec:antivirus:10.1.5::corporate cpe:/a:symantec:antivirus:10.1.5.1::corporate cpe:/a:symantec:antivirus:10.1.6::corporate cpe:/a:symantec:antivirus:10.1.6.1::corporate cpe:/a:symantec:antivirus:10.1.7::corporate cpe:/a:symantec:antivirus:10.2::corporate cpe:/a:symantec:antivirus:10.2:mr2:corporate cpe:/a:symantec:antivirus:10.2:mr3:corporate cpe:/a:symantec:client_security:3.0 cpe:/a:symantec:client_security:3.0:mr1 cpe:/a:symantec:client_security:3.0:mr2 cpe:/a:symantec:client_security:3.0.0.359 cpe:/a:symantec:client_security:3.0.1.1000 cpe:/a:symantec:client_security:3.0.1.1007 cpe:/a:symantec:client_security:3.0.1.1008 cpe:/a:symantec:client_security:3.0.2 cpe:/a:symantec:client_security:3.0.2.2000 cpe:/a:symantec:client_security:3.0.2.2001 cpe:/a:symantec:client_security:3.0.2.2010 cpe:/a:symantec:client_security:3.0.2.2011 cpe:/a:symantec:client_security:3.0.2.2020 cpe:/a:symantec:client_security:3.0.2.2021 cpe:/a:symantec:client_security:3.1 cpe:/a:symantec:client_security:3.1:mr4 cpe:/a:symantec:client_security:3.1:mr5 cpe:/a:symantec:client_security:3.1:mr7 cpe:/a:symantec:client_security:3.1.0.396 cpe:/a:symantec:client_security:3.1.0.401 cpe:/a:symantec:client_security:3.1.394 cpe:/a:symantec:client_security:3.1.400 cpe:/a:symantec:client_security:3.1.401 cpe:/a:symantec:endpoint_protection:11.0

CVE-2010-0106

2010-02-19T12:30:00.660-05:00

2018-10-30T12:25:59.560-04:00

1.9

LOCAL

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov BID 38219 SECTRACK 1023621 CONFIRM http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100217_00 VUPEN ADV-2010-0410 XF symantec-ondemand-dos(56354) The on-demand scanning in Symantec AntiVirus 10.0.x and 10.1.x before MR9, AntiVirus 10.2.x, and Client Security 3.0.x and 3.1.x before MR9, when Tamper protection is disabled, allows remote attackers to cause a denial of service (prevention of on-demand scanning) via "specific events" that prevent the user from having read access to unspecified resources.

cpe:/a:symantec:client_security:3.0 cpe:/a:symantec:client_security:3.0.1.1000 cpe:/a:symantec:client_security:3.0.1.1001 cpe:/a:symantec:client_security:3.0.1.1007 cpe:/a:symantec:client_security:3.0.1.1008 cpe:/a:symantec:client_security:3.0.1.1009 cpe:/a:symantec:client_security:3.0.2 cpe:/a:symantec:client_security:3.0.2.2000 cpe:/a:symantec:client_security:3.0.2.2001 cpe:/a:symantec:client_security:3.0.2.2002 cpe:/a:symantec:client_security:3.0.2.2010 cpe:/a:symantec:client_security:3.0.2.2011 cpe:/a:symantec:client_security:3.0.2.2020 cpe:/a:symantec:client_security:3.0.2.2021 cpe:/a:symantec:client_security:3.1 cpe:/a:symantec:client_security:3.1:mr4 cpe:/a:symantec:client_security:3.1:mr5 cpe:/a:symantec:client_security:3.1:mr6 cpe:/a:symantec:client_security:3.1.0.396 cpe:/a:symantec:client_security:3.1.0.401 cpe:/a:symantec:client_security:3.1.396 cpe:/a:symantec:client_security:3.1.400 cpe:/a:symantec:client_security:3.1.401 cpe:/a:symantec:norton_360:1.0 cpe:/a:symantec:norton_360:2.0 cpe:/a:symantec:norton_antivirus:2006 cpe:/a:symantec:norton_antivirus:2007 cpe:/a:symantec:norton_antivirus:2008 cpe:/a:symantec:norton_internet_security:2006 cpe:/a:symantec:norton_internet_security:2007 cpe:/a:symantec:norton_internet_security:2008

CVE-2010-0107

2010-02-23T15:30:00.467-05:00

2018-10-10T15:51:03.757-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BUGTRAQ 20100224 VUPEN Security Research - Symantec Products "SYMLTCOM.dll" Buffer Overflow Vulnerability BID 38217 SECTRACK 1023628 SECTRACK 1023629 SECTRACK 1023630 SECTRACK 1023631 CONFIRM http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100217_01 VUPEN ADV-2010-0411 XF symantec-symltcom-activex-bo(56357) Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security, AntiVirus, SystemWorks, and Confidential 2006 through 2008; and Symantec Client Security 3.0.x before 3.1 MR9, and 3.1.x before MR9; allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors. NOTE: this is only a vulnerability if the attacker can "masquerade as an authorized site."

CVE-2010-0108

2010-02-19T12:30:00.690-05:00

2018-10-30T12:25:59.560-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov MISC http://dsecrg.com/pages/vul/show.php?id=139 BUGTRAQ 20100219 [DSECRG-09-039] Symantec Antivirus 10.0 ActiveX - buffer Overflow. BID 38222 CONFIRM http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100217_02 VUPEN ADV-2010-0412 XF scp-cliproxy-activex-bo(56355) Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy (CLIproxy.dll) in Symantec AntiVirus 10.0.x, 10.1.x before MR9, and 10.2.x before MR4; and Symantec Client Security 3.0.x and 3.1.x before MR9 allows remote attackers to execute arbitrary code via a long argument to the SetRemoteComputerName function.

cpe:/a:symantec:altiris_deployment_solution:6.9 cpe:/a:symantec:altiris_deployment_solution:6.9:sp1 cpe:/a:symantec:altiris_deployment_solution:6.9:sp2 cpe:/a:symantec:altiris_deployment_solution:6.9:sp3 cpe:/a:symantec:altiris_deployment_solution:6.9.164 cpe:/a:symantec:altiris_deployment_solution:6.9.176 cpe:/a:symantec:altiris_deployment_solution:6.9.355

CVE-2010-0109

2018-02-19T14:29:00.203-05:00

2018-03-18T12:20:20.480-04:00

3.3

ADJACENT_NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2018-03-12T14:10:49.960-04:00

BID 38410 CONFIRM https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20100420_00 DBManager in Symantec Altiris Deployment Solution 6.9.x before DS 6.9 SP4 allows remote attackers to cause a denial of service via a crafted request.

cpe:/a:symantec:antivirus:10.0::corporate cpe:/a:symantec:antivirus:10.0:mr1:corporate cpe:/a:symantec:antivirus:10.0:mr2:corporate cpe:/a:symantec:antivirus:10.0.1::corporate cpe:/a:symantec:antivirus:10.0.1.1::corporate cpe:/a:symantec:antivirus:10.0.1.2::corporate cpe:/a:symantec:antivirus:10.0.2::corporate cpe:/a:symantec:antivirus:10.0.2.1::corporate cpe:/a:symantec:antivirus:10.0.2.2::corporate cpe:/a:symantec:antivirus:10.0.3::corporate cpe:/a:symantec:antivirus:10.0.4::corporate cpe:/a:symantec:antivirus:10.0.5::corporate cpe:/a:symantec:antivirus:10.0.6::corporate cpe:/a:symantec:antivirus:10.0.7::corporate cpe:/a:symantec:antivirus:10.0.8::corporate cpe:/a:symantec:antivirus:10.0.9::corporate cpe:/a:symantec:antivirus:10.1::corporate cpe:/a:symantec:antivirus:10.1:mp1:corporate cpe:/a:symantec:antivirus:10.1:mr4:corporate cpe:/a:symantec:antivirus:10.1:mr5:corporate cpe:/a:symantec:antivirus:10.1:mr6:corporate cpe:/a:symantec:antivirus:10.1:mr7:corporate cpe:/a:symantec:antivirus:10.1.0.1::corporate cpe:/a:symantec:antivirus:10.1.4::corporate cpe:/a:symantec:antivirus:10.1.4.1::corporate cpe:/a:symantec:antivirus:10.1.5::corporate cpe:/a:symantec:antivirus:10.1.5.1::corporate cpe:/a:symantec:antivirus:10.1.6::corporate cpe:/a:symantec:antivirus:10.1.6.1::corporate cpe:/a:symantec:antivirus:10.1.7::corporate cpe:/a:symantec:antivirus:10.1.8::corporate cpe:/a:symantec:antivirus:10.1.9::corporate cpe:/a:symantec:antivirus:10.2::corporate cpe:/a:symantec:antivirus:10.2:mr2:corporate cpe:/a:symantec:antivirus:10.2:mr3:corporate cpe:/a:symantec:antivirus_central_quarantine_server:3.5 cpe:/a:symantec:antivirus_central_quarantine_server:3.6 cpe:/a:symantec:system_center:10.0 cpe:/a:symantec:system_center:10.1

CVE-2010-0110

2011-01-31T16:00:01.610-05:00

2017-08-16T21:31:52.523-04:00

7.9

ADJACENT_NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1024996 BID 45936 CONFIRM http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110126_00 VUPEN ADV-2011-0234 MISC http://www.zerodayinitiative.com/advisories/ZDI-11-028 MISC http://www.zerodayinitiative.com/advisories/ZDI-11-030 MISC http://www.zerodayinitiative.com/advisories/ZDI-11-031 MISC http://www.zerodayinitiative.com/advisories/ZDI-11-032 XF symantec-intel-ams2-bo(64940) Multiple stack-based buffer overflows in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5 and 3.6, allow remote attackers to execute arbitrary code via (1) a long string to msgsys.exe, related to the AMSSendAlertAct function in AMSLIB.dll in the Intel Alert Handler service (aka Symantec Intel Handler service); a long (2) modem string or (3) PIN number to msgsys.exe, related to pagehndl.dll in the Intel Alert Handler service; or (4) a message to msgsys.exe, related to iao.exe in the Intel Alert Originator service.

CVE-2010-0111

2011-01-31T16:00:03.190-05:00

2017-08-16T21:31:52.587-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1024997 BID 45935 CONFIRM http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110126_01 VUPEN ADV-2011-0234 MISC http://www.zerodayinitiative.com/advisories/ZDI-11-029 XF symantec-intelams2-code-execution(64942) XF symantec-intelams2-dos(64943) HDNLRSVC.EXE in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows remote attackers to execute arbitrary programs by sending msgsys.exe a UNC share pathname, which is used directly in a CreateProcessA (aka CreateProcess) call.

cpe:/a:symantec:im_manager:6.0 cpe:/a:symantec:im_manager:6.5 cpe:/a:symantec:im_manager:7.0 cpe:/a:symantec:im_manager:7.5 cpe:/a:symantec:im_manager:8.3 cpe:/a:symantec:im_manager:8.4.0 cpe:/a:symantec:im_manager:8.4.1 cpe:/a:symantec:im_manager:8.4.2 cpe:/a:symantec:im_manager:8.4.5 cpe:/a:symantec:im_manager:8.4.6 cpe:/a:symantec:im_manager:8.4.7 cpe:/a:symantec:im_manager:8.4.8 cpe:/a:symantec:im_manager:8.4.9 cpe:/a:symantec:im_manager:8.4.10 cpe:/a:symantec:im_manager:8.4.11 cpe:/a:symantec:im_manager:8.4.12 cpe:/a:symantec:im_manager:8.4.13 cpe:/a:symantec:im_manager:8.4.15

CVE-2010-0112

2010-10-28T16:00:02.483-04:00

2017-08-16T21:31:52.663-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 44299 SECTRACK 1024648 CONFIRM http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20101027_01 VUPEN ADV-2010-2789 MISC http://www.zerodayinitiative.com/advisories/ZDI-10-220/ MISC http://www.zerodayinitiative.com/advisories/ZDI-10-221/ MISC http://www.zerodayinitiative.com/advisories/ZDI-10-222/ MISC http://www.zerodayinitiative.com/advisories/ZDI-10-223/ MISC http://www.zerodayinitiative.com/advisories/ZDI-10-224/ MISC http://www.zerodayinitiative.com/advisories/ZDI-10-225/ MISC http://www.zerodayinitiative.com/advisories/ZDI-10-226/ XF immanager-unspecified-sql-injection(62806) Multiple SQL injection vulnerabilities in the Administrative Interface in the IIS extension in Symantec IM Manager before 8.4.16 allow remote attackers to execute arbitrary SQL commands via (1) the rdReport parameter to rdpageimlogic.aspx, related to the sGetDefinition function in rdServer.dll, and SQL statements contained within a certain report file; (2) unspecified parameters in a DetailReportGroup (aka DetailReportGroup.lgx) action to rdpageimlogic.aspx; the (3) selclause, (4) whereTrendTimeClause, (5) TrendTypeForReport, (6) whereProtocolClause, or (7) groupClause parameter in a SummaryReportGroup (aka SummaryReportGroup.lgx) action to rdpageimlogic.aspx; the (8) loginTimeStamp, (9) dbo, (10) dateDiffParam, or (11) whereClause parameter in a LoggedInUsers (aka LoggedInUSers.lgx) action to (a) rdpageimlogic.aspx or (b) rdPage.aspx; the (12) selclause, (13) whereTrendTimeClause, (14) TrendTypeForReport, (15) whereProtocolClause, or (16) groupClause parameter to rdpageimlogic.aspx; (17) the groupList parameter to IMAdminReportTrendFormRun.asp; or (18) the email parameter to IMAdminScheduleReport.asp.

cpe:/a:symantec:mobile_security:1.0:beta

CVE-2010-0113

2010-11-15T16:00:03.110-05:00

2017-08-16T21:31:52.727-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 44767 CONFIRM http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20101111_00 VUPEN ADV-2010-2982 XF norton-mobile-setup-information-disclosure(63294) The Symantec Norton Mobile Security application 1.0 Beta for Android records setup details, possibly including wipe/lock credentials, in the device logs, which allows user-assisted remote attackers to obtain potentially sensitive information by leveraging the ability of a separate crafted application to read these logs.

cpe:/a:symantec:endpoint_protection:11.0 cpe:/a:symantec:endpoint_protection:11.0:ru5 cpe:/a:symantec:endpoint_protection:11.0:ru6 cpe:/a:symantec:endpoint_protection:11.0:ru6mp1 cpe:/a:symantec:endpoint_protection:11.0.1 cpe:/a:symantec:endpoint_protection:11.0.1:mp1 cpe:/a:symantec:endpoint_protection:11.0.2 cpe:/a:symantec:endpoint_protection:11.0.2:mp1 cpe:/a:symantec:endpoint_protection:11.0.2:mp2 cpe:/a:symantec:endpoint_protection:11.0.4 cpe:/a:symantec:endpoint_protection:11.0.4:mp1a cpe:/a:symantec:endpoint_protection:11.0.4:mp2 cpe:/a:symantec:endpoint_protection:11.0.3001

CVE-2010-0114

2010-12-21T20:00:02.283-05:00

2018-10-30T12:25:59.560-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SECTRACK 1024900 BID 45372 CONFIRM http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20101215_00 VUPEN ADV-2010-3252 MISC http://www.zerodayinitiative.com/advisories/ZDI-10-291/ XF symantec-endpoint-fwcharts-code-execution(64118) fw_charts.php in the reporting module in the Manager (aka SEPM) component in Symantec Endpoint Protection (SEP) 11.x before 11 RU6 MP2 allows remote attackers to bypass intended restrictions on report generation, overwrite arbitrary PHP scripts, and execute arbitrary code via a crafted request.

cpe:/a:symantec:web_gateway:4.5 cpe:/a:symantec:web_gateway:4.5.0.325 cpe:/a:symantec:web_gateway:4.5.0.326 cpe:/a:symantec:web_gateway:4.5.0.327

CVE-2010-0115

2011-01-14T18:00:44.100-05:00

2017-08-16T21:31:52.837-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 45742 SECTRACK 1024958 CONFIRM http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110112_00 VUPEN ADV-2011-0088 MISC http://www.zerodayinitiative.com/advisories/ZDI-11-013/ XF symantec-web-username-sql-injection(64658) SQL injection vulnerability in login.php in the GUI management console in Symantec Web Gateway 4.5 before 4.5.0.376 allows remote attackers to execute arbitrary SQL commands via the USERNAME parameter.

cpe:/a:realnetworks:realplayer:11.0 cpe:/a:realnetworks:realplayer:11.1 cpe:/a:realnetworks:realplayer_sp:1.0.0 cpe:/a:realnetworks:realplayer_sp:1.0.1 cpe:/a:realnetworks:realplayer_sp:1.0.2 cpe:/a:realnetworks:realplayer_sp:1.0.5 cpe:/a:realnetworks:realplayer_sp:1.1 cpe:/a:realnetworks:realplayer_sp:1.1.1 cpe:/a:realnetworks:realplayer_sp:1.1.2 cpe:/a:realnetworks:realplayer_sp:1.1.3 cpe:/a:realnetworks:realplayer_sp:1.1.4

CVE-2010-0116

2010-08-30T16:00:01.827-04:00

2017-09-18T21:30:14.080-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://service.real.com/realplayer/security/08262010_player/en/ SECTRACK 1024370 VUPEN ADV-2010-2216 XF realplayer-qcp-bo(61420) Integer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows might allow remote attackers to execute arbitrary code via a crafted QCP file that triggers a heap-based buffer overflow.

CVE-2010-0117

2010-08-30T16:00:01.873-04:00

2017-09-18T21:30:14.127-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://service.real.com/realplayer/security/08262010_player/en/ SECTRACK 1024370 VUPEN ADV-2010-2216 XF realplayer-yuv420-code-execution(61421) RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows do not properly handle dimensions during YUV420 transformations, which might allow remote attackers to execute arbitrary code via crafted MP4 content.

cpe:/a:becauseinter:bournal:0.1 cpe:/a:becauseinter:bournal:0.2 cpe:/a:becauseinter:bournal:0.3 cpe:/a:becauseinter:bournal:0.4 cpe:/a:becauseinter:bournal:0.4.5 cpe:/a:becauseinter:bournal:0.6 cpe:/a:becauseinter:bournal:0.7 cpe:/a:becauseinter:bournal:0.8 cpe:/a:becauseinter:bournal:0.9 cpe:/a:becauseinter:bournal:1.0 cpe:/a:becauseinter:bournal:1.1 cpe:/a:becauseinter:bournal:1.2 cpe:/a:becauseinter:bournal:1.3 cpe:/a:becauseinter:bournal:1.4

CVE-2010-0118

2010-02-24T19:30:00.390-05:00

2018-10-10T15:51:05.430-04:00

3.3

LOCAL

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov FEDORA FEDORA-2010-3301 FEDORA FEDORA-2010-3221 FEDORA FEDORA-2010-3168 BUGTRAQ 20100222 Secunia Research: Bournal Insecure Temporary Files Security Issue BID 38353 Bournal before 1.4.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified temporary files associated with a --hack_the_gibson update check.

CVE-2010-0119

2010-02-24T19:30:00.453-05:00

2018-10-10T15:51:06.023-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FEDORA FEDORA-2010-3301 FEDORA FEDORA-2010-3221 FEDORA FEDORA-2010-3168 BUGTRAQ 20100222 Secunia Research: Bournal ccrypt Information Disclosure Security Issue BID 38352 Bournal before 1.4.1 on FreeBSD 8.0, when the -K option is used, places a ccrypt key on the command line, which allows local users to obtain sensitive information by listing the process and its arguments, related to "echoing."

CVE-2010-0120

2010-08-30T16:00:01.920-04:00

2017-09-18T21:30:14.187-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://service.real.com/realplayer/security/08262010_player/en/ SECTRACK 1024370 VUPEN ADV-2010-2216 XF realplayer-qcp-audio-bo(61422) Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allows remote attackers to execute arbitrary code via large size values in QCP audio content.

cpe:/a:realnetworks:realplayer:11.0 cpe:/a:realnetworks:realplayer:11.0.1 cpe:/a:realnetworks:realplayer:11.0.2 cpe:/a:realnetworks:realplayer:11.0.2.1744 cpe:/a:realnetworks:realplayer:11.0.3 cpe:/a:realnetworks:realplayer:11.0.4 cpe:/a:realnetworks:realplayer:11.0.5 cpe:/a:realnetworks:realplayer:11.1 cpe:/a:realnetworks:realplayer:12.0.0.1444 cpe:/a:realnetworks:realplayer_sp:1.0.0 cpe:/a:realnetworks:realplayer_sp:1.0.1 cpe:/a:realnetworks:realplayer_sp:1.0.2 cpe:/a:realnetworks:realplayer_sp:1.0.5 cpe:/a:realnetworks:realplayer_sp:1.1 cpe:/a:realnetworks:realplayer_sp:1.1.1 cpe:/a:realnetworks:realplayer_sp:1.1.2 cpe:/a:realnetworks:realplayer_sp:1.1.3 cpe:/a:realnetworks:realplayer_sp:1.1.4 cpe:/a:realnetworks:realplayer_sp:1.1.5

CVE-2010-0121

2010-12-14T11:00:02.773-05:00

2011-01-19T00:00:00.000-05:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2010-12-14T11:22:00.000-05:00

CONFIRM http://service.real.com/realplayer/security/12102010_player/en/ SECTRACK 1024861 The cook codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 does not properly perform initialization, which has unspecified impact and attack vectors.

cpe:/a:timeclock-software:employee_timeclock_software:0.99

CVE-2010-0122

2010-03-15T09:28:25.620-04:00

2018-10-10T15:51:06.633-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20100310 Secunia Research: Employee Timeclock Software SQL Injection Vulnerabilities BID 38639 XF timeclock-auth-sql-injection(56799) Multiple SQL injection vulnerabilities in Employee Timeclock Software 0.99 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to (a) auth.php or (b) login_action.php.

cpe:/a:timeclock-software:employee_timeclock_software:0.99

CVE-2010-0123

2010-03-15T09:28:25.667-04:00

2018-10-10T15:51:07.180-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20100310 Secunia Research: Employee Timeclock Software Backup Information Disclosure XF timeclock-database-info-disclosure(56798) The database backup implementation in Employee Timeclock Software 0.99 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for a "semi-predictable file name."

cpe:/a:timeclock-software:employee_timeclock_software:0.99

CVE-2010-0124

2010-03-15T09:28:25.700-04:00

2018-10-10T15:51:07.647-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20100310 Secunia Research: Employee Timeclock Software "mysqldump" Password Disclosure BID 38642 XF timeclock-mysqldump-info-disclosure(56800) Employee Timeclock Software 0.99 places the database password on the mysqldump command line, which allows local users to obtain sensitive information by listing the process.

cpe:/a:realnetworks:realplayer:2.1.2::enterprise cpe:/a:realnetworks:realplayer:11.0 cpe:/a:realnetworks:realplayer:11.0.1 cpe:/a:realnetworks:realplayer:11.0.2 cpe:/a:realnetworks:realplayer:11.0.3 cpe:/a:realnetworks:realplayer:11.0.4 cpe:/a:realnetworks:realplayer:11.0.5 cpe:/a:realnetworks:realplayer:11.1 cpe:/a:realnetworks:realplayer:12.0.0.1444 cpe:/a:realnetworks:realplayer_sp:1.0.0 cpe:/a:realnetworks:realplayer_sp:1.0.1 cpe:/a:realnetworks:realplayer_sp:1.0.2 cpe:/a:realnetworks:realplayer_sp:1.0.5 cpe:/a:realnetworks:realplayer_sp:1.1 cpe:/a:realnetworks:realplayer_sp:1.1.1 cpe:/a:realnetworks:realplayer_sp:1.1.2 cpe:/a:realnetworks:realplayer_sp:1.1.3 cpe:/a:realnetworks:realplayer_sp:1.1.4

CVE-2010-0125

2010-12-14T11:00:02.820-05:00

2011-02-17T00:00:00.000-05:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2010-12-14T11:56:00.000-05:00

CONFIRM http://service.real.com/realplayer/security/12102010_player/en/ SECTRACK 1024861 RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444 do not properly parse spectral data in AAC files, which has unspecified impact and remote attack vectors.

cpe:/a:autonomy:keyview_export_sdk:10.4 cpe:/a:autonomy:keyview_export_sdk:10.9 cpe:/a:autonomy:keyview_filter_sdk:10.4 cpe:/a:autonomy:keyview_filter_sdk:10.9 cpe:/a:autonomy:keyview_viewer_sdk:10.4 cpe:/a:autonomy:keyview_viewer_sdk:10.9

CVE-2010-0126

2010-08-17T16:00:02.423-04:00

2013-02-06T23:26:58.547-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 41928 CONFIRM http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21440812 Heap-based buffer overflow in an unspecified library in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via a crafted compound file, as demonstrated using a Quattro Pro file, which is not properly handled by the Quattro speed reader (qpssr.dll).

cpe:/a:adobe:shockwave_player:1.0 cpe:/a:adobe:shockwave_player:2.0 cpe:/a:adobe:shockwave_player:3.0 cpe:/a:adobe:shockwave_player:4.0 cpe:/a:adobe:shockwave_player:5.0 cpe:/a:adobe:shockwave_player:6.0 cpe:/a:adobe:shockwave_player:8.0 cpe:/a:adobe:shockwave_player:8.5.1 cpe:/a:adobe:shockwave_player:9 cpe:/a:adobe:shockwave_player:10.1.0.11 cpe:/a:adobe:shockwave_player:11.0.0.456 cpe:/a:adobe:shockwave_player:11.5.0.595 cpe:/a:adobe:shockwave_player:11.5.0.596 cpe:/a:adobe:shockwave_player:11.5.1.601 cpe:/a:adobe:shockwave_player:11.5.2.602 cpe:/a:adobe:shockwave_player:11.5.6.606

CVE-2010-0127

2010-05-13T13:30:01.717-04:00

2018-10-10T15:51:08.210-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://www.adobe.com/support/security/bulletins/apsb10-12.html BUGTRAQ 20100512 Secunia Research: Adobe Shockwave Player 3D Parsing Memory Corruption VUPEN ADV-2010-1128 Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted FFFFFF45h Shockwave 3D blocks in a Shockwave file.

cpe:/a:adobe:director:11.0.0.426 cpe:/a:adobe:director:11.5 cpe:/a:adobe:shockwave_player:1.0 cpe:/a:adobe:shockwave_player:2.0 cpe:/a:adobe:shockwave_player:3.0 cpe:/a:adobe:shockwave_player:4.0 cpe:/a:adobe:shockwave_player:5.0 cpe:/a:adobe:shockwave_player:6.0 cpe:/a:adobe:shockwave_player:8.0 cpe:/a:adobe:shockwave_player:8.5.1 cpe:/a:adobe:shockwave_player:9 cpe:/a:adobe:shockwave_player:10.1.0.11 cpe:/a:adobe:shockwave_player:11.0.0.456 cpe:/a:adobe:shockwave_player:11.5.0.595 cpe:/a:adobe:shockwave_player:11.5.0.596 cpe:/a:adobe:shockwave_player:11.5.1.601 cpe:/a:adobe:shockwave_player:11.5.2.602 cpe:/a:adobe:shockwave_player:11.5.6.606

CVE-2010-0128

2010-05-13T13:30:01.780-04:00

2018-10-10T15:51:08.820-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://www.adobe.com/support/security/bulletins/apsb10-12.html MISC http://www.coresecurity.com/content/adobe-director-invalid-read BUGTRAQ 20100511 [CORE-2010-0405] Adobe Director Invalid Read BUGTRAQ 20100512 Secunia Research: Adobe Shockwave Player Signedness Error Vulnerability VUPEN ADV-2010-1128 Integer signedness error in dirapi.dll in Adobe Shockwave Player before 11.5.7.609 and Adobe Director before 11.5.7.609 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .dir file that triggers an invalid read operation.

CVE-2010-0129

2010-05-13T13:30:01.827-04:00

2018-10-10T15:51:09.757-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov FULLDISC 20100511 [CAL-20100204-2]Adobe Shockwave Player Director File Parsing integer overflow vulnerability MISC http://hi.baidu.com/fs_fx/blog/item/fa74a61705b5e24621a4e951.html IDEFENSE 20100511 Abobe Shockwave Player Heap Memory Indexing Vulnerability CONFIRM http://www.adobe.com/support/security/bulletins/apsb10-12.html BUGTRAQ 20100512 [CAL-20100204-2]Adobe Shockwave Player Director File Parsing integer overflow vulnerability BUGTRAQ 20100512 Secunia Research: Adobe Shockwave Player Array Indexing Vulnerability BID 40082 VUPEN ADV-2010-1128 Multiple integer overflows in Adobe Shockwave Player before 11.5.7.609 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .dir (aka Director) file that triggers an array index error.

CVE-2010-0130

2010-05-13T13:30:01.890-04:00

2018-10-10T15:51:10.947-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://www.adobe.com/support/security/bulletins/apsb10-12.html BUGTRAQ 20100512 Secunia Research: Adobe Shockwave Player Integer Overflow Vulnerability BID 40084 VUPEN ADV-2010-1128 Integer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via a crafted .dir (aka Director) file.

CVE-2010-0131

2010-08-17T16:00:02.547-04:00

2013-02-06T23:26:59.797-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 41928 CONFIRM http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21440812 Stack-based buffer overflow in the SpreadSheet Lotus 123 reader (wkssr.dll), as used in Autonomy KeyView 10.4 and 10.9, Symantec Mail Security, and possibly other products, allows remote attackers to execute arbitrary code via unspecified vectors related to floating point conversion in unknown record types.

cpe:/a:viewvc:viewvc:1.0.0 cpe:/a:viewvc:viewvc:1.0.1 cpe:/a:viewvc:viewvc:1.0.2 cpe:/a:viewvc:viewvc:1.0.3 cpe:/a:viewvc:viewvc:1.0.4 cpe:/a:viewvc:viewvc:1.0.5 cpe:/a:viewvc:viewvc:1.0.6 cpe:/a:viewvc:viewvc:1.0.7 cpe:/a:viewvc:viewvc:1.0.8 cpe:/a:viewvc:viewvc:1.0.9 cpe:/a:viewvc:viewvc:1.0.10 cpe:/a:viewvc:viewvc:1.1.0 cpe:/a:viewvc:viewvc:1.1.1 cpe:/a:viewvc:viewvc:1.1.2 cpe:/a:viewvc:viewvc:1.1.3 cpe:/a:viewvc:viewvc:1.1.4

CVE-2010-0132

2010-03-31T14:00:00.327-04:00

2018-10-10T15:51:11.603-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov FEDORA FEDORA-2010-5507 FEDORA FEDORA-2010-5524 FEDORA FEDORA-2010-5805 SUSE SUSE-SR:2010:009 CONFIRM http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?r1=2342&r2=2359&pathrev=HEAD BUGTRAQ 20100330 Secunia Research: ViewVC Regular Expression Search Cross-Site Scripting VUPEN ADV-2010-0743 VUPEN ADV-2010-0844 Cross-site scripting (XSS) vulnerability in ViewVC 1.1 before 1.1.5 and 1.0 before 1.0.11, when the regular expression search functionality is enabled, allows remote attackers to inject arbitrary web script or HTML via vectors related to "search_re input," a different vulnerability than CVE-2010-0736.

CVE-2010-0133

2010-08-17T16:00:02.657-04:00

2013-02-06T23:27:00.093-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 41928 CONFIRM http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21440812 Multiple stack-based buffer overflows in the SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allow remote attackers to execute arbitrary code via unspecified vectors related to "certain records."

CVE-2010-0134

2010-08-17T16:00:02.767-04:00

2013-02-06T23:27:00.267-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 41928 CONFIRM http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21440812 Integer signedness error in rtfsr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via a crafted \ls keyword in a list override table entry in an RTF file, which triggers a buffer overflow.

CVE-2010-0135

2010-08-17T16:00:02.893-04:00

2013-02-06T23:27:00.437-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 41928 CONFIRM http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21440812 Heap-based buffer overflow in the WordPerfect 5.x reader (wosr.dll), as used in Autonomy KeyView 10.4 and 10.9 and possibly other products, allows remote attackers to execute arbitrary code via unspecified vectors related to "data blocks."

cpe:/a:sun:openoffice.org:2.0.4 cpe:/a:sun:openoffice.org:2.4.1 cpe:/a:sun:openoffice.org:3.1.1

CVE-2010-0136

2010-02-16T14:30:00.610-05:00

2010-11-11T01:44:35.167-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SA:2010:017 SECTRACK 1023588 DEBIAN DSA-1995 MLIST [debian-openoffice] 20100212 ./packages/openofficeorg/3.1.1/unstable r1866: merge 1:3.1.1-15+squeeze1 MANDRIVA MDVSA-2010:221 BID 38245 UBUNTU USN-903-1 VUPEN ADV-2010-0635 VUPEN ADV-2010-2905 OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for Applications (VBA) macro security settings, which allows remote attackers to run arbitrary macros via a crafted document.

cpe:/o:cisco:ios_xr:3.4.1 cpe:/o:cisco:ios_xr:3.4.2 cpe:/o:cisco:ios_xr:3.4.3 cpe:/o:cisco:ios_xr:3.5.2 cpe:/o:cisco:ios_xr:3.5.3 cpe:/o:cisco:ios_xr:3.5.4 cpe:/o:cisco:ios_xr:3.6.0 cpe:/o:cisco:ios_xr:3.6.1 cpe:/o:cisco:ios_xr:3.7.0

CVE-2010-0137

2010-01-21T17:30:00.460-05:00

2017-08-16T21:31:53.243-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1023480 CISCO 20100120 Cisco IOS XR Software SSH Denial of Service Vulnerability BID 37878 VUPEN ADV-2010-0183 XF ciscoios-ssh-dos(55767) Unspecified vulnerability in the sshd_child_handler process in the SSH server in Cisco IOS XR 3.4.1 through 3.7.0 allows remote attackers to cause a denial of service (process crash and memory consumption) via a crafted SSH2 packet, aka Bug ID CSCsu10574.

cpe:/a:cisco:ciscoworks_internetwork_performance_monitor:2.4 cpe:/a:cisco:ciscoworks_internetwork_performance_monitor:2.5 cpe:/a:cisco:ciscoworks_internetwork_performance_monitor:2.6

CVE-2010-0138

2010-01-21T17:30:00.523-05:00

2017-08-16T21:31:53.290-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1023484 CISCO 20100120 CiscoWorks Internetwork Performance Monitor CORBA GIOP Overflow Vulnerability BID 37879 VUPEN ADV-2010-0184 MISC http://www.zerodayinitiative.com/advisories/ZDI-10-004/ XF cisco-ipm-corba-bo(55768) Buffer overflow in Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 and earlier on Windows, as distributed in CiscoWorks LAN Management Solution (LMS), allows remote attackers to execute arbitrary code via a malformed getProcessName CORBA General Inter-ORB Protocol (GIOP) request, related to a "third-party component," aka Bug ID CSCsv62350.

cpe:/a:cisco:unified_meetingplace:5 cpe:/a:cisco:unified_meetingplace:5.0 cpe:/a:cisco:unified_meetingplace:6.0 cpe:/a:cisco:unified_meetingplace:6.0.170.0 cpe:/a:cisco:unified_meetingplace:6.0.244 cpe:/a:cisco:unified_meetingplace:7.0 cpe:/a:cisco:unified_meetingplace:7.0.1 cpe:/a:cisco:unified_meetingplace:7.0.2

CVE-2010-0139

2010-01-28T15:30:01.417-05:00

2011-01-07T00:00:00.000-05:00

9.0

NETWORK

LOW

NONE

PARTIAL

COMPLETE

http://nvd.nist.gov

2010-01-29T11:11:00.000-05:00

CISCO 20100127 Multiple Vulnerabilities in Cisco Unified MeetingPlace BID 37965 Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.2, and possibly 5 does not properly validate SQL commands, which allows remote attackers to create, modify, or delete data in a database via unspecified vectors, aka Bug ID CSCtc39691.

cpe:/a:cisco:unified_meetingplace:5.2 cpe:/a:cisco:unified_meetingplace:5.3 cpe:/a:cisco:unified_meetingplace:5.4 cpe:/a:cisco:unified_meetingplace:6.0 cpe:/a:cisco:unified_meetingplace:7.0 cpe:/a:cisco:unified_meetingplace:7.0.1 cpe:/a:cisco:unified_meetingplace:7.0.2

CVE-2010-0140

2010-01-28T15:30:01.480-05:00

2010-01-31T00:00:00.000-05:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2010-01-29T11:15:00.000-05:00

CISCO 20100127 Multiple Vulnerabilities in Cisco Unified MeetingPlace BID 37965 Multiple unspecified vulnerabilities in the web server in Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.3, and possibly 5 allow remote attackers to create (1) user or (2) administrator accounts via a crafted URL in a request to the internal interface, aka Bug IDs CSCtc59231 and CSCtd40661.

cpe:/a:cisco:unified_meetingplace:6.0 cpe:/a:cisco:unified_meetingplace:6.0.170.0 cpe:/a:cisco:unified_meetingplace:6.0.244

CVE-2010-0141

2010-01-28T15:30:01.527-05:00

2011-01-07T00:00:00.000-05:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-01-29T11:21:00.000-05:00

CISCO 20100127 Multiple Vulnerabilities in Cisco Unified MeetingPlace BID 37965 MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote attackers to discover usernames, passwords, and unspecified other data from the user database via a modified authentication sequence to the Audio Server, aka Bug ID CSCsv76935.

cpe:/a:cisco:unified_meetingplace:5.2 cpe:/a:cisco:unified_meetingplace:5.3 cpe:/a:cisco:unified_meetingplace:5.4 cpe:/a:cisco:unified_meetingplace:6.0

CVE-2010-0142

2010-01-28T15:30:01.557-05:00

2010-01-31T00:00:00.000-05:00

8.5

NETWORK

MEDIUM

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov

2010-01-29T11:24:00.000-05:00

ALLOWS_ADMIN_ACCESS

CISCO 20100127 Multiple Vulnerabilities in Cisco Unified MeetingPlace BID 37965 MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote authenticated users to gain privileges via a modified authentication sequence, aka Bug ID CSCsv66530.

cpe:/h:cisco:ironport_encryption_appliance:6.2.4 cpe:/h:cisco:ironport_encryption_appliance:6.2.4.1 cpe:/h:cisco:ironport_encryption_appliance:6.2.5 cpe:/h:cisco:ironport_encryption_appliance:6.2.6 cpe:/h:cisco:ironport_encryption_appliance:6.2.7 cpe:/h:cisco:ironport_encryption_appliance:6.2.7.1 cpe:/h:cisco:ironport_encryption_appliance:6.2.7.2 cpe:/h:cisco:ironport_encryption_appliance:6.2.7.3 cpe:/h:cisco:ironport_encryption_appliance:6.2.7.4 cpe:/h:cisco:ironport_encryption_appliance:6.2.7.5 cpe:/h:cisco:ironport_encryption_appliance:6.2.7.6 cpe:/h:cisco:ironport_encryption_appliance:6.5 cpe:/h:cisco:ironport_encryption_appliance:6.5.0.1 cpe:/h:cisco:ironport_postx:6.2.1 cpe:/h:cisco:ironport_postx:6.2.2 cpe:/h:cisco:ironport_postx:6.2.2.1 cpe:/h:cisco:ironport_postx:6.2.2.2

CVE-2010-0143

2010-02-11T12:30:00.657-05:00

2010-02-26T02:10:47.763-05:00

7.8

NETWORK

LOW

NONE

COMPLETE

NONE

http://nvd.nist.gov CONFIRM http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080b17904.html CISCO 20100210 Multiple Vulnerabilities in Cisco IronPort Encryption Appliance Unspecified vulnerability in the administrative interface in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 and 6.5.x before 6.5.2, and the IronPort PostX MAP before 6.2.9.1, allows remote attackers to read arbitrary files via unknown vectors, aka IronPort Bug 65921.

CVE-2010-0144

2010-02-11T12:30:00.767-05:00

2010-02-26T02:10:47.907-05:00

7.8

NETWORK

LOW

NONE

COMPLETE

NONE

http://nvd.nist.gov CONFIRM http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080b17904.html CISCO 20100210 Multiple Vulnerabilities in Cisco IronPort Encryption Appliance Unspecified vulnerability in the WebSafe DistributorServlet in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 and 6.5.x before 6.5.2, and the IronPort PostX MAP before 6.2.9.1, allows remote attackers to read arbitrary files via unknown vectors, aka IronPort Bug 65922.

CVE-2010-0145

2010-02-11T12:30:00.813-05:00

2010-02-26T02:10:48.030-05:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080b17904.html CISCO 20100210 Multiple Vulnerabilities in Cisco IronPort Encryption Appliance Unspecified vulnerability in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 and 6.5.x before 6.5.2, and the IronPort PostX MAP before 6.2.9.1, allows remote attackers to execute arbitrary code via unknown vectors, aka IronPort Bug 65923.

cpe:/a:cisco:security_agent:6.0

CVE-2010-0146

2010-02-23T15:30:00.593-05:00

2017-08-16T21:31:53.350-04:00

6.8

NETWORK

LOW

SINGLE_INSTANCE

COMPLETE

NONE

http://nvd.nist.gov CISCO 20100217 Multiple Vulnerabilities in Cisco Security Agent BID 38271 SECTRACK 1023606 VUPEN ADV-2010-0416 XF cisco-sa-mgmtcenter-dir-traversal(56345) Directory traversal vulnerability in the Management Center for Cisco Security Agents 6.0 allows remote authenticated users to read arbitrary files via unspecified vectors.

cpe:/a:cisco:security_agent:5.1 cpe:/a:cisco:security_agent:5.2 cpe:/a:cisco:security_agent:6.0

CVE-2010-0147

2010-02-23T15:30:00.627-05:00

2017-08-16T21:31:53.413-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov CISCO 20100217 Multiple Vulnerabilities in Cisco Security Agent BID 38272 SECTRACK 1023606 VUPEN ADV-2010-0416 XF cisco-sa-mgmtcenter-sql-injection(56346) SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 before 5.2.0.296, and 6.0 before 6.0.1.132 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

cpe:/a:cisco:security_agent:5.2

CVE-2010-0148

2010-02-23T15:30:00.670-05:00

2017-08-16T21:31:53.460-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20100217 Multiple Vulnerabilities in Cisco Security Agent BID 38273 SECTRACK 1023607 VUPEN ADV-2010-0416 XF cisco-securityagent-tcp-dos(56347) Unspecified vulnerability in Cisco Security Agent 5.2 before 5.2.0.285, when running on Linux, allows remote attackers to cause a denial of service (kernel panic) via "a series of TCP packets."

cpe:/h:cisco:asa_5500:7.1 cpe:/h:cisco:asa_5500:7.2 cpe:/h:cisco:asa_5500:8.0 cpe:/h:cisco:asa_5500:8.1 cpe:/h:cisco:asa_5500:8.2 cpe:/h:cisco:pix_500

CVE-2010-0149

2010-02-19T12:30:00.723-05:00

2017-08-16T21:31:53.523-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20100217 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances BID 38275 SECTRACK 1023612 VUPEN ADV-2010-0415 XF cisco-asa-tcp-dos(56336) Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.2(4.46), 8.0 before 8.0(4.38), 8.1 before 8.1(2.29), and 8.2 before 8.2(1.5); and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service (prevention of new connections) via crafted TCP segments during termination of the TCP connection that cause the connection to remain in CLOSEWAIT status, aka "TCP Connection Exhaustion Denial of Service Vulnerability."

cpe:/h:cisco:asa_5500:7.1 cpe:/h:cisco:asa_5500:7.2 cpe:/h:cisco:asa_5500:8.0 cpe:/h:cisco:asa_5500:8.1 cpe:/h:cisco:asa_5500:8.2 cpe:/h:cisco:pix_500

CVE-2010-0150

2010-02-19T12:30:00.753-05:00

2017-08-16T21:31:53.570-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20100217 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances BID 38277 SECTRACK 1023612 VUPEN ADV-2010-0415 XF cisco-asa5500-sip-dos(56338) Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.0(8.10), 7.2 before 7.2(4.45), 8.0 before 8.0(5.2), 8.1 before 8.1(2.37), and 8.2 before 8.2(1.16); and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service (device reload) via malformed SIP messages, aka Bug ID CSCsy91157.

cpe:/h:cisco:firewall_services_module:4.0 cpe:/h:cisco:firewall_services_module:4.0%284%29 cpe:/h:cisco:firewall_services_module:4.0%286%29

CVE-2010-0151

2010-02-19T12:30:00.787-05:00

2017-08-16T21:31:53.633-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20100217 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances CISCO 20100217 Cisco Firewall Services Module Skinny Client Control Protocol Inspection Denial of Service Vulnerability BID 38274 SECTRACK 1023609 VUPEN ADV-2010-0418 XF cisco-fwsm-asa-sccp-dos(56333) The Cisco Firewall Services Module (FWSM) 4.0 before 4.0(8), as used in for the Cisco Catalyst 6500 switches, Cisco 7600 routers, and ASA 5500 Adaptive Security Appliances, allows remote attackers to cause a denial of service (crash) via a malformed Skinny Client Control Protocol (SCCP) message.

cpe:/a:ibm:proventia_network_mail_security_system_virtual_appliance cpe:/a:ibm:proventia_network_mail_security_system_virtual_appliance_firmware:1.6 cpe:/a:ibm:proventia_network_mail_security_system_virtual_appliance_firmware:2.5

CVE-2010-0152

2010-09-14T13:00:01.337-04:00

2018-10-10T15:51:12.367-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20100912 MVSA-10-007 / CVE-2010-0152 - IBM Proventia Mail Security System - Multiple persistent and reflected XSS vulnerabilities MISC http://www.ventuneac.net/security-advisories/MVSA-10-007 Multiple cross-site scripting (XSS) vulnerabilities in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via (1) the date1 parameter to pvm_messagestore.php, (2) the userfilter parameter to pvm_user_management.php, (3) the ping parameter to sys_tools.php in a sys_ping.php action, (4) the action parameter to pvm_cert_commaction.php, (5) the action parameter to pvm_cert_serveraction.php, (6) the action parameter to pvm_smtpstore.php, (7) the l parameter to sla/index.php, or (8) unspecified stored data; and allow remote authenticated users to inject arbitrary web script or HTML via (9) saved search filters.

CVE-2010-0153

2010-09-14T13:00:01.387-04:00

2018-10-10T15:51:12.557-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20100912 MVSA-10-006 / CVE-2010-0153 - IBM Proventia Network Mail Security System - Cross-Site Request Forgery vulnerabilities MISC http://www.ventuneac.net/security-advisories/MVSA-10-006 Multiple cross-site request forgery (CSRF) vulnerabilities in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5.0.2 allow remote attackers to hijack the authentication of administrators for requests that (1) change settings or (2) conduct denial of service attacks.

cpe:/a:ibm:proventia_network_mail_security_system_virtual_appliance cpe:/a:ibm:proventia_network_mail_security_system_virtual_appliance_firmware:1.6

CVE-2010-0154

2010-09-14T13:00:01.433-04:00

2018-10-10T15:51:12.743-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20100912 MVSA-10-008 / CVE-2010-0154 - IBM Proventia Mail Security System - Insecure Direct Object Reference vulnerability MISC http://www.ventuneac.net/security-advisories/MVSA-10-008 Directory traversal vulnerability in sla/index.php in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the l parameter, related to an "Insecure Direct Object Reference vulnerability."

cpe:/a:ibm:proventia_network_mail_security_system_virtual_appliance cpe:/a:ibm:proventia_network_mail_security_system_virtual_appliance_firmware:1.6

CVE-2010-0155

2010-09-14T13:00:01.480-04:00

2018-10-10T15:51:12.930-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20100912 MVSA-10-009 / CVE-2010-0155 - IBM Proventia Network Mail Security System - CRLF Injection vulnerability MISC http://www.ventuneac.net/security-advisories/MVSA-10-009 CRLF injection vulnerability in load.php in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5 allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the javaVersion parameter.

cpe:/a:puppet:puppet:0.24.3 cpe:/a:puppet:puppet:0.24.4 cpe:/a:puppet:puppet:0.24.5 cpe:/a:puppet:puppet:0.24.6 cpe:/a:puppet:puppet:0.24.6:rc1 cpe:/a:puppet:puppet:0.24.6:rc2 cpe:/a:puppet:puppet:0.24.7 cpe:/a:puppet:puppet:0.24.7:rc2 cpe:/a:puppet:puppet:0.24.8 cpe:/a:puppet:puppet:0.24.8:rc1 cpe:/a:puppet:puppet:0.25.0 cpe:/a:puppet:puppet:0.25.0:beta1 cpe:/a:puppet:puppet:0.25.0:beta2 cpe:/a:puppet:puppet:0.25.0:rc1 cpe:/a:puppet:puppet:0.25.1 cpe:/a:puppet:puppet:0.25.1:rc1 cpe:/a:puppet:puppet:0.25.1:rc2 cpe:/a:puppet:puppet:0.25.2:rc1 cpe:/a:puppet:puppet:0.25.2:rc2 cpe:/a:puppet:puppet:0.25.2:rc3

CVE-2010-0156

2010-03-03T14:30:00.447-05:00

2017-12-08T21:29:00.403-05:00

3.3

LOCAL

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov MLIST [puppet-announce] 20100105 ANNOUNCE: Puppet 0.25.2 "Zoe" now available! MLIST [puppet-announce] 20100108 ANNOUNCE: Puppet 0.24.9 is available FEDORA FEDORA-2010-1079 FEDORA FEDORA-2010-1372 SUSE SUSE-SR:2010:013 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=502881 CONFIRM https://puppet.com/security/cve/cve-2010-0156 Puppet 0.24.x before 0.24.9 and 0.25.x before 0.25.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/daemonout, (2) /tmp/puppetdoc.txt, (3) /tmp/puppetdoc.tex, or (4) /tmp/puppetdoc.aux temporary file.

cpe:/a:joomlabiblestudy:com_biblestudy:6.1

CVE-2010-0157

2010-01-06T17:00:12.450-05:00

2010-01-07T00:00:00.000-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-01-07T09:58:00.000-05:00

MISC http://packetstormsecurity.org/1001-exploits/joomlabiblestudy-lfi.txt BID 37583 Directory traversal vulnerability in the Bible Study (com_biblestudy) component 6.1 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter in a studieslist action to index.php.

cpe:/a:joomlabamboo:jb_simpla

CVE-2010-0158

2010-01-06T17:00:12.730-05:00

2010-02-05T00:00:00.000-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-01-07T10:04:00.000-05:00

MISC http://packetstormsecurity.org/1001-exploits/joomlabamboo-sql.txt MLIST [VIM] 20100203 disputed: CVE-2010-0158 JoomlaBamboo (JB) Simpla Admin SQL injection MLIST [VIM] 20100203 Re: disputed: CVE-2010-0158 JoomlaBamboo (JB) Simpla Admin SQL injection EXPLOIT-DB 10971 BID 37579 VUPEN ADV-2010-0014 ** DISPUTED ** SQL injection vulnerability in the JoomlaBamboo (JB) Simpla Admin template for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an article action to the com_content component, reachable through index.php. NOTE: the vendor disputes this report, saying: "JoomlaBamboo has investigated this report, and it is incorrect. There is no SQL injection vulnerability involving the id parameter in an article view, and there never was. JoomlaBamboo customers have no reason to be concerned about this report."

cpe:/a:mozilla:firefox:3.0 cpe:/a:mozilla:firefox:3.0:beta2 cpe:/a:mozilla:firefox:3.0.1 cpe:/a:mozilla:firefox:3.0.2 cpe:/a:mozilla:firefox:3.0.3 cpe:/a:mozilla:firefox:3.0.4 cpe:/a:mozilla:firefox:3.0.5 cpe:/a:mozilla:firefox:3.0.6 cpe:/a:mozilla:firefox:3.0.7 cpe:/a:mozilla:firefox:3.0.8 cpe:/a:mozilla:firefox:3.0.9 cpe:/a:mozilla:firefox:3.0.10 cpe:/a:mozilla:firefox:3.0.11 cpe:/a:mozilla:firefox:3.0.12 cpe:/a:mozilla:firefox:3.0.13 cpe:/a:mozilla:firefox:3.0.14 cpe:/a:mozilla:firefox:3.0.15 cpe:/a:mozilla:firefox:3.0.16 cpe:/a:mozilla:firefox:3.0.17 cpe:/a:mozilla:firefox:3.5 cpe:/a:mozilla:firefox:3.5.1 cpe:/a:mozilla:firefox:3.5.2 cpe:/a:mozilla:firefox:3.5.3 cpe:/a:mozilla:firefox:3.5.4 cpe:/a:mozilla:firefox:3.5.5 cpe:/a:mozilla:firefox:3.5.6 cpe:/a:mozilla:firefox:3.5.7 cpe:/a:mozilla:seamonkey:- cpe:/a:mozilla:seamonkey:1.0 cpe:/a:mozilla:seamonkey:1.0:alpha cpe:/a:mozilla:seamonkey:1.0:beta cpe:/a:mozilla:seamonkey:1.0.1 cpe:/a:mozilla:seamonkey:1.0.2 cpe:/a:mozilla:seamonkey:1.0.3 cpe:/a:mozilla:seamonkey:1.0.4 cpe:/a:mozilla:seamonkey:1.0.5 cpe:/a:mozilla:seamonkey:1.0.6 cpe:/a:mozilla:seamonkey:1.0.7 cpe:/a:mozilla:seamonkey:1.0.8 cpe:/a:mozilla:seamonkey:1.0.9 cpe:/a:mozilla:seamonkey:1.1 cpe:/a:mozilla:seamonkey:1.1::alpha cpe:/a:mozilla:seamonkey:1.1::beta cpe:/a:mozilla:seamonkey:1.1:alpha cpe:/a:mozilla:seamonkey:1.1:beta cpe:/a:mozilla:seamonkey:1.1.1 cpe:/a:mozilla:seamonkey:1.1.2 cpe:/a:mozilla:seamonkey:1.1.3 cpe:/a:mozilla:seamonkey:1.1.4 cpe:/a:mozilla:seamonkey:1.1.5 cpe:/a:mozilla:seamonkey:1.1.6 cpe:/a:mozilla:seamonkey:1.1.7 cpe:/a:mozilla:seamonkey:1.1.8 cpe:/a:mozilla:seamonkey:1.1.9 cpe:/a:mozilla:seamonkey:1.1.10 cpe:/a:mozilla:seamonkey:1.1.11 cpe:/a:mozilla:seamonkey:1.1.12 cpe:/a:mozilla:seamonkey:1.1.13 cpe:/a:mozilla:seamonkey:1.1.14 cpe:/a:mozilla:seamonkey:1.1.15 cpe:/a:mozilla:seamonkey:1.1.16 cpe:/a:mozilla:seamonkey:1.1.17 cpe:/a:mozilla:seamonkey:1.1.18 cpe:/a:mozilla:seamonkey:1.1.19 cpe:/a:mozilla:seamonkey:1.5.0.8 cpe:/a:mozilla:seamonkey:1.5.0.9 cpe:/a:mozilla:seamonkey:1.5.0.10 cpe:/a:mozilla:seamonkey:2.0 cpe:/a:mozilla:seamonkey:2.0:alpha_1 cpe:/a:mozilla:seamonkey:2.0:alpha_2 cpe:/a:mozilla:seamonkey:2.0:alpha_3 cpe:/a:mozilla:seamonkey:2.0:beta_1 cpe:/a:mozilla:seamonkey:2.0:beta_2 cpe:/a:mozilla:seamonkey:2.0:rc1 cpe:/a:mozilla:seamonkey:2.0:rc2 cpe:/a:mozilla:seamonkey:2.0.1 cpe:/a:mozilla:seamonkey:2.0.2 cpe:/a:mozilla:thunderbird:- cpe:/a:mozilla:thunderbird:0.1 cpe:/a:mozilla:thunderbird:0.2 cpe:/a:mozilla:thunderbird:0.3 cpe:/a:mozilla:thunderbird:0.4 cpe:/a:mozilla:thunderbird:0.5 cpe:/a:mozilla:thunderbird:0.6 cpe:/a:mozilla:thunderbird:0.7 cpe:/a:mozilla:thunderbird:0.7:- cpe:/a:mozilla:thunderbird:0.7:rc cpe:/a:mozilla:thunderbird:0.7.1 cpe:/a:mozilla:thunderbird:0.7.2 cpe:/a:mozilla:thunderbird:0.7.3 cpe:/a:mozilla:thunderbird:0.8 cpe:/a:mozilla:thunderbird:0.9 cpe:/a:mozilla:thunderbird:1.0 cpe:/a:mozilla:thunderbird:1.0:- cpe:/a:mozilla:thunderbird:1.0:rc cpe:/a:mozilla:thunderbird:1.0.2 cpe:/a:mozilla:thunderbird:1.0.5 cpe:/a:mozilla:thunderbird:1.0.6 cpe:/a:mozilla:thunderbird:1.0.7 cpe:/a:mozilla:thunderbird:1.0.8 cpe:/a:mozilla:thunderbird:1.1:alpha1 cpe:/a:mozilla:thunderbird:1.1:alpha2 cpe:/a:mozilla:thunderbird:1.5 cpe:/a:mozilla:thunderbird:1.5:- cpe:/a:mozilla:thunderbird:1.5:beta1 cpe:/a:mozilla:thunderbird:1.5:beta2 cpe:/a:mozilla:thunderbird:1.5:rc1 cpe:/a:mozilla:thunderbird:1.5:rc2 cpe:/a:mozilla:thunderbird:1.5.0.2 cpe:/a:mozilla:thunderbird:1.5.0.4 cpe:/a:mozilla:thunderbird:1.5.0.5 cpe:/a:mozilla:thunderbird:1.5.0.7 cpe:/a:mozilla:thunderbird:1.5.0.8 cpe:/a:mozilla:thunderbird:1.5.0.9 cpe:/a:mozilla:thunderbird:1.5.0.10 cpe:/a:mozilla:thunderbird:1.5.0.12 cpe:/a:mozilla:thunderbird:1.5.0.13 cpe:/a:mozilla:thunderbird:1.5.0.14 cpe:/a:mozilla:thunderbird:2.0 cpe:/a:mozilla:thunderbird:2.0:- cpe:/a:mozilla:thunderbird:2.0:alpha1 cpe:/a:mozilla:thunderbird:2.0:beta1 cpe:/a:mozilla:thunderbird:2.0:beta2 cpe:/a:mozilla:thunderbird:2.0.0.0 cpe:/a:mozilla:thunderbird:2.0.0.0:rc1 cpe:/a:mozilla:thunderbird:2.0.0.4 cpe:/a:mozilla:thunderbird:2.0.0.5 cpe:/a:mozilla:thunderbird:2.0.0.6 cpe:/a:mozilla:thunderbird:2.0.0.9 cpe:/a:mozilla:thunderbird:2.0.0.12 cpe:/a:mozilla:thunderbird:2.0.0.14 cpe:/a:mozilla:thunderbird:2.0.0.16 cpe:/a:mozilla:thunderbird:2.0.0.17 cpe:/a:mozilla:thunderbird:2.0.0.18 cpe:/a:mozilla:thunderbird:2.0.0.19 cpe:/a:mozilla:thunderbird:2.0.0.21 cpe:/a:mozilla:thunderbird:2.0.0.22 cpe:/a:mozilla:thunderbird:2.0.0.23 cpe:/a:mozilla:thunderbird:2.0.0.24 cpe:/a:mozilla:thunderbird:2.0.14 cpe:/a:mozilla:thunderbird:3.0 cpe:/a:mozilla:thunderbird:3.0:- cpe:/a:mozilla:thunderbird:3.0:alpha1 cpe:/a:mozilla:thunderbird:3.0:alpha2 cpe:/a:mozilla:thunderbird:3.0:alpha3 cpe:/a:mozilla:thunderbird:3.0:beta1 cpe:/a:mozilla:thunderbird:3.0:beta2 cpe:/a:mozilla:thunderbird:3.0:beta3 cpe:/a:mozilla:thunderbird:3.0:beta4 cpe:/a:mozilla:thunderbird:3.0:rc1 cpe:/a:mozilla:thunderbird:3.0:rc2 cpe:/a:mozilla:thunderbird:3.0.1 cpe:/o:canonical:ubuntu_linux:8.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:8.10 cpe:/o:canonical:ubuntu_linux:9.04 cpe:/o:canonical:ubuntu_linux:9.10 cpe:/o:debian:debian_linux:5.0

CVE-2010-0159

2010-02-22T08:00:02.000-05:00

2018-11-16T10:56:41.103-05:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2018-11-13T11:48:07.980-05:00

FEDORA FEDORA-2010-1932 FEDORA FEDORA-2010-1936 FEDORA FEDORA-2010-1727 FEDORA FEDORA-2010-3230 FEDORA FEDORA-2010-3267 SUSE SUSE-SA:2010:015 DEBIAN DSA-1999 MANDRIVA MDVSA-2010:042 CONFIRM http://www.mozilla.org/security/announce/2010/mfsa2010-01.html REDHAT RHSA-2010:0112 REDHAT RHSA-2010:0113 REDHAT RHSA-2010:0153 REDHAT RHSA-2010:0154 UBUNTU USN-895-1 UBUNTU USN-896-1 VUPEN ADV-2010-0405 VUPEN ADV-2010-0650 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=467005 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=501934 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=527567 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=528134 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=528300 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=530880 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=534082 XF mozilla-browsereng-code-execution(56359) The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.

cpe:/a:mozilla:firefox:3.0 cpe:/a:mozilla:firefox:3.0.1 cpe:/a:mozilla:firefox:3.0.2 cpe:/a:mozilla:firefox:3.0.3 cpe:/a:mozilla:firefox:3.0.4 cpe:/a:mozilla:firefox:3.0.5 cpe:/a:mozilla:firefox:3.0.6 cpe:/a:mozilla:firefox:3.0.7 cpe:/a:mozilla:firefox:3.0.8 cpe:/a:mozilla:firefox:3.0.9 cpe:/a:mozilla:firefox:3.0.10 cpe:/a:mozilla:firefox:3.0.11 cpe:/a:mozilla:firefox:3.0.12 cpe:/a:mozilla:firefox:3.0.13 cpe:/a:mozilla:firefox:3.0.14 cpe:/a:mozilla:firefox:3.0.15 cpe:/a:mozilla:firefox:3.0.16 cpe:/a:mozilla:firefox:3.0.17 cpe:/a:mozilla:firefox:3.5 cpe:/a:mozilla:firefox:3.5.1 cpe:/a:mozilla:firefox:3.5.2 cpe:/a:mozilla:firefox:3.5.3 cpe:/a:mozilla:firefox:3.5.4 cpe:/a:mozilla:firefox:3.5.5 cpe:/a:mozilla:firefox:3.5.6 cpe:/a:mozilla:firefox:3.5.7 cpe:/a:mozilla:seamonkey:1.0 cpe:/a:mozilla:seamonkey:1.0:alpha cpe:/a:mozilla:seamonkey:1.0:beta cpe:/a:mozilla:seamonkey:1.0.1 cpe:/a:mozilla:seamonkey:1.0.2 cpe:/a:mozilla:seamonkey:1.0.3 cpe:/a:mozilla:seamonkey:1.0.4 cpe:/a:mozilla:seamonkey:1.0.5 cpe:/a:mozilla:seamonkey:1.0.6 cpe:/a:mozilla:seamonkey:1.0.7 cpe:/a:mozilla:seamonkey:1.0.8 cpe:/a:mozilla:seamonkey:1.0.9 cpe:/a:mozilla:seamonkey:1.1 cpe:/a:mozilla:seamonkey:1.1:alpha cpe:/a:mozilla:seamonkey:1.1:beta cpe:/a:mozilla:seamonkey:1.1.1 cpe:/a:mozilla:seamonkey:1.1.2 cpe:/a:mozilla:seamonkey:1.1.3 cpe:/a:mozilla:seamonkey:1.1.4 cpe:/a:mozilla:seamonkey:1.1.5 cpe:/a:mozilla:seamonkey:1.1.6 cpe:/a:mozilla:seamonkey:1.1.7 cpe:/a:mozilla:seamonkey:1.1.8 cpe:/a:mozilla:seamonkey:1.1.9 cpe:/a:mozilla:seamonkey:1.1.10 cpe:/a:mozilla:seamonkey:1.1.11 cpe:/a:mozilla:seamonkey:1.1.12 cpe:/a:mozilla:seamonkey:1.1.13 cpe:/a:mozilla:seamonkey:1.1.14 cpe:/a:mozilla:seamonkey:1.1.15 cpe:/a:mozilla:seamonkey:1.1.16 cpe:/a:mozilla:seamonkey:1.1.17 cpe:/a:mozilla:seamonkey:2.0 cpe:/a:mozilla:seamonkey:2.0:alpha_1 cpe:/a:mozilla:seamonkey:2.0:alpha_2 cpe:/a:mozilla:seamonkey:2.0:alpha_3 cpe:/a:mozilla:seamonkey:2.0:beta_1 cpe:/a:mozilla:seamonkey:2.0:beta_2 cpe:/a:mozilla:seamonkey:2.0:rc1 cpe:/a:mozilla:seamonkey:2.0:rc2 cpe:/a:mozilla:seamonkey:2.0.1 cpe:/a:mozilla:seamonkey:2.0.2

CVE-2010-0160

2010-02-22T08:00:02.063-05:00

2018-10-10T15:51:13.133-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov FEDORA FEDORA-2010-1932 FEDORA FEDORA-2010-1936 FEDORA FEDORA-2010-1727 SUSE SUSE-SA:2010:015 DEBIAN DSA-1999 MANDRIVA MDVSA-2010:042 CONFIRM http://www.mozilla.org/security/announce/2010/mfsa2010-02.html REDHAT RHSA-2010:0112 BUGTRAQ 20100402 ZDI-10-046: Mozilla Firefox Web Worker Array Remote Code Execution Vulnerability UBUNTU USN-895-1 UBUNTU USN-896-1 VUPEN ADV-2010-0405 MISC http://www.zerodayinitiative.com/advisories/ZDI-10-046 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=531222 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=533000 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=534051 XF mozilla-webworkers-code-execution(56360) The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.

cpe:/a:mozilla:seamonkey:1.0 cpe:/a:mozilla:seamonkey:1.0:alpha cpe:/a:mozilla:seamonkey:1.0:beta cpe:/a:mozilla:seamonkey:1.0.1 cpe:/a:mozilla:seamonkey:1.0.2 cpe:/a:mozilla:seamonkey:1.0.3 cpe:/a:mozilla:seamonkey:1.0.4 cpe:/a:mozilla:seamonkey:1.0.5 cpe:/a:mozilla:seamonkey:1.0.6 cpe:/a:mozilla:seamonkey:1.0.7 cpe:/a:mozilla:seamonkey:1.0.8 cpe:/a:mozilla:seamonkey:1.0.9 cpe:/a:mozilla:seamonkey:1.1 cpe:/a:mozilla:seamonkey:1.1:alpha cpe:/a:mozilla:seamonkey:1.1:beta cpe:/a:mozilla:seamonkey:1.1.1 cpe:/a:mozilla:seamonkey:1.1.2 cpe:/a:mozilla:seamonkey:1.1.3 cpe:/a:mozilla:seamonkey:1.1.4 cpe:/a:mozilla:seamonkey:1.1.5 cpe:/a:mozilla:seamonkey:1.1.6 cpe:/a:mozilla:seamonkey:1.1.7 cpe:/a:mozilla:seamonkey:1.1.8 cpe:/a:mozilla:seamonkey:1.1.9 cpe:/a:mozilla:seamonkey:1.1.10 cpe:/a:mozilla:seamonkey:1.1.11 cpe:/a:mozilla:seamonkey:1.1.12 cpe:/a:mozilla:seamonkey:1.1.13 cpe:/a:mozilla:seamonkey:1.1.14 cpe:/a:mozilla:seamonkey:1.1.15 cpe:/a:mozilla:seamonkey:1.1.16 cpe:/a:mozilla:seamonkey:1.1.17 cpe:/a:mozilla:seamonkey:1.1.18 cpe:/a:mozilla:thunderbird:0.1 cpe:/a:mozilla:thunderbird:0.2 cpe:/a:mozilla:thunderbird:0.3 cpe:/a:mozilla:thunderbird:0.4 cpe:/a:mozilla:thunderbird:0.5 cpe:/a:mozilla:thunderbird:0.6 cpe:/a:mozilla:thunderbird:0.7 cpe:/a:mozilla:thunderbird:0.7.1 cpe:/a:mozilla:thunderbird:0.7.2 cpe:/a:mozilla:thunderbird:0.7.3 cpe:/a:mozilla:thunderbird:0.8 cpe:/a:mozilla:thunderbird:0.9 cpe:/a:mozilla:thunderbird:1.0 cpe:/a:mozilla:thunderbird:1.0.1 cpe:/a:mozilla:thunderbird:1.0.2 cpe:/a:mozilla:thunderbird:1.0.3 cpe:/a:mozilla:thunderbird:1.0.4 cpe:/a:mozilla:thunderbird:1.0.5 cpe:/a:mozilla:thunderbird:1.0.6 cpe:/a:mozilla:thunderbird:1.0.7 cpe:/a:mozilla:thunderbird:1.0.8 cpe:/a:mozilla:thunderbird:1.5 cpe:/a:mozilla:thunderbird:1.5:beta2 cpe:/a:mozilla:thunderbird:1.5.0.1 cpe:/a:mozilla:thunderbird:1.5.0.2 cpe:/a:mozilla:thunderbird:1.5.0.3 cpe:/a:mozilla:thunderbird:1.5.0.4 cpe:/a:mozilla:thunderbird:1.5.0.5 cpe:/a:mozilla:thunderbird:1.5.0.6 cpe:/a:mozilla:thunderbird:1.5.0.7 cpe:/a:mozilla:thunderbird:1.5.0.8 cpe:/a:mozilla:thunderbird:1.5.0.9 cpe:/a:mozilla:thunderbird:1.5.0.10 cpe:/a:mozilla:thunderbird:1.5.0.11 cpe:/a:mozilla:thunderbird:1.5.0.12 cpe:/a:mozilla:thunderbird:1.5.0.13 cpe:/a:mozilla:thunderbird:1.5.0.14 cpe:/a:mozilla:thunderbird:1.5.1 cpe:/a:mozilla:thunderbird:1.5.2 cpe:/a:mozilla:thunderbird:2.0.0.0 cpe:/a:mozilla:thunderbird:2.0.0.4 cpe:/a:mozilla:thunderbird:2.0.0.5 cpe:/a:mozilla:thunderbird:2.0.0.6 cpe:/a:mozilla:thunderbird:2.0.0.7 cpe:/a:mozilla:thunderbird:2.0.0.8 cpe:/a:mozilla:thunderbird:2.0.0.9 cpe:/a:mozilla:thunderbird:2.0.0.12 cpe:/a:mozilla:thunderbird:2.0.0.14 cpe:/a:mozilla:thunderbird:2.0.0.16 cpe:/a:mozilla:thunderbird:2.0.0.17 cpe:/a:mozilla:thunderbird:2.0.0.18 cpe:/a:mozilla:thunderbird:2.0.0.19 cpe:/a:mozilla:thunderbird:2.0.0.21 cpe:/a:mozilla:thunderbird:2.0.0.22 cpe:/a:mozilla:thunderbird:2.0.0.23

CVE-2010-0161

2010-03-22T20:53:22.283-04:00

2017-09-18T21:30:14.737-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov SUSE SUSE-SR:2010:013 CONFIRM http://www.mozilla.org/security/announce/2010/mfsa2010-07.html BID 38831 VUPEN ADV-2010-0648 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=511806 XF thunderbird-activedirectory-dos(56992) The nsAuthSSPI::Unwrap function in extensions/auth/nsAuthSSPI.cpp in Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 on Windows Vista, Windows Server 2008 R2, and Windows 7 allows remote SMTP, IMAP, and POP servers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via crafted data in a session that uses SSPI.

cpe:/a:mozilla:firefox:3.0 cpe:/a:mozilla:firefox:3.0:alpha cpe:/a:mozilla:firefox:3.0:beta2 cpe:/a:mozilla:firefox:3.0:beta5 cpe:/a:mozilla:firefox:3.0.1 cpe:/a:mozilla:firefox:3.0.2 cpe:/a:mozilla:firefox:3.0.3 cpe:/a:mozilla:firefox:3.0.4 cpe:/a:mozilla:firefox:3.0.5 cpe:/a:mozilla:firefox:3.0.6 cpe:/a:mozilla:firefox:3.0.7 cpe:/a:mozilla:firefox:3.0.8 cpe:/a:mozilla:firefox:3.0.9 cpe:/a:mozilla:firefox:3.0.10 cpe:/a:mozilla:firefox:3.0.11 cpe:/a:mozilla:firefox:3.0.12 cpe:/a:mozilla:firefox:3.0.13 cpe:/a:mozilla:firefox:3.0.14 cpe:/a:mozilla:firefox:3.0.15 cpe:/a:mozilla:firefox:3.0.17 cpe:/a:mozilla:firefox:3.5 cpe:/a:mozilla:firefox:3.5.1 cpe:/a:mozilla:firefox:3.5.2 cpe:/a:mozilla:firefox:3.5.3 cpe:/a:mozilla:firefox:3.5.4 cpe:/a:mozilla:firefox:3.5.5 cpe:/a:mozilla:firefox:3.5.6 cpe:/a:mozilla:firefox:3.5.7 cpe:/a:mozilla:seamonkey:1.0 cpe:/a:mozilla:seamonkey:1.0:alpha cpe:/a:mozilla:seamonkey:1.0:beta cpe:/a:mozilla:seamonkey:1.0.1 cpe:/a:mozilla:seamonkey:1.0.2 cpe:/a:mozilla:seamonkey:1.0.3 cpe:/a:mozilla:seamonkey:1.0.4 cpe:/a:mozilla:seamonkey:1.0.5 cpe:/a:mozilla:seamonkey:1.0.6 cpe:/a:mozilla:seamonkey:1.0.7 cpe:/a:mozilla:seamonkey:1.0.8 cpe:/a:mozilla:seamonkey:1.0.9 cpe:/a:mozilla:seamonkey:1.1 cpe:/a:mozilla:seamonkey:1.1.1 cpe:/a:mozilla:seamonkey:1.1.2 cpe:/a:mozilla:seamonkey:1.1.3 cpe:/a:mozilla:seamonkey:1.1.4 cpe:/a:mozilla:seamonkey:1.1.5 cpe:/a:mozilla:seamonkey:1.1.6 cpe:/a:mozilla:seamonkey:1.1.7 cpe:/a:mozilla:seamonkey:1.1.8 cpe:/a:mozilla:seamonkey:1.1.9 cpe:/a:mozilla:seamonkey:1.1.10 cpe:/a:mozilla:seamonkey:1.1.11 cpe:/a:mozilla:seamonkey:1.1.12 cpe:/a:mozilla:seamonkey:1.1.13 cpe:/a:mozilla:seamonkey:1.1.14 cpe:/a:mozilla:seamonkey:1.1.15 cpe:/a:mozilla:seamonkey:1.1.16 cpe:/a:mozilla:seamonkey:1.1.17 cpe:/a:mozilla:seamonkey:2.0 cpe:/a:mozilla:seamonkey:2.0:alpha_2 cpe:/a:mozilla:seamonkey:2.0:alpha_3 cpe:/a:mozilla:seamonkey:2.0:beta_1 cpe:/a:mozilla:seamonkey:2.0:beta_2 cpe:/a:mozilla:seamonkey:2.0:rc1 cpe:/a:mozilla:seamonkey:2.0:rc2 cpe:/a:mozilla:seamonkey:2.0.1 cpe:/a:mozilla:seamonkey:2.0.2

CVE-2010-0162

2010-02-22T08:00:02.093-05:00

2017-09-18T21:30:14.847-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov FEDORA FEDORA-2010-1932 FEDORA FEDORA-2010-1936 FEDORA FEDORA-2010-1727 SUSE SUSE-SA:2010:015 DEBIAN DSA-1999 MANDRIVA MDVSA-2010:042 CONFIRM http://www.mozilla.org/security/announce/2010/mfsa2010-05.html REDHAT RHSA-2010:0112 UBUNTU USN-895-1 UBUNTU USN-896-1 VUPEN ADV-2010-0405 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=455472 XF mozilla-svg-xss(56363) Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and the EMBED element, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via an embedded SVG document.

cpe:/a:mozilla:seamonkey:1.0 cpe:/a:mozilla:seamonkey:1.0:alpha cpe:/a:mozilla:seamonkey:1.0:beta cpe:/a:mozilla:seamonkey:1.0.1 cpe:/a:mozilla:seamonkey:1.0.2 cpe:/a:mozilla:seamonkey:1.0.3 cpe:/a:mozilla:seamonkey:1.0.4 cpe:/a:mozilla:seamonkey:1.0.5 cpe:/a:mozilla:seamonkey:1.0.6 cpe:/a:mozilla:seamonkey:1.0.7 cpe:/a:mozilla:seamonkey:1.0.8 cpe:/a:mozilla:seamonkey:1.0.9 cpe:/a:mozilla:seamonkey:1.1 cpe:/a:mozilla:seamonkey:1.1:alpha cpe:/a:mozilla:seamonkey:1.1:beta cpe:/a:mozilla:seamonkey:1.1.1 cpe:/a:mozilla:seamonkey:1.1.2 cpe:/a:mozilla:seamonkey:1.1.3 cpe:/a:mozilla:seamonkey:1.1.4 cpe:/a:mozilla:seamonkey:1.1.5 cpe:/a:mozilla:seamonkey:1.1.6 cpe:/a:mozilla:seamonkey:1.1.7 cpe:/a:mozilla:seamonkey:1.1.8 cpe:/a:mozilla:seamonkey:1.1.9 cpe:/a:mozilla:seamonkey:1.1.10 cpe:/a:mozilla:seamonkey:1.1.11 cpe:/a:mozilla:seamonkey:1.1.12 cpe:/a:mozilla:seamonkey:1.1.13 cpe:/a:mozilla:seamonkey:1.1.14 cpe:/a:mozilla:seamonkey:1.1.15 cpe:/a:mozilla:seamonkey:1.1.16 cpe:/a:mozilla:seamonkey:1.1.17 cpe:/a:mozilla:seamonkey:1.1.18 cpe:/a:mozilla:thunderbird:0.1 cpe:/a:mozilla:thunderbird:0.2 cpe:/a:mozilla:thunderbird:0.3 cpe:/a:mozilla:thunderbird:0.4 cpe:/a:mozilla:thunderbird:0.5 cpe:/a:mozilla:thunderbird:0.6 cpe:/a:mozilla:thunderbird:0.7 cpe:/a:mozilla:thunderbird:0.7.1 cpe:/a:mozilla:thunderbird:0.7.2 cpe:/a:mozilla:thunderbird:0.7.3 cpe:/a:mozilla:thunderbird:0.8 cpe:/a:mozilla:thunderbird:0.9 cpe:/a:mozilla:thunderbird:1.0 cpe:/a:mozilla:thunderbird:1.0.1 cpe:/a:mozilla:thunderbird:1.0.2 cpe:/a:mozilla:thunderbird:1.0.3 cpe:/a:mozilla:thunderbird:1.0.4 cpe:/a:mozilla:thunderbird:1.0.5 cpe:/a:mozilla:thunderbird:1.0.6 cpe:/a:mozilla:thunderbird:1.0.7 cpe:/a:mozilla:thunderbird:1.0.8 cpe:/a:mozilla:thunderbird:1.5 cpe:/a:mozilla:thunderbird:1.5:beta2 cpe:/a:mozilla:thunderbird:1.5.0.1 cpe:/a:mozilla:thunderbird:1.5.0.2 cpe:/a:mozilla:thunderbird:1.5.0.3 cpe:/a:mozilla:thunderbird:1.5.0.4 cpe:/a:mozilla:thunderbird:1.5.0.5 cpe:/a:mozilla:thunderbird:1.5.0.6 cpe:/a:mozilla:thunderbird:1.5.0.7 cpe:/a:mozilla:thunderbird:1.5.0.8 cpe:/a:mozilla:thunderbird:1.5.0.9 cpe:/a:mozilla:thunderbird:1.5.0.10 cpe:/a:mozilla:thunderbird:1.5.0.11 cpe:/a:mozilla:thunderbird:1.5.0.12 cpe:/a:mozilla:thunderbird:1.5.0.13 cpe:/a:mozilla:thunderbird:1.5.0.14 cpe:/a:mozilla:thunderbird:1.5.1 cpe:/a:mozilla:thunderbird:1.5.2 cpe:/a:mozilla:thunderbird:2.0 cpe:/a:mozilla:thunderbird:2.0.0.0 cpe:/a:mozilla:thunderbird:2.0.0.1 cpe:/a:mozilla:thunderbird:2.0.0.2 cpe:/a:mozilla:thunderbird:2.0.0.3 cpe:/a:mozilla:thunderbird:2.0.0.4 cpe:/a:mozilla:thunderbird:2.0.0.5 cpe:/a:mozilla:thunderbird:2.0.0.6 cpe:/a:mozilla:thunderbird:2.0.0.7 cpe:/a:mozilla:thunderbird:2.0.0.8 cpe:/a:mozilla:thunderbird:2.0.0.9 cpe:/a:mozilla:thunderbird:2.0.0.12 cpe:/a:mozilla:thunderbird:2.0.0.14 cpe:/a:mozilla:thunderbird:2.0.0.16 cpe:/a:mozilla:thunderbird:2.0.0.17 cpe:/a:mozilla:thunderbird:2.0.0.18 cpe:/a:mozilla:thunderbird:2.0.0.19 cpe:/a:mozilla:thunderbird:2.0.0.21 cpe:/a:mozilla:thunderbird:2.0.0.22 cpe:/a:mozilla:thunderbird:2.0.0.23

CVE-2010-0163

2010-03-22T20:53:22.377-04:00

2017-09-18T21:30:14.937-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov SUSE SUSE-SR:2010:013 CONFIRM http://www.mozilla.org/security/announce/2010/mfsa2010-07.html REDHAT RHSA-2010:0499 BID 38831 UBUNTU USN-915-1 VUPEN ADV-2010-0648 VUPEN ADV-2010-1556 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=505221 XF thunderbird-messages-dos(56993) Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs casts and line termination incorrectly, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted message, related to message indexing.

cpe:/a:mozilla:firefox:3.6

CVE-2010-0164

2010-03-25T17:00:00.297-04:00

2018-10-10T15:51:15.617-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov MANDRIVA MDVSA-2010:070 CONFIRM http://www.mozilla.org/security/announce/2010/mfsa2010-09.html BUGTRAQ 20100402 ZDI-10-047: Mozilla Firefox libpr0n imgContainer Bits-Per-Pixel Change Remote Code Execution Vulnerability BID 38918 BID 38921 VUPEN ADV-2010-0692 MISC http://www.zerodayinitiative.com/advisories/ZDI-10-047 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=547143 Use-after-free vulnerability in the imgContainer::InternalAddFrameHelper function in src/imgContainer.cpp in libpr0n in Mozilla Firefox 3.6 before 3.6.2 allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a multipart/x-mixed-replace animation in which the frames have different bits-per-pixel (bpp) values.

cpe:/a:mozilla:firefox:3.6

CVE-2010-0165

2010-03-25T17:00:00.360-04:00

2017-09-18T21:30:15.080-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov MANDRIVA MDVSA-2010:070 CONFIRM http://www.mozilla.org/security/announce/2010/mfsa2010-11.html BID 38918 VUPEN ADV-2010-0692 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=542849 The TraceRecorder::traverseScopeChain function in js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via vectors involving certain indirect calls to the JavaScript eval function.

cpe:/a:mozilla:firefox:3.6

CVE-2010-0166

2010-03-25T17:00:00.407-04:00

2017-09-18T21:30:15.140-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.mozilla.org/security/announce/2010/mfsa2010-11.html BID 38918 BID 38943 VUPEN ADV-2010-0692 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=538065 The gfxTextRun::SanitizeGlyphRuns function in gfx/thebes/src/gfxFont.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 on Mac OS X, when the Core Text API is used, does not properly perform certain deletions, which allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via an HTML document containing invisible Unicode characters, as demonstrated by the U+FEFF, U+FFF9, U+FFFA, and U+FFFB characters.

cpe:/a:mozilla:firefox:3.0 cpe:/a:mozilla:firefox:3.0.1 cpe:/a:mozilla:firefox:3.0.10 cpe:/a:mozilla:firefox:3.0.11 cpe:/a:mozilla:firefox:3.0.12 cpe:/a:mozilla:firefox:3.0.13 cpe:/a:mozilla:firefox:3.0.14 cpe:/a:mozilla:firefox:3.0.15 cpe:/a:mozilla:firefox:3.0.16 cpe:/a:mozilla:firefox:3.0.17 cpe:/a:mozilla:firefox:3.5 cpe:/a:mozilla:firefox:3.5.1 cpe:/a:mozilla:firefox:3.5.2 cpe:/a:mozilla:firefox:3.5.3 cpe:/a:mozilla:firefox:3.5.4 cpe:/a:mozilla:firefox:3.5.5 cpe:/a:mozilla:firefox:3.5.6 cpe:/a:mozilla:firefox:3.5.7 cpe:/a:mozilla:firefox:3.6 cpe:/a:mozilla:seamonkey:1.1 cpe:/a:mozilla:seamonkey:1.1:alpha cpe:/a:mozilla:seamonkey:1.1:beta cpe:/a:mozilla:seamonkey:1.1.1 cpe:/a:mozilla:seamonkey:1.1.2 cpe:/a:mozilla:seamonkey:1.1.3 cpe:/a:mozilla:seamonkey:1.1.4 cpe:/a:mozilla:seamonkey:1.1.5 cpe:/a:mozilla:seamonkey:1.1.5:1.1.10 cpe:/a:mozilla:seamonkey:1.1.6 cpe:/a:mozilla:seamonkey:1.1.7 cpe:/a:mozilla:seamonkey:1.1.8 cpe:/a:mozilla:seamonkey:1.1.9 cpe:/a:mozilla:seamonkey:1.1.10 cpe:/a:mozilla:seamonkey:1.1.11 cpe:/a:mozilla:seamonkey:1.1.12 cpe:/a:mozilla:seamonkey:1.1.13 cpe:/a:mozilla:seamonkey:1.1.14 cpe:/a:mozilla:seamonkey:1.1.15 cpe:/a:mozilla:seamonkey:1.1.16 cpe:/a:mozilla:seamonkey:1.1.17 cpe:/a:mozilla:seamonkey:1.1.18 cpe:/a:mozilla:seamonkey:1.1.19 cpe:/a:mozilla:seamonkey:2.0 cpe:/a:mozilla:seamonkey:2.0:alpha_1 cpe:/a:mozilla:seamonkey:2.0:alpha_2 cpe:/a:mozilla:seamonkey:2.0:alpha_3 cpe:/a:mozilla:seamonkey:2.0:beta_1 cpe:/a:mozilla:seamonkey:2.0:beta_2 cpe:/a:mozilla:seamonkey:2.0:rc1 cpe:/a:mozilla:seamonkey:2.0:rc2 cpe:/a:mozilla:seamonkey:2.0.1 cpe:/a:mozilla:seamonkey:2.0.2 cpe:/a:mozilla:thunderbird:1.5 cpe:/a:mozilla:thunderbird:1.5:beta2 cpe:/a:mozilla:thunderbird:1.5.0.1 cpe:/a:mozilla:thunderbird:1.5.0.2 cpe:/a:mozilla:thunderbird:1.5.0.3 cpe:/a:mozilla:thunderbird:1.5.0.4 cpe:/a:mozilla:thunderbird:1.5.0.5 cpe:/a:mozilla:thunderbird:1.5.0.6 cpe:/a:mozilla:thunderbird:1.5.0.7 cpe:/a:mozilla:thunderbird:1.5.0.8 cpe:/a:mozilla:thunderbird:1.5.0.9 cpe:/a:mozilla:thunderbird:1.5.0.10 cpe:/a:mozilla:thunderbird:1.5.0.11 cpe:/a:mozilla:thunderbird:1.5.0.12 cpe:/a:mozilla:thunderbird:1.5.0.13 cpe:/a:mozilla:thunderbird:1.5.0.14 cpe:/a:mozilla:thunderbird:1.5.1 cpe:/a:mozilla:thunderbird:1.5.2 cpe:/a:mozilla:thunderbird:2.0.0.0 cpe:/a:mozilla:thunderbird:2.0.0.3 cpe:/a:mozilla:thunderbird:2.0.0.4 cpe:/a:mozilla:thunderbird:2.0.0.5 cpe:/a:mozilla:thunderbird:2.0.0.6 cpe:/a:mozilla:thunderbird:2.0.0.7 cpe:/a:mozilla:thunderbird:2.0.0.8 cpe:/a:mozilla:thunderbird:2.0.0.9 cpe:/a:mozilla:thunderbird:2.0.0.12 cpe:/a:mozilla:thunderbird:2.0.0.14 cpe:/a:mozilla:thunderbird:2.0.0.16 cpe:/a:mozilla:thunderbird:2.0.0.17 cpe:/a:mozilla:thunderbird:2.0.0.18 cpe:/a:mozilla:thunderbird:2.0.0.19 cpe:/a:mozilla:thunderbird:3.0.1

CVE-2010-0167

2010-03-25T17:00:00.437-04:00

2018-10-30T12:25:57.607-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov MANDRIVA MDVSA-2010:070 CONFIRM http://www.mozilla.org/security/announce/2010/mfsa2010-11.html BID 38918 BID 38944 VUPEN ADV-2010-0692 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=534082 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=535641 The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via vectors related to (1) layout/generic/nsBlockFrame.cpp and (2) the _evaluate function in modules/plugin/base/src/nsNPAPIPlugin.cpp.

cpe:/a:mozilla:firefox:3.6 cpe:/a:mozilla:firefox:3.6.1

CVE-2010-0168

2010-03-25T17:00:00.483-04:00

2017-09-18T21:30:15.297-04:00

7.6

NETWORK

HIGH

NONE

COMPLETE

http://nvd.nist.gov MANDRIVA MDVSA-2010:070 CONFIRM http://www.mozilla.org/security/announce/2010/mfsa2010-13.html BID 38918 VUPEN ADV-2010-0692 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=540642 The nsDocument::MaybePreLoadImage function in content/base/src/nsDocument.cpp in the image-preloading implementation in Mozilla Firefox 3.6 before 3.6.2 does not apply scheme restrictions and policy restrictions to the image's URL, which might allow remote attackers to cause a denial of service (application crash or hang) or hijack the functionality of the browser's add-ons via a crafted SRC attribute of an IMG element, as demonstrated by remote command execution through an ssh: URL in a configuration that supports gnome-vfs with a nonstandard network.gnomevfs.supported-protocols setting.

CVE-2010-0169

2010-03-25T17:00:00.517-04:00

2018-10-30T12:25:57.607-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.mozilla.org/security/announce/2010/mfsa2010-14.html BID 38918 VUPEN ADV-2010-0692 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=535806 The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 changes the case of certain strings in a stylesheet before adding this stylesheet to the XUL cache, which might allow remote attackers to modify the browser's font and other CSS attributes, and potentially disrupt rendering of a web page, by forcing the browser to perform this erroneous stylesheet caching.

cpe:/a:mozilla:firefox:3.6

CVE-2010-0170

2010-03-25T17:00:00.563-04:00

2017-09-18T21:30:15.437-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MANDRIVA MDVSA-2010:070 CONFIRM http://www.mozilla.org/security/announce/2010/mfsa2010-10.html BID 38918 BID 38919 VUPEN ADV-2010-0692 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=541530 Mozilla Firefox 3.6 before 3.6.2 does not offer plugins the expected window.location protection mechanism, which might allow remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via vectors that are specific to each affected plugin.

CVE-2010-0171

2010-03-25T17:00:00.593-04:00

2018-10-30T12:25:57.607-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.mozilla.org/security/announce/2010/mfsa2010-12.html BID 38918 VUPEN ADV-2010-0692 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=531364 Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allow remote attackers to perform cross-origin keystroke capture, and possibly conduct cross-site scripting (XSS) attacks, by using the addEventListener and setTimeout functions in conjunction with a wrapped object. NOTE: this vulnerability exists because of an incomplete fix for CVE-2007-3736.

cpe:/a:mozilla:firefox:3.6

CVE-2010-0172

2010-03-25T17:00:00.627-04:00

2017-09-18T21:30:15.563-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MANDRIVA MDVSA-2010:070 CONFIRM http://www.mozilla.org/security/announce/2010/mfsa2010-15.html BID 38918 VUPEN ADV-2010-0692 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=537862 toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js in the asynchronous Authorization Prompt implementation in Mozilla Firefox 3.6 before 3.6.2 does not properly handle concurrent authorization requests from multiple web sites, which might allow remote web servers to spoof an authorization dialog and capture credentials by demanding HTTP authentication in opportunistic circumstances.

cpe:/a:mozilla:firefox:0.1 cpe:/a:mozilla:firefox:0.2 cpe:/a:mozilla:firefox:0.3 cpe:/a:mozilla:firefox:0.4 cpe:/a:mozilla:firefox:0.5 cpe:/a:mozilla:firefox:0.6 cpe:/a:mozilla:firefox:0.6.1 cpe:/a:mozilla:firefox:0.7 cpe:/a:mozilla:firefox:0.7.1 cpe:/a:mozilla:firefox:0.8 cpe:/a:mozilla:firefox:0.9 cpe:/a:mozilla:firefox:0.9:rc cpe:/a:mozilla:firefox:0.9.1 cpe:/a:mozilla:firefox:0.9.2 cpe:/a:mozilla:firefox:0.9.3 cpe:/a:mozilla:firefox:0.10 cpe:/a:mozilla:firefox:0.10.1 cpe:/a:mozilla:firefox:1.0 cpe:/a:mozilla:firefox:1.0:preview_release cpe:/a:mozilla:firefox:1.0.1 cpe:/a:mozilla:firefox:1.0.2 cpe:/a:mozilla:firefox:1.0.3 cpe:/a:mozilla:firefox:1.0.4 cpe:/a:mozilla:firefox:1.0.5 cpe:/a:mozilla:firefox:1.0.6 cpe:/a:mozilla:firefox:1.0.7 cpe:/a:mozilla:firefox:1.0.8 cpe:/a:mozilla:firefox:1.5 cpe:/a:mozilla:firefox:1.5:beta1 cpe:/a:mozilla:firefox:1.5:beta2 cpe:/a:mozilla:firefox:1.5.0.1 cpe:/a:mozilla:firefox:1.5.0.2 cpe:/a:mozilla:firefox:1.5.0.3 cpe:/a:mozilla:firefox:1.5.0.4 cpe:/a:mozilla:firefox:1.5.0.5 cpe:/a:mozilla:firefox:1.5.0.6 cpe:/a:mozilla:firefox:1.5.0.7 cpe:/a:mozilla:firefox:1.5.0.8 cpe:/a:mozilla:firefox:1.5.0.9 cpe:/a:mozilla:firefox:1.5.0.10 cpe:/a:mozilla:firefox:1.5.0.11 cpe:/a:mozilla:firefox:1.5.0.12 cpe:/a:mozilla:firefox:1.5.1 cpe:/a:mozilla:firefox:1.5.2 cpe:/a:mozilla:firefox:1.5.3 cpe:/a:mozilla:firefox:1.5.4 cpe:/a:mozilla:firefox:1.5.5 cpe:/a:mozilla:firefox:1.5.6 cpe:/a:mozilla:firefox:1.5.7 cpe:/a:mozilla:firefox:1.5.8 cpe:/a:mozilla:firefox:2.0 cpe:/a:mozilla:firefox:2.0.0.1 cpe:/a:mozilla:firefox:2.0.0.2 cpe:/a:mozilla:firefox:2.0.0.3 cpe:/a:mozilla:firefox:2.0.0.4 cpe:/a:mozilla:firefox:2.0.0.5 cpe:/a:mozilla:firefox:2.0.0.6 cpe:/a:mozilla:firefox:2.0.0.7 cpe:/a:mozilla:firefox:2.0.0.8 cpe:/a:mozilla:firefox:2.0.0.9 cpe:/a:mozilla:firefox:2.0.0.10 cpe:/a:mozilla:firefox:2.0.0.11 cpe:/a:mozilla:firefox:2.0.0.12 cpe:/a:mozilla:firefox:2.0.0.13 cpe:/a:mozilla:firefox:2.0.0.14 cpe:/a:mozilla:firefox:2.0.0.15 cpe:/a:mozilla:firefox:2.0.0.16 cpe:/a:mozilla:firefox:2.0.0.17 cpe:/a:mozilla:firefox:2.0.0.18 cpe:/a:mozilla:firefox:2.0.0.19 cpe:/a:mozilla:firefox:2.0.0.20 cpe:/a:mozilla:firefox:3.0 cpe:/a:mozilla:firefox:3.0.1 cpe:/a:mozilla:firefox:3.0.2 cpe:/a:mozilla:firefox:3.0.3 cpe:/a:mozilla:firefox:3.0.4 cpe:/a:mozilla:firefox:3.0.5 cpe:/a:mozilla:firefox:3.0.6 cpe:/a:mozilla:firefox:3.0.7 cpe:/a:mozilla:firefox:3.0.8 cpe:/a:mozilla:firefox:3.0.9 cpe:/a:mozilla:firefox:3.0.10 cpe:/a:mozilla:firefox:3.0.11 cpe:/a:mozilla:firefox:3.0.12 cpe:/a:mozilla:firefox:3.0.13 cpe:/a:mozilla:firefox:3.0.14 cpe:/a:mozilla:firefox:3.0.15 cpe:/a:mozilla:firefox:3.0.16 cpe:/a:mozilla:firefox:3.0.17 cpe:/a:mozilla:firefox:3.5 cpe:/a:mozilla:firefox:3.5.1 cpe:/a:mozilla:firefox:3.5.2 cpe:/a:mozilla:firefox:3.5.3 cpe:/a:mozilla:firefox:3.5.4 cpe:/a:mozilla:firefox:3.5.5 cpe:/a:mozilla:firefox:3.5.6 cpe:/a:mozilla:firefox:3.5.7 cpe:/a:mozilla:firefox:3.6 cpe:/a:mozilla:seamonkey:1.0 cpe:/a:mozilla:seamonkey:1.0:alpha cpe:/a:mozilla:seamonkey:1.0:beta cpe:/a:mozilla:seamonkey:1.0.1 cpe:/a:mozilla:seamonkey:1.0.2 cpe:/a:mozilla:seamonkey:1.0.3 cpe:/a:mozilla:seamonkey:1.0.4 cpe:/a:mozilla:seamonkey:1.0.5 cpe:/a:mozilla:seamonkey:1.0.6 cpe:/a:mozilla:seamonkey:1.0.7 cpe:/a:mozilla:seamonkey:1.0.8 cpe:/a:mozilla:seamonkey:1.0.9 cpe:/a:mozilla:seamonkey:1.1 cpe:/a:mozilla:seamonkey:1.1:alpha cpe:/a:mozilla:seamonkey:1.1:beta cpe:/a:mozilla:seamonkey:1.1.1 cpe:/a:mozilla:seamonkey:1.1.2 cpe:/a:mozilla:seamonkey:1.1.3 cpe:/a:mozilla:seamonkey:1.1.4 cpe:/a:mozilla:seamonkey:1.1.5 cpe:/a:mozilla:seamonkey:1.1.6 cpe:/a:mozilla:seamonkey:1.1.7 cpe:/a:mozilla:seamonkey:1.1.8 cpe:/a:mozilla:seamonkey:1.1.9 cpe:/a:mozilla:seamonkey:1.1.10 cpe:/a:mozilla:seamonkey:1.1.11 cpe:/a:mozilla:seamonkey:1.1.12 cpe:/a:mozilla:seamonkey:1.1.13 cpe:/a:mozilla:seamonkey:1.1.14 cpe:/a:mozilla:seamonkey:1.1.15 cpe:/a:mozilla:seamonkey:1.1.16 cpe:/a:mozilla:seamonkey:1.1.17 cpe:/a:mozilla:seamonkey:1.1.18 cpe:/a:mozilla:seamonkey:1.1.19 cpe:/a:mozilla:seamonkey:2.0 cpe:/a:mozilla:seamonkey:2.0:alpha_1 cpe:/a:mozilla:seamonkey:2.0:alpha_2 cpe:/a:mozilla:seamonkey:2.0:alpha_3 cpe:/a:mozilla:seamonkey:2.0:beta_1 cpe:/a:mozilla:seamonkey:2.0:beta_2 cpe:/a:mozilla:seamonkey:2.0:rc1 cpe:/a:mozilla:seamonkey:2.0:rc2 cpe:/a:mozilla:seamonkey:2.0.1 cpe:/a:mozilla:seamonkey:2.0.2 cpe:/a:mozilla:seamonkey:2.0.3 cpe:/a:mozilla:seamonkey:2.0.4 cpe:/a:mozilla:thunderbird:0.1 cpe:/a:mozilla:thunderbird:0.2 cpe:/a:mozilla:thunderbird:0.3 cpe:/a:mozilla:thunderbird:0.4 cpe:/a:mozilla:thunderbird:0.5 cpe:/a:mozilla:thunderbird:0.6 cpe:/a:mozilla:thunderbird:0.7 cpe:/a:mozilla:thunderbird:0.7.1 cpe:/a:mozilla:thunderbird:0.7.2 cpe:/a:mozilla:thunderbird:0.7.3 cpe:/a:mozilla:thunderbird:0.8 cpe:/a:mozilla:thunderbird:0.9 cpe:/a:mozilla:thunderbird:1.0 cpe:/a:mozilla:thunderbird:1.0.1 cpe:/a:mozilla:thunderbird:1.0.2 cpe:/a:mozilla:thunderbird:1.0.3 cpe:/a:mozilla:thunderbird:1.0.4 cpe:/a:mozilla:thunderbird:1.0.5 cpe:/a:mozilla:thunderbird:1.0.6 cpe:/a:mozilla:thunderbird:1.0.7 cpe:/a:mozilla:thunderbird:1.0.8 cpe:/a:mozilla:thunderbird:1.5 cpe:/a:mozilla:thunderbird:1.5:beta2 cpe:/a:mozilla:thunderbird:1.5.0.1 cpe:/a:mozilla:thunderbird:1.5.0.2 cpe:/a:mozilla:thunderbird:1.5.0.3 cpe:/a:mozilla:thunderbird:1.5.0.4 cpe:/a:mozilla:thunderbird:1.5.0.5 cpe:/a:mozilla:thunderbird:1.5.0.6 cpe:/a:mozilla:thunderbird:1.5.0.7 cpe:/a:mozilla:thunderbird:1.5.0.8 cpe:/a:mozilla:thunderbird:1.5.0.9 cpe:/a:mozilla:thunderbird:1.5.0.10 cpe:/a:mozilla:thunderbird:1.5.0.11 cpe:/a:mozilla:thunderbird:1.5.0.12 cpe:/a:mozilla:thunderbird:1.5.0.13 cpe:/a:mozilla:thunderbird:1.5.0.14 cpe:/a:mozilla:thunderbird:1.5.1 cpe:/a:mozilla:thunderbird:1.5.2 cpe:/a:mozilla:thunderbird:2.0 cpe:/a:mozilla:thunderbird:2.0.0.0 cpe:/a:mozilla:thunderbird:2.0.0.1 cpe:/a:mozilla:thunderbird:2.0.0.2 cpe:/a:mozilla:thunderbird:2.0.0.3 cpe:/a:mozilla:thunderbird:2.0.0.4 cpe:/a:mozilla:thunderbird:2.0.0.5 cpe:/a:mozilla:thunderbird:2.0.0.6 cpe:/a:mozilla:thunderbird:2.0.0.7 cpe:/a:mozilla:thunderbird:2.0.0.8 cpe:/a:mozilla:thunderbird:2.0.0.9 cpe:/a:mozilla:thunderbird:2.0.0.12 cpe:/a:mozilla:thunderbird:2.0.0.14 cpe:/a:mozilla:thunderbird:2.0.0.16 cpe:/a:mozilla:thunderbird:2.0.0.17 cpe:/a:mozilla:thunderbird:2.0.0.18 cpe:/a:mozilla:thunderbird:2.0.0.19 cpe:/a:mozilla:thunderbird:2.0.0.21 cpe:/a:mozilla:thunderbird:2.0.0.22 cpe:/a:mozilla:thunderbird:2.0.0.23 cpe:/a:mozilla:thunderbird:3.0.1 cpe:/a:mozilla:thunderbird:3.0.2 cpe:/a:mozilla:thunderbird:3.0.3

CVE-2010-0173

2010-04-05T13:30:00.297-04:00

2018-10-30T12:25:58.530-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov FEDORA FEDORA-2010-5526 FEDORA FEDORA-2010-5539 SUSE SUSE-SR:2010:013 SECTRACK 1023775 SECTRACK 1023781 UBUNTU USN-921-1 MANDRIVA MDVSA-2010:070 CONFIRM http://www.mozilla.org/security/announce/2010/mfsa2010-16.html VUPEN ADV-2010-0748 VUPEN ADV-2010-0849 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=488850 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=491722 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=496011 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=499862 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=542136 XF firefox-browser-eng-code-execution(57388) Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVE-2010-0174

2010-04-05T13:30:00.343-04:00

2018-10-30T12:25:58.530-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov FEDORA FEDORA-2010-5526 FEDORA FEDORA-2010-5539 FEDORA FEDORA-2010-5561 SUSE SUSE-SR:2010:013 SECTRACK 1023775 SECTRACK 1023781 UBUNTU USN-921-1 DEBIAN DSA-2027 MANDRIVA MDVSA-2010:070 CONFIRM http://www.mozilla.org/security/announce/2010/mfsa2010-16.html REDHAT RHSA-2010:0332 REDHAT RHSA-2010:0333 VUPEN ADV-2010-0748 VUPEN ADV-2010-0764 VUPEN ADV-2010-0765 VUPEN ADV-2010-0781 VUPEN ADV-2010-0790 VUPEN ADV-2010-0849 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=499844 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=546530 XF mozilla-browser-eng-code-exec(57389) Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

cpe:/a:mozilla:firefox:0.1 cpe:/a:mozilla:firefox:0.2 cpe:/a:mozilla:firefox:0.3 cpe:/a:mozilla:firefox:0.4 cpe:/a:mozilla:firefox:0.5 cpe:/a:mozilla:firefox:0.6 cpe:/a:mozilla:firefox:0.6.1 cpe:/a:mozilla:firefox:0.7 cpe:/a:mozilla:firefox:0.7.1 cpe:/a:mozilla:firefox:0.8 cpe:/a:mozilla:firefox:0.9 cpe:/a:mozilla:firefox:0.9:rc cpe:/a:mozilla:firefox:0.9.1 cpe:/a:mozilla:firefox:0.9.2 cpe:/a:mozilla:firefox:0.9.3 cpe:/a:mozilla:firefox:0.10 cpe:/a:mozilla:firefox:0.10.1 cpe:/a:mozilla:firefox:1.0 cpe:/a:mozilla:firefox:1.0:preview_release cpe:/a:mozilla:firefox:1.0.1 cpe:/a:mozilla:firefox:1.0.2 cpe:/a:mozilla:firefox:1.0.3 cpe:/a:mozilla:firefox:1.0.4 cpe:/a:mozilla:firefox:1.0.5 cpe:/a:mozilla:firefox:1.0.6 cpe:/a:mozilla:firefox:1.0.7 cpe:/a:mozilla:firefox:1.0.8 cpe:/a:mozilla:firefox:1.5 cpe:/a:mozilla:firefox:1.5:beta1 cpe:/a:mozilla:firefox:1.5:beta2 cpe:/a:mozilla:firefox:1.5.0.1 cpe:/a:mozilla:firefox:1.5.0.2 cpe:/a:mozilla:firefox:1.5.0.3 cpe:/a:mozilla:firefox:1.5.0.4 cpe:/a:mozilla:firefox:1.5.0.5 cpe:/a:mozilla:firefox:1.5.0.6 cpe:/a:mozilla:firefox:1.5.0.7 cpe:/a:mozilla:firefox:1.5.0.8 cpe:/a:mozilla:firefox:1.5.0.9 cpe:/a:mozilla:firefox:1.5.0.10 cpe:/a:mozilla:firefox:1.5.0.11 cpe:/a:mozilla:firefox:1.5.0.12 cpe:/a:mozilla:firefox:1.5.1 cpe:/a:mozilla:firefox:1.5.2 cpe:/a:mozilla:firefox:1.5.3 cpe:/a:mozilla:firefox:1.5.4 cpe:/a:mozilla:firefox:1.5.5 cpe:/a:mozilla:firefox:1.5.6 cpe:/a:mozilla:firefox:1.5.7 cpe:/a:mozilla:firefox:1.5.8 cpe:/a:mozilla:firefox:2.0 cpe:/a:mozilla:firefox:2.0.0.1 cpe:/a:mozilla:firefox:2.0.0.2 cpe:/a:mozilla:firefox:2.0.0.3 cpe:/a:mozilla:firefox:2.0.0.4 cpe:/a:mozilla:firefox:2.0.0.5 cpe:/a:mozilla:firefox:2.0.0.6 cpe:/a:mozilla:firefox:2.0.0.7 cpe:/a:mozilla:firefox:2.0.0.8 cpe:/a:mozilla:firefox:2.0.0.9 cpe:/a:mozilla:firefox:2.0.0.10 cpe:/a:mozilla:firefox:2.0.0.11 cpe:/a:mozilla:firefox:2.0.0.12 cpe:/a:mozilla:firefox:2.0.0.13 cpe:/a:mozilla:firefox:2.0.0.14 cpe:/a:mozilla:firefox:2.0.0.15 cpe:/a:mozilla:firefox:2.0.0.16 cpe:/a:mozilla:firefox:2.0.0.17 cpe:/a:mozilla:firefox:2.0.0.18 cpe:/a:mozilla:firefox:2.0.0.19 cpe:/a:mozilla:firefox:2.0.0.20 cpe:/a:mozilla:firefox:3.0 cpe:/a:mozilla:firefox:3.0.1 cpe:/a:mozilla:firefox:3.0.2 cpe:/a:mozilla:firefox:3.0.3 cpe:/a:mozilla:firefox:3.0.4 cpe:/a:mozilla:firefox:3.0.5 cpe:/a:mozilla:firefox:3.0.6 cpe:/a:mozilla:firefox:3.0.7 cpe:/a:mozilla:firefox:3.0.8 cpe:/a:mozilla:firefox:3.0.9 cpe:/a:mozilla:firefox:3.0.10 cpe:/a:mozilla:firefox:3.0.11 cpe:/a:mozilla:firefox:3.0.12 cpe:/a:mozilla:firefox:3.0.13 cpe:/a:mozilla:firefox:3.0.14 cpe:/a:mozilla:firefox:3.0.15 cpe:/a:mozilla:firefox:3.0.16 cpe:/a:mozilla:firefox:3.0.17 cpe:/a:mozilla:firefox:3.5 cpe:/a:mozilla:firefox:3.5.1 cpe:/a:mozilla:firefox:3.5.2 cpe:/a:mozilla:firefox:3.5.3 cpe:/a:mozilla:firefox:3.5.4 cpe:/a:mozilla:firefox:3.5.5 cpe:/a:mozilla:firefox:3.5.6 cpe:/a:mozilla:firefox:3.5.7 cpe:/a:mozilla:seamonkey:1.0 cpe:/a:mozilla:seamonkey:1.0:alpha cpe:/a:mozilla:seamonkey:1.0:beta cpe:/a:mozilla:seamonkey:1.0.1 cpe:/a:mozilla:seamonkey:1.0.2 cpe:/a:mozilla:seamonkey:1.0.3 cpe:/a:mozilla:seamonkey:1.0.4 cpe:/a:mozilla:seamonkey:1.0.5 cpe:/a:mozilla:seamonkey:1.0.6 cpe:/a:mozilla:seamonkey:1.0.7 cpe:/a:mozilla:seamonkey:1.0.8 cpe:/a:mozilla:seamonkey:1.0.9 cpe:/a:mozilla:seamonkey:1.1 cpe:/a:mozilla:seamonkey:1.1:alpha cpe:/a:mozilla:seamonkey:1.1:beta cpe:/a:mozilla:seamonkey:1.1.1 cpe:/a:mozilla:seamonkey:1.1.2 cpe:/a:mozilla:seamonkey:1.1.3 cpe:/a:mozilla:seamonkey:1.1.4 cpe:/a:mozilla:seamonkey:1.1.5 cpe:/a:mozilla:seamonkey:1.1.6 cpe:/a:mozilla:seamonkey:1.1.7 cpe:/a:mozilla:seamonkey:1.1.8 cpe:/a:mozilla:seamonkey:1.1.9 cpe:/a:mozilla:seamonkey:1.1.10 cpe:/a:mozilla:seamonkey:1.1.11 cpe:/a:mozilla:seamonkey:1.1.12 cpe:/a:mozilla:seamonkey:1.1.13 cpe:/a:mozilla:seamonkey:1.1.14 cpe:/a:mozilla:seamonkey:1.1.15 cpe:/a:mozilla:seamonkey:1.1.16 cpe:/a:mozilla:seamonkey:1.1.17 cpe:/a:mozilla:seamonkey:1.1.18 cpe:/a:mozilla:seamonkey:1.1.19 cpe:/a:mozilla:seamonkey:2.0 cpe:/a:mozilla:seamonkey:2.0:alpha_1 cpe:/a:mozilla:seamonkey:2.0:alpha_2 cpe:/a:mozilla:seamonkey:2.0:alpha_3 cpe:/a:mozilla:seamonkey:2.0:beta_1 cpe:/a:mozilla:seamonkey:2.0:beta_2 cpe:/a:mozilla:seamonkey:2.0:rc1 cpe:/a:mozilla:seamonkey:2.0:rc2 cpe:/a:mozilla:seamonkey:2.0.1 cpe:/a:mozilla:seamonkey:2.0.2 cpe:/a:mozilla:seamonkey:2.0.3 cpe:/a:mozilla:seamonkey:2.0.4 cpe:/a:mozilla:thunderbird:0.1 cpe:/a:mozilla:thunderbird:0.2 cpe:/a:mozilla:thunderbird:0.3 cpe:/a:mozilla:thunderbird:0.4 cpe:/a:mozilla:thunderbird:0.5 cpe:/a:mozilla:thunderbird:0.6 cpe:/a:mozilla:thunderbird:0.7 cpe:/a:mozilla:thunderbird:0.7.1 cpe:/a:mozilla:thunderbird:0.7.2 cpe:/a:mozilla:thunderbird:0.7.3 cpe:/a:mozilla:thunderbird:0.8 cpe:/a:mozilla:thunderbird:0.9 cpe:/a:mozilla:thunderbird:1.0 cpe:/a:mozilla:thunderbird:1.0.1 cpe:/a:mozilla:thunderbird:1.0.2 cpe:/a:mozilla:thunderbird:1.0.3 cpe:/a:mozilla:thunderbird:1.0.4 cpe:/a:mozilla:thunderbird:1.0.5 cpe:/a:mozilla:thunderbird:1.0.6 cpe:/a:mozilla:thunderbird:1.0.7 cpe:/a:mozilla:thunderbird:1.0.8 cpe:/a:mozilla:thunderbird:1.5 cpe:/a:mozilla:thunderbird:1.5:beta2 cpe:/a:mozilla:thunderbird:1.5.0.1 cpe:/a:mozilla:thunderbird:1.5.0.2 cpe:/a:mozilla:thunderbird:1.5.0.3 cpe:/a:mozilla:thunderbird:1.5.0.4 cpe:/a:mozilla:thunderbird:1.5.0.5 cpe:/a:mozilla:thunderbird:1.5.0.6 cpe:/a:mozilla:thunderbird:1.5.0.7 cpe:/a:mozilla:thunderbird:1.5.0.8 cpe:/a:mozilla:thunderbird:1.5.0.9 cpe:/a:mozilla:thunderbird:1.5.0.10 cpe:/a:mozilla:thunderbird:1.5.0.11 cpe:/a:mozilla:thunderbird:1.5.0.12 cpe:/a:mozilla:thunderbird:1.5.0.13 cpe:/a:mozilla:thunderbird:1.5.0.14 cpe:/a:mozilla:thunderbird:1.5.1 cpe:/a:mozilla:thunderbird:1.5.2 cpe:/a:mozilla:thunderbird:2.0 cpe:/a:mozilla:thunderbird:2.0.0.0 cpe:/a:mozilla:thunderbird:2.0.0.1 cpe:/a:mozilla:thunderbird:2.0.0.2 cpe:/a:mozilla:thunderbird:2.0.0.3 cpe:/a:mozilla:thunderbird:2.0.0.4 cpe:/a:mozilla:thunderbird:2.0.0.5 cpe:/a:mozilla:thunderbird:2.0.0.6 cpe:/a:mozilla:thunderbird:2.0.0.7 cpe:/a:mozilla:thunderbird:2.0.0.8 cpe:/a:mozilla:thunderbird:2.0.0.9 cpe:/a:mozilla:thunderbird:2.0.0.12 cpe:/a:mozilla:thunderbird:2.0.0.14 cpe:/a:mozilla:thunderbird:2.0.0.16 cpe:/a:mozilla:thunderbird:2.0.0.17 cpe:/a:mozilla:thunderbird:2.0.0.18 cpe:/a:mozilla:thunderbird:2.0.0.19 cpe:/a:mozilla:thunderbird:2.0.0.21 cpe:/a:mozilla:thunderbird:2.0.0.22 cpe:/a:mozilla:thunderbird:2.0.0.23 cpe:/a:mozilla:thunderbird:3.0.1 cpe:/a:mozilla:thunderbird:3.0.2 cpe:/a:mozilla:thunderbird:3.0.3

CVE-2010-0175

2010-04-05T13:30:00.407-04:00

2018-10-30T12:25:58.530-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov FEDORA FEDORA-2010-5526 FEDORA FEDORA-2010-5539 FEDORA FEDORA-2010-5561 SUSE SUSE-SR:2010:013 SECTRACK 1023780 SECTRACK 1023782 UBUNTU USN-921-1 DEBIAN DSA-2027 MANDRIVA MDVSA-2010:070 CONFIRM http://www.mozilla.org/security/announce/2010/mfsa2010-17.html REDHAT RHSA-2010:0332 REDHAT RHSA-2010:0333 BUGTRAQ 20100402 ZDI-10-050: Mozilla Firefox nsTreeSelection EventListener Remote Code Execution Vulnerability VUPEN ADV-2010-0748 VUPEN ADV-2010-0764 VUPEN ADV-2010-0765 VUPEN ADV-2010-0781 VUPEN ADV-2010-0790 VUPEN ADV-2010-0849 MISC http://www.zerodayinitiative.com/advisories/ZDI-10-050 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=375928 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=540100 XF firefox-nstreeselection-code-execution(57390) Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.

CVE-2010-0176

2010-04-05T13:30:00.453-04:00

2018-10-30T12:25:58.530-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov FEDORA FEDORA-2010-5526 FEDORA FEDORA-2010-5539 FEDORA FEDORA-2010-5561 SUSE SUSE-SR:2010:013 SECTRACK 1023776 SECTRACK 1023782 UBUNTU USN-921-1 DEBIAN DSA-2027 MANDRIVA MDVSA-2010:070 CONFIRM http://www.mozilla.org/security/announce/2010/mfsa2010-18.html REDHAT RHSA-2010:0332 REDHAT RHSA-2010:0333 VUPEN ADV-2010-0748 VUPEN ADV-2010-0764 VUPEN ADV-2010-0765 VUPEN ADV-2010-0781 VUPEN ADV-2010-0790 VUPEN ADV-2010-0849 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=538308 XF firefox-nstreecontentview-code-exec(57392) Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."

CVE-2010-0177

2010-04-05T13:30:00.500-04:00

2018-10-30T12:25:57.607-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SR:2010:013 SECTRACK 1023776 UBUNTU USN-921-1 DEBIAN DSA-2027 MANDRIVA MDVSA-2010:070 CONFIRM http://www.mozilla.org/security/announce/2010/mfsa2010-19.html REDHAT RHSA-2010:0332 REDHAT RHSA-2010:0333 BUGTRAQ 20100402 ZDI-10-049: Mozilla Firefox PluginArray nsMimeType Dangling Pointer Remote Code Execution Vulnerability VUPEN ADV-2010-0748 VUPEN ADV-2010-0764 VUPEN ADV-2010-0765 VUPEN ADV-2010-0781 VUPEN ADV-2010-0849 MISC http://www.zerodayinitiative.com/advisories/ZDI-10-049 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=538310 XF firefox-nspluginarray-code-execution(57393) Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."

CVE-2010-0178

2010-04-05T13:30:00.547-04:00

2018-10-30T12:25:57.607-04:00

7.6

NETWORK

HIGH

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SR:2010:013 SECTRACK 1023776 UBUNTU USN-921-1 DEBIAN DSA-2027 MANDRIVA MDVSA-2010:070 CONFIRM http://www.mozilla.org/security/announce/2010/mfsa2010-20.html REDHAT RHSA-2010:0332 VUPEN ADV-2010-0748 VUPEN ADV-2010-0764 VUPEN ADV-2010-0781 VUPEN ADV-2010-0849 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=546909 XF firefox-draganddrop-code-execution(57391) Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by loading a chrome: URL and then loading a javascript: URL.

cpe:/a:mozilla:firefox:0.1 cpe:/a:mozilla:firefox:0.2 cpe:/a:mozilla:firefox:0.3 cpe:/a:mozilla:firefox:0.4 cpe:/a:mozilla:firefox:0.5 cpe:/a:mozilla:firefox:0.6 cpe:/a:mozilla:firefox:0.6.1 cpe:/a:mozilla:firefox:0.7 cpe:/a:mozilla:firefox:0.7.1 cpe:/a:mozilla:firefox:0.8 cpe:/a:mozilla:firefox:0.9 cpe:/a:mozilla:firefox:0.9:rc cpe:/a:mozilla:firefox:0.9.1 cpe:/a:mozilla:firefox:0.9.2 cpe:/a:mozilla:firefox:0.9.3 cpe:/a:mozilla:firefox:0.10 cpe:/a:mozilla:firefox:0.10.1 cpe:/a:mozilla:firefox:1.0 cpe:/a:mozilla:firefox:1.0:preview_release cpe:/a:mozilla:firefox:1.0.1 cpe:/a:mozilla:firefox:1.0.2 cpe:/a:mozilla:firefox:1.0.3 cpe:/a:mozilla:firefox:1.0.4 cpe:/a:mozilla:firefox:1.0.5 cpe:/a:mozilla:firefox:1.0.6 cpe:/a:mozilla:firefox:1.0.7 cpe:/a:mozilla:firefox:1.0.8 cpe:/a:mozilla:firefox:1.5 cpe:/a:mozilla:firefox:1.5:beta1 cpe:/a:mozilla:firefox:1.5:beta2 cpe:/a:mozilla:firefox:1.5.0.1 cpe:/a:mozilla:firefox:1.5.0.2 cpe:/a:mozilla:firefox:1.5.0.3 cpe:/a:mozilla:firefox:1.5.0.4 cpe:/a:mozilla:firefox:1.5.0.5 cpe:/a:mozilla:firefox:1.5.0.6 cpe:/a:mozilla:firefox:1.5.0.7 cpe:/a:mozilla:firefox:1.5.0.8 cpe:/a:mozilla:firefox:1.5.0.9 cpe:/a:mozilla:firefox:1.5.0.10 cpe:/a:mozilla:firefox:1.5.0.11 cpe:/a:mozilla:firefox:1.5.0.12 cpe:/a:mozilla:firefox:1.5.1 cpe:/a:mozilla:firefox:1.5.2 cpe:/a:mozilla:firefox:1.5.3 cpe:/a:mozilla:firefox:1.5.4 cpe:/a:mozilla:firefox:1.5.5 cpe:/a:mozilla:firefox:1.5.6 cpe:/a:mozilla:firefox:1.5.7 cpe:/a:mozilla:firefox:1.5.8 cpe:/a:mozilla:firefox:2.0 cpe:/a:mozilla:firefox:2.0.0.1 cpe:/a:mozilla:firefox:2.0.0.2 cpe:/a:mozilla:firefox:2.0.0.3 cpe:/a:mozilla:firefox:2.0.0.4 cpe:/a:mozilla:firefox:2.0.0.5 cpe:/a:mozilla:firefox:2.0.0.6 cpe:/a:mozilla:firefox:2.0.0.7 cpe:/a:mozilla:firefox:2.0.0.8 cpe:/a:mozilla:firefox:2.0.0.9 cpe:/a:mozilla:firefox:2.0.0.10 cpe:/a:mozilla:firefox:2.0.0.11 cpe:/a:mozilla:firefox:2.0.0.12 cpe:/a:mozilla:firefox:2.0.0.13 cpe:/a:mozilla:firefox:2.0.0.14 cpe:/a:mozilla:firefox:2.0.0.15 cpe:/a:mozilla:firefox:2.0.0.16 cpe:/a:mozilla:firefox:2.0.0.17 cpe:/a:mozilla:firefox:2.0.0.18 cpe:/a:mozilla:firefox:2.0.0.19 cpe:/a:mozilla:firefox:2.0.0.20 cpe:/a:mozilla:firefox:3.0 cpe:/a:mozilla:firefox:3.0.1 cpe:/a:mozilla:firefox:3.0.2 cpe:/a:mozilla:firefox:3.0.3 cpe:/a:mozilla:firefox:3.0.4 cpe:/a:mozilla:firefox:3.0.5 cpe:/a:mozilla:firefox:3.0.6 cpe:/a:mozilla:firefox:3.0.7 cpe:/a:mozilla:firefox:3.0.8 cpe:/a:mozilla:firefox:3.0.9 cpe:/a:mozilla:firefox:3.0.10 cpe:/a:mozilla:firefox:3.0.11 cpe:/a:mozilla:firefox:3.0.12 cpe:/a:mozilla:firefox:3.0.13 cpe:/a:mozilla:firefox:3.0.14 cpe:/a:mozilla:firefox:3.0.15 cpe:/a:mozilla:firefox:3.0.16 cpe:/a:mozilla:firefox:3.0.17 cpe:/a:mozilla:firefox:3.5 cpe:/a:mozilla:firefox:3.5.1 cpe:/a:mozilla:firefox:3.5.2 cpe:/a:mozilla:firefox:3.5.3 cpe:/a:mozilla:firefox:3.5.4 cpe:/a:mozilla:firefox:3.5.5 cpe:/a:mozilla:firefox:3.5.6 cpe:/a:mozilla:firefox:3.5.7 cpe:/a:mozilla:seamonkey:1.0 cpe:/a:mozilla:seamonkey:1.0:alpha cpe:/a:mozilla:seamonkey:1.0:beta cpe:/a:mozilla:seamonkey:1.0.1 cpe:/a:mozilla:seamonkey:1.0.2 cpe:/a:mozilla:seamonkey:1.0.3 cpe:/a:mozilla:seamonkey:1.0.4 cpe:/a:mozilla:seamonkey:1.0.5 cpe:/a:mozilla:seamonkey:1.0.6 cpe:/a:mozilla:seamonkey:1.0.7 cpe:/a:mozilla:seamonkey:1.0.8 cpe:/a:mozilla:seamonkey:1.0.9 cpe:/a:mozilla:seamonkey:1.1 cpe:/a:mozilla:seamonkey:1.1:alpha cpe:/a:mozilla:seamonkey:1.1:beta cpe:/a:mozilla:seamonkey:1.1.1 cpe:/a:mozilla:seamonkey:1.1.2 cpe:/a:mozilla:seamonkey:1.1.3 cpe:/a:mozilla:seamonkey:1.1.4 cpe:/a:mozilla:seamonkey:1.1.5 cpe:/a:mozilla:seamonkey:1.1.6 cpe:/a:mozilla:seamonkey:1.1.7 cpe:/a:mozilla:seamonkey:1.1.8 cpe:/a:mozilla:seamonkey:1.1.9 cpe:/a:mozilla:seamonkey:1.1.10 cpe:/a:mozilla:seamonkey:1.1.11 cpe:/a:mozilla:seamonkey:1.1.12 cpe:/a:mozilla:seamonkey:1.1.13 cpe:/a:mozilla:seamonkey:1.1.14 cpe:/a:mozilla:seamonkey:1.1.15 cpe:/a:mozilla:seamonkey:1.1.16 cpe:/a:mozilla:seamonkey:1.1.17 cpe:/a:mozilla:seamonkey:1.1.18 cpe:/a:mozilla:seamonkey:1.1.19 cpe:/a:mozilla:seamonkey:2.0 cpe:/a:mozilla:seamonkey:2.0:alpha_1 cpe:/a:mozilla:seamonkey:2.0:alpha_2 cpe:/a:mozilla:seamonkey:2.0:alpha_3 cpe:/a:mozilla:seamonkey:2.0:beta_1 cpe:/a:mozilla:seamonkey:2.0:beta_2 cpe:/a:mozilla:seamonkey:2.0:rc1 cpe:/a:mozilla:seamonkey:2.0:rc2 cpe:/a:mozilla:seamonkey:2.0.1 cpe:/a:mozilla:seamonkey:2.0.2 cpe:/a:mozilla:thunderbird:0.1 cpe:/a:mozilla:thunderbird:0.2 cpe:/a:mozilla:thunderbird:0.3 cpe:/a:mozilla:thunderbird:0.4 cpe:/a:mozilla:thunderbird:0.5 cpe:/a:mozilla:thunderbird:0.6 cpe:/a:mozilla:thunderbird:0.7 cpe:/a:mozilla:thunderbird:0.7.1 cpe:/a:mozilla:thunderbird:0.7.2 cpe:/a:mozilla:thunderbird:0.7.3 cpe:/a:mozilla:thunderbird:0.8 cpe:/a:mozilla:thunderbird:0.9 cpe:/a:mozilla:thunderbird:1.0 cpe:/a:mozilla:thunderbird:1.0.1 cpe:/a:mozilla:thunderbird:1.0.2 cpe:/a:mozilla:thunderbird:1.0.3 cpe:/a:mozilla:thunderbird:1.0.4 cpe:/a:mozilla:thunderbird:1.0.5 cpe:/a:mozilla:thunderbird:1.0.6 cpe:/a:mozilla:thunderbird:1.0.7 cpe:/a:mozilla:thunderbird:1.0.8 cpe:/a:mozilla:thunderbird:1.5 cpe:/a:mozilla:thunderbird:1.5:beta2 cpe:/a:mozilla:thunderbird:1.5.0.1 cpe:/a:mozilla:thunderbird:1.5.0.2 cpe:/a:mozilla:thunderbird:1.5.0.3 cpe:/a:mozilla:thunderbird:1.5.0.4 cpe:/a:mozilla:thunderbird:1.5.0.5 cpe:/a:mozilla:thunderbird:1.5.0.6 cpe:/a:mozilla:thunderbird:1.5.0.7 cpe:/a:mozilla:thunderbird:1.5.0.8 cpe:/a:mozilla:thunderbird:1.5.0.9 cpe:/a:mozilla:thunderbird:1.5.0.10 cpe:/a:mozilla:thunderbird:1.5.0.11 cpe:/a:mozilla:thunderbird:1.5.0.12 cpe:/a:mozilla:thunderbird:1.5.0.13 cpe:/a:mozilla:thunderbird:1.5.0.14 cpe:/a:mozilla:thunderbird:1.5.1 cpe:/a:mozilla:thunderbird:1.5.2 cpe:/a:mozilla:thunderbird:2.0 cpe:/a:mozilla:thunderbird:2.0.0.0 cpe:/a:mozilla:thunderbird:2.0.0.1 cpe:/a:mozilla:thunderbird:2.0.0.2 cpe:/a:mozilla:thunderbird:2.0.0.3 cpe:/a:mozilla:thunderbird:2.0.0.4 cpe:/a:mozilla:thunderbird:2.0.0.5 cpe:/a:mozilla:thunderbird:2.0.0.6 cpe:/a:mozilla:thunderbird:2.0.0.7 cpe:/a:mozilla:thunderbird:2.0.0.8 cpe:/a:mozilla:thunderbird:2.0.0.9 cpe:/a:mozilla:thunderbird:2.0.0.12 cpe:/a:mozilla:thunderbird:2.0.0.14 cpe:/a:mozilla:thunderbird:2.0.0.16 cpe:/a:mozilla:thunderbird:2.0.0.17 cpe:/a:mozilla:thunderbird:2.0.0.18 cpe:/a:mozilla:thunderbird:2.0.0.19 cpe:/a:mozilla:thunderbird:2.0.0.21 cpe:/a:mozilla:thunderbird:2.0.0.22 cpe:/a:mozilla:thunderbird:2.0.0.23 cpe:/a:mozilla:thunderbird:3.0.1 cpe:/a:mozilla:thunderbird:3.0.2 cpe:/a:mozilla:thunderbird:3.0.3

CVE-2010-0179

2010-04-05T13:30:00.577-04:00

2018-10-30T12:25:58.530-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov SUSE SUSE-SR:2010:013 SUSE SUSE-SA:2011:003 SECTRACK 1023783 CONFIRM http://support.avaya.com/css/P8/documents/100124650 UBUNTU USN-921-1 DEBIAN DSA-2027 MANDRIVA MDVSA-2010:070 MANDRIVA MDVSA-2010:251 CONFIRM http://www.mozilla.org/security/announce/2010/mfsa2010-21.html REDHAT RHSA-2010:0332 BID 39124 VUPEN ADV-2010-0748 VUPEN ADV-2010-0764 VUPEN ADV-2010-0781 VUPEN ADV-2010-0849 VUPEN ADV-2011-0030 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=504021 XF firefox-firebug-code-execution(57394) Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute arbitrary JavaScript via a crafted HTTP response.

cpe:/a:mozilla:bugzilla:3.5.1 cpe:/a:mozilla:bugzilla:3.5.2 cpe:/a:mozilla:bugzilla:3.5.3 cpe:/a:mozilla:bugzilla:3.6 cpe:/a:mozilla:bugzilla:3.7

CVE-2010-0180

2010-06-28T13:30:00.997-04:00

1.9

LOCAL

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-06-28T15:08:00.000-04:00

CONFIRM http://www.bugzilla.org/security/3.2.6/ BID 41144 VUPEN ADV-2010-1595 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=561797 Install/Filesystem.pm in Bugzilla 3.5.1 through 3.6 and 3.7, when use_suexec is enabled, uses world-readable permissions for the localconfig files, which allows local users to read sensitive configuration fields, as demonstrated by the database password field and the site_wide_secret field.

CVE-2010-0181

2010-04-05T13:30:00.627-04:00

2018-10-30T12:25:57.607-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov SUSE SUSE-SR:2010:013 UBUNTU USN-921-1 MISC http://websecurity.com.ua/4206/ MANDRIVA MDVSA-2010:070 CONFIRM http://www.mozilla.org/security/announce/2010/mfsa2010-23.html BUGTRAQ 20100518 DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers VUPEN ADV-2010-0748 VUPEN ADV-2010-0849 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=452093 XF firefox-mailto-weak-security(57395) Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail application in situations where an IMG element has a SRC attribute that is a redirect to a mailto: URL, which allows remote attackers to cause a denial of service (excessive application launches) via an HTML document with many images.

CVE-2010-0182

2010-04-05T13:30:00.657-04:00

2018-10-30T12:25:58.530-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SUSE SUSE-SR:2010:013 CONFIRM http://support.avaya.com/css/P8/documents/100091069 UBUNTU USN-921-1 MANDRIVA MDVSA-2010:070 CONFIRM http://www.mozilla.org/security/announce/2010/mfsa2010-24.html REDHAT RHSA-2010:0500 REDHAT RHSA-2010:0501 BID 39479 VUPEN ADV-2010-0748 VUPEN ADV-2010-0849 VUPEN ADV-2010-1557 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=490790 XF firefox-xmldocumentload-weak-security(57396) The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended access restrictions via crafted content.

cpe:/a:mozilla:firefox:3.5 cpe:/a:mozilla:firefox:3.5.1 cpe:/a:mozilla:firefox:3.5.2 cpe:/a:mozilla:firefox:3.5.3 cpe:/a:mozilla:firefox:3.5.4 cpe:/a:mozilla:firefox:3.5.5 cpe:/a:mozilla:firefox:3.5.6 cpe:/a:mozilla:firefox:3.5.7 cpe:/a:mozilla:firefox:3.5.9 cpe:/a:mozilla:seamonkey:1.0 cpe:/a:mozilla:seamonkey:1.0:alpha cpe:/a:mozilla:seamonkey:1.0:beta cpe:/a:mozilla:seamonkey:1.0.1 cpe:/a:mozilla:seamonkey:1.0.2 cpe:/a:mozilla:seamonkey:1.0.3 cpe:/a:mozilla:seamonkey:1.0.4 cpe:/a:mozilla:seamonkey:1.0.5 cpe:/a:mozilla:seamonkey:1.0.6 cpe:/a:mozilla:seamonkey:1.0.7 cpe:/a:mozilla:seamonkey:1.0.8 cpe:/a:mozilla:seamonkey:1.0.9 cpe:/a:mozilla:seamonkey:1.1 cpe:/a:mozilla:seamonkey:1.1:alpha cpe:/a:mozilla:seamonkey:1.1:beta cpe:/a:mozilla:seamonkey:1.1.1 cpe:/a:mozilla:seamonkey:1.1.2 cpe:/a:mozilla:seamonkey:1.1.3 cpe:/a:mozilla:seamonkey:1.1.4 cpe:/a:mozilla:seamonkey:1.1.5 cpe:/a:mozilla:seamonkey:1.1.6 cpe:/a:mozilla:seamonkey:1.1.7 cpe:/a:mozilla:seamonkey:1.1.8 cpe:/a:mozilla:seamonkey:1.1.9 cpe:/a:mozilla:seamonkey:1.1.10 cpe:/a:mozilla:seamonkey:1.1.11 cpe:/a:mozilla:seamonkey:1.1.12 cpe:/a:mozilla:seamonkey:1.1.13 cpe:/a:mozilla:seamonkey:1.1.14 cpe:/a:mozilla:seamonkey:1.1.15 cpe:/a:mozilla:seamonkey:1.1.16 cpe:/a:mozilla:seamonkey:1.1.17 cpe:/a:mozilla:seamonkey:1.1.18 cpe:/a:mozilla:seamonkey:1.1.19 cpe:/a:mozilla:seamonkey:2.0 cpe:/a:mozilla:seamonkey:2.0:alpha_1 cpe:/a:mozilla:seamonkey:2.0:alpha_2 cpe:/a:mozilla:seamonkey:2.0:alpha_3 cpe:/a:mozilla:seamonkey:2.0:beta_1 cpe:/a:mozilla:seamonkey:2.0:beta_2 cpe:/a:mozilla:seamonkey:2.0:rc1 cpe:/a:mozilla:seamonkey:2.0:rc2 cpe:/a:mozilla:seamonkey:2.0.1 cpe:/a:mozilla:seamonkey:2.0.2 cpe:/a:mozilla:seamonkey:2.0.3 cpe:/a:mozilla:seamonkey:2.0.4

CVE-2010-0183

2010-06-24T08:30:01.437-04:00

2017-09-18T21:30:16.673-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov FEDORA FEDORA-2010-10344 FEDORA FEDORA-2010-10361 SUSE SUSE-SA:2010:030 CONFIRM http://www.mozilla.org/security/announce/2010/mfsa2010-27.html BID 41050 SECTRACK 1024138 VUPEN ADV-2010-1551 VUPEN ADV-2010-1592 VUPEN ADV-2010-1773 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=557174 Use-after-free vulnerability in the nsCycleCollector::MarkRoots function in Mozilla Firefox 3.5.x before 3.5.10 and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a crafted HTML document, related to an improper frame construction process for menus.

cpe:/a:tibco:runtime_agent:5.4.0 cpe:/a:tibco:runtime_agent:5.5.3 cpe:/a:tibco:runtime_agent:5.5.4 cpe:/a:tibco:runtime_agent:5.6 cpe:/a:tibco:runtime_agent:5.6.1

CVE-2010-0184

2010-01-14T14:30:00.483-05:00

2011-08-08T00:00:00.000-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2010-01-15T11:52:00.000-05:00

BID 37805 CONFIRM http://www.tibco.com/mk/advisory.jsp CONFIRM http://www.tibco.com/multimedia/security_advisory_runtime_agent_20100113_tcm8-10392.txt VUPEN ADV-2010-0128 The (1) domainutility and (2) domainutilitycmd components in TIBCO Domain Utility in TIBCO Runtime Agent (TRA) before 5.6.2, as used in TIBCO ActiveMatrix BusinessWorks and other products, set weak permissions on domain properties files, which allows local users to obtain domain administrator credentials, and gain privileges on all domain systems, via unspecified vectors.

cpe:/a:adobe:coldfusion:9.0

CVE-2010-0185

2010-02-03T13:30:00.610-05:00

2017-08-16T21:31:55.290-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://kb2.adobe.com/cps/807/cpsid_80719.html CONFIRM http://www.adobe.com/support/security/bulletins/apsb10-04.html BID 38007 SECTRACK 1023519 VUPEN ADV-2010-0259 XF coldfusion-solr-information-disclosure(55997) The default configuration of Adobe ColdFusion 9.0 does not restrict access to collections that have been created by the Solr Service, which allows remote attackers to obtain collection metadata, search information, and index data via a request to an unspecified URL.

cpe:/a:adobe:acrobat:8.0 cpe:/a:adobe:acrobat:8.1 cpe:/a:adobe:acrobat:8.1.1 cpe:/a:adobe:acrobat:8.1.2 cpe:/a:adobe:acrobat:8.1.3 cpe:/a:adobe:acrobat:8.1.4 cpe:/a:adobe:acrobat:8.1.5 cpe:/a:adobe:acrobat:8.1.6 cpe:/a:adobe:acrobat:8.1.7 cpe:/a:adobe:acrobat:9.0 cpe:/a:adobe:acrobat:9.1 cpe:/a:adobe:acrobat:9.1.1 cpe:/a:adobe:acrobat:9.1.2 cpe:/a:adobe:acrobat:9.1.3 cpe:/a:adobe:acrobat:9.2 cpe:/a:adobe:acrobat:9.3 cpe:/a:adobe:acrobat_reader:8.0 cpe:/a:adobe:acrobat_reader:8.1 cpe:/a:adobe:acrobat_reader:8.1.1 cpe:/a:adobe:acrobat_reader:8.1.2 cpe:/a:adobe:acrobat_reader:8.1.4 cpe:/a:adobe:acrobat_reader:8.1.5 cpe:/a:adobe:acrobat_reader:8.1.6 cpe:/a:adobe:acrobat_reader:8.1.7 cpe:/a:adobe:acrobat_reader:9.0 cpe:/a:adobe:acrobat_reader:9.1 cpe:/a:adobe:acrobat_reader:9.1.1 cpe:/a:adobe:acrobat_reader:9.1.2 cpe:/a:adobe:acrobat_reader:9.1.3 cpe:/a:adobe:acrobat_reader:9.2 cpe:/a:adobe:acrobat_reader:9.3 cpe:/a:adobe:adobe_air:1.0 cpe:/a:adobe:adobe_air:1.1 cpe:/a:adobe:adobe_air:1.5.1 cpe:/a:adobe:adobe_air:1.5.2 cpe:/a:adobe:adobe_air:1.5.3 cpe:/a:adobe:adobe_air:1.5.3.9120 cpe:/a:adobe:flash_player:6.0.21.0 cpe:/a:adobe:flash_player:6.0.79 cpe:/a:adobe:flash_player:7.0 cpe:/a:adobe:flash_player:7.0.1 cpe:/a:adobe:flash_player:7.0.25 cpe:/a:adobe:flash_player:7.0.63 cpe:/a:adobe:flash_player:7.0.69.0 cpe:/a:adobe:flash_player:7.0.70.0 cpe:/a:adobe:flash_player:7.1 cpe:/a:adobe:flash_player:7.1.1 cpe:/a:adobe:flash_player:7.2 cpe:/a:adobe:flash_player:8.0 cpe:/a:adobe:flash_player:8.0.22.0 cpe:/a:adobe:flash_player:8.0.24.0 cpe:/a:adobe:flash_player:8.0.33.0 cpe:/a:adobe:flash_player:8.0.34.0 cpe:/a:adobe:flash_player:8.0.35.0 cpe:/a:adobe:flash_player:8.0.39.0 cpe:/a:adobe:flash_player:8.0.42.0 cpe:/a:adobe:flash_player:9.0 cpe:/a:adobe:flash_player:9.0.16 cpe:/a:adobe:flash_player:9.0.18d60 cpe:/a:adobe:flash_player:9.0.20 cpe:/a:adobe:flash_player:9.0.20.0 cpe:/a:adobe:flash_player:9.0.28.0 cpe:/a:adobe:flash_player:9.0.31 cpe:/a:adobe:flash_player:9.0.31.0 cpe:/a:adobe:flash_player:9.0.45.0 cpe:/a:adobe:flash_player:9.0.47.0 cpe:/a:adobe:flash_player:9.0.48.0 cpe:/a:adobe:flash_player:9.0.112.0 cpe:/a:adobe:flash_player:9.0.114.0 cpe:/a:adobe:flash_player:9.0.115.0 cpe:/a:adobe:flash_player:9.0.124.0 cpe:/a:adobe:flash_player:9.0.125.0 cpe:/a:adobe:flash_player:9.0.151.0 cpe:/a:adobe:flash_player:9.0.152.0 cpe:/a:adobe:flash_player:9.0.159.0 cpe:/a:adobe:flash_player:9.0.246.0 cpe:/a:adobe:flash_player:9.0.260.0 cpe:/a:adobe:flash_player:9.125.0 cpe:/a:adobe:flash_player:10.0.12.10 cpe:/a:adobe:flash_player:10.0.12.36 cpe:/a:adobe:flash_player:10.0.15.3 cpe:/a:adobe:flash_player:10.0.22.87 cpe:/a:adobe:flash_player:10.0.32.18 cpe:/a:adobe:flash_player:10.0.42.34

CVE-2010-0186

2010-02-15T13:30:00.517-05:00

2018-10-30T12:26:24.687-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2010-06-15-1 SUSE SUSE-SR:2010:006 GENTOO GLSA-201101-09 SECTRACK 1023585 CONFIRM http://support.apple.com/kb/HT4188 CONFIRM http://www.adobe.com/support/security/bulletins/apsb10-06.html CONFIRM http://www.adobe.com/support/security/bulletins/apsb10-07.html REDHAT RHSA-2010:0114 BID 38198 VUPEN ADV-2010-1481 VUPEN ADV-2011-0192 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=563819 REDHAT RHSA-2010:0102 REDHAT RHSA-2010:0103 Cross-domain vulnerability in Adobe Flash Player before 10.0.45.2, Adobe AIR before 1.5.3.9130, and Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows remote attackers to bypass intended sandbox restrictions and make cross-domain requests via unspecified vectors.

cpe:/a:adobe:adobe_air:1.0 cpe:/a:adobe:adobe_air:1.1 cpe:/a:adobe:adobe_air:1.5.1 cpe:/a:adobe:adobe_air:1.5.2 cpe:/a:adobe:adobe_air:1.5.3 cpe:/a:adobe:adobe_air:1.5.3.9120 cpe:/a:adobe:flash_player:6.0.21.0 cpe:/a:adobe:flash_player:6.0.79 cpe:/a:adobe:flash_player:7.0 cpe:/a:adobe:flash_player:7.0.1 cpe:/a:adobe:flash_player:7.0.25 cpe:/a:adobe:flash_player:7.0.63 cpe:/a:adobe:flash_player:7.0.69.0 cpe:/a:adobe:flash_player:7.0.70.0 cpe:/a:adobe:flash_player:7.1 cpe:/a:adobe:flash_player:7.1.1 cpe:/a:adobe:flash_player:7.2 cpe:/a:adobe:flash_player:8.0 cpe:/a:adobe:flash_player:8.0.22.0 cpe:/a:adobe:flash_player:8.0.24.0 cpe:/a:adobe:flash_player:8.0.33.0 cpe:/a:adobe:flash_player:8.0.34.0 cpe:/a:adobe:flash_player:8.0.35.0 cpe:/a:adobe:flash_player:8.0.39.0 cpe:/a:adobe:flash_player:8.0.42.0 cpe:/a:adobe:flash_player:9.0 cpe:/a:adobe:flash_player:9.0.16 cpe:/a:adobe:flash_player:9.0.18d60 cpe:/a:adobe:flash_player:9.0.20 cpe:/a:adobe:flash_player:9.0.20.0 cpe:/a:adobe:flash_player:9.0.28.0 cpe:/a:adobe:flash_player:9.0.31 cpe:/a:adobe:flash_player:9.0.31.0 cpe:/a:adobe:flash_player:9.0.45.0 cpe:/a:adobe:flash_player:9.0.47.0 cpe:/a:adobe:flash_player:9.0.48.0 cpe:/a:adobe:flash_player:9.0.112.0 cpe:/a:adobe:flash_player:9.0.114.0 cpe:/a:adobe:flash_player:9.0.115.0 cpe:/a:adobe:flash_player:9.0.124.0 cpe:/a:adobe:flash_player:9.0.125.0 cpe:/a:adobe:flash_player:9.0.151.0 cpe:/a:adobe:flash_player:9.0.152.0 cpe:/a:adobe:flash_player:9.0.159.0 cpe:/a:adobe:flash_player:9.0.246.0 cpe:/a:adobe:flash_player:9.0.260.0 cpe:/a:adobe:flash_player:9.125.0 cpe:/a:adobe:flash_player:10.0.12.10 cpe:/a:adobe:flash_player:10.0.12.36 cpe:/a:adobe:flash_player:10.0.15.3 cpe:/a:adobe:flash_player:10.0.22.87 cpe:/a:adobe:flash_player:10.0.32.18 cpe:/a:adobe:flash_player:10.0.42.34

CVE-2010-0187

2010-02-15T13:30:00.580-05:00

2018-10-30T12:26:24.687-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2010-06-15-1 SUSE SUSE-SR:2010:006 MISC http://sebug.net/exploit/18967/ GENTOO GLSA-201101-09 SECTRACK 1023585 CONFIRM http://support.apple.com/kb/HT4188 CONFIRM http://www.adobe.com/support/security/bulletins/apsb10-06.html EXPLOIT-DB 11182 BID 38200 VUPEN ADV-2010-1481 VUPEN ADV-2011-0192 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=564287 REDHAT RHSA-2010:0102 Adobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5.3.9130 allow remote attackers to cause a denial of service (application crash) via a modified SWF file.

cpe:/a:adobe:acrobat_reader:8.0 cpe:/a:adobe:acrobat_reader:8.1 cpe:/a:adobe:acrobat_reader:8.1.1 cpe:/a:adobe:acrobat_reader:8.1.2 cpe:/a:adobe:acrobat_reader:8.1.3 cpe:/a:adobe:acrobat_reader:8.1.4 cpe:/a:adobe:acrobat_reader:8.1.5 cpe:/a:adobe:acrobat_reader:8.1.6 cpe:/a:adobe:acrobat_reader:8.1.7 cpe:/a:adobe:acrobat_reader:9.0 cpe:/a:adobe:acrobat_reader:9.1 cpe:/a:adobe:acrobat_reader:9.1.1 cpe:/a:adobe:acrobat_reader:9.1.2 cpe:/a:adobe:acrobat_reader:9.1.3 cpe:/a:adobe:acrobat_reader:9.2 cpe:/a:adobe:acrobat_reader:9.3

CVE-2010-0188

2010-02-22T08:00:02.127-05:00

2017-09-18T21:30:16.923-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SR:2010:006 SECTRACK 1023601 CONFIRM http://www.adobe.com/support/security/bulletins/apsb10-07.html REDHAT RHSA-2010:0114 BID 38195 VUPEN ADV-2010-0399 XF adobe-unspec-priv-escalation(56297) Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.

cpe:/a:adobe:download_manager:1.6.2.60 cpe:/a:nos_microsystems:getplus_download_manager:1.5.2.35

CVE-2010-0189

2010-02-23T15:30:00.703-05:00

2017-09-18T21:30:16.987-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov MISC http://aviv.raffon.net/2010/02/18/SkeletonsInAdobesSecurityCloset.aspx MISC http://blogs.adobe.com/psirt/2010/02/adobe_download_manager_issue.html MISC http://blogs.zdnet.com/security/?p=5505 IDEFENSE 20100223 Multiple Vendor NOS Microsystems getPlus Downloader Input Validation Vulnerability SECTRACK 1023651 CONFIRM http://www.adobe.com/support/security/bulletins/apsb10-08.html MISC http://www.akitasecurity.nl/advisory.php?id=AK20090401 BID 38313 VUPEN ADV-2010-0459 XF adobe-dlmanager-unspecified-file-download(56370) A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1.5.2.35, as used in Adobe Download Manager, improperly validates requests involving web sites that are not in subdomains, which allows remote attackers to force the download and installation of arbitrary programs via a crafted name for a download site.

CVE-2010-0190

2010-04-14T12:00:00.663-04:00

2018-10-30T12:25:16.967-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.adobe.com/support/security/bulletins/apsb10-09.html BID 39329 CERT TA10-103C VUPEN ADV-2010-0873 Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVE-2010-0191

2010-04-14T12:00:00.697-04:00

2018-10-30T12:25:16.967-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://www.adobe.com/support/security/bulletins/apsb10-09.html BID 39329 CERT TA10-103C VUPEN ADV-2010-0873 Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified vectors, related to a "prefix protocol handler vulnerability."

CVE-2010-0192

2010-04-14T12:00:00.727-04:00

2018-10-30T12:25:16.967-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://www.adobe.com/support/security/bulletins/apsb10-09.html BID 39329 CERT TA10-103C VUPEN ADV-2010-0873 Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2010-0193 and CVE-2010-0196.

CVE-2010-0193

2010-04-14T12:00:00.757-04:00

2018-10-30T12:25:16.967-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://www.adobe.com/support/security/bulletins/apsb10-09.html BID 39329 CERT TA10-103C VUPEN ADV-2010-0873 XF adobe-acrobat-unspec-code-exec(57701) Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2010-0192 and CVE-2010-0196.

CVE-2010-0194

2010-04-14T12:00:00.790-04:00

2018-10-30T12:25:16.967-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://www.adobe.com/support/security/bulletins/apsb10-09.html BID 39329 CERT TA10-103C VUPEN ADV-2010-0873 Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to cause a denial of service (memory corruption) or execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0197, CVE-2010-0201, and CVE-2010-0204.

CVE-2010-0195

2010-04-14T12:00:00.820-04:00

2018-10-30T12:25:16.967-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://www.adobe.com/support/security/bulletins/apsb10-09.html BID 39329 CERT TA10-103C VUPEN ADV-2010-0873 Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not properly handle fonts, which allows attackers to execute arbitrary code via unspecified vectors.

CVE-2010-0196

2010-04-14T12:00:00.850-04:00

2018-10-30T12:25:16.967-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CVE-2010-0197

2010-04-14T12:00:00.897-04:00

2018-10-30T12:25:16.967-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CVE-2010-0198

2010-04-14T12:00:00.930-04:00

2018-10-30T12:25:16.967-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://www.adobe.com/support/security/bulletins/apsb10-09.html BID 39329 CERT TA10-103C VUPEN ADV-2010-0873 Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0199, CVE-2010-0202, and CVE-2010-0203.

CVE-2010-0199

2010-04-14T12:00:00.960-04:00

2018-10-30T12:25:16.967-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CVE-2010-0200

2010-04-14T12:00:00.993-04:00

2016-12-15T21:59:02.207-05:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-1241. Reason: This candidate is a duplicate of CVE-2010-1241. Notes: All CVE users should reference CVE-2010-1241 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

CVE-2010-0201

2010-04-14T12:00:01.257-04:00

2018-10-30T12:25:16.967-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CVE-2010-0202

2010-04-14T12:00:01.273-04:00

2018-10-30T12:25:16.967-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CVE-2010-0203

2010-04-14T12:00:01.337-04:00

2018-10-30T12:25:16.967-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://www.adobe.com/support/security/bulletins/apsb10-09.html BID 39329 CERT TA10-103C VUPEN ADV-2010-0873 Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0198, CVE-2010-0199, and CVE-2010-0202.

CVE-2010-0204

2010-04-14T12:00:01.367-04:00

2018-10-30T12:25:16.967-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://www.adobe.com/support/security/bulletins/apsb10-09.html BID 39329 BID 39522 CERT TA10-103C VUPEN ADV-2010-0873 XF acrobat-unspec-code-execution(57711) Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to cause a denial of service (memory corruption) or execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0194, CVE-2010-0197, and CVE-2010-0201.

cpe:/a:libpng:libpng:1.0.0 cpe:/a:libpng:libpng:1.0.1 cpe:/a:libpng:libpng:1.0.2 cpe:/a:libpng:libpng:1.0.3 cpe:/a:libpng:libpng:1.0.5 cpe:/a:libpng:libpng:1.0.6 cpe:/a:libpng:libpng:1.0.6:a cpe:/a:libpng:libpng:1.0.6:d cpe:/a:libpng:libpng:1.0.6:e cpe:/a:libpng:libpng:1.0.6:f cpe:/a:libpng:libpng:1.0.6:g cpe:/a:libpng:libpng:1.0.6:h cpe:/a:libpng:libpng:1.0.6:i cpe:/a:libpng:libpng:1.0.6:j cpe:/a:libpng:libpng:1.0.7 cpe:/a:libpng:libpng:1.0.7:beta11 cpe:/a:libpng:libpng:1.0.7:beta12 cpe:/a:libpng:libpng:1.0.7:beta13 cpe:/a:libpng:libpng:1.0.7:beta14 cpe:/a:libpng:libpng:1.0.7:beta15 cpe:/a:libpng:libpng:1.0.7:beta16 cpe:/a:libpng:libpng:1.0.7:beta17 cpe:/a:libpng:libpng:1.0.7:beta18 cpe:/a:libpng:libpng:1.0.7:rc1 cpe:/a:libpng:libpng:1.0.7:rc2 cpe:/a:libpng:libpng:1.0.8 cpe:/a:libpng:libpng:1.0.8:beta1 cpe:/a:libpng:libpng:1.0.8:beta2 cpe:/a:libpng:libpng:1.0.8:beta3 cpe:/a:libpng:libpng:1.0.8:beta4 cpe:/a:libpng:libpng:1.0.8:rc1 cpe:/a:libpng:libpng:1.0.9 cpe:/a:libpng:libpng:1.0.9:beta1 cpe:/a:libpng:libpng:1.0.9:beta10 cpe:/a:libpng:libpng:1.0.9:beta2 cpe:/a:libpng:libpng:1.0.9:beta3 cpe:/a:libpng:libpng:1.0.9:beta4 cpe:/a:libpng:libpng:1.0.9:beta5 cpe:/a:libpng:libpng:1.0.9:beta6 cpe:/a:libpng:libpng:1.0.9:beta7 cpe:/a:libpng:libpng:1.0.9:beta8 cpe:/a:libpng:libpng:1.0.9:beta9 cpe:/a:libpng:libpng:1.0.9:rc1 cpe:/a:libpng:libpng:1.0.9:rc2 cpe:/a:libpng:libpng:1.0.10 cpe:/a:libpng:libpng:1.0.10:beta1 cpe:/a:libpng:libpng:1.0.10:rc1 cpe:/a:libpng:libpng:1.0.11 cpe:/a:libpng:libpng:1.0.11:beta1 cpe:/a:libpng:libpng:1.0.11:beta2 cpe:/a:libpng:libpng:1.0.11:beta3 cpe:/a:libpng:libpng:1.0.11:rc1 cpe:/a:libpng:libpng:1.0.12 cpe:/a:libpng:libpng:1.0.12:beta1 cpe:/a:libpng:libpng:1.0.12:rc1 cpe:/a:libpng:libpng:1.0.13 cpe:/a:libpng:libpng:1.0.14 cpe:/a:libpng:libpng:1.0.15 cpe:/a:libpng:libpng:1.0.15:rc1 cpe:/a:libpng:libpng:1.0.15:rc2 cpe:/a:libpng:libpng:1.0.15:rc3 cpe:/a:libpng:libpng:1.0.16 cpe:/a:libpng:libpng:1.0.17 cpe:/a:libpng:libpng:1.0.17:rc1 cpe:/a:libpng:libpng:1.0.18 cpe:/a:libpng:libpng:1.0.19 cpe:/a:libpng:libpng:1.0.19:rc1 cpe:/a:libpng:libpng:1.0.19:rc2 cpe:/a:libpng:libpng:1.0.19:rc3 cpe:/a:libpng:libpng:1.0.19:rc5 cpe:/a:libpng:libpng:1.0.20 cpe:/a:libpng:libpng:1.0.21 cpe:/a:libpng:libpng:1.0.21:rc1 cpe:/a:libpng:libpng:1.0.21:rc2 cpe:/a:libpng:libpng:1.0.22 cpe:/a:libpng:libpng:1.0.22:rc1 cpe:/a:libpng:libpng:1.0.23 cpe:/a:libpng:libpng:1.0.23:rc1 cpe:/a:libpng:libpng:1.0.23:rc2 cpe:/a:libpng:libpng:1.0.23:rc3 cpe:/a:libpng:libpng:1.0.23:rc4 cpe:/a:libpng:libpng:1.0.23:rc5 cpe:/a:libpng:libpng:1.0.24 cpe:/a:libpng:libpng:1.0.24:rc1 cpe:/a:libpng:libpng:1.0.25 cpe:/a:libpng:libpng:1.0.25:rc1 cpe:/a:libpng:libpng:1.0.25:rc2 cpe:/a:libpng:libpng:1.0.26 cpe:/a:libpng:libpng:1.0.27 cpe:/a:libpng:libpng:1.0.27:rc1 cpe:/a:libpng:libpng:1.0.27:rc2 cpe:/a:libpng:libpng:1.0.27:rc3 cpe:/a:libpng:libpng:1.0.27:rc4 cpe:/a:libpng:libpng:1.0.27:rc5 cpe:/a:libpng:libpng:1.0.27:rc6 cpe:/a:libpng:libpng:1.0.28 cpe:/a:libpng:libpng:1.0.28:rc2 cpe:/a:libpng:libpng:1.0.28:rc3 cpe:/a:libpng:libpng:1.0.28:rc4 cpe:/a:libpng:libpng:1.0.28:rc5 cpe:/a:libpng:libpng:1.0.28:rc6 cpe:/a:libpng:libpng:1.0.29 cpe:/a:libpng:libpng:1.0.29:beta1 cpe:/a:libpng:libpng:1.0.29:rc1 cpe:/a:libpng:libpng:1.0.29:rc2 cpe:/a:libpng:libpng:1.0.29:rc3 cpe:/a:libpng:libpng:1.0.30 cpe:/a:libpng:libpng:1.0.30:rc1 cpe:/a:libpng:libpng:1.0.31 cpe:/a:libpng:libpng:1.0.31:rc01 cpe:/a:libpng:libpng:1.0.32 cpe:/a:libpng:libpng:1.0.33 cpe:/a:libpng:libpng:1.0.34 cpe:/a:libpng:libpng:1.0.35 cpe:/a:libpng:libpng:1.0.37 cpe:/a:libpng:libpng:1.0.38 cpe:/a:libpng:libpng:1.0.39 cpe:/a:libpng:libpng:1.0.40 cpe:/a:libpng:libpng:1.0.41 cpe:/a:libpng:libpng:1.0.42 cpe:/a:libpng:libpng:1.0.43 cpe:/a:libpng:libpng:1.0.44 cpe:/a:libpng:libpng:1.0.45 cpe:/a:libpng:libpng:1.0.46 cpe:/a:libpng:libpng:1.0.47 cpe:/a:libpng:libpng:1.0.48 cpe:/a:libpng:libpng:1.0.50 cpe:/a:libpng:libpng:1.0.51 cpe:/a:libpng:libpng:1.0.52 cpe:/a:libpng:libpng:1.2.0 cpe:/a:libpng:libpng:1.2.0:beta1 cpe:/a:libpng:libpng:1.2.0:beta2 cpe:/a:libpng:libpng:1.2.0:beta3 cpe:/a:libpng:libpng:1.2.0:beta4 cpe:/a:libpng:libpng:1.2.0:beta5 cpe:/a:libpng:libpng:1.2.0:rc1 cpe:/a:libpng:libpng:1.2.1 cpe:/a:libpng:libpng:1.2.1:beta1 cpe:/a:libpng:libpng:1.2.1:beta2 cpe:/a:libpng:libpng:1.2.1:beta3 cpe:/a:libpng:libpng:1.2.1:beta4 cpe:/a:libpng:libpng:1.2.1:rc1 cpe:/a:libpng:libpng:1.2.1:rc2 cpe:/a:libpng:libpng:1.2.2 cpe:/a:libpng:libpng:1.2.2:beta1 cpe:/a:libpng:libpng:1.2.2:beta2 cpe:/a:libpng:libpng:1.2.2:beta3 cpe:/a:libpng:libpng:1.2.2:beta4 cpe:/a:libpng:libpng:1.2.2:beta5 cpe:/a:libpng:libpng:1.2.2:beta6 cpe:/a:libpng:libpng:1.2.2:rc1 cpe:/a:libpng:libpng:1.2.3 cpe:/a:libpng:libpng:1.2.3:rc1 cpe:/a:libpng:libpng:1.2.3:rc2 cpe:/a:libpng:libpng:1.2.3:rc3 cpe:/a:libpng:libpng:1.2.3:rc4 cpe:/a:libpng:libpng:1.2.3:rc5 cpe:/a:libpng:libpng:1.2.3:rc6 cpe:/a:libpng:libpng:1.2.4 cpe:/a:libpng:libpng:1.2.4:beta1 cpe:/a:libpng:libpng:1.2.4:beta2 cpe:/a:libpng:libpng:1.2.4:beta3 cpe:/a:libpng:libpng:1.2.4:rc1 cpe:/a:libpng:libpng:1.2.5 cpe:/a:libpng:libpng:1.2.5:beta1 cpe:/a:libpng:libpng:1.2.5:beta2 cpe:/a:libpng:libpng:1.2.5:beta3 cpe:/a:libpng:libpng:1.2.5:rc1 cpe:/a:libpng:libpng:1.2.5:rc2 cpe:/a:libpng:libpng:1.2.5:rc3 cpe:/a:libpng:libpng:1.2.6 cpe:/a:libpng:libpng:1.2.6:beta1 cpe:/a:libpng:libpng:1.2.6:beta2 cpe:/a:libpng:libpng:1.2.6:beta3 cpe:/a:libpng:libpng:1.2.6:beta4 cpe:/a:libpng:libpng:1.2.6:rc1 cpe:/a:libpng:libpng:1.2.6:rc2 cpe:/a:libpng:libpng:1.2.6:rc3 cpe:/a:libpng:libpng:1.2.6:rc4 cpe:/a:libpng:libpng:1.2.6:rc5 cpe:/a:libpng:libpng:1.2.7 cpe:/a:libpng:libpng:1.2.7:beta1 cpe:/a:libpng:libpng:1.2.7:beta2 cpe:/a:libpng:libpng:1.2.8 cpe:/a:libpng:libpng:1.2.8:beta1 cpe:/a:libpng:libpng:1.2.8:beta2 cpe:/a:libpng:libpng:1.2.8:beta3 cpe:/a:libpng:libpng:1.2.8:beta4 cpe:/a:libpng:libpng:1.2.8:beta5 cpe:/a:libpng:libpng:1.2.8:rc1 cpe:/a:libpng:libpng:1.2.8:rc2 cpe:/a:libpng:libpng:1.2.8:rc3 cpe:/a:libpng:libpng:1.2.8:rc4 cpe:/a:libpng:libpng:1.2.8:rc5 cpe:/a:libpng:libpng:1.2.9 cpe:/a:libpng:libpng:1.2.9:beta1 cpe:/a:libpng:libpng:1.2.9:beta10 cpe:/a:libpng:libpng:1.2.9:beta2 cpe:/a:libpng:libpng:1.2.9:beta3 cpe:/a:libpng:libpng:1.2.9:beta4 cpe:/a:libpng:libpng:1.2.9:beta5 cpe:/a:libpng:libpng:1.2.9:beta6 cpe:/a:libpng:libpng:1.2.9:beta7 cpe:/a:libpng:libpng:1.2.9:beta8 cpe:/a:libpng:libpng:1.2.9:beta9 cpe:/a:libpng:libpng:1.2.9:rc1 cpe:/a:libpng:libpng:1.2.10 cpe:/a:libpng:libpng:1.2.10:beta1 cpe:/a:libpng:libpng:1.2.10:beta2 cpe:/a:libpng:libpng:1.2.10:beta3 cpe:/a:libpng:libpng:1.2.10:beta4 cpe:/a:libpng:libpng:1.2.10:beta5 cpe:/a:libpng:libpng:1.2.10:beta6 cpe:/a:libpng:libpng:1.2.10:beta7 cpe:/a:libpng:libpng:1.2.10:rc1 cpe:/a:libpng:libpng:1.2.10:rc2 cpe:/a:libpng:libpng:1.2.10:rc3 cpe:/a:libpng:libpng:1.2.11 cpe:/a:libpng:libpng:1.2.11:beta1 cpe:/a:libpng:libpng:1.2.11:beta2 cpe:/a:libpng:libpng:1.2.11:beta3 cpe:/a:libpng:libpng:1.2.11:beta4 cpe:/a:libpng:libpng:1.2.11:rc1 cpe:/a:libpng:libpng:1.2.11:rc2 cpe:/a:libpng:libpng:1.2.11:rc3 cpe:/a:libpng:libpng:1.2.11:rc5 cpe:/a:libpng:libpng:1.2.13 cpe:/a:libpng:libpng:1.2.13:beta1 cpe:/a:libpng:libpng:1.2.13:rc1 cpe:/a:libpng:libpng:1.2.13:rc2 cpe:/a:libpng:libpng:1.2.14 cpe:/a:libpng:libpng:1.2.14:beta1 cpe:/a:libpng:libpng:1.2.14:beta2 cpe:/a:libpng:libpng:1.2.14:rc1 cpe:/a:libpng:libpng:1.2.15 cpe:/a:libpng:libpng:1.2.15:beta1 cpe:/a:libpng:libpng:1.2.15:beta2 cpe:/a:libpng:libpng:1.2.15:beta3 cpe:/a:libpng:libpng:1.2.15:beta4 cpe:/a:libpng:libpng:1.2.15:beta5 cpe:/a:libpng:libpng:1.2.15:beta6 cpe:/a:libpng:libpng:1.2.15:rc1 cpe:/a:libpng:libpng:1.2.15:rc2 cpe:/a:libpng:libpng:1.2.15:rc3 cpe:/a:libpng:libpng:1.2.15:rc4 cpe:/a:libpng:libpng:1.2.15:rc5 cpe:/a:libpng:libpng:1.2.16 cpe:/a:libpng:libpng:1.2.16:beta1 cpe:/a:libpng:libpng:1.2.16:beta2 cpe:/a:libpng:libpng:1.2.16:rc1 cpe:/a:libpng:libpng:1.2.17 cpe:/a:libpng:libpng:1.2.17:beta1 cpe:/a:libpng:libpng:1.2.17:beta2 cpe:/a:libpng:libpng:1.2.17:rc1 cpe:/a:libpng:libpng:1.2.17:rc2 cpe:/a:libpng:libpng:1.2.17:rc3 cpe:/a:libpng:libpng:1.2.17:rc4 cpe:/a:libpng:libpng:1.2.18 cpe:/a:libpng:libpng:1.2.19 cpe:/a:libpng:libpng:1.2.19:beta1 cpe:/a:libpng:libpng:1.2.19:beta10 cpe:/a:libpng:libpng:1.2.19:beta11 cpe:/a:libpng:libpng:1.2.19:beta12 cpe:/a:libpng:libpng:1.2.19:beta13 cpe:/a:libpng:libpng:1.2.19:beta14 cpe:/a:libpng:libpng:1.2.19:beta15 cpe:/a:libpng:libpng:1.2.19:beta16 cpe:/a:libpng:libpng:1.2.19:beta17 cpe:/a:libpng:libpng:1.2.19:beta18 cpe:/a:libpng:libpng:1.2.19:beta19 cpe:/a:libpng:libpng:1.2.19:beta2 cpe:/a:libpng:libpng:1.2.19:beta20 cpe:/a:libpng:libpng:1.2.19:beta21 cpe:/a:libpng:libpng:1.2.19:beta22 cpe:/a:libpng:libpng:1.2.19:beta23 cpe:/a:libpng:libpng:1.2.19:beta24 cpe:/a:libpng:libpng:1.2.19:beta25 cpe:/a:libpng:libpng:1.2.19:beta26 cpe:/a:libpng:libpng:1.2.19:beta27 cpe:/a:libpng:libpng:1.2.19:beta28 cpe:/a:libpng:libpng:1.2.19:beta29 cpe:/a:libpng:libpng:1.2.19:beta3 cpe:/a:libpng:libpng:1.2.19:beta30 cpe:/a:libpng:libpng:1.2.19:beta31 cpe:/a:libpng:libpng:1.2.19:beta32 cpe:/a:libpng:libpng:1.2.19:beta33 cpe:/a:libpng:libpng:1.2.19:beta4 cpe:/a:libpng:libpng:1.2.19:beta5 cpe:/a:libpng:libpng:1.2.19:beta6 cpe:/a:libpng:libpng:1.2.19:beta7 cpe:/a:libpng:libpng:1.2.19:beta8 cpe:/a:libpng:libpng:1.2.19:beta9 cpe:/a:libpng:libpng:1.2.19:rc1 cpe:/a:libpng:libpng:1.2.19:rc2 cpe:/a:libpng:libpng:1.2.19:rc3 cpe:/a:libpng:libpng:1.2.19:rc4 cpe:/a:libpng:libpng:1.2.19:rc5 cpe:/a:libpng:libpng:1.2.19:rc6 cpe:/a:libpng:libpng:1.2.20 cpe:/a:libpng:libpng:1.2.20:beta01 cpe:/a:libpng:libpng:1.2.20:beta02 cpe:/a:libpng:libpng:1.2.20:beta03 cpe:/a:libpng:libpng:1.2.20:beta04 cpe:/a:libpng:libpng:1.2.20:rc1 cpe:/a:libpng:libpng:1.2.20:rc2 cpe:/a:libpng:libpng:1.2.20:rc3 cpe:/a:libpng:libpng:1.2.20:rc4 cpe:/a:libpng:libpng:1.2.20:rc5 cpe:/a:libpng:libpng:1.2.20:rc6 cpe:/a:libpng:libpng:1.2.21 cpe:/a:libpng:libpng:1.2.21:beta1 cpe:/a:libpng:libpng:1.2.21:beta2 cpe:/a:libpng:libpng:1.2.21:rc1 cpe:/a:libpng:libpng:1.2.21:rc2 cpe:/a:libpng:libpng:1.2.21:rc3 cpe:/a:libpng:libpng:1.2.22 cpe:/a:libpng:libpng:1.2.22:beta1 cpe:/a:libpng:libpng:1.2.22:beta2 cpe:/a:libpng:libpng:1.2.22:beta2-1.2.21 cpe:/a:libpng:libpng:1.2.22:beta3 cpe:/a:libpng:libpng:1.2.22:beta3-1.2.21 cpe:/a:libpng:libpng:1.2.22:beta4 cpe:/a:libpng:libpng:1.2.22:beta4-1.2.21 cpe:/a:libpng:libpng:1.2.22:rc1 cpe:/a:libpng:libpng:1.2.22:rc1-1.2.21 cpe:/a:libpng:libpng:1.2.23 cpe:/a:libpng:libpng:1.2.23:beta01 cpe:/a:libpng:libpng:1.2.23:beta01-1.2.22 cpe:/a:libpng:libpng:1.2.23:beta02 cpe:/a:libpng:libpng:1.2.23:beta02-1.2.22 cpe:/a:libpng:libpng:1.2.23:beta03 cpe:/a:libpng:libpng:1.2.23:beta03-1.2.22 cpe:/a:libpng:libpng:1.2.23:beta04 cpe:/a:libpng:libpng:1.2.23:beta04-1.2.22 cpe:/a:libpng:libpng:1.2.23:beta05 cpe:/a:libpng:libpng:1.2.23:beta05-1.2.22 cpe:/a:libpng:libpng:1.2.23:rc01 cpe:/a:libpng:libpng:1.2.23:rc01-1.2.22 cpe:/a:libpng:libpng:1.2.24 cpe:/a:libpng:libpng:1.2.24:beta01 cpe:/a:libpng:libpng:1.2.24:beta01-1.2.23 cpe:/a:libpng:libpng:1.2.24:beta02 cpe:/a:libpng:libpng:1.2.24:beta02-1.2.23 cpe:/a:libpng:libpng:1.2.24:beta03 cpe:/a:libpng:libpng:1.2.24:beta03-1.2.23 cpe:/a:libpng:libpng:1.2.24:rc01 cpe:/a:libpng:libpng:1.2.24:rc01-1.2.23 cpe:/a:libpng:libpng:1.2.25 cpe:/a:libpng:libpng:1.2.25:beta01 cpe:/a:libpng:libpng:1.2.25:beta02 cpe:/a:libpng:libpng:1.2.25:beta03 cpe:/a:libpng:libpng:1.2.25:beta04 cpe:/a:libpng:libpng:1.2.25:beta05 cpe:/a:libpng:libpng:1.2.25:beta06 cpe:/a:libpng:libpng:1.2.25:rc01 cpe:/a:libpng:libpng:1.2.25:rc02 cpe:/a:libpng:libpng:1.2.26 cpe:/a:libpng:libpng:1.2.26:beta01 cpe:/a:libpng:libpng:1.2.26:beta02 cpe:/a:libpng:libpng:1.2.26:beta03 cpe:/a:libpng:libpng:1.2.26:beta04 cpe:/a:libpng:libpng:1.2.26:beta05 cpe:/a:libpng:libpng:1.2.26:beta06 cpe:/a:libpng:libpng:1.2.26:rc01 cpe:/a:libpng:libpng:1.2.27 cpe:/a:libpng:libpng:1.2.28 cpe:/a:libpng:libpng:1.2.29 cpe:/a:libpng:libpng:1.2.30 cpe:/a:libpng:libpng:1.2.31 cpe:/a:libpng:libpng:1.2.32 cpe:/a:libpng:libpng:1.2.33 cpe:/a:libpng:libpng:1.2.34 cpe:/a:libpng:libpng:1.2.35 cpe:/a:libpng:libpng:1.2.36 cpe:/a:libpng:libpng:1.2.37 cpe:/a:libpng:libpng:1.2.37:beta1 cpe:/a:libpng:libpng:1.2.37:beta2 cpe:/a:libpng:libpng:1.2.37:beta3 cpe:/a:libpng:libpng:1.2.37:rc1 cpe:/a:libpng:libpng:1.2.38 cpe:/a:libpng:libpng:1.2.38:beta1 cpe:/a:libpng:libpng:1.2.38:rc1 cpe:/a:libpng:libpng:1.2.38:rc2 cpe:/a:libpng:libpng:1.2.38:rc3 cpe:/a:libpng:libpng:1.2.39 cpe:/a:libpng:libpng:1.2.39:beta1 cpe:/a:libpng:libpng:1.2.39:beta2 cpe:/a:libpng:libpng:1.2.39:beta3 cpe:/a:libpng:libpng:1.2.39:beta4 cpe:/a:libpng:libpng:1.2.39:beta5 cpe:/a:libpng:libpng:1.2.39:rc1 cpe:/a:libpng:libpng:1.2.40 cpe:/a:libpng:libpng:1.2.40:beta1 cpe:/a:libpng:libpng:1.2.40:rc1 cpe:/a:libpng:libpng:1.2.41 cpe:/a:libpng:libpng:1.2.41:beta1 cpe:/a:libpng:libpng:1.2.41:beta11 cpe:/a:libpng:libpng:1.2.41:beta12 cpe:/a:libpng:libpng:1.2.41:beta13 cpe:/a:libpng:libpng:1.2.41:beta14 cpe:/a:libpng:libpng:1.2.41:beta16 cpe:/a:libpng:libpng:1.2.41:beta17 cpe:/a:libpng:libpng:1.2.41:beta18 cpe:/a:libpng:libpng:1.2.41:beta2 cpe:/a:libpng:libpng:1.2.41:beta3 cpe:/a:libpng:libpng:1.2.41:beta4 cpe:/a:libpng:libpng:1.2.41:beta5 cpe:/a:libpng:libpng:1.2.41:beta6 cpe:/a:libpng:libpng:1.2.41:beta7 cpe:/a:libpng:libpng:1.2.41:beta8 cpe:/a:libpng:libpng:1.2.41:beta9 cpe:/a:libpng:libpng:1.2.41:rc1 cpe:/a:libpng:libpng:1.2.41:rc2 cpe:/a:libpng:libpng:1.2.41:rc3 cpe:/a:libpng:libpng:1.2.42 cpe:/a:libpng:libpng:1.2.42:beta1 cpe:/a:libpng:libpng:1.2.42:beta2 cpe:/a:libpng:libpng:1.2.42:rc1 cpe:/a:libpng:libpng:1.2.42:rc2 cpe:/a:libpng:libpng:1.2.42:rc3 cpe:/a:libpng:libpng:1.2.42:rc4 cpe:/a:libpng:libpng:1.2.42:rc5 cpe:/a:libpng:libpng:1.4 cpe:/a:libpng:libpng:1.4:beta1 cpe:/a:libpng:libpng:1.4:beta10 cpe:/a:libpng:libpng:1.4:beta11 cpe:/a:libpng:libpng:1.4:beta12 cpe:/a:libpng:libpng:1.4:beta13 cpe:/a:libpng:libpng:1.4:beta133 cpe:/a:libpng:libpng:1.4:beta14 cpe:/a:libpng:libpng:1.4:beta15 cpe:/a:libpng:libpng:1.4:beta16 cpe:/a:libpng:libpng:1.4:beta17 cpe:/a:libpng:libpng:1.4:beta18 cpe:/a:libpng:libpng:1.4:beta19 cpe:/a:libpng:libpng:1.4:beta2 cpe:/a:libpng:libpng:1.4:beta20 cpe:/a:libpng:libpng:1.4:beta22 cpe:/a:libpng:libpng:1.4:beta23 cpe:/a:libpng:libpng:1.4:beta24 cpe:/a:libpng:libpng:1.4:beta25 cpe:/a:libpng:libpng:1.4:beta26 cpe:/a:libpng:libpng:1.4:beta27 cpe:/a:libpng:libpng:1.4:beta28 cpe:/a:libpng:libpng:1.4:beta29 cpe:/a:libpng:libpng:1.4:beta3 cpe:/a:libpng:libpng:1.4:beta30 cpe:/a:libpng:libpng:1.4:beta31 cpe:/a:libpng:libpng:1.4:beta33 cpe:/a:libpng:libpng:1.4:beta4 cpe:/a:libpng:libpng:1.4:beta5 cpe:/a:libpng:libpng:1.4:beta6 cpe:/a:libpng:libpng:1.4:beta7 cpe:/a:libpng:libpng:1.4:beta8 cpe:/a:libpng:libpng:1.4:beta9 cpe:/a:libpng:libpng:1.4.0:beta36

CVE-2010-0205

2010-03-03T14:30:00.493-05:00

2017-08-16T21:31:55.727-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://libpng.sourceforge.net/ADVISORY-1.4.1.html CONFIRM http://libpng.sourceforge.net/decompression_bombs.html APPLE APPLE-SA-2010-11-10-1 FEDORA FEDORA-2010-2988 FEDORA FEDORA-2010-3375 FEDORA FEDORA-2010-3414 FEDORA FEDORA-2010-4683 SUSE SUSE-SR:2010:011 SUSE SUSE-SR:2010:012 SUSE SUSE-SR:2010:013 MLIST [security-announce] 20100923 VMSA-2010-0014 VMware Workstation, Player, and ACE address several security issues CONFIRM http://support.apple.com/kb/HT4435 UBUNTU USN-913-1 DEBIAN DSA-2032 CERT-VN VU#576029 MANDRIVA MDVSA-2010:063 MANDRIVA MDVSA-2010:064 BID 38478 SECTRACK 1023674 CONFIRM http://www.vmware.com/security/advisories/VMSA-2010-0014.html VUPEN ADV-2010-0517 VUPEN ADV-2010-0605 VUPEN ADV-2010-0626 VUPEN ADV-2010-0637 VUPEN ADV-2010-0667 VUPEN ADV-2010-0682 VUPEN ADV-2010-0686 VUPEN ADV-2010-0847 VUPEN ADV-2010-1107 VUPEN ADV-2010-2491 XF libpng-pngdecompresschunk-dos(56661) The png_decompress_chunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly handle compressed ancillary-chunk data that has a disproportionately large uncompressed representation, which allows remote attackers to cause a denial of service (memory and CPU consumption, and application hang) via a crafted PNG file, as demonstrated by use of the deflate compression method on data composed of many occurrences of the same character, related to a "decompression bomb" attack.

cpe:/a:adobe:adobe_air cpe:/a:adobe:adobe_air:1.0 cpe:/a:adobe:adobe_air:1.0.1 cpe:/a:adobe:adobe_air:1.5 cpe:/a:adobe:adobe_air:1.5.1 cpe:/a:adobe:adobe_air:1.5.3 cpe:/a:adobe:adobe_air:1.5.3.9120 cpe:/a:adobe:flash_player cpe:/a:adobe:flash_player:7.0 cpe:/a:adobe:flash_player:7.0.1 cpe:/a:adobe:flash_player:7.0.25 cpe:/a:adobe:flash_player:7.0.63 cpe:/a:adobe:flash_player:7.1.1 cpe:/a:adobe:flash_player:7.2 cpe:/a:adobe:flash_player:8.0 cpe:/a:adobe:flash_player:8.0.22.0 cpe:/a:adobe:flash_player:8.0.33.0 cpe:/a:adobe:flash_player:8.0.34.0 cpe:/a:adobe:flash_player:8.0.35.0 cpe:/a:adobe:flash_player:8.0.39.0 cpe:/a:adobe:flash_player:8.0.42.0 cpe:/a:adobe:flash_player:9.0 cpe:/a:adobe:flash_player:9.0.16 cpe:/a:adobe:flash_player:9.0.18d60 cpe:/a:adobe:flash_player:9.0.20 cpe:/a:adobe:flash_player:9.0.20.0 cpe:/a:adobe:flash_player:9.0.28 cpe:/a:adobe:flash_player:9.0.28.0 cpe:/a:adobe:flash_player:9.0.31 cpe:/a:adobe:flash_player:9.0.31.0 cpe:/a:adobe:flash_player:9.0.45.0 cpe:/a:adobe:flash_player:9.0.47.0 cpe:/a:adobe:flash_player:9.0.48.0 cpe:/a:adobe:flash_player:9.0.112.0 cpe:/a:adobe:flash_player:9.0.114.0 cpe:/a:adobe:flash_player:9.0.115.0 cpe:/a:adobe:flash_player:9.0.124.0 cpe:/a:adobe:flash_player:9.0.125.0 cpe:/a:adobe:flash_player:9.0.151.0 cpe:/a:adobe:flash_player:9.0.152.0 cpe:/a:adobe:flash_player:9.0.159.0 cpe:/a:adobe:flash_player:9.0.246.0 cpe:/a:adobe:flash_player:9.0.260.0 cpe:/a:adobe:flash_player:9.125.0 cpe:/a:adobe:flash_player:10.0.0.584 cpe:/a:adobe:flash_player:10.0.12.10 cpe:/a:adobe:flash_player:10.0.12.36 cpe:/a:adobe:flash_player:10.0.15.3 cpe:/a:adobe:flash_player:10.0.22.87 cpe:/a:adobe:flash_player:10.0.32.18 cpe:/a:adobe:flash_player:10.0.42.34 cpe:/a:adobe:flash_player:10.0.45.2 cpe:/a:adobe:flash_player:10.1.52.14.1 cpe:/a:adobe:flash_player:10.1.52.15 cpe:/a:adobe:flash_player:10.1.53.64 cpe:/a:adobe:flash_player_for_linux:9.0.31 cpe:/a:adobe:flash_player_for_linux:9.0.48.0 cpe:/a:adobe:flash_player_for_linux:9.0.115.0 cpe:/a:adobe:flash_player_for_linux:9.0.124.0 cpe:/a:adobe:flash_player_for_linux:9.0.151.0 cpe:/a:adobe:flash_player_for_linux:10.0.12.36 cpe:/a:adobe:flash_player_for_linux:10.0.15.3

CVE-2010-0209

2010-08-11T14:47:49.860-04:00

2018-10-30T12:26:24.687-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov APPLE APPLE-SA-2010-11-10-1 HP SSRT100300 GENTOO GLSA-201101-09 CONFIRM http://support.apple.com/kb/HT4435 CONFIRM http://www.adobe.com/support/security/bulletins/apsb10-16.html SECTRACK 1024621 VUPEN ADV-2011-0192 Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2213, CVE-2010-2214, and CVE-2010-2216.

cpe:/a:openldap:openldap:2.4.22

CVE-2010-0211

2010-07-28T08:48:51.620-04:00

2018-10-10T15:51:28.353-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 APPLE APPLE-SA-2010-11-10-1 SUSE SUSE-SR:2010:014 GENTOO GLSA-201406-36 CONFIRM http://support.apple.com/kb/HT4435 CONFIRM http://www.openldap.org/its/index.cgi/Software%20Bugs?id=6570 REDHAT RHSA-2010:0542 REDHAT RHSA-2010:0543 BUGTRAQ 20110105 VMSA-2011-0001 VMware ESX third party updates for Service Console packages glibc, sudo, and openldap BID 41770 SECTRACK 1024221 CONFIRM http://www.vmware.com/security/advisories/VMSA-2011-0001.html VUPEN ADV-2010-1849 VUPEN ADV-2010-1858 VUPEN ADV-2011-0025 The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a modrdn call with an RDN string containing invalid UTF-8 sequences, which triggers a free of an invalid, uninitialized pointer in the slap_mods_free function, as demonstrated using the Codenomicon LDAPv3 test suite.

cpe:/a:openldap:openldap:2.4.22

CVE-2010-0212

2010-07-28T08:48:51.683-04:00

2018-10-10T15:51:30.107-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 CONFIRM http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735 APPLE APPLE-SA-2010-11-10-1 SUSE SUSE-SR:2010:014 GENTOO GLSA-201406-36 CONFIRM http://support.apple.com/kb/HT4435 CONFIRM http://www.openldap.org/its/index.cgi/Software%20Bugs?id=6570 REDHAT RHSA-2010:0542 BUGTRAQ 20110105 VMSA-2011-0001 VMware ESX third party updates for Service Console packages glibc, sudo, and openldap BID 41770 SECTRACK 1024221 CONFIRM http://www.vmware.com/security/advisories/VMSA-2011-0001.html VUPEN ADV-2010-1849 VUPEN ADV-2010-1858 VUPEN ADV-2011-0025 OpenLDAP 2.4.22 allows remote attackers to cause a denial of service (crash) via a modrdn call with a zero-length RDN destination string, which is not properly handled by the smr_normalize function and triggers a NULL pointer dereference in the IA5StringNormalize function in schema_init.c, as demonstrated using the Codenomicon LDAPv3 test suite.

cpe:/a:isc:bind:9.7.1 cpe:/a:isc:bind:9.7.1:p1

CVE-2010-0213

2010-07-28T08:48:51.840-04:00

2016-04-04T11:50:49.963-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

2016-04-04T11:12:26.657-04:00

FEDORA FEDORA-2010-11344 SUSE SUSE-SR:2010:020 CONFIRM http://www.isc.org/software/bind/advisories/cve-2010-0213 CERT-VN VU#211905 BID 41730 SECTRACK 1024217 VUPEN ADV-2010-1884 BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation (DLV), allows remote attackers to cause a denial of service (infinite loop) via a query for an RRSIG record whose answer is not in the cache, which causes BIND to repeatedly send RRSIG queries to the authoritative servers.

cpe:/a:polyvision:roomwizard_firmware:3.2.3 cpe:/h:polyvision:roomwizard

CVE-2010-0214

2011-01-11T20:00:01.183-05:00

2017-08-16T21:31:55.820-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://packetstormsecurity.org/files/view/97291/roomwizard-disclose.txt FULLDISC 20110106 RoomWizard Default Password and Sync Connector Credential Leak [CVE-2010-0214] CERT-VN VU#870601 BID 45699 VUPEN ADV-2011-0059 XF roomwizard-password-security-bypass(64543) The administrative interface on the PolyVision RoomWizard with firmware 3.2.3 places the Sync Connector Active Directory (AD) credentials in a web form that is accessed over HTTP on port 80, which allows remote attackers to obtain sensitive information by reading the HTML source code corresponding to the /admin/sign/DeviceSynch URI.

cpe:/a:a51dev:activecollab:1.0.2 cpe:/a:a51dev:activecollab:1.0.3 cpe:/a:a51dev:activecollab:1.0.4 cpe:/a:a51dev:activecollab:1.0.5 cpe:/a:a51dev:activecollab:1.0.6 cpe:/a:a51dev:activecollab:1.1 cpe:/a:a51dev:activecollab:1.1.1 cpe:/a:a51dev:activecollab:1.1.2 cpe:/a:a51dev:activecollab:1.1.3 cpe:/a:a51dev:activecollab:1.1.4 cpe:/a:a51dev:activecollab:1.1.5 cpe:/a:a51dev:activecollab:1.1.6 cpe:/a:a51dev:activecollab:2.1 cpe:/a:a51dev:activecollab:2.1.1 cpe:/a:a51dev:activecollab:2.1.2 cpe:/a:a51dev:activecollab:2.1.3 cpe:/a:a51dev:activecollab:2.1.4 cpe:/a:a51dev:activecollab:2.2 cpe:/a:a51dev:activecollab:2.2.1 cpe:/a:a51dev:activecollab:2.2.2 cpe:/a:a51dev:activecollab:2.3 cpe:/a:a51dev:activecollab:2.3.1

CVE-2010-0215

2011-01-07T18:00:01.733-05:00

2011-01-11T00:00:00.000-05:00

6.0

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

2011-01-10T13:21:00.000-05:00

CONFIRM http://www.activecollab.com/docs/manuals/admin/release-notes/activecollab-2-3-2 CERT-VN VU#236703 ActiveCollab before 2.3.2 allows remote authenticated users to bypass intended access restrictions, and (1) delete an attachment or (2) subscribe to an object, via a crafted URL.

cpe:/a:inventivetec:mediacast:8

CVE-2010-0216

2011-05-10T15:55:01.920-04:00

2017-08-16T21:31:55.867-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SREASON 8245 MISC http://www.packetninjas.net/storage/advisories/MediaCast-PWDump-FINAL.txt BID 47572 XF mediacast-authenticateadsetup-info-disc(67082) authenticate_ad_setup_finished.cfm in MediaCAST 8 and earlier allows remote attackers to discover usernames and cleartext passwords by reading the error messages returned for requests that use the UserID parameter.

cpe:/a:zeacom:chat_server:5.0:sp4

CVE-2010-0217

2011-05-20T18:55:01.437-04:00

2018-10-10T15:51:31.667-04:00

5.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov SREASON 8255 MISC http://www.packetninjas.net/storage/advisories/Zeacom-CVE-2010-0217.txt BUGTRAQ 20110517 CVE-2010-0217 - Zeacom Chat Server JSESSIONID weak SessionID Vulnerability BID 47910 XF chat-server-jsessionid-session-hijacking(67540) Zeacom Chat Server before 5.1 uses too short a random string for the JSESSIONID value, which makes it easier for remote attackers to hijack sessions or cause a denial of service (Chat Server crash or Tomcat daemon crash) via a brute-force attack.

cpe:/a:isc:bind:9.7.2 cpe:/a:isc:bind:9.7.2:p1

CVE-2010-0218

2010-10-05T18:00:01.927-04:00

2016-04-04T11:30:49.567-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-10-06T10:16:00.000-04:00

CONFIRM http://ftp.isc.org/isc/bind9/9.7.2-P2/RELEASE-NOTES-BIND-9.7.2-P2.html CERT-VN VU#784855 MLIST [bind-announce] 20100928 Security Advisory Regarding Unexpected ACL Behavior in BIND 9.7.2 ISC BIND 9.7.2 through 9.7.2-P1 uses an incorrect ACL to restrict the ability of Recursion Desired (RD) queries to access the cache, which allows remote attackers to obtain potentially sensitive information via a DNS query.

cpe:/a:apache:axis2:1.3 cpe:/a:apache:axis2:1.4 cpe:/a:apache:axis2:1.4.1 cpe:/a:apache:axis2:1.5 cpe:/a:apache:axis2:1.5.1 cpe:/a:apache:axis2:1.5.2 cpe:/a:apache:axis2:1.6 cpe:/a:sap:businessobjects:3.2::enterprise_xi

CVE-2010-0219

2010-10-18T13:00:03.457-04:00

2018-10-10T15:51:32.167-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov MISC http://retrogod.altervista.org/9sg_ca_d2d.html MISC http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf EXPLOIT-DB 15869 CERT-VN VU#989719 MISC http://www.rapid7.com/security-center/advisories/R7-0037.jsp BUGTRAQ 20101014 R7-0037: SAP BusinessObjects Axis2 Default Admin Password SECTRACK 1024929 VUPEN ADV-2010-2673 XF businessobjects-dswsbobje-security-bypass(62523) CONFIRM https://kb.juniper.net/KB27373 MISC https://service.sap.com/sap/support/notes/1432881 Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web service.

CVE-2010-0220

2010-01-07T14:30:00.403-05:00

2017-09-18T21:30:18.173-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://hg.mozilla.org/mozilla-central/rev/51396f6c9f20 MISC http://isc.sans.org/diary.html?storyid=7897 MANDRIVA MDVSA-2010:000 CONFIRM http://www.mozilla.com/en-US/firefox/3.5.7/releasenotes/ CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=507114 XF firefox-nsobserverlist-dos(55550) The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows remote attackers to cause a denial of service (application crash) via a crafted web site that triggers memory consumption and an accompanying Low Memory alert dialog, and also triggers attempted removal of an observer from an empty observers array.

cpe:/h:kingston:datatraveler_blackbox cpe:/h:kingston:datatraveler_elite:::privacy cpe:/h:kingston:datatraveler_secure:::privacy

CVE-2010-0221

2010-01-07T14:30:00.463-05:00

2018-08-13T17:47:34.650-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://blogs.zdnet.com/hardware/?p=6655 MISC http://it.slashdot.org/story/10/01/05/1734242/ MISC http://news.zdnet.co.uk/security/0,1000000189,39963327,00.htm SECTRACK 1023410 MISC http://www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html MISC http://www.kingston.com/driveupdate/ MISC http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_Kingston_USB-Stick.pdf MISC http://www.syss.de/index.php?id=108&tx_ttnews[tt_news]=528&cHash=8d16fa63d9 VUPEN ADV-2010-0080 XF kingston-access-control-sec-bypass(55477) MISC https://www.ironkey.com/usb-flash-drive-flaw-exposed Kingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP), and DataTraveler Elite Privacy Edition (DTEP) USB flash drives validate passwords with a program running on the host computer rather than the device hardware, which allows physically proximate attackers to access the cleartext drive contents via a modified program.

cpe:/h:kingston:datatraveler_blackbox cpe:/h:kingston:datatraveler_elite:::privacy cpe:/h:kingston:datatraveler_secure:::privacy

CVE-2010-0222

2010-01-07T14:30:00.497-05:00

2018-08-13T17:47:34.760-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://blogs.zdnet.com/hardware/?p=6655 MISC http://it.slashdot.org/story/10/01/05/1734242/ MISC http://news.zdnet.co.uk/security/0,1000000189,39963327,00.htm MISC http://www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html MISC http://www.kingston.com/driveupdate/ MISC http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_Kingston_USB-Stick.pdf MISC http://www.syss.de/index.php?id=108&tx_ttnews[tt_news]=528&cHash=8d16fa63d9 VUPEN ADV-2010-0080 MISC https://www.ironkey.com/usb-flash-drive-flaw-exposed Kingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP), and DataTraveler Elite Privacy Edition (DTEP) USB flash drives use a fixed 256-bit key for obtaining access to the cleartext drive contents, which makes it easier for physically proximate attackers to read or modify data by determining and providing this key.

cpe:/h:kingston:datatraveler_blackbox cpe:/h:kingston:datatraveler_elite:::privacy cpe:/h:kingston:datatraveler_secure:::privacy

CVE-2010-0223

2010-01-07T14:30:00.543-05:00

2018-08-13T17:47:34.837-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://www.kingston.com/driveupdate/ MISC http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_Kingston_USB-Stick.pdf MISC http://www.syss.de/index.php?id=108&tx_ttnews[tt_news]=528&cHash=8d16fa63d9 VUPEN ADV-2010-0080 MISC https://www.ironkey.com/usb-flash-drive-flaw-exposed Kingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP), and DataTraveler Elite Privacy Edition (DTEP) USB flash drives do not prevent password replay attacks, which allows physically proximate attackers to access the cleartext drive contents by providing a key that was captured in a USB data stream at an earlier time.

cpe:/h:sandisk:cruzer_enterprise_usb

CVE-2010-0224

2010-01-07T14:30:00.573-05:00

2018-08-13T17:47:34.947-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://blogs.zdnet.com/hardware/?p=6655 MISC http://it.slashdot.org/story/10/01/05/1734242/ SECTRACK 1023408 MISC http://www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html MISC http://www.sandisk.com/business-solutions/enterprise/technical-support/security-bulletin-december-2009 BID 37677 MISC http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_SanDisk_USB-Stick.pdf MISC http://www.syss.de/index.php?id=108&tx_ttnews[tt_news]=528&cHash=8d16fa63d9 VUPEN ADV-2010-0078 XF sandisk-access-control-sec-bypass(55475) MISC https://www.ironkey.com/usb-flash-drive-flaw-exposed SanDisk Cruzer Enterprise USB flash drives validate passwords with a program running on the host computer rather than the device hardware, which allows physically proximate attackers to access the cleartext drive contents via a modified program.

cpe:/h:scandisk:cruzer_enterprise_usb

CVE-2010-0225

2010-01-07T14:30:00.607-05:00

2018-08-13T17:47:35.040-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://blogs.zdnet.com/hardware/?p=6655 MISC http://it.slashdot.org/story/10/01/05/1734242/ MISC http://www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html MISC http://www.sandisk.com/business-solutions/enterprise/technical-support/security-bulletin-december-2009 BID 37677 MISC http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_SanDisk_USB-Stick.pdf MISC http://www.syss.de/index.php?id=108&tx_ttnews[tt_news]=528&cHash=8d16fa63d9 VUPEN ADV-2010-0078 MISC https://www.ironkey.com/usb-flash-drive-flaw-exposed SanDisk Cruzer Enterprise USB flash drives use a fixed 256-bit key for obtaining access to the cleartext drive contents, which makes it easier for physically proximate attackers to read or modify data by determining and providing this key.

cpe:/h:sandisk:cruzer_enterprise_usb

CVE-2010-0226

2010-01-07T14:30:00.653-05:00

2018-08-13T17:47:35.117-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://www.sandisk.com/business-solutions/enterprise/technical-support/security-bulletin-december-2009 BID 37677 MISC http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_SanDisk_USB-Stick.pdf MISC http://www.syss.de/index.php?id=108&tx_ttnews[tt_news]=528&cHash=8d16fa63d9 VUPEN ADV-2010-0078 MISC https://www.ironkey.com/usb-flash-drive-flaw-exposed SanDisk Cruzer Enterprise USB flash drives do not prevent password replay attacks, which allows physically proximate attackers to access the cleartext drive contents by providing a key that was captured in a USB data stream at an earlier time.

cpe:/h:verbatim:corporate_secure cpe:/h:verbatim:corporate_secure:::~~fips~~~

CVE-2010-0227

2010-01-07T14:30:00.683-05:00

2017-11-22T12:16:37.300-05:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2017-11-22T11:58:04.537-05:00

ALLOWS_OTHER_ACCESS

MISC http://blogs.zdnet.com/hardware/?p=6655 MISC http://it.slashdot.org/story/10/01/05/1734242/ SECTRACK 1023409 MISC http://www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html MISC http://www.verbatim.com/security/security-update.cfm MISC https://www.ironkey.com/usb-flash-drive-flaw-exposed Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives validate passwords with a program running on the host computer rather than the device hardware, which allows physically proximate attackers to access the cleartext drive contents via a modified program.

cpe:/h:verbatim:corporate_secure cpe:/h:verbatim:corporate_secure:::fips

CVE-2010-0228

2010-01-07T14:30:00.713-05:00

2010-01-08T00:00:00.000-05:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-01-08T10:44:00.000-05:00

ALLOWS_OTHER_ACCESS

MISC http://blogs.zdnet.com/hardware/?p=6655 MISC http://it.slashdot.org/story/10/01/05/1734242/ MISC http://www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html MISC http://www.verbatim.com/security/security-update.cfm MISC https://www.ironkey.com/usb-flash-drive-flaw-exposed Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives use a fixed 256-bit key for obtaining access to the cleartext drive contents, which makes it easier for physically proximate attackers to read or modify data by determining and providing this key.

cpe:/h:verbatim:corporate_secure cpe:/h:verbatim:corporate_secure:::fips

CVE-2010-0229

2010-01-07T14:30:00.747-05:00

2010-01-08T00:00:00.000-05:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-01-08T10:48:00.000-05:00

ALLOWS_OTHER_ACCESS

MISC http://www.verbatim.com/security/security-update.cfm MISC https://www.ironkey.com/usb-flash-drive-flaw-exposed Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives do not prevent password replay attacks, which allows physically proximate attackers to access the cleartext drive contents by providing a key that was captured in a USB data stream at an earlier time.

cpe:/o:suse:opensuse:11.2 cpe:/o:suse:suse_linux:10:sp3:enterprise_desktop cpe:/o:suse:suse_linux:10:sp3:enterprise_server

CVE-2010-0230

2010-01-22T16:30:00.757-05:00

2011-04-28T00:00:00.000-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-01-25T07:24:00.000-05:00

ALLOWS_OTHER_ACCESS

SUSE SUSE-SR:2010:001 SUSE SUSE-SA:2010:011 SUSE Linux Enterprise 10 SP3 (SLE10-SP3) and openSUSE 11.2 configures postfix to listen on all network interfaces, which might allow remote attackers to bypass intended access restrictions.

cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server::sp2 cpe:/o:microsoft:windows_2003_server::sp2:itanium cpe:/o:microsoft:windows_2003_server:-:sp2:x64 cpe:/o:microsoft:windows_7:- cpe:/o:microsoft:windows_server_2008:::itanium cpe:/o:microsoft:windows_server_2008:::x32 cpe:/o:microsoft:windows_server_2008:::x64 cpe:/o:microsoft:windows_server_2008::r2:itanium cpe:/o:microsoft:windows_server_2008::r2:x64 cpe:/o:microsoft:windows_server_2008::sp2:x32 cpe:/o:microsoft:windows_server_2008::sp2:x64 cpe:/o:microsoft:windows_server_2008:-:sp2:itanium cpe:/o:microsoft:windows_vista cpe:/o:microsoft:windows_vista:::x64 cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_vista::sp1:x64 cpe:/o:microsoft:windows_vista::sp2 cpe:/o:microsoft:windows_vista::sp2:x64 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_xp::sp2:pro_x64 cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_xp:-:sp2:x64

CVE-2010-0231

2010-02-10T13:30:01.393-05:00

2018-10-30T12:27:21.030-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CERT TA10-040A MS MS10-012 The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not use a sufficient source of entropy, which allows remote attackers to obtain access to files and other SMB resources via a large number of authentication requests, related to server-generated challenges, certain "duplicate values," and spoofing of an authentication token, aka "SMB NTLM Authentication Lack of Entropy Vulnerability."

cpe:/o:microsoft:windows_2000:sp4 cpe:/o:microsoft:windows_7:- cpe:/o:microsoft:windows_nt:3.1 cpe:/o:microsoft:windows_server_2003::sp2 cpe:/o:microsoft:windows_server_2008:::itanium cpe:/o:microsoft:windows_server_2008:::x32 cpe:/o:microsoft:windows_server_2008:::x64 cpe:/o:microsoft:windows_server_2008::sp2:x64 cpe:/o:microsoft:windows_server_2008:-:sp2:itanium cpe:/o:microsoft:windows_server_2008:sp2:x32 cpe:/o:microsoft:windows_vista cpe:/o:microsoft:windows_vista:::x64 cpe:/o:microsoft:windows_vista::sp1:x64 cpe:/o:microsoft:windows_vista::sp2:x64 cpe:/o:microsoft:windows_vista:sp1 cpe:/o:microsoft:windows_vista:sp2 cpe:/o:microsoft:windows_xp:- cpe:/o:microsoft:windows_xp:-:sp2:x64 cpe:/o:microsoft:windows_xp:sp3

CVE-2010-0232

2010-01-21T14:30:00.900-05:00

2019-02-26T09:04:00.993-05:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://blogs.technet.com/msrc/archive/2010/01/20/security-advisory-979682-released.aspx MLIST [dailydave] 20100119 We hold these axioms to be self evident MISC http://lock.cmpxchg8b.com/c0af0967d904cef2ad4db766a00bc6af/KiTrap0D.zip FULLDISC 20100119 Microsoft Windows NT #GP Trap Handler Allows Users to Switch Kernel Stack SECTRACK 1023471 CONFIRM http://www.microsoft.com/technet/security/advisory/979682.mspx BUGTRAQ 20100119 Microsoft Windows NT #GP Trap Handler Allows Users to Switch Kernel Stack BID 37864 CERT TA10-040A VUPEN ADV-2010-0179 MS MS10-015 XF ms-win-gptrap-privilege-escalation(55742) The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate certain BIOS calls, which allows local users to gain privileges by crafting a VDM_TIB data structure in the Thread Environment Block (TEB), and then calling the NtVdmControl function to start the Windows Virtual DOS Machine (aka NTVDM) subsystem, leading to improperly handled exceptions involving the #GP trap handler (nt!KiTrap0D), aka "Windows Kernel Exception Handler Vulnerability."

cpe:/o:microsoft:windows_2000:sp4 cpe:/o:microsoft:windows_server_2003::sp2 cpe:/o:microsoft:windows_server_2008:::itanium cpe:/o:microsoft:windows_server_2008:::x32 cpe:/o:microsoft:windows_server_2008:::x64 cpe:/o:microsoft:windows_server_2008::sp2:x64 cpe:/o:microsoft:windows_server_2008:-:sp2:itanium cpe:/o:microsoft:windows_server_2008:sp2:x32 cpe:/o:microsoft:windows_vista cpe:/o:microsoft:windows_vista:sp1 cpe:/o:microsoft:windows_vista:sp2 cpe:/o:microsoft:windows_xp:- cpe:/o:microsoft:windows_xp:sp3

CVE-2010-0233

2010-02-10T13:30:01.407-05:00

2018-10-30T12:25:57.340-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CERT TA10-040A MS MS10-015 Double free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows local users to gain privileges via a crafted application, aka "Windows Kernel Double Free Vulnerability."

cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server::sp2 cpe:/o:microsoft:windows_2003_server::sp2:itanium cpe:/o:microsoft:windows_server_2003::sp2 cpe:/o:microsoft:windows_server_2008:::itanium cpe:/o:microsoft:windows_server_2008:::x64 cpe:/o:microsoft:windows_server_2008:-:sp2 cpe:/o:microsoft:windows_server_2008:-:sp2:itanium cpe:/o:microsoft:windows_server_2008:-:sp2:x64 cpe:/o:microsoft:windows_server_2008:-:sp2:x86 cpe:/o:microsoft:windows_vista cpe:/o:microsoft:windows_vista:::x64 cpe:/o:microsoft:windows_vista::sp1:x64 cpe:/o:microsoft:windows_vista::sp2:x64 cpe:/o:microsoft:windows_vista:-:sp1 cpe:/o:microsoft:windows_vista:-:sp2 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_xp:-:sp2:x64

CVE-2010-0234

2010-04-14T12:00:01.397-04:00

2019-02-26T09:04:00.993-05:00

4.7

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1023850 CERT TA10-103A MS MS10-021 The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not properly validate a registry-key argument to an unspecified system call, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Null Pointer Vulnerability."

CVE-2010-0235

2010-04-14T12:00:01.430-04:00

2019-02-26T09:04:00.993-05:00

4.7

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1023850 CERT TA10-103A MS MS10-021 The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does not perform the expected validation before creating a symbolic link, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Symbolic Link Value Vulnerability."

CVE-2010-0236

2010-04-14T12:00:01.460-04:00

2019-02-26T09:04:00.993-05:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1023850 CERT TA10-103A MS MS10-021 The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does not properly allocate memory for the destination key associated with a symbolic-link registry key, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Allocation Vulnerability."

cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_xp::sp3

CVE-2010-0237

2010-04-14T12:00:01.477-04:00

2018-10-12T17:56:27.130-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1023850 CERT TA10-103A MS MS10-021 The kernel in Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows local users to gain privileges by creating a symbolic link from an untrusted registry hive to a trusted registry hive, aka "Windows Kernel Symbolic Link Creation Vulnerability."

CVE-2010-0238

2010-04-14T12:00:01.507-04:00

2019-02-26T09:04:00.993-05:00

4.9

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1023850 CERT TA10-103A MS MS10-021 Unspecified vulnerability in registry-key validation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Kernel Registry Key Vulnerability."

cpe:/o:microsoft:windows_server_2008:::itanium cpe:/o:microsoft:windows_server_2008:::x32 cpe:/o:microsoft:windows_server_2008:::x64 cpe:/o:microsoft:windows_server_2008::sp2:x32 cpe:/o:microsoft:windows_server_2008::sp2:x64 cpe:/o:microsoft:windows_server_2008:-:gold:itanium cpe:/o:microsoft:windows_server_2008:-:sp2:itanium cpe:/o:microsoft:windows_vista cpe:/o:microsoft:windows_vista:::x64 cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_vista::sp1:x64 cpe:/o:microsoft:windows_vista::sp2 cpe:/o:microsoft:windows_vista::sp2:x64

CVE-2010-0239

2010-02-10T13:30:01.440-05:00

2018-10-12T17:56:28.443-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CERT TA10-040A MS MS10-009 The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Router Advertisement packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "ICMPv6 Router Advertisement Vulnerability."

CVE-2010-0240

2010-02-10T13:30:01.470-05:00

2018-10-12T17:56:28.817-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CERT TA10-040A MS MS10-009 The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when a custom network driver is used, does not properly handle local fragmentation of Encapsulating Security Payload (ESP) over UDP packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "Header MDL Fragmentation Vulnerability."

CVE-2010-0241

2010-02-10T13:30:01.503-05:00

2018-10-12T17:56:29.227-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CERT TA10-040A MS MS10-009 The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Route Information packets, which allows remote attackers to execute arbitrary code via crafted packets, aka "ICMPv6 Route Information Vulnerability."

CVE-2010-0242

2010-02-10T13:30:01.517-05:00

2018-10-12T17:56:29.710-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CERT TA10-040A MS MS10-009 The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to cause a denial of service (system hang) via crafted packets with malformed TCP selective acknowledgement (SACK) values, aka "TCP/IP Selective Acknowledgement Vulnerability."

cpe:/a:microsoft:office:2004 cpe:/a:microsoft:office:xp:sp3

CVE-2010-0243

2010-02-10T13:30:01.550-05:00

2018-10-12T17:56:30.163-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CERT TA10-040A MS MS10-003 Buffer overflow in MSO.DLL in Microsoft Office XP SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Office document, aka "MSO.DLL Buffer Overflow."

cpe:/a:microsoft:ie:6 cpe:/a:microsoft:ie:6:sp1 cpe:/a:microsoft:ie:6.0 cpe:/a:microsoft:ie:6.00.2462.0000 cpe:/a:microsoft:ie:6.00.2479.0006 cpe:/a:microsoft:ie:6.0.2600 cpe:/a:microsoft:ie:6.00.2600.0000 cpe:/a:microsoft:ie:6.0.2800 cpe:/a:microsoft:ie:6.0.2800.1106 cpe:/a:microsoft:ie:6.0.2900 cpe:/a:microsoft:ie:6.0.2900.2180 cpe:/a:microsoft:ie:6.00.3663.0000 cpe:/a:microsoft:ie:6.00.3718.0000 cpe:/a:microsoft:ie:6.00.3790.0000 cpe:/a:microsoft:ie:6.00.3790.1830 cpe:/a:microsoft:ie:6.00.3790.3959 cpe:/a:microsoft:ie:7 cpe:/a:microsoft:ie:7.0 cpe:/a:microsoft:ie:7.0.5730:unknown:gold cpe:/a:microsoft:ie:7.0.5730.11 cpe:/a:microsoft:ie:7.00.5730.1100 cpe:/a:microsoft:ie:7.00.6000.16386 cpe:/a:microsoft:ie:7.00.6000.16441 cpe:/a:microsoft:ie:8 cpe:/a:microsoft:ie:8.0.6001

CVE-2010-0244

2010-01-22T17:00:00.460-05:00

2019-02-26T09:04:00.993-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov MS MS10-002 XF ie-deleted-obj-code-exec(55774) Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-2530 and CVE-2009-2531.

cpe:/a:microsoft:ie:8 cpe:/a:microsoft:ie:8.0.6001

CVE-2010-0245

2010-01-22T17:00:00.507-05:00

2019-02-26T09:04:00.993-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov MS MS10-002 XF ie-uninitialized-memory-code-exec(55775) Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-3671, CVE-2009-3674, and CVE-2010-0246.

cpe:/a:microsoft:ie:8 cpe:/a:microsoft:ie:8.0.6001

CVE-2010-0246

2010-01-22T17:00:00.523-05:00

2019-02-26T09:04:00.993-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MS MS10-002 XF ie-deleted-object-code-exec(55776) Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-3671, CVE-2009-3674, and CVE-2010-0245.

cpe:/a:microsoft:ie:5.01:sp4 cpe:/a:microsoft:ie:6 cpe:/a:microsoft:ie:6:sp1 cpe:/a:microsoft:ie:6.0 cpe:/a:microsoft:ie:6.00.2462.0000 cpe:/a:microsoft:ie:6.00.2479.0006 cpe:/a:microsoft:ie:6.0.2600 cpe:/a:microsoft:ie:6.00.2600.0000 cpe:/a:microsoft:ie:6.0.2800 cpe:/a:microsoft:ie:6.0.2800.1106 cpe:/a:microsoft:ie:6.0.2900 cpe:/a:microsoft:ie:6.0.2900.2180 cpe:/a:microsoft:ie:6.00.3663.0000 cpe:/a:microsoft:ie:6.00.3718.0000 cpe:/a:microsoft:ie:6.00.3790.0000 cpe:/a:microsoft:ie:6.00.3790.1830 cpe:/a:microsoft:ie:6.00.3790.3959

CVE-2010-0247

2010-01-22T17:00:00.553-05:00

2019-02-26T09:04:00.993-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov MS MS10-002 XF ie-uninitialized-obj-code-exec(55777) Microsoft Internet Explorer 5.01 SP4, 6, and 6 SP1 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability."

CVE-2010-0248

2010-01-22T17:00:00.583-05:00

2019-02-26T09:04:00.993-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov MS MS10-002 XF ie-object-memory-code-exec(55778) Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Object Memory Corruption Vulnerability."

cpe:/a:microsoft:internet_explorer:6 cpe:/a:microsoft:internet_explorer:6:sp1 cpe:/a:microsoft:internet_explorer:7 cpe:/a:microsoft:internet_explorer:8

CVE-2010-0249

2010-01-15T12:30:00.533-05:00

2018-10-30T12:28:01.187-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://blogs.technet.com/msrc/archive/2010/01/14/security-advisory-979352.aspx MISC http://news.cnet.com/8301-27080_3-10435232-245.html SECTRACK 1023462 MSKB 979352 EXPLOIT-DB 11167 CERT-VN VU#492515 CONFIRM http://www.microsoft.com/technet/security/advisory/979352.mspx BID 37815 CERT TA10-055A VUPEN ADV-2010-0135 MS MS10-002 XF ie-freed-object-code-execution(55642) Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object, related to incorrectly initialized memory and improper handling of objects in memory, as exploited in the wild in December 2009 and January 2010 during Operation Aurora, aka "HTML Object Memory Corruption Vulnerability."

cpe:/o:microsoft:windows_7:- cpe:/o:microsoft:windows_server_2008:::itanium cpe:/o:microsoft:windows_server_2008::sp2:x64 cpe:/o:microsoft:windows_server_2008:-:-:x32 cpe:/o:microsoft:windows_server_2008:-:-:x64 cpe:/o:microsoft:windows_server_2008:-:sp2:itanium cpe:/o:microsoft:windows_server_2008:-:sp2:x86 cpe:/o:microsoft:windows_server_2008:r2::itanium cpe:/o:microsoft:windows_server_2008:r2::x64 cpe:/o:microsoft:windows_vista::sp1:x64 cpe:/o:microsoft:windows_vista::sp2:x64 cpe:/o:microsoft:windows_vista:-:-:x64 cpe:/o:microsoft:windows_xp::sp2:x64 cpe:/o:microsoft:windows_xp:-:sp2 cpe:/o:microsoft:windows_xp:-:sp3

CVE-2010-0250

2010-02-10T13:30:01.580-05:00

2018-10-30T12:27:21.030-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://support.avaya.com/css/P8/documents/100074167 BUGTRAQ 20100209 ZDI-10-015: Microsoft Windows RLE Video Decompressor Remote Code Execution Vulnerability BID 38112 CERT TA10-040A MISC http://www.zerodayinitiative.com/advisories/ZDI-10-015/ MS MS10-013 Heap-based buffer overflow in DirectShow in Microsoft DirectX, as used in the AVI Filter on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2, and in Quartz on Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, allows remote attackers to execute arbitrary code via an AVI file with a crafted length field in an unspecified video stream, which is not properly handled by the RLE video decompressor, aka "DirectShow Heap Overflow Vulnerability."

CVE-2010-0251

2017-05-11T10:29:10.340-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2010. Notes: none.

cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server::sp2 cpe:/o:microsoft:windows_2003_server::sp2:itanium cpe:/o:microsoft:windows_2003_server::sp2:x64 cpe:/o:microsoft:windows_7:- cpe:/o:microsoft:windows_server_2008:::itanium cpe:/o:microsoft:windows_server_2008:::x32 cpe:/o:microsoft:windows_server_2008:::x64 cpe:/o:microsoft:windows_server_2008::sp2:x32 cpe:/o:microsoft:windows_server_2008::sp2:x64 cpe:/o:microsoft:windows_server_2008:-:sp2:itanium cpe:/o:microsoft:windows_server_2008:r2::itanium cpe:/o:microsoft:windows_server_2008:r2::x64 cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_vista::sp1:x64 cpe:/o:microsoft:windows_vista::sp2 cpe:/o:microsoft:windows_vista::sp2:x64 cpe:/o:microsoft:windows_vista:-:sp1 cpe:/o:microsoft:windows_vista:-:sp2 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_xp:-:sp2:x64

CVE-2010-0252

2010-02-10T13:30:01.610-05:00

2018-10-30T12:27:21.030-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CERT TA10-040A CERT TA10-159B MS MS10-008 MS MS10-034 The Microsoft Data Analyzer ActiveX control (aka the Office Excel ActiveX control for Data Analysis) in max3activex.dll in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to execute arbitrary code via a crafted web page that corrupts the "system state," aka "Microsoft Data Analyzer ActiveX Control Vulnerability."

CVE-2010-0253

2017-05-11T10:29:10.370-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2010. Notes: none.

cpe:/a:microsoft:visio:2002:sp2 cpe:/a:microsoft:visio:2003:sp3 cpe:/a:microsoft:visio:2007:sp1 cpe:/a:microsoft:visio:2007:sp2

CVE-2010-0254

2010-04-14T12:00:01.540-04:00

2018-10-12T17:56:38.337-04:00

7.6

NETWORK

HIGH

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CERT TA10-103A MS MS10-028 Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Visio Attribute Validation Memory Corruption Vulnerability."

cpe:/a:microsoft:ie:5.01:sp4 cpe:/a:microsoft:ie:6 cpe:/a:microsoft:ie:6:sp1 cpe:/a:microsoft:ie:7 cpe:/a:microsoft:ie:8

CVE-2010-0255

2010-02-04T15:15:49.967-05:00

2019-02-26T09:04:00.993-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://blogs.technet.com/msrc/archive/2010/02/03/security-advisory-980088-released.aspx MISC http://isc.sans.org/diary.html?n&storyid=8152 CONFIRM http://support.avaya.com/css/P8/documents/100089747 MISC http://www.coresecurity.com/content/internet-explorer-dynamic-object-tag CONFIRM http://www.microsoft.com/technet/security/advisory/980088.mspx BUGTRAQ 20100203 CORE-2009-0625: Internet Explorer Dynamic OBJECT tag and URLMON sniffing vulnerabilities BID 38055 BID 38056 CERT TA10-159B MS MS10-035 Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML documents, which allows remote attackers to bypass intended access restrictions and read arbitrary files via vectors involving JavaScript exploit code that constructs a reference to a file://127.0.0.1 URL, aka the dynamic OBJECT tag vulnerability, as demonstrated by obtaining the data from an index.dat file, a variant of CVE-2009-1140 and related to CVE-2008-1448.

cpe:/a:microsoft:visio:2002:sp2 cpe:/a:microsoft:visio:2003:sp3 cpe:/a:microsoft:visio:2007:sp1 cpe:/a:microsoft:visio:2007:sp2

CVE-2010-0256

2010-04-14T12:00:01.570-04:00

2018-10-12T17:56:40.913-04:00

7.6

NETWORK

HIGH

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CERT TA10-103A MS MS10-028 Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly calculate unspecified indexes associated with Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Visio Index Calculation Memory Corruption Vulnerability."

cpe:/a:microsoft:excel:2002:sp3 cpe:/a:microsoft:excel:2003:sp3 cpe:/a:microsoft:excel:2007:sp1 cpe:/a:microsoft:excel:2007:sp2 cpe:/a:microsoft:office:2004::mac cpe:/a:microsoft:office:2008::mac cpe:/a:microsoft:office_compatibility_pack:2007:sp1 cpe:/a:microsoft:office_compatibility_pack:2007:sp2 cpe:/a:microsoft:office_excel_viewer::sp1 cpe:/a:microsoft:office_excel_viewer::sp2 cpe:/a:microsoft:office_sharepoint_server:2007:sp1:x32 cpe:/a:microsoft:office_sharepoint_server:2007:sp1:x64 cpe:/a:microsoft:office_sharepoint_server:2007:sp2:x32 cpe:/a:microsoft:office_sharepoint_server:2007:sp2:x64 cpe:/a:microsoft:open_xml_file_format_converter:::mac

CVE-2010-0257

2010-03-10T17:30:01.043-05:00

2018-10-12T17:56:41.367-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1023698 CERT TA10-068A MS MS10-017 Microsoft Office Excel 2002 SP3 does not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Microsoft Office Excel Record Memory Corruption Vulnerability."

CVE-2010-0258

2010-03-10T17:30:01.073-05:00

2018-10-12T17:56:41.913-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

IDEFENSE 20100309 Microsoft Excel Sheet Object Type Confusion Vulnerability SECTRACK 1023698 CERT TA10-068A MS MS10-017 Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that causes memory to be interpreted as a different object type than intended, aka "Microsoft Office Excel Sheet Object Type Confusion Vulnerability."

CVE-2010-0259

2017-05-11T10:29:10.387-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2010. Notes: none.

CVE-2010-0260

2010-03-10T17:30:01.107-05:00

2018-10-12T17:56:42.523-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

IDEFENSE 20100309 Microsoft Excel MDXTUPLE Record Heap Overflow Vulnerability SECTRACK 1023698 CERT TA10-068A MS MS10-017 Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted spreadsheet in which "a MDXTUPLE record is broken up into several records," aka "Microsoft Office Excel MDXTUPLE Record Heap Overflow Vulnerability."

CVE-2010-0261

2010-03-10T17:30:01.137-05:00

2018-10-12T17:56:43.197-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

IDEFENSE 20100309 Microsoft Excel MDXSET Record Heap Overflow Vulnerability SECTRACK 1023698 CERT TA10-068A MS MS10-017 Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2 and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted spreadsheet in which "a MDXSET record is broken up into several records," aka "Microsoft Office Excel MDXSET Record Heap Overflow Vulnerability."

CVE-2010-0262

2010-03-10T17:30:01.167-05:00

2018-10-12T17:56:43.773-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

IDEFENSE 20100309 Microsoft Excel FNGROUPNAME Record Uninitialized Memory Vulnerability SECTRACK 1023698 CERT TA10-068A MS MS10-017 Microsoft Office Excel 2007 SP1 and SP2 and Office 2004 for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers access of an uninitialized stack variable, aka "Microsoft Office Excel FNGROUPNAME Record Uninitialized Memory Vulnerability."

CVE-2010-0263

2010-03-10T17:30:01.200-05:00

2018-10-12T17:56:44.383-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20100309 ZDI-10-025: Microsoft Office Excel XLSX File Parsing Remote Code Execution Vulnerability SECTRACK 1023698 CERT TA10-068A MISC http://www.zerodayinitiative.com/advisories/ZDI-10-025/ MS MS10-017 Microsoft Office Excel 2007 SP1 and SP2; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; and Office SharePoint Server 2007 SP1 and SP2 do not validate ZIP headers during decompression of Open XML (.XLSX) documents, which allows remote attackers to execute arbitrary code via a crafted document that triggers access to uninitialized memory locations, aka "Microsoft Office Excel XLSX File Parsing Code Execution Vulnerability."

CVE-2010-0264

2010-03-10T17:30:01.230-05:00

2018-10-12T17:56:45.147-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1023698 CERT TA10-068A MS MS10-017 Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability."

cpe:/a:microsoft:producer:2003 cpe:/a:microsoft:windows_movie_maker:2.1 cpe:/a:microsoft:windows_movie_maker:2.6 cpe:/a:microsoft:windows_movie_maker:6.0 cpe:/o:microsoft:windows_vista cpe:/o:microsoft:windows_vista:::x64 cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_vista::sp1:x64 cpe:/o:microsoft:windows_vista::sp2 cpe:/o:microsoft:windows_vista::sp2:x64 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_xp:-:sp2:x64

CVE-2010-0265

2010-03-10T17:30:01.247-05:00

2018-10-30T12:27:21.030-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CERT TA10-068A MS MS10-016 Buffer overflow in Microsoft Windows Movie Maker 2.1, 2.6, and 6.0, and Microsoft Producer 2003, allows remote attackers to execute arbitrary code via a crafted project (.MSWMM) file, aka "Movie Maker and Producer Buffer Overflow Vulnerability."

cpe:/a:microsoft:outlook:2002:sp3 cpe:/a:microsoft:outlook:2003:sp3 cpe:/a:microsoft:outlook:2007:sp1 cpe:/a:microsoft:outlook:2007:sp2

CVE-2010-0266

2010-07-15T08:57:12.453-04:00

2018-10-12T17:56:46.257-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CERT TA10-194A MS MS10-045 Microsoft Office Outlook 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 does not properly verify e-mail attachments with a PR_ATTACH_METHOD property value of ATTACH_BY_REFERENCE, which allows user-assisted remote attackers to execute arbitrary code via a crafted message, aka "Microsoft Outlook SMB Attachment Vulnerability."

cpe:/a:microsoft:ie:6 cpe:/a:microsoft:ie:6:sp1 cpe:/a:microsoft:ie:7 cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server::sp2 cpe:/o:microsoft:windows_2003_server::sp2:itanium cpe:/o:microsoft:windows_server_2003::sp2 cpe:/o:microsoft:windows_server_2008:::itanium cpe:/o:microsoft:windows_server_2008:::x32 cpe:/o:microsoft:windows_server_2008:::x64 cpe:/o:microsoft:windows_server_2008::sp2:x32 cpe:/o:microsoft:windows_server_2008:-:sp2:itanium cpe:/o:microsoft:windows_server_2008:-:sp2:x64 cpe:/o:microsoft:windows_vista cpe:/o:microsoft:windows_vista:::x64 cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_vista::sp1:x64 cpe:/o:microsoft:windows_vista::sp2 cpe:/o:microsoft:windows_vista::sp2:x64 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_xp:-:sp2:x64

CVE-2010-0267

2010-03-31T15:30:00.297-04:00

2019-02-26T09:04:00.993-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1023773 BID 39023 CERT TA10-068A CERT TA10-089A VUPEN ADV-2010-0744 MS MS10-018 Microsoft Internet Explorer 6, 6 SP1, and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability."

cpe:/a:microsoft:windows_media_player:9 cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_xp::sp3

CVE-2010-0268

2010-04-14T12:00:01.600-04:00

2018-10-12T17:56:47.993-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CERT TA10-103A MS MS10-027 Unspecified vulnerability in the Windows Media Player ActiveX control in Windows Media Player (WMP) 9 on Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows remote attackers to execute arbitrary code via crafted media content, aka "Media Player Remote Code Execution Vulnerability."

cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server::sp2 cpe:/o:microsoft:windows_2003_server::sp2:itanium cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_7:- cpe:/o:microsoft:windows_server_2003::sp2 cpe:/o:microsoft:windows_server_2008:::itanium cpe:/o:microsoft:windows_server_2008:::x64 cpe:/o:microsoft:windows_server_2008::r2:itanium cpe:/o:microsoft:windows_server_2008::r2:x64 cpe:/o:microsoft:windows_server_2008:-:sp2 cpe:/o:microsoft:windows_server_2008:-:sp2:itanium cpe:/o:microsoft:windows_server_2008:-:sp2:x64 cpe:/o:microsoft:windows_server_2008:-:sp2:x86 cpe:/o:microsoft:windows_vista cpe:/o:microsoft:windows_vista:::x64 cpe:/o:microsoft:windows_vista::sp1:x64 cpe:/o:microsoft:windows_vista::sp2:x64 cpe:/o:microsoft:windows_vista:-:sp1 cpe:/o:microsoft:windows_vista:-:sp2 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_xp:-:sp2:x64

CVE-2010-0269

2010-04-14T12:00:01.633-04:00

2019-02-26T09:04:00.993-05:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CERT TA10-103A MS MS10-020 The SMB client in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly allocate memory for SMB responses, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Client Memory Allocation Vulnerability."

cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_7:- cpe:/o:microsoft:windows_server_2008::r2:itanium cpe:/o:microsoft:windows_server_2008::r2:x64

CVE-2010-0270

2010-04-14T12:00:01.663-04:00

2018-10-30T12:27:21.030-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CERT TA10-103A MS MS10-020 The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate fields in SMB transaction responses, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and reboot) via a crafted (1) SMBv1 or (2) SMBv2 response, aka "SMB Client Transaction Vulnerability."

cpe:/o:sun:opensolaris:snv_12::sparc cpe:/o:sun:opensolaris:snv_51::sparc cpe:/o:sun:opensolaris:snv_51::x86 cpe:/o:sun:opensolaris:snv_52::sparc cpe:/o:sun:opensolaris:snv_52::x86 cpe:/o:sun:opensolaris:snv_53::x86 cpe:/o:sun:opensolaris:snv_54::sparc cpe:/o:sun:opensolaris:snv_54::x86 cpe:/o:sun:opensolaris:snv_55::sparc cpe:/o:sun:opensolaris:snv_55::x86 cpe:/o:sun:opensolaris:snv_56::sparc cpe:/o:sun:opensolaris:snv_56::x86 cpe:/o:sun:opensolaris:snv_57::sparc cpe:/o:sun:opensolaris:snv_57::x86 cpe:/o:sun:opensolaris:snv_58::sparc cpe:/o:sun:opensolaris:snv_58::x86 cpe:/o:sun:opensolaris:snv_59::sparc cpe:/o:sun:opensolaris:snv_59::x86 cpe:/o:sun:opensolaris:snv_60::sparc cpe:/o:sun:opensolaris:snv_60::x86 cpe:/o:sun:opensolaris:snv_61::sparc cpe:/o:sun:opensolaris:snv_61::x86 cpe:/o:sun:opensolaris:snv_62::sparc cpe:/o:sun:opensolaris:snv_62::x86 cpe:/o:sun:opensolaris:snv_63::sparc cpe:/o:sun:opensolaris:snv_63::x86 cpe:/o:sun:opensolaris:snv_64::sparc cpe:/o:sun:opensolaris:snv_64::x86 cpe:/o:sun:opensolaris:snv_65::sparc cpe:/o:sun:opensolaris:snv_65::x86 cpe:/o:sun:opensolaris:snv_66::sparc cpe:/o:sun:opensolaris:snv_66::x86 cpe:/o:sun:opensolaris:snv_67::sparc cpe:/o:sun:opensolaris:snv_67::x86 cpe:/o:sun:opensolaris:snv_68::sparc cpe:/o:sun:opensolaris:snv_68::x86 cpe:/o:sun:opensolaris:snv_69::sparc cpe:/o:sun:opensolaris:snv_69::x86 cpe:/o:sun:opensolaris:snv_70::sparc cpe:/o:sun:opensolaris:snv_70::x86 cpe:/o:sun:opensolaris:snv_71::sparc cpe:/o:sun:opensolaris:snv_71::x86 cpe:/o:sun:opensolaris:snv_72::sparc cpe:/o:sun:opensolaris:snv_72::x86 cpe:/o:sun:opensolaris:snv_73::sparc cpe:/o:sun:opensolaris:snv_73::x86 cpe:/o:sun:opensolaris:snv_74::sparc cpe:/o:sun:opensolaris:snv_74::x86 cpe:/o:sun:opensolaris:snv_75::sparc cpe:/o:sun:opensolaris:snv_75::x86 cpe:/o:sun:opensolaris:snv_76::sparc cpe:/o:sun:opensolaris:snv_76::x86 cpe:/o:sun:opensolaris:snv_77::sparc cpe:/o:sun:opensolaris:snv_77::x86 cpe:/o:sun:opensolaris:snv_78::sparc cpe:/o:sun:opensolaris:snv_78::x86 cpe:/o:sun:opensolaris:snv_79::sparc cpe:/o:sun:opensolaris:snv_79::x86 cpe:/o:sun:opensolaris:snv_80::sparc cpe:/o:sun:opensolaris:snv_80::x86 cpe:/o:sun:opensolaris:snv_81::sparc cpe:/o:sun:opensolaris:snv_81::x86 cpe:/o:sun:opensolaris:snv_82::sparc cpe:/o:sun:opensolaris:snv_82::x86 cpe:/o:sun:opensolaris:snv_83::sparc cpe:/o:sun:opensolaris:snv_83::x86 cpe:/o:sun:opensolaris:snv_84::sparc cpe:/o:sun:opensolaris:snv_84::x86 cpe:/o:sun:opensolaris:snv_85::sparc cpe:/o:sun:opensolaris:snv_85::x86 cpe:/o:sun:opensolaris:snv_86::sparc cpe:/o:sun:opensolaris:snv_86::x86 cpe:/o:sun:opensolaris:snv_87::sparc cpe:/o:sun:opensolaris:snv_87::x86 cpe:/o:sun:opensolaris:snv_88::sparc cpe:/o:sun:opensolaris:snv_88::x86 cpe:/o:sun:opensolaris:snv_89::sparc cpe:/o:sun:opensolaris:snv_89::x86 cpe:/o:sun:opensolaris:snv_90::sparc cpe:/o:sun:opensolaris:snv_90::x86 cpe:/o:sun:opensolaris:snv_91::sparc cpe:/o:sun:opensolaris:snv_91::x86 cpe:/o:sun:opensolaris:snv_92::sparc cpe:/o:sun:opensolaris:snv_92::x86 cpe:/o:sun:opensolaris:snv_93::sparc cpe:/o:sun:opensolaris:snv_93::x86 cpe:/o:sun:opensolaris:snv_94::sparc cpe:/o:sun:opensolaris:snv_94::x86 cpe:/o:sun:opensolaris:snv_95::sparc cpe:/o:sun:opensolaris:snv_95::x86 cpe:/o:sun:opensolaris:snv_96::sparc cpe:/o:sun:opensolaris:snv_96::x86 cpe:/o:sun:opensolaris:snv_97::sparc cpe:/o:sun:opensolaris:snv_97::x86 cpe:/o:sun:opensolaris:snv_98::sparc cpe:/o:sun:opensolaris:snv_98::x86 cpe:/o:sun:opensolaris:snv_99::sparc cpe:/o:sun:opensolaris:snv_99::x86 cpe:/o:sun:opensolaris:snv_100::sparc cpe:/o:sun:opensolaris:snv_100::x86 cpe:/o:sun:opensolaris:snv_101::sparc cpe:/o:sun:opensolaris:snv_101::x86 cpe:/o:sun:opensolaris:snv_102::sparc cpe:/o:sun:opensolaris:snv_102::x86 cpe:/o:sun:opensolaris:snv_103::sparc cpe:/o:sun:opensolaris:snv_103::x86 cpe:/o:sun:opensolaris:snv_104::sparc cpe:/o:sun:opensolaris:snv_104::x86 cpe:/o:sun:opensolaris:snv_105::sparc cpe:/o:sun:opensolaris:snv_105::x86 cpe:/o:sun:opensolaris:snv_106::sparc cpe:/o:sun:opensolaris:snv_106::x86 cpe:/o:sun:opensolaris:snv_107::sparc cpe:/o:sun:opensolaris:snv_107::x86 cpe:/o:sun:opensolaris:snv_108::sparc cpe:/o:sun:opensolaris:snv_108::x86 cpe:/o:sun:opensolaris:snv_109::sparc cpe:/o:sun:opensolaris:snv_109::x86 cpe:/o:sun:opensolaris:snv_110::sparc cpe:/o:sun:opensolaris:snv_110::x86 cpe:/o:sun:opensolaris:snv_111::sparc cpe:/o:sun:opensolaris:snv_111::x86 cpe:/o:sun:opensolaris:snv_112::sparc cpe:/o:sun:opensolaris:snv_112::x86 cpe:/o:sun:opensolaris:snv_113::sparc cpe:/o:sun:opensolaris:snv_113::x86 cpe:/o:sun:opensolaris:snv_114::sparc cpe:/o:sun:opensolaris:snv_114::x86 cpe:/o:sun:opensolaris:snv_115::sparc cpe:/o:sun:opensolaris:snv_115::x86 cpe:/o:sun:opensolaris:snv_116::sparc cpe:/o:sun:opensolaris:snv_116::x86 cpe:/o:sun:opensolaris:snv_117::sparc cpe:/o:sun:opensolaris:snv_117::x86 cpe:/o:sun:opensolaris:snv_118::sparc cpe:/o:sun:opensolaris:snv_118::x86 cpe:/o:sun:opensolaris:snv_119::sparc cpe:/o:sun:opensolaris:snv_119::x86 cpe:/o:sun:opensolaris:snv_120::sparc cpe:/o:sun:opensolaris:snv_120::x86 cpe:/o:sun:opensolaris:snv_121::sparc cpe:/o:sun:opensolaris:snv_121::x86 cpe:/o:sun:opensolaris:snv_122::sparc cpe:/o:sun:opensolaris:snv_122::x86 cpe:/o:sun:opensolaris:snv_123::sparc cpe:/o:sun:opensolaris:snv_123::x86 cpe:/o:sun:opensolaris:snv_124::sparc cpe:/o:sun:opensolaris:snv_124::x86 cpe:/o:sun:opensolaris:snv_125::sparc cpe:/o:sun:opensolaris:snv_125::x86 cpe:/o:sun:opensolaris:snv_126::sparc cpe:/o:sun:opensolaris:snv_126::x86 cpe:/o:sun:opensolaris:snv_127::sparc cpe:/o:sun:opensolaris:snv_127::x86 cpe:/o:sun:opensolaris:snv_128::sparc cpe:/o:sun:opensolaris:snv_128::x86 cpe:/o:sun:opensolaris:snv_129::sparc cpe:/o:sun:opensolaris:snv_129::x86 cpe:/o:sun:opensolaris:snv_130::sparc cpe:/o:sun:opensolaris:snv_130::x86

CVE-2010-0271

2010-01-08T12:30:02.363-05:00

2017-08-16T21:31:56.727-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov SUNALERT 274830 BID 37656 SECTRACK 1023416 VUPEN ADV-2010-0076 XF opensolaris-hald-weak-security(55461) hald in Sun OpenSolaris snv_51 through snv_130 does not have the proc_audit privilege during unspecified attempts to write to the auditing log, which makes it easier for physically proximate attackers to avoid detection of changes to the set of connected hardware devices supporting the Hardware Abstraction Layer (HAL) specification.

cpe:/a:sun:java_system_web_server:7.0:update_6:linux

CVE-2010-0272

2010-01-08T12:30:02.380-05:00

2017-08-16T21:31:56.790-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://intevydis.com/sjws_demo.html MISC http://www.intevydis.com/blog/?p=102 XF jsws-data-information-disclosure(55527) Heap-based buffer overflow in Sun Java System Web Server 7.0 Update 6 on Linux allows remote attackers to discover process memory locations via crafted data to TCP port 80, as demonstrated by the vd_sjws2 module in VulnDisco. NOTE: as of 20100106, this disclosure has no actionable information. However, because the VulnDisco author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.

cpe:/a:sun:java_system_web_server:7.0:update_6:linux

CVE-2010-0273

2010-01-08T12:30:02.410-05:00

2010-01-11T08:37:40.360-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-01-11T08:28:00.000-05:00

MISC http://intevydis.com/sjws_demo.html MISC http://www.intevydis.com/blog/?p=102 Unspecified vulnerability in Sun Java System Web Server 7.0 Update 6 on Linux allows remote attackers to execute arbitrary code by sending a process memory address and crafted data to TCP port 80, as demonstrated by the vd_sjws2 module in VulnDisco. NOTE: as of 20100106, this disclosure has no actionable information. However, because the VulnDisco author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.

cpe:/a:ibm:lotus_inotes:229.011 cpe:/a:ibm:lotus_inotes:229.021 cpe:/a:ibm:lotus_inotes:229.031 cpe:/a:ibm:lotus_inotes:229.041 cpe:/a:ibm:lotus_inotes:229.051 cpe:/a:ibm:lotus_inotes:229.061 cpe:/a:ibm:lotus_inotes:229.101 cpe:/a:ibm:lotus_inotes:229.111 cpe:/a:ibm:lotus_inotes:229.131 cpe:/a:ibm:lotus_inotes:229.141 cpe:/a:ibm:lotus_inotes:229.151 cpe:/a:ibm:lotus_inotes:229.161 cpe:/a:ibm:lotus_inotes:229.171 cpe:/a:ibm:lotus_inotes:229.181 cpe:/a:ibm:lotus_inotes:229.191 cpe:/a:ibm:lotus_inotes:229.201 cpe:/a:ibm:lotus_inotes:229.211 cpe:/a:ibm:lotus_inotes:229.221 cpe:/a:ibm:lotus_inotes:229.231

CVE-2010-0274

2010-01-09T13:30:01.870-05:00

2017-08-16T21:31:56.837-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov BID 37675 VUPEN ADV-2010-0077 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg27017776 XF domino-ultralight-unspecified(55470) Unspecified vulnerability in the Edit Contact scene in Ultra-light Mode in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 has unknown impact and attack vectors, aka SPR LSHR7TBLY5.

CVE-2010-0275

2010-01-09T13:30:01.900-05:00

2017-08-16T21:31:56.897-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov BID 37675 VUPEN ADV-2010-0077 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg27017776 XF domino-script-command-unspecified(55471) Ultra-light Mode in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 does not properly handle script commands in the status-alerts URL, which has unspecified impact and attack vectors, aka SPR LSHR7TBM58.

cpe:/a:ibm:domino_web_access cpe:/a:ibm:lotus_domino:8.0.2.3 cpe:/a:ibm:lotus_inotes

CVE-2010-0276

2010-01-09T13:30:01.947-05:00

2017-08-16T21:31:56.947-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov BID 37675 VUPEN ADV-2010-0077 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg27017776 XF domino-trylotus-unspecified(55473) IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 does not properly handle navigation of the "Try Lotus iNotes anyway" link from the page that reports use of an unsupported browser, which has unspecified impact and attack vectors, aka SPR LSHR7TBMQU.

cpe:/a:adium:adium:1.3.8 cpe:/a:pidgin:pidgin:2.0.0 cpe:/a:pidgin:pidgin:2.0.1 cpe:/a:pidgin:pidgin:2.0.2 cpe:/a:pidgin:pidgin:2.1.0 cpe:/a:pidgin:pidgin:2.1.1 cpe:/a:pidgin:pidgin:2.2.0 cpe:/a:pidgin:pidgin:2.2.1 cpe:/a:pidgin:pidgin:2.2.2 cpe:/a:pidgin:pidgin:2.3.0 cpe:/a:pidgin:pidgin:2.3.1 cpe:/a:pidgin:pidgin:2.4.0 cpe:/a:pidgin:pidgin:2.4.1 cpe:/a:pidgin:pidgin:2.4.2 cpe:/a:pidgin:pidgin:2.4.3 cpe:/a:pidgin:pidgin:2.5.0 cpe:/a:pidgin:pidgin:2.5.1 cpe:/a:pidgin:pidgin:2.5.2 cpe:/a:pidgin:pidgin:2.5.3 cpe:/a:pidgin:pidgin:2.5.4 cpe:/a:pidgin:pidgin:2.5.5 cpe:/a:pidgin:pidgin:2.5.6 cpe:/a:pidgin:pidgin:2.5.7 cpe:/a:pidgin:pidgin:2.5.8 cpe:/a:pidgin:pidgin:2.5.9 cpe:/a:pidgin:pidgin:2.6.0 cpe:/a:pidgin:pidgin:2.6.1 cpe:/a:pidgin:pidgin:2.6.2 cpe:/a:pidgin:pidgin:2.6.4 cpe:/a:pidgin:pidgin:2.6.5

CVE-2010-0277

2010-01-09T13:30:01.980-05:00

2017-09-18T21:30:21.047-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://blogs.sun.com/security/entry/cve_2010_0277_malformed_msn CONFIRM http://developer.pidgin.im/wiki/ChangeLog MISC http://events.ccc.de/congress/2009/Fahrplan/events/3596.en.html FEDORA FEDORA-2010-1279 FEDORA FEDORA-2010-1934 FEDORA FEDORA-2010-1383 SUSE SUSE-SR:2010:006 CONFIRM http://pidgin.im/news/security/?id=43 MANDRIVA MDVSA-2010:041 MANDRIVA MDVSA-2010:085 MLIST [oss-security] 20100107 Re: CVE request - pidgin MSN arbitrary file upload BID 38294 UBUNTU USN-902-1 VUPEN ADV-2010-0413 VUPEN ADV-2010-1020 VUPEN ADV-2010-2693 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=554335 REDHAT RHSA-2010:0115 slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.6, including 2.6.4, and Adium 1.3.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed MSNSLP INVITE request in an SLP message, a different issue than CVE-2010-0013.

cpe:/a:microsoft:windows_live_messenger:2009

CVE-2010-0278

2010-01-12T12:30:01.260-05:00

2018-10-10T15:51:37.747-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20100108 [HACKATTACK Advisory 080110] Windows Live Messenger 2009 ActiveX DoS Vulnerability BID 37680 A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service (msnmsgr.exe crash) by calling the ViewProfile method with a crafted argument during an MSN Messenger session.

cpe:/a:bts-gi.net:read_excel:1.1

CVE-2010-0279

2010-01-12T20:30:01.343-05:00

2017-08-16T21:31:57.007-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov EXPLOIT-DB 11057 XF readexcel-upload-file-upload(55462) Unrestricted file upload vulnerability in upload.php in BTS-GI Read excel 1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory. NOTE: some of these details are obtained from third party information.

cpe:/a:google:google_sketchup:7.0 cpe:/a:google:google_sketchup:7.0.10247 cpe:/a:google:google_sketchup:7.1.4871 cpe:/a:google:google_sketchup:7.1.6087 cpe:/a:jan_eric_krprianidis:lib3ds:1.0

CVE-2010-0280

2010-01-15T12:30:00.580-05:00

2018-10-10T15:51:37.950-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://sketchup.google.com/support/bin/answer.py?hl=en&answer=141303 MISC http://www.coresecurity.com/content/google-sketchup-vulnerability BUGTRAQ 20100113 [CORE-2009-1209] Google SketchUp 'lib3ds' 3DS Importer Memory Corruption BID 37708 VUPEN ADV-2010-0133 Array index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1 M2, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted structures in a 3DS file, probably related to mesh.c.

cpe:/a:mit:kerberos:5-1.7 cpe:/a:mit:kerberos:5-1.7.1 cpe:/a:mit:kerberos:5-1.8:alpha

CVE-2010-0283

2010-02-22T08:00:02.750-05:00

2018-10-10T15:51:38.513-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov APPLE APPLE-SA-2010-06-15-1 FEDORA FEDORA-2010-1722 SECTRACK 1023593 CONFIRM http://support.apple.com/kb/HT4188 CONFIRM http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-001.txt BUGTRAQ 20100216 MITKRB5-SA-2010-001 [CVE-2010-0283] krb5-1.7 KDC denial of service BID 38260 UBUNTU USN-916-1 VUPEN ADV-2010-1481 The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.2, and 1.8 alpha, allows remote attackers to cause a denial of service (assertion failure and daemon crash) via an invalid (1) AS-REQ or (2) TGS-REQ request.

cpe:/a:novell:access_manager:3.1 cpe:/a:novell:access_manager:3.1:sp1

CVE-2010-0284

2010-06-18T12:30:01.313-04:00

2017-08-16T21:31:57.053-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://www.novell.com/support/viewContent.do?externalId=7006255&sliceId=1 BID 40931 SECTRACK 1024132 VUPEN ADV-2010-1516 XF accessmgr-admincosole-getentry-file-upload(59528) Directory traversal vulnerability in the getEntry method in the PortalModuleInstallManager component in a servlet in nps.jar in the Administration Console (aka Access Management Console) in Novell Access Manager 3.1 before 3.1.2-281 on Windows allows remote attackers to create arbitrary files with any contents, and consequently execute arbitrary code, via a .. (dot dot) in a parameter, aka ZDI-CAN-678.

cpe:/a:gnome:screensaver:2.14.3 cpe:/a:gnome:screensaver:2.22.2 cpe:/a:gnome:screensaver:2.27 cpe:/a:gnome:screensaver:2.28.0 cpe:/a:gnome:screensaver:2.28.3

CVE-2010-0285

2010-02-24T13:30:00.377-05:00

2017-08-16T21:31:57.117-04:00

5.6

LOCAL

HIGH

NONE

COMPLETE

NONE

http://nvd.nist.gov CONFIRM http://git.gnome.org/browse/gnome-screensaver/commit/?id=2f597ea9f1f363277fd4dfc109fa41bbc6225aca CONFIRM http://security-tracker.debian.org/tracker/CVE-2010-0285 MANDRIVA MDVSA-2011:093 BID 38254 CONFIRM https://bugzilla.gnome.org/show_bug.cgi?id=593616 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=557525 XF screensaver-monitor-setup-sec-bypass(56366) gnome-screensaver 2.14.3, 2.22.2, 2.27.x, 2.28.0, and 2.28.3, when the X configuration enables the extend screen option, allows physically proximate attackers to bypass screen locking, access an unattended workstation, and view half of the GNOME desktop by attaching an external monitor.

cpe:/a:typo3:typo3:4.3.0

CVE-2010-0286

2010-02-22T08:26:35.313-05:00

2017-08-16T21:31:57.163-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-001/ VUPEN ADV-2010-0127 XF typo3-openid-security-bypass(55609) Unspecified vulnerability in the OpenID Identity Authentication extension in TYPO3 4.3.0 allows remote attackers to bypass authentication and gain access to a backend user account via unknown attack vectors in which both the attacker and victim have an OpenID provider that discards identities during authentication.

cpe:/a:dokuwiki:dokuwiki:2004-07-04 cpe:/a:dokuwiki:dokuwiki:2004-07-07 cpe:/a:dokuwiki:dokuwiki:2004-07-12 cpe:/a:dokuwiki:dokuwiki:2004-07-21 cpe:/a:dokuwiki:dokuwiki:2004-07-25 cpe:/a:dokuwiki:dokuwiki:2004-08-08 cpe:/a:dokuwiki:dokuwiki:2004-08-15a cpe:/a:dokuwiki:dokuwiki:2004-08-22 cpe:/a:dokuwiki:dokuwiki:2004-09-12 cpe:/a:dokuwiki:dokuwiki:2004-09-25 cpe:/a:dokuwiki:dokuwiki:2004-09-30 cpe:/a:dokuwiki:dokuwiki:2004-11-01 cpe:/a:dokuwiki:dokuwiki:2004-11-02 cpe:/a:dokuwiki:dokuwiki:2004-11-10 cpe:/a:dokuwiki:dokuwiki:2005-01-14 cpe:/a:dokuwiki:dokuwiki:2005-01-15 cpe:/a:dokuwiki:dokuwiki:2005-01-16a cpe:/a:dokuwiki:dokuwiki:2005-02-06 cpe:/a:dokuwiki:dokuwiki:2005-02-18 cpe:/a:dokuwiki:dokuwiki:2005-05-07 cpe:/a:dokuwiki:dokuwiki:2005-07-01 cpe:/a:dokuwiki:dokuwiki:2005-07-13 cpe:/a:dokuwiki:dokuwiki:2005-09-19 cpe:/a:dokuwiki:dokuwiki:2005-09-22 cpe:/a:dokuwiki:dokuwiki:2006-03-05 cpe:/a:dokuwiki:dokuwiki:2006-03-09 cpe:/a:dokuwiki:dokuwiki:2006-03-09e cpe:/a:dokuwiki:dokuwiki:2006-06-04 cpe:/a:dokuwiki:dokuwiki:release_2009-02-14

CVE-2010-0287

2010-02-15T13:30:00.610-05:00

2019-09-23T14:13:13.707-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://bugs.splitbrain.org/index.php?do=details&task_id=1847 FEDORA FEDORA-2010-0770 FEDORA FEDORA-2010-0800 GENTOO GLSA-201301-07 DEBIAN DSA-1976 EXPLOIT-DB 11141 BID 37821 CONFIRM http://www.splitbrain.org/blog/2010-01/17-dokuwiki-security VUPEN ADV-2010-0150 XF dokuwiki-ajax-dir-traversal(55660) Directory traversal vulnerability in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote attackers to list the contents of arbitrary directories via a .. (dot dot) in the ns parameter.

CVE-2010-0288

2010-02-15T13:30:00.643-05:00

2019-09-23T14:13:13.707-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://bugs.splitbrain.org/index.php?do=details&task_id=1847 FEDORA FEDORA-2010-0770 FEDORA FEDORA-2010-0800 GENTOO GLSA-201301-07 DEBIAN DSA-1976 EXPLOIT-DB 11141 BID 37820 CONFIRM http://www.splitbrain.org/blog/2010-01/17-dokuwiki-security VUPEN ADV-2010-0150 XF dokuwiki-ajax-security-bypass(55661) A typo in the administrator permission check in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote attackers to gain privileges and access closed wikis by editing current ACL statements, as demonstrated in the wild in January 2010.

CVE-2010-0289

2010-02-15T13:30:00.690-05:00

2019-09-23T14:13:13.707-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://bugs.splitbrain.org/index.php?do=details&task_id=1853 CONFIRM http://freshmeat.net/projects/dokuwiki/tags/security-fix FEDORA FEDORA-2010-0770 FEDORA FEDORA-2010-0800 GENTOO GLSA-201301-07 DEBIAN DSA-1976 CONFIRM http://www.splitbrain.org/blog/2010-01/17-dokuwiki-security Multiple cross-site request forgery (CSRF) vulnerabilities in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25c allow remote attackers to hijack the authentication of administrators for requests that modify access control rules, and other unspecified requests, via unknown vectors.

cpe:/a:isc:bind:9.0 cpe:/a:isc:bind:9.0.0:rc1 cpe:/a:isc:bind:9.0.0:rc2 cpe:/a:isc:bind:9.0.0:rc3 cpe:/a:isc:bind:9.0.0:rc4 cpe:/a:isc:bind:9.0.0:rc5 cpe:/a:isc:bind:9.0.0:rc6 cpe:/a:isc:bind:9.0.1 cpe:/a:isc:bind:9.0.1:rc1 cpe:/a:isc:bind:9.0.1:rc2 cpe:/a:isc:bind:9.1 cpe:/a:isc:bind:9.1.0:rc1 cpe:/a:isc:bind:9.1.1 cpe:/a:isc:bind:9.1.1:rc1 cpe:/a:isc:bind:9.1.1:rc2 cpe:/a:isc:bind:9.1.1:rc3 cpe:/a:isc:bind:9.1.1:rc4 cpe:/a:isc:bind:9.1.1:rc5 cpe:/a:isc:bind:9.1.1:rc6 cpe:/a:isc:bind:9.1.1:rc7 cpe:/a:isc:bind:9.1.2 cpe:/a:isc:bind:9.1.2:rc1 cpe:/a:isc:bind:9.1.3 cpe:/a:isc:bind:9.1.3:rc1 cpe:/a:isc:bind:9.1.3:rc2 cpe:/a:isc:bind:9.1.3:rc3 cpe:/a:isc:bind:9.2 cpe:/a:isc:bind:9.2.0 cpe:/a:isc:bind:9.2.0:a1 cpe:/a:isc:bind:9.2.0:a2 cpe:/a:isc:bind:9.2.0:a3 cpe:/a:isc:bind:9.2.0:b1 cpe:/a:isc:bind:9.2.0:b2 cpe:/a:isc:bind:9.2.0:rc1 cpe:/a:isc:bind:9.2.0:rc10 cpe:/a:isc:bind:9.2.0:rc2 cpe:/a:isc:bind:9.2.0:rc3 cpe:/a:isc:bind:9.2.0:rc4 cpe:/a:isc:bind:9.2.0:rc5 cpe:/a:isc:bind:9.2.0:rc6 cpe:/a:isc:bind:9.2.0:rc7 cpe:/a:isc:bind:9.2.0:rc8 cpe:/a:isc:bind:9.2.0:rc9 cpe:/a:isc:bind:9.2.1 cpe:/a:isc:bind:9.2.1:rc1 cpe:/a:isc:bind:9.2.1:rc2 cpe:/a:isc:bind:9.2.2 cpe:/a:isc:bind:9.2.2:p2 cpe:/a:isc:bind:9.2.2:p3 cpe:/a:isc:bind:9.2.2:rc1 cpe:/a:isc:bind:9.2.3 cpe:/a:isc:bind:9.2.3:rc1 cpe:/a:isc:bind:9.2.3:rc2 cpe:/a:isc:bind:9.2.3:rc3 cpe:/a:isc:bind:9.2.3:rc4 cpe:/a:isc:bind:9.2.4 cpe:/a:isc:bind:9.2.4:rc2 cpe:/a:isc:bind:9.2.4:rc3 cpe:/a:isc:bind:9.2.4:rc4 cpe:/a:isc:bind:9.2.4:rc5 cpe:/a:isc:bind:9.2.4:rc6 cpe:/a:isc:bind:9.2.4:rc7 cpe:/a:isc:bind:9.2.4:rc8 cpe:/a:isc:bind:9.2.5 cpe:/a:isc:bind:9.2.5:b2 cpe:/a:isc:bind:9.2.5:rc1 cpe:/a:isc:bind:9.2.6 cpe:/a:isc:bind:9.2.6:rc1 cpe:/a:isc:bind:9.2.7 cpe:/a:isc:bind:9.2.7:rc1 cpe:/a:isc:bind:9.2.7:rc2 cpe:/a:isc:bind:9.2.7:rc3 cpe:/a:isc:bind:9.2.8 cpe:/a:isc:bind:9.2.9 cpe:/a:isc:bind:9.2.9:rc1 cpe:/a:isc:bind:9.3 cpe:/a:isc:bind:9.3.0 cpe:/a:isc:bind:9.3.0:b2 cpe:/a:isc:bind:9.3.0:b3 cpe:/a:isc:bind:9.3.0:b4 cpe:/a:isc:bind:9.3.0:rc1 cpe:/a:isc:bind:9.3.0:rc2 cpe:/a:isc:bind:9.3.0:rc3 cpe:/a:isc:bind:9.3.0:rc4 cpe:/a:isc:bind:9.3.1 cpe:/a:isc:bind:9.3.1:b2 cpe:/a:isc:bind:9.3.1:rc1 cpe:/a:isc:bind:9.3.2 cpe:/a:isc:bind:9.3.2:rc1 cpe:/a:isc:bind:9.3.3 cpe:/a:isc:bind:9.3.3:rc1 cpe:/a:isc:bind:9.3.3:rc2 cpe:/a:isc:bind:9.3.3:rc3 cpe:/a:isc:bind:9.3.4 cpe:/a:isc:bind:9.3.5 cpe:/a:isc:bind:9.3.5:rc1 cpe:/a:isc:bind:9.3.5:rc2 cpe:/a:isc:bind:9.3.6 cpe:/a:isc:bind:9.3.6:rc1 cpe:/a:isc:bind:9.4 cpe:/a:isc:bind:9.4.0 cpe:/a:isc:bind:9.4.0:a1 cpe:/a:isc:bind:9.4.0:a2 cpe:/a:isc:bind:9.4.0:a3 cpe:/a:isc:bind:9.4.0:a4 cpe:/a:isc:bind:9.4.0:a5 cpe:/a:isc:bind:9.4.0:a6 cpe:/a:isc:bind:9.4.0:b1 cpe:/a:isc:bind:9.4.0:b2 cpe:/a:isc:bind:9.4.0:b3 cpe:/a:isc:bind:9.4.0:b4 cpe:/a:isc:bind:9.4.0:rc1 cpe:/a:isc:bind:9.4.0:rc2 cpe:/a:isc:bind:9.4.1 cpe:/a:isc:bind:9.4.2 cpe:/a:isc:bind:9.4.2:rc1 cpe:/a:isc:bind:9.4.2:rc2 cpe:/a:isc:bind:9.4.3 cpe:/a:isc:bind:9.4.3:b1 cpe:/a:isc:bind:9.4.3:b2 cpe:/a:isc:bind:9.4.3:b3 cpe:/a:isc:bind:9.4.3:p1 cpe:/a:isc:bind:9.4.3:p2 cpe:/a:isc:bind:9.4.3:p3 cpe:/a:isc:bind:9.4.3:p4 cpe:/a:isc:bind:9.4.3:p5 cpe:/a:isc:bind:9.4.3:rc1 cpe:/a:isc:bind:9.6.0 cpe:/a:isc:bind:9.6.0:a1 cpe:/a:isc:bind:9.6.0:b1 cpe:/a:isc:bind:9.6.0:p1 cpe:/a:isc:bind:9.6.0:rc1 cpe:/a:isc:bind:9.6.0:rc2 cpe:/a:isc:bind:9.6.1 cpe:/a:isc:bind:9.6.1:b1 cpe:/a:isc:bind:9.6.1:p1 cpe:/a:isc:bind:9.6.1:p2 cpe:/a:isc:bind:9.6.1:rc1 cpe:/a:isc:bind:9.7.0:b1 cpe:/a:isc:bind:9.10.0 cpe:/a:isc:bind:9.10.0:a1 cpe:/a:isc:bind:9.10.0:a2 cpe:/a:isc:bind:9.10.0:b1 cpe:/a:isc:bind:9.10.0:b2 cpe:/a:isc:bind:9.10.0:p1 cpe:/a:isc:bind:9.10.0:p2 cpe:/a:isc:bind:9.10.0:rc1 cpe:/a:isc:bind:9.10.0:rc2 cpe:/a:isc:bind:9.10.1 cpe:/a:isc:bind:9.10.1:b1 cpe:/a:isc:bind:9.10.1:b2 cpe:/a:isc:bind:9.10.1:p1 cpe:/a:isc:bind:9.10.1:p2 cpe:/a:isc:bind:9.10.1:rc1 cpe:/a:isc:bind:9.10.1:rc2 cpe:/a:isc:bind:9.10.2:b1 cpe:/a:isc:bind:9.10.2:p1 cpe:/a:isc:bind:9.10.2:p2 cpe:/a:isc:bind:9.10.2:p3 cpe:/a:isc:bind:9.10.2:p4 cpe:/a:isc:bind:9.10.2:rc1 cpe:/a:isc:bind:9.10.2:rc2 cpe:/a:isc:bind:9.10.3 cpe:/a:isc:bind:9.10.3:b1 cpe:/a:isc:bind:9.10.3:p1 cpe:/a:isc:bind:9.10.3:p2 cpe:/a:isc:bind:9.10.3:p3 cpe:/a:isc:bind:9.10.3:rc1

CVE-2010-0290

2010-01-22T17:00:00.617-05:00

2017-09-18T21:30:21.143-04:00

4.0

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov SUSE SUSE-SA:2010:008 MLIST [oss-security] 20100119 BIND CVE-2009-4022 fix incomplete MLIST [oss-security] 20100120 Re: BIND CVE-2009-4022 fix incomplete CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018 DEBIAN DSA-2054 MANDRIVA MDVSA-2010:021 UBUNTU USN-888-1 VUPEN ADV-2010-0176 VUPEN ADV-2010-0622 VUPEN ADV-2010-1352 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=554851 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=557121 REDHAT RHSA-2010:0062 CONFIRM https://www.isc.org/advisories/CVE-2009-4022v6 Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains (1) CNAME or (2) DNAME records, which do not have the intended validation before caching, aka Bug 20737. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4022.

CVE-2010-0291

2010-02-15T13:30:00.720-05:00

2018-11-16T10:57:09.200-05:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2018-11-13T11:55:48.120-05:00

CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=0067bd8a55862ac9dd212bd1c4f6f5bff1ca1301 CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=05d72faa6d13c9d857478a5d35c85db9adada685 CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=097eed103862f9c6a97f2e415e21d1134017b135 CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=0ec62d290912bb4b989be7563851bc364ec73b56 CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=1a0ef85f84feb13f07b604fcf5b90ef7c2b5c82f CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=2c6a10161d0b5fc047b5bd81b03693b9af99fab5 CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=2ea1d13f64efdf49319e86c87d9ba38c30902782 CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=54f5de709984bae0d31d823ff03de755f9dcac54 CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=564b3bffc619dcbdd160de597b0547a7017ea010 CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=570dcf2c15463842e384eb597a87c1e39bead99b CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8c7b49b3ecd48923eb64ff57e07a1cdb74782970 CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=9206de95b1ea68357996ec02be5db0638a0de2c1 CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=935874141df839c706cd6cdc438e85eb69d1525e CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=aa65607373a4daf2010e8c3867b6317619f3c1a3 CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=bb52d6694002b9d632bb355f64daa045c6293a4e CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c4caa778157dbbf04116f0ac2111e389b5cd7a29 CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=e77414e0aad6a1b063ba5e5750c582c75327ea6a CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ecc1a8993751de4e82eb18640d631dae1f626bd6 CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f106af4e90eadd76cfc0b5325f659619e08fb762 CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f8b7256096a20436f6d0926747e3ac3d64c81d24 CONFIRM http://groups.google.co.jp/group/fa.linux.kernel/browse_thread/thread/8bf22336b1082090 MLIST [linux-kernel] 20100114 [PATCH 01/52] untangle the do_mremap() mess MLIST [linux-kernel] 20091205 [RFC][PATCHSET] mremap/mmap mess MLIST [oss-security] 20100119 CVE request - kernel: untangle the do_mremap() mess MLIST [oss-security] 20100119 Re: CVE request - kernel: untangle the do_mremap() mess MLIST [oss-security] 20100120 Re: CVE request - kernel: untangle the do_mremap() mess MLIST [oss-security] 20100120 Re: CVE request - kernel: untangle the do_mremap() mess MLIST [oss-security] 20100120 Re: CVE request - kernel: untangle the do_mremap() mess MLIST [oss-security] 20100120 Re: CVE request - kernel: untangle the do_mremap() mess MLIST [oss-security] 20100120 Re: CVE request - kernel: untangle the do_mremap() mess MLIST [oss-security] 20100121 Re: CVE request - kernel: untangle the do_mremap() mess DEBIAN DSA-1996 DEBIAN DSA-2005 CONFIRM http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.4 REDHAT RHSA-2010:0161 BUGTRAQ 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX BID 37906 CONFIRM http://www.vmware.com/security/advisories/VMSA-2011-0003.html CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=556703 The Linux kernel before 2.6.32.4 allows local users to gain privileges or cause a denial of service (panic) by calling the (1) mmap or (2) mremap function, aka the "do_mremap() mess" or "mremap/mmap mess."

cpe:/a:tuxfamily:chrony:1.18 cpe:/a:tuxfamily:chrony:1.19 cpe:/a:tuxfamily:chrony:1.19-1 cpe:/a:tuxfamily:chrony:1.19.99.1 cpe:/a:tuxfamily:chrony:1.19.99.2 cpe:/a:tuxfamily:chrony:1.19.99.3 cpe:/a:tuxfamily:chrony:1.20 cpe:/a:tuxfamily:chrony:1.21 cpe:/a:tuxfamily:chrony:1.21-pre1 cpe:/a:tuxfamily:chrony:1.23-pre1 cpe:/a:tuxfamily:chrony:1.24-pre1

CVE-2010-0292

2010-02-08T15:30:00.657-05:00

2010-02-09T00:00:00.000-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-02-09T08:32:00.000-05:00

CONFIRM http://chrony.tuxfamily.org/News.html CONFIRM http://git.tuxfamily.org/chrony/chrony.git/?p=gitroot/chrony/chrony.git;a=commit;h=7864c7a70ce00369194e734eb2842ecc5f8db531 DEBIAN DSA-1992 BID 38106 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=555367 The read_from_cmd_socket function in cmdmon.c in chronyd in Chrony before 1.23.1, and 1.24-pre1, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by sending a spoofed cmdmon packet that triggers a continuous exchange of NOHOSTACCESS messages between two daemons, a related issue to CVE-2009-3563.

CVE-2010-0293

2010-02-08T15:30:01.233-05:00

2010-02-09T00:00:00.000-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-02-09T08:42:00.000-05:00

CONFIRM http://chrony.tuxfamily.org/News.html CONFIRM http://git.tuxfamily.org/chrony/chrony.git/?p=gitroot/chrony/chrony.git;a=commit;h=2f63cf448560fdb96b80d8488aae6a15b802a753 DEBIAN DSA-1992 BID 38106 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=555367 The client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount of memory used for storage of client information, which allows remote attackers to cause a denial of service (memory consumption) via spoofed (1) NTP or (2) cmdmon packets.

CVE-2010-0294

2010-02-08T15:30:01.263-05:00

2010-02-09T00:00:00.000-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-02-09T08:52:00.000-05:00

CONFIRM http://chrony.tuxfamily.org/News.html CONFIRM http://git.tuxfamily.org/chrony/chrony.git/?p=gitroot/chrony/chrony.git;a=commit;h=0b710499f994823bd938fc6895f097eefb9cc59f DEBIAN DSA-1992 BID 38106 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=555367 chronyd in Chrony before 1.23.1, and possibly 1.24-pre1, generates a syslog message for each unauthorized cmdmon packet, which allows remote attackers to cause a denial of service (disk consumption) via a large number of invalid packets.

cpe:/a:lighttpd:lighttpd:1.0.2 cpe:/a:lighttpd:lighttpd:1.0.3 cpe:/a:lighttpd:lighttpd:1.1.0 cpe:/a:lighttpd:lighttpd:1.1.1 cpe:/a:lighttpd:lighttpd:1.1.2 cpe:/a:lighttpd:lighttpd:1.1.3 cpe:/a:lighttpd:lighttpd:1.1.4 cpe:/a:lighttpd:lighttpd:1.1.5 cpe:/a:lighttpd:lighttpd:1.1.6 cpe:/a:lighttpd:lighttpd:1.1.7 cpe:/a:lighttpd:lighttpd:1.1.8 cpe:/a:lighttpd:lighttpd:1.1.9 cpe:/a:lighttpd:lighttpd:1.2.0 cpe:/a:lighttpd:lighttpd:1.2.1 cpe:/a:lighttpd:lighttpd:1.2.2 cpe:/a:lighttpd:lighttpd:1.2.3 cpe:/a:lighttpd:lighttpd:1.2.5 cpe:/a:lighttpd:lighttpd:1.2.6 cpe:/a:lighttpd:lighttpd:1.2.7 cpe:/a:lighttpd:lighttpd:1.2.8 cpe:/a:lighttpd:lighttpd:1.3.0 cpe:/a:lighttpd:lighttpd:1.3.1 cpe:/a:lighttpd:lighttpd:1.3.2 cpe:/a:lighttpd:lighttpd:1.3.3 cpe:/a:lighttpd:lighttpd:1.3.4 cpe:/a:lighttpd:lighttpd:1.3.5 cpe:/a:lighttpd:lighttpd:1.3.6 cpe:/a:lighttpd:lighttpd:1.3.8 cpe:/a:lighttpd:lighttpd:1.3.9 cpe:/a:lighttpd:lighttpd:1.3.10 cpe:/a:lighttpd:lighttpd:1.3.11 cpe:/a:lighttpd:lighttpd:1.3.12 cpe:/a:lighttpd:lighttpd:1.3.13 cpe:/a:lighttpd:lighttpd:1.3.14 cpe:/a:lighttpd:lighttpd:1.3.15 cpe:/a:lighttpd:lighttpd:1.3.16 cpe:/a:lighttpd:lighttpd:1.4.0 cpe:/a:lighttpd:lighttpd:1.4.2 cpe:/a:lighttpd:lighttpd:1.4.3 cpe:/a:lighttpd:lighttpd:1.4.4 cpe:/a:lighttpd:lighttpd:1.4.5 cpe:/a:lighttpd:lighttpd:1.4.6 cpe:/a:lighttpd:lighttpd:1.4.7 cpe:/a:lighttpd:lighttpd:1.4.8 cpe:/a:lighttpd:lighttpd:1.4.9 cpe:/a:lighttpd:lighttpd:1.4.10 cpe:/a:lighttpd:lighttpd:1.4.11 cpe:/a:lighttpd:lighttpd:1.4.12 cpe:/a:lighttpd:lighttpd:1.4.13 cpe:/a:lighttpd:lighttpd:1.4.14 cpe:/a:lighttpd:lighttpd:1.4.15 cpe:/a:lighttpd:lighttpd:1.4.16 cpe:/a:lighttpd:lighttpd:1.4.17 cpe:/a:lighttpd:lighttpd:1.4.18 cpe:/a:lighttpd:lighttpd:1.4.19 cpe:/a:lighttpd:lighttpd:1.4.20 cpe:/a:lighttpd:lighttpd:1.4.21 cpe:/a:lighttpd:lighttpd:1.4.22 cpe:/a:lighttpd:lighttpd:1.4.23 cpe:/a:lighttpd:lighttpd:1.4.24 cpe:/a:lighttpd:lighttpd:1.4.25 cpe:/a:lighttpd:lighttpd:1.5.0

CVE-2010-0295

2010-02-03T14:30:00.467-05:00

2017-08-16T21:31:57.367-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://blogs.sun.com/security/entry/cve_2010_0295_vulnerability_in CONFIRM http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2010_01.txt CONFIRM http://download.lighttpd.net/lighttpd/security/lighttpd-1.4.x_fix_slow_request_dos.patch CONFIRM http://download.lighttpd.net/lighttpd/security/lighttpd-1.5_fix_slow_request_dos.patch FEDORA FEDORA-2010-7636 FEDORA FEDORA-2010-7611 FEDORA FEDORA-2010-7643 SUSE SUSE-SR:2010:003 CONFIRM http://redmine.lighttpd.net/issues/2147 CONFIRM http://redmine.lighttpd.net/projects/lighttpd/repository/revisions/2710 CONFIRM http://redmine.lighttpd.net/projects/lighttpd/repository/revisions/2711 GENTOO GLSA-201006-17 DEBIAN DSA-1987 MLIST [oss-security] 20100202 lighttpd: slow request dos/oom attack [CVE-2010-0295] BID 38036 VUPEN ADV-2011-0172 XF lighttpd-slow-request-dos(56038) lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows remote attackers to cause a denial of service (memory consumption) by breaking a request into small pieces that are sent at a slow rate.

cpe:/a:gnu:glibc:2.0 cpe:/a:gnu:glibc:2.0.1 cpe:/a:gnu:glibc:2.0.2 cpe:/a:gnu:glibc:2.0.3 cpe:/a:gnu:glibc:2.0.4 cpe:/a:gnu:glibc:2.0.5 cpe:/a:gnu:glibc:2.0.6 cpe:/a:gnu:glibc:2.1 cpe:/a:gnu:glibc:2.1.1 cpe:/a:gnu:glibc:2.1.1.6 cpe:/a:gnu:glibc:2.1.2 cpe:/a:gnu:glibc:2.1.3 cpe:/a:gnu:glibc:2.1.9 cpe:/a:gnu:glibc:2.2 cpe:/a:gnu:glibc:2.2.1 cpe:/a:gnu:glibc:2.2.2 cpe:/a:gnu:glibc:2.2.3 cpe:/a:gnu:glibc:2.2.4 cpe:/a:gnu:glibc:2.2.5 cpe:/a:gnu:glibc:2.3 cpe:/a:gnu:glibc:2.3.1 cpe:/a:gnu:glibc:2.3.2 cpe:/a:gnu:glibc:2.3.3 cpe:/a:gnu:glibc:2.3.4 cpe:/a:gnu:glibc:2.3.5 cpe:/a:gnu:glibc:2.3.6 cpe:/a:gnu:glibc:2.3.10 cpe:/a:gnu:glibc:2.4 cpe:/a:gnu:glibc:2.5 cpe:/a:gnu:glibc:2.5.1 cpe:/a:gnu:glibc:2.6 cpe:/a:gnu:glibc:2.6.1 cpe:/a:gnu:glibc:2.7 cpe:/a:gnu:glibc:2.8 cpe:/a:gnu:glibc:2.9 cpe:/a:gnu:glibc:2.10 cpe:/a:gnu:glibc:2.10.1 cpe:/a:gnu:glibc:2.11 cpe:/a:gnu:glibc:2.11.1

CVE-2010-0296

2010-06-01T16:30:02.790-04:00

2019-06-13T17:29:00.283-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://frugalware.org/security/662 MISC http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html FULLDISC 20190612 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series GENTOO GLSA-201011-01 SECTRACK 1024043 CONFIRM http://sourceware.org/git/?p=glibc.git;a=commit;h=ab00f4eac8f4932211259ff87be83144f5211540 DEBIAN DSA-2058 MANDRIVA MDVSA-2010:111 MANDRIVA MDVSA-2010:112 REDHAT RHSA-2011:0412 BUGTRAQ 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console UBUNTU USN-944-1 CONFIRM http://www.vmware.com/security/advisories/VMSA-2011-0012.html VUPEN ADV-2010-1246 VUPEN ADV-2011-0863 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=559579 XF gnuclibrary-encodenamemacro-dos(59240) SUSE SUSE-SA:2010:052 BUGTRAQ 20190613 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series The encode_name macro in misc/mntent_r.c in the GNU C Library (aka glibc or libc6) 2.11.1 and earlier, as used by ncpmount and mount.cifs, does not properly handle newline characters in mountpoint names, which allows local users to cause a denial of service (mtab corruption), or possibly modify mount options and gain privileges, via a crafted mount request.

cpe:/a:qemu:qemu:0.1 cpe:/a:qemu:qemu:0.1.1 cpe:/a:qemu:qemu:0.1.2 cpe:/a:qemu:qemu:0.1.3 cpe:/a:qemu:qemu:0.1.4 cpe:/a:qemu:qemu:0.1.5 cpe:/a:qemu:qemu:0.1.6 cpe:/a:qemu:qemu:0.2 cpe:/a:qemu:qemu:0.3 cpe:/a:qemu:qemu:0.4 cpe:/a:qemu:qemu:0.4.1 cpe:/a:qemu:qemu:0.4.2 cpe:/a:qemu:qemu:0.4.3 cpe:/a:qemu:qemu:0.5.0 cpe:/a:qemu:qemu:0.5.1 cpe:/a:qemu:qemu:0.5.2 cpe:/a:qemu:qemu:0.5.3 cpe:/a:qemu:qemu:0.5.4 cpe:/a:qemu:qemu:0.5.5 cpe:/a:qemu:qemu:0.6.0 cpe:/a:qemu:qemu:0.6.1 cpe:/a:qemu:qemu:0.7.0 cpe:/a:qemu:qemu:0.7.1 cpe:/a:qemu:qemu:0.7.2 cpe:/a:qemu:qemu:0.8.0 cpe:/a:qemu:qemu:0.8.1 cpe:/a:qemu:qemu:0.8.2 cpe:/a:qemu:qemu:0.9.0 cpe:/a:qemu:qemu:0.9.1 cpe:/a:qemu:qemu:0.9.1-5 cpe:/a:qemu:qemu:0.10.0 cpe:/a:qemu:qemu:0.10.1 cpe:/a:qemu:qemu:0.10.2 cpe:/a:qemu:qemu:0.10.3 cpe:/a:qemu:qemu:0.10.4 cpe:/a:qemu:qemu:0.10.5 cpe:/a:qemu:qemu:0.10.6 cpe:/a:qemu:qemu:0.11.0 cpe:/a:qemu:qemu:0.11.0-rc0 cpe:/a:qemu:qemu:0.11.0-rc1 cpe:/a:qemu:qemu:0.11.0-rc2

CVE-2010-0297

2010-02-12T14:30:00.503-05:00

2017-09-18T21:30:21.377-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://git.savannah.gnu.org/cgit/qemu.git/commit/?id=babd03fde68093482528010a5435c14ce9128e3f MLIST [oss-security] 20100202 KVM possible security issues fixed MLIST [oss-security] 20100204 Re: KVM possible security issues fixed CONFIRM http://wiki.qemu.org/ChangeLog MLIST [kvm] 20090702 KVM crashes when using certain USB device MLIST [kvm] 20090721 Re: KVM crashes when using certain USB device MLIST [kvm] 20090721 Re: KVM crashes when using certain USB device BID 38158 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=557025 XF kernel-usb-bo(56194) REDHAT RHSA-2010:0088 Buffer overflow in the usb_host_handle_control function in the USB passthrough handling implementation in usb-linux.c in QEMU before 0.11.1 allows guest OS users to cause a denial of service (guest OS crash or hang) or possibly execute arbitrary code on the host OS via a crafted USB packet.

cpe:/o:linux:linux_kernel

CVE-2010-0298

2010-02-12T14:30:00.550-05:00

2017-09-18T21:30:21.440-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov DEBIAN DSA-1996 BID 38158 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=559091 REDHAT RHSA-2010:0088 REDHAT RHSA-2010:0095 The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) in determining the memory access available to CPL3 code, which allows guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, a related issue to CVE-2010-0306.

cpe:/o:opensuse:opensuse:11.2

CVE-2010-0299

2010-02-22T13:30:01.407-05:00

2018-10-30T12:27:33.343-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-02-23T09:30:00.000-05:00

SUSE SUSE-SA:2010:010 openSUSE 11.2 installs the devtmpfs root directory with insecure permissions (1777), which allows local users to gain privileges via unspecified vectors.

cpe:/a:ircd-ratbox:ircd-ratbox:1.0 cpe:/a:ircd-ratbox:ircd-ratbox:1.1 cpe:/a:ircd-ratbox:ircd-ratbox:1.1.1 cpe:/a:ircd-ratbox:ircd-ratbox:1.1.2 cpe:/a:ircd-ratbox:ircd-ratbox:1.2.1 cpe:/a:ircd-ratbox:ircd-ratbox:1.2.2 cpe:/a:ircd-ratbox:ircd-ratbox:1.2.3 cpe:/a:ircd-ratbox:ircd-ratbox:1.3 cpe:/a:ircd-ratbox:ircd-ratbox:1.3.1 cpe:/a:ircd-ratbox:ircd-ratbox:1.3.2 cpe:/a:ircd-ratbox:ircd-ratbox:1.4 cpe:/a:ircd-ratbox:ircd-ratbox:1.4:rc1 cpe:/a:ircd-ratbox:ircd-ratbox:1.4:rc2 cpe:/a:ircd-ratbox:ircd-ratbox:1.4.1 cpe:/a:ircd-ratbox:ircd-ratbox:1.4.2 cpe:/a:ircd-ratbox:ircd-ratbox:1.5 cpe:/a:ircd-ratbox:ircd-ratbox:1.5.1 cpe:/a:ircd-ratbox:ircd-ratbox:1.5.2 cpe:/a:ircd-ratbox:ircd-ratbox:1.5.3 cpe:/a:ircd-ratbox:ircd-ratbox:2.0.0 cpe:/a:ircd-ratbox:ircd-ratbox:2.0.1 cpe:/a:ircd-ratbox:ircd-ratbox:2.0.2 cpe:/a:ircd-ratbox:ircd-ratbox:2.0.3 cpe:/a:ircd-ratbox:ircd-ratbox:2.0.4 cpe:/a:ircd-ratbox:ircd-ratbox:2.0.5 cpe:/a:ircd-ratbox:ircd-ratbox:2.0.6 cpe:/a:ircd-ratbox:ircd-ratbox:2.0.7 cpe:/a:ircd-ratbox:ircd-ratbox:2.0.8 cpe:/a:ircd-ratbox:ircd-ratbox:2.0.9 cpe:/a:ircd-ratbox:ircd-ratbox:2.0.10 cpe:/a:ircd-ratbox:ircd-ratbox:2.0.11 cpe:/a:ircd-ratbox:ircd-ratbox:2.1.0 cpe:/a:ircd-ratbox:ircd-ratbox:2.1.0:beta1 cpe:/a:ircd-ratbox:ircd-ratbox:2.1.0:beta2 cpe:/a:ircd-ratbox:ircd-ratbox:2.1.1 cpe:/a:ircd-ratbox:ircd-ratbox:2.1.2 cpe:/a:ircd-ratbox:ircd-ratbox:2.1.3 cpe:/a:ircd-ratbox:ircd-ratbox:2.1.4 cpe:/a:ircd-ratbox:ircd-ratbox:2.1.5 cpe:/a:ircd-ratbox:ircd-ratbox:2.1.6 cpe:/a:ircd-ratbox:ircd-ratbox:2.1.7 cpe:/a:ircd-ratbox:ircd-ratbox:2.1.8 cpe:/a:ircd-ratbox:ircd-ratbox:2.2.0 cpe:/a:ircd-ratbox:ircd-ratbox:2.2.0:rc1 cpe:/a:ircd-ratbox:ircd-ratbox:2.2.0:rc2 cpe:/a:ircd-ratbox:ircd-ratbox:2.2.0:rc3 cpe:/a:ircd-ratbox:ircd-ratbox:2.2.1 cpe:/a:ircd-ratbox:ircd-ratbox:2.2.2 cpe:/a:ircd-ratbox:ircd-ratbox:2.2.3 cpe:/a:ircd-ratbox:ircd-ratbox:2.2.4 cpe:/a:ircd-ratbox:ircd-ratbox:2.2.5 cpe:/a:ircd-ratbox:ircd-ratbox:2.2.6 cpe:/a:ircd-ratbox:ircd-ratbox:2.2.7 cpe:/a:ircd-ratbox:ircd-ratbox:2.2.7.1 cpe:/a:ircd-ratbox:ircd-ratbox:2.2.8

CVE-2010-0300

2010-02-04T15:15:23.860-05:00

2010-02-05T00:00:00.000-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-02-05T10:47:00.000-05:00

MLIST [ircd-ratbox] 20100125 ircd-ratbox-2.2.9 released CONFIRM http://security.debian.org/pool/updates/main/i/ircd-ratbox/ircd-ratbox_2.2.8.dfsg-2+lenny1.diff.gz DEBIAN DSA-1980 cache.c in ircd-ratbox before 2.2.9 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a HELP command.

cpe:/a:maildrop:maildrop:0.50 cpe:/a:maildrop:maildrop:0.51 cpe:/a:maildrop:maildrop:0.51b cpe:/a:maildrop:maildrop:0.51c cpe:/a:maildrop:maildrop:0.54 cpe:/a:maildrop:maildrop:0.54a cpe:/a:maildrop:maildrop:0.54b cpe:/a:maildrop:maildrop:0.55 cpe:/a:maildrop:maildrop:0.55a cpe:/a:maildrop:maildrop:0.55b cpe:/a:maildrop:maildrop:0.55c cpe:/a:maildrop:maildrop:0.60 cpe:/a:maildrop:maildrop:0.61 cpe:/a:maildrop:maildrop:0.62 cpe:/a:maildrop:maildrop:0.63 cpe:/a:maildrop:maildrop:0.64 cpe:/a:maildrop:maildrop:0.65 cpe:/a:maildrop:maildrop:0.70 cpe:/a:maildrop:maildrop:0.71 cpe:/a:maildrop:maildrop:0.72 cpe:/a:maildrop:maildrop:0.73 cpe:/a:maildrop:maildrop:0.74 cpe:/a:maildrop:maildrop:0.75 cpe:/a:maildrop:maildrop:0.76 cpe:/a:maildrop:maildrop:0.99.1 cpe:/a:maildrop:maildrop:0.99.2 cpe:/a:maildrop:maildrop:1.0 cpe:/a:maildrop:maildrop:1.1 cpe:/a:maildrop:maildrop:1.2 cpe:/a:maildrop:maildrop:1.2.1 cpe:/a:maildrop:maildrop:1.2.2 cpe:/a:maildrop:maildrop:1.3.0 cpe:/a:maildrop:maildrop:1.3.1 cpe:/a:maildrop:maildrop:1.3.3 cpe:/a:maildrop:maildrop:1.3.4 cpe:/a:maildrop:maildrop:1.3.5 cpe:/a:maildrop:maildrop:1.3.6 cpe:/a:maildrop:maildrop:1.3.7 cpe:/a:maildrop:maildrop:1.3.8 cpe:/a:maildrop:maildrop:1.3.9 cpe:/a:maildrop:maildrop:1.4.0 cpe:/a:maildrop:maildrop:1.5.0 cpe:/a:maildrop:maildrop:1.5.1 cpe:/a:maildrop:maildrop:1.5.2 cpe:/a:maildrop:maildrop:1.6.2 cpe:/a:maildrop:maildrop:1.6.3 cpe:/a:maildrop:maildrop:1.7.0 cpe:/a:maildrop:maildrop:1.8.1 cpe:/a:maildrop:maildrop:2.0.0 cpe:/a:maildrop:maildrop:2.0.1 cpe:/a:maildrop:maildrop:2.0.2 cpe:/a:maildrop:maildrop:2.0.3 cpe:/a:maildrop:maildrop:2.0.4 cpe:/a:maildrop:maildrop:2.1 cpe:/a:maildrop:maildrop:2.2 cpe:/a:maildrop:maildrop:2.3.0

CVE-2010-0301

2010-02-04T15:15:23.890-05:00

2017-08-16T21:31:57.587-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=564601 MLIST [oss-security] 20100127 CVE id request: maildrop MLIST [oss-security] 20100128 Re: CVE id request: maildrop MLIST [oss-security] 20100128 Re: CVE id request: maildrop MLIST [oss-security] 20100128 Re: CVE id request: maildrop SECTRACK 1023515 CONFIRM http://www.courier-mta.org/maildrop/changelog.html DEBIAN DSA-1981 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=559681 XF maildrop-group-priv-escalation(55980) main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user's home directory, which allows local users to gain privileges via a crafted file.

cpe:/a:apple:cups:1.3.7 cpe:/a:apple:cups:1.3.9 cpe:/a:apple:cups:1.3.10 cpe:/a:apple:cups:1.4.1

CVE-2010-0302

2010-03-05T14:30:00.437-05:00

2017-09-18T21:30:21.500-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://cups.org/articles.php?L596 CONFIRM http://cups.org/str.php?L3490 APPLE APPLE-SA-2010-06-15-1 FEDORA FEDORA-2010-2743 GENTOO GLSA-201207-10 CONFIRM http://support.apple.com/kb/HT4188 MANDRIVA MDVSA-2010:073 BID 38510 SECTRACK 1024124 UBUNTU USN-906-1 VUPEN ADV-2010-1481 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=557775 REDHAT RHSA-2010:0129 Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS before 1.4.4, when kqueue or epoll is used, allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-3553.

cpe:/a:dinko_korunic:hybserv2:1.9.2 cpe:/a:dinko_korunic:hybserv2:1.9.3 cpe:/a:dinko_korunic:hybserv2:1.9.4

CVE-2010-0303

2010-02-04T15:15:23.937-05:00

2017-08-16T21:31:57.647-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550389 MLIST [oss-security] 20100129 Re: CVE id: hybserv CONFIRM http://security.debian.org/pool/updates/main/h/hybserv/hybserv_1.9.2-4+lenny2.diff.gz DEBIAN DSA-1982 BID 38006 XF hybserv2-privatemessage-dos(55992) mystring.c in hybserv in IRCD-Hybrid (aka Hybrid2 IRC Services) 1.9.2 through 1.9.4 allows remote attackers to cause a denial of service (daemon crash) via a ":help \t" private message to the MemoServ service.

cpe:/a:wireshark:wireshark:0.9.15 cpe:/a:wireshark:wireshark:1.0 cpe:/a:wireshark:wireshark:1.0.0 cpe:/a:wireshark:wireshark:1.0.1 cpe:/a:wireshark:wireshark:1.0.2 cpe:/a:wireshark:wireshark:1.0.3 cpe:/a:wireshark:wireshark:1.0.4 cpe:/a:wireshark:wireshark:1.0.5 cpe:/a:wireshark:wireshark:1.0.6 cpe:/a:wireshark:wireshark:1.0.7 cpe:/a:wireshark:wireshark:1.0.8 cpe:/a:wireshark:wireshark:1.0.9 cpe:/a:wireshark:wireshark:1.0.10 cpe:/a:wireshark:wireshark:1.2 cpe:/a:wireshark:wireshark:1.2.0 cpe:/a:wireshark:wireshark:1.2.1 cpe:/a:wireshark:wireshark:1.2.2 cpe:/a:wireshark:wireshark:1.2.3 cpe:/a:wireshark:wireshark:1.2.4 cpe:/a:wireshark:wireshark:1.2.5

CVE-2010-0304

2010-02-03T13:30:00.717-05:00

2017-09-18T21:30:21.580-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://anonsvn.wireshark.org/viewvc/trunk-1.2/epan/dissectors/packet-lwres.c?view=diff&r1=31596&r2=28492&diff_format=h FEDORA FEDORA-2010-3556 DEBIAN DSA-1983 MANDRIVA MDVSA-2010:031 MISC http://www.metasploit.com/modules/exploit/multi/misc/wireshark_lwres_getaddrbyname MLIST [oss-security] 20100129 Re: CVE id request: Wireshark BID 37985 SECTRACK 1023516 VUPEN ADV-2010-0239 CONFIRM http://www.wireshark.org/security/wnpa-sec-2010-01.html CONFIRM http://www.wireshark.org/security/wnpa-sec-2010-02.html XF wireshark-lwres-bo(55951) Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a denial of service (crash) via a malformed packet, as demonstrated using a stack-based buffer overflow to the dissect_getaddrsbyname_request function.

cpe:/a:process-one:ejabberd:0.9 cpe:/a:process-one:ejabberd:0.9.1 cpe:/a:process-one:ejabberd:0.9.8 cpe:/a:process-one:ejabberd:1.0.0 cpe:/a:process-one:ejabberd:1.1.0 cpe:/a:process-one:ejabberd:1.1.1 cpe:/a:process-one:ejabberd:1.1.1.0 cpe:/a:process-one:ejabberd:1.1.1.1 cpe:/a:process-one:ejabberd:1.1.2 cpe:/a:process-one:ejabberd:1.1.3 cpe:/a:process-one:ejabberd:1.1.14 cpe:/a:process-one:ejabberd:2.0.0 cpe:/a:process-one:ejabberd:2.0.0:beta1 cpe:/a:process-one:ejabberd:2.0.0:rc1 cpe:/a:process-one:ejabberd:2.0.1_2 cpe:/a:process-one:ejabberd:2.0.2 cpe:/a:process-one:ejabberd:2.0.3 cpe:/a:process-one:ejabberd:2.0.4 cpe:/a:process-one:ejabberd:2.0.5 cpe:/a:process-one:ejabberd:2.1.0 cpe:/a:process-one:ejabberd:2.1.1 cpe:/a:process-one:ejabberd:2.1.2

CVE-2010-0305

2010-02-03T14:30:00.517-05:00

2017-08-16T21:31:57.790-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov DEBIAN DSA-2033 MLIST [oss-security] 20100129 CVE Request -- ejabberd MLIST [oss-security] 20100129 Re: CVE Request -- ejabberd BID 38003 VUPEN ADV-2010-0894 XF ejabberd-client2server-dos(56025) CONFIRM https://support.process-one.net/browse/EJAB-1173 ejabberd_c2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service (daemon crash) via a large number of c2s (aka client2server) messages that trigger a queue overload.

cpe:/a:kvm_qumranet:kvm:83

CVE-2010-0306

2010-02-12T14:30:00.597-05:00

2017-09-18T21:30:21.643-04:00

4.1

LOCAL

MEDIUM

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov DEBIAN DSA-1996 BID 38158 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=560654 REDHAT RHSA-2010:0088 REDHAT RHSA-2010:0095 The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) to restrict instruction execution, which allows guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, and replacing an instruction in between emulator entry and instruction fetch, a related issue to CVE-2010-0298.

cpe:/o:canonical:ubuntu_linux:6.06::~~lts~~~ cpe:/o:canonical:ubuntu_linux:8.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:8.10 cpe:/o:canonical:ubuntu_linux:9.04 cpe:/o:canonical:ubuntu_linux:9.10 cpe:/o:debian:debian_linux:4.0 cpe:/o:debian:debian_linux:5.0 cpe:/o:linux:linux_kernel:- cpe:/o:linux:linux_kernel:1.2.0 cpe:/o:linux:linux_kernel:1.3.0 cpe:/o:linux:linux_kernel:2.0.0 cpe:/o:linux:linux_kernel:2.0.1 cpe:/o:linux:linux_kernel:2.0.2 cpe:/o:linux:linux_kernel:2.0.3 cpe:/o:linux:linux_kernel:2.0.4 cpe:/o:linux:linux_kernel:2.0.5 cpe:/o:linux:linux_kernel:2.0.6 cpe:/o:linux:linux_kernel:2.0.7 cpe:/o:linux:linux_kernel:2.0.8 cpe:/o:linux:linux_kernel:2.0.9 cpe:/o:linux:linux_kernel:2.0.10 cpe:/o:linux:linux_kernel:2.0.11 cpe:/o:linux:linux_kernel:2.0.12 cpe:/o:linux:linux_kernel:2.0.13 cpe:/o:linux:linux_kernel:2.0.14 cpe:/o:linux:linux_kernel:2.0.15 cpe:/o:linux:linux_kernel:2.0.16 cpe:/o:linux:linux_kernel:2.0.17 cpe:/o:linux:linux_kernel:2.0.18 cpe:/o:linux:linux_kernel:2.0.19 cpe:/o:linux:linux_kernel:2.0.20 cpe:/o:linux:linux_kernel:2.0.21 cpe:/o:linux:linux_kernel:2.0.22 cpe:/o:linux:linux_kernel:2.0.23 cpe:/o:linux:linux_kernel:2.0.24 cpe:/o:linux:linux_kernel:2.0.25 cpe:/o:linux:linux_kernel:2.0.26 cpe:/o:linux:linux_kernel:2.0.27 cpe:/o:linux:linux_kernel:2.0.28 cpe:/o:linux:linux_kernel:2.0.29 cpe:/o:linux:linux_kernel:2.0.30 cpe:/o:linux:linux_kernel:2.0.31 cpe:/o:linux:linux_kernel:2.0.32 cpe:/o:linux:linux_kernel:2.0.33 cpe:/o:linux:linux_kernel:2.0.34 cpe:/o:linux:linux_kernel:2.0.35 cpe:/o:linux:linux_kernel:2.0.36 cpe:/o:linux:linux_kernel:2.0.37 cpe:/o:linux:linux_kernel:2.0.38 cpe:/o:linux:linux_kernel:2.0.39 cpe:/o:linux:linux_kernel:2.1.0 cpe:/o:linux:linux_kernel:2.1.1 cpe:/o:linux:linux_kernel:2.1.2 cpe:/o:linux:linux_kernel:2.1.3 cpe:/o:linux:linux_kernel:2.1.4 cpe:/o:linux:linux_kernel:2.1.5 cpe:/o:linux:linux_kernel:2.1.6 cpe:/o:linux:linux_kernel:2.1.7 cpe:/o:linux:linux_kernel:2.1.8 cpe:/o:linux:linux_kernel:2.1.9 cpe:/o:linux:linux_kernel:2.1.10 cpe:/o:linux:linux_kernel:2.1.11 cpe:/o:linux:linux_kernel:2.1.12 cpe:/o:linux:linux_kernel:2.1.13 cpe:/o:linux:linux_kernel:2.1.14 cpe:/o:linux:linux_kernel:2.1.15 cpe:/o:linux:linux_kernel:2.1.16 cpe:/o:linux:linux_kernel:2.1.17 cpe:/o:linux:linux_kernel:2.1.18 cpe:/o:linux:linux_kernel:2.1.19 cpe:/o:linux:linux_kernel:2.1.20 cpe:/o:linux:linux_kernel:2.1.21 cpe:/o:linux:linux_kernel:2.1.22 cpe:/o:linux:linux_kernel:2.1.23 cpe:/o:linux:linux_kernel:2.1.24 cpe:/o:linux:linux_kernel:2.1.25 cpe:/o:linux:linux_kernel:2.1.26 cpe:/o:linux:linux_kernel:2.1.27 cpe:/o:linux:linux_kernel:2.1.28 cpe:/o:linux:linux_kernel:2.1.29 cpe:/o:linux:linux_kernel:2.1.30 cpe:/o:linux:linux_kernel:2.1.31 cpe:/o:linux:linux_kernel:2.1.32 cpe:/o:linux:linux_kernel:2.1.33 cpe:/o:linux:linux_kernel:2.1.34 cpe:/o:linux:linux_kernel:2.1.35 cpe:/o:linux:linux_kernel:2.1.36 cpe:/o:linux:linux_kernel:2.1.37 cpe:/o:linux:linux_kernel:2.1.38 cpe:/o:linux:linux_kernel:2.1.39 cpe:/o:linux:linux_kernel:2.1.40 cpe:/o:linux:linux_kernel:2.1.41 cpe:/o:linux:linux_kernel:2.1.42 cpe:/o:linux:linux_kernel:2.1.43 cpe:/o:linux:linux_kernel:2.1.44 cpe:/o:linux:linux_kernel:2.1.45 cpe:/o:linux:linux_kernel:2.1.46 cpe:/o:linux:linux_kernel:2.1.47 cpe:/o:linux:linux_kernel:2.1.48 cpe:/o:linux:linux_kernel:2.1.49 cpe:/o:linux:linux_kernel:2.1.50 cpe:/o:linux:linux_kernel:2.1.51 cpe:/o:linux:linux_kernel:2.1.52 cpe:/o:linux:linux_kernel:2.1.53 cpe:/o:linux:linux_kernel:2.1.54 cpe:/o:linux:linux_kernel:2.1.55 cpe:/o:linux:linux_kernel:2.1.56 cpe:/o:linux:linux_kernel:2.1.57 cpe:/o:linux:linux_kernel:2.1.58 cpe:/o:linux:linux_kernel:2.1.59 cpe:/o:linux:linux_kernel:2.1.60 cpe:/o:linux:linux_kernel:2.1.61 cpe:/o:linux:linux_kernel:2.1.62 cpe:/o:linux:linux_kernel:2.1.63 cpe:/o:linux:linux_kernel:2.1.64 cpe:/o:linux:linux_kernel:2.1.65 cpe:/o:linux:linux_kernel:2.1.66 cpe:/o:linux:linux_kernel:2.1.67 cpe:/o:linux:linux_kernel:2.1.68 cpe:/o:linux:linux_kernel:2.1.69 cpe:/o:linux:linux_kernel:2.1.70 cpe:/o:linux:linux_kernel:2.1.71 cpe:/o:linux:linux_kernel:2.1.72 cpe:/o:linux:linux_kernel:2.1.73 cpe:/o:linux:linux_kernel:2.1.74 cpe:/o:linux:linux_kernel:2.1.75 cpe:/o:linux:linux_kernel:2.1.76 cpe:/o:linux:linux_kernel:2.1.77 cpe:/o:linux:linux_kernel:2.1.78 cpe:/o:linux:linux_kernel:2.1.79 cpe:/o:linux:linux_kernel:2.1.80 cpe:/o:linux:linux_kernel:2.1.81 cpe:/o:linux:linux_kernel:2.1.82 cpe:/o:linux:linux_kernel:2.1.83 cpe:/o:linux:linux_kernel:2.1.84 cpe:/o:linux:linux_kernel:2.1.85 cpe:/o:linux:linux_kernel:2.1.86 cpe:/o:linux:linux_kernel:2.1.87 cpe:/o:linux:linux_kernel:2.1.88 cpe:/o:linux:linux_kernel:2.1.89 cpe:/o:linux:linux_kernel:2.1.90 cpe:/o:linux:linux_kernel:2.1.91 cpe:/o:linux:linux_kernel:2.1.92 cpe:/o:linux:linux_kernel:2.1.93 cpe:/o:linux:linux_kernel:2.1.94 cpe:/o:linux:linux_kernel:2.1.95 cpe:/o:linux:linux_kernel:2.1.96 cpe:/o:linux:linux_kernel:2.1.97 cpe:/o:linux:linux_kernel:2.1.98 cpe:/o:linux:linux_kernel:2.1.99 cpe:/o:linux:linux_kernel:2.1.100 cpe:/o:linux:linux_kernel:2.1.101 cpe:/o:linux:linux_kernel:2.1.102 cpe:/o:linux:linux_kernel:2.1.103 cpe:/o:linux:linux_kernel:2.1.104 cpe:/o:linux:linux_kernel:2.1.105 cpe:/o:linux:linux_kernel:2.1.106 cpe:/o:linux:linux_kernel:2.1.107 cpe:/o:linux:linux_kernel:2.1.108 cpe:/o:linux:linux_kernel:2.1.109 cpe:/o:linux:linux_kernel:2.1.110 cpe:/o:linux:linux_kernel:2.1.111 cpe:/o:linux:linux_kernel:2.1.112 cpe:/o:linux:linux_kernel:2.1.113 cpe:/o:linux:linux_kernel:2.1.114 cpe:/o:linux:linux_kernel:2.1.115 cpe:/o:linux:linux_kernel:2.1.116 cpe:/o:linux:linux_kernel:2.1.117 cpe:/o:linux:linux_kernel:2.1.118 cpe:/o:linux:linux_kernel:2.1.119 cpe:/o:linux:linux_kernel:2.1.120 cpe:/o:linux:linux_kernel:2.1.121 cpe:/o:linux:linux_kernel:2.1.122 cpe:/o:linux:linux_kernel:2.1.123 cpe:/o:linux:linux_kernel:2.1.124 cpe:/o:linux:linux_kernel:2.1.125 cpe:/o:linux:linux_kernel:2.1.126 cpe:/o:linux:linux_kernel:2.1.127 cpe:/o:linux:linux_kernel:2.1.128 cpe:/o:linux:linux_kernel:2.1.129 cpe:/o:linux:linux_kernel:2.1.130 cpe:/o:linux:linux_kernel:2.1.131 cpe:/o:linux:linux_kernel:2.1.132 cpe:/o:linux:linux_kernel:2.2.0 cpe:/o:linux:linux_kernel:2.2.1 cpe:/o:linux:linux_kernel:2.2.2 cpe:/o:linux:linux_kernel:2.2.3 cpe:/o:linux:linux_kernel:2.2.4 cpe:/o:linux:linux_kernel:2.2.4:rc1 cpe:/o:linux:linux_kernel:2.2.5 cpe:/o:linux:linux_kernel:2.2.6 cpe:/o:linux:linux_kernel:2.2.7 cpe:/o:linux:linux_kernel:2.2.8 cpe:/o:linux:linux_kernel:2.2.9 cpe:/o:linux:linux_kernel:2.2.10 cpe:/o:linux:linux_kernel:2.2.11 cpe:/o:linux:linux_kernel:2.2.12 cpe:/o:linux:linux_kernel:2.2.13 cpe:/o:linux:linux_kernel:2.2.13:pre15 cpe:/o:linux:linux_kernel:2.2.14 cpe:/o:linux:linux_kernel:2.2.15 cpe:/o:linux:linux_kernel:2.2.15:pre16 cpe:/o:linux:linux_kernel:2.2.16 cpe:/o:linux:linux_kernel:2.2.16:pre5 cpe:/o:linux:linux_kernel:2.2.16:pre6 cpe:/o:linux:linux_kernel:2.2.17 cpe:/o:linux:linux_kernel:2.2.17:pre14 cpe:/o:linux:linux_kernel:2.2.18 cpe:/o:linux:linux_kernel:2.2.19 cpe:/o:linux:linux_kernel:2.2.20 cpe:/o:linux:linux_kernel:2.2.21 cpe:/o:linux:linux_kernel:2.2.21:pre1 cpe:/o:linux:linux_kernel:2.2.21:pre2 cpe:/o:linux:linux_kernel:2.2.21:pre3 cpe:/o:linux:linux_kernel:2.2.21:pre4 cpe:/o:linux:linux_kernel:2.2.21:rc1 cpe:/o:linux:linux_kernel:2.2.21:rc2 cpe:/o:linux:linux_kernel:2.2.21:rc3 cpe:/o:linux:linux_kernel:2.2.21:rc4 cpe:/o:linux:linux_kernel:2.2.22 cpe:/o:linux:linux_kernel:2.2.22:rc1 cpe:/o:linux:linux_kernel:2.2.22:rc2 cpe:/o:linux:linux_kernel:2.2.22:rc3 cpe:/o:linux:linux_kernel:2.2.23 cpe:/o:linux:linux_kernel:2.2.23:rc1 cpe:/o:linux:linux_kernel:2.2.23:rc2 cpe:/o:linux:linux_kernel:2.2.24 cpe:/o:linux:linux_kernel:2.2.24:rc2 cpe:/o:linux:linux_kernel:2.2.24:rc3 cpe:/o:linux:linux_kernel:2.2.24:rc4 cpe:/o:linux:linux_kernel:2.2.24:rc5 cpe:/o:linux:linux_kernel:2.2.25 cpe:/o:linux:linux_kernel:2.2.26 cpe:/o:linux:linux_kernel:2.2.27:pre1 cpe:/o:linux:linux_kernel:2.2.27:pre2 cpe:/o:linux:linux_kernel:2.2.27:rc1 cpe:/o:linux:linux_kernel:2.2.27:rc2 cpe:/o:linux:linux_kernel:2.3.0 cpe:/o:linux:linux_kernel:2.3.1 cpe:/o:linux:linux_kernel:2.3.2 cpe:/o:linux:linux_kernel:2.3.3 cpe:/o:linux:linux_kernel:2.3.4 cpe:/o:linux:linux_kernel:2.3.5 cpe:/o:linux:linux_kernel:2.3.6 cpe:/o:linux:linux_kernel:2.3.7 cpe:/o:linux:linux_kernel:2.3.8 cpe:/o:linux:linux_kernel:2.3.9 cpe:/o:linux:linux_kernel:2.3.10 cpe:/o:linux:linux_kernel:2.3.11 cpe:/o:linux:linux_kernel:2.3.12 cpe:/o:linux:linux_kernel:2.3.13 cpe:/o:linux:linux_kernel:2.3.14 cpe:/o:linux:linux_kernel:2.3.15 cpe:/o:linux:linux_kernel:2.3.16 cpe:/o:linux:linux_kernel:2.3.17 cpe:/o:linux:linux_kernel:2.3.18 cpe:/o:linux:linux_kernel:2.3.19 cpe:/o:linux:linux_kernel:2.3.20 cpe:/o:linux:linux_kernel:2.3.21 cpe:/o:linux:linux_kernel:2.3.22 cpe:/o:linux:linux_kernel:2.3.23 cpe:/o:linux:linux_kernel:2.3.24 cpe:/o:linux:linux_kernel:2.3.25 cpe:/o:linux:linux_kernel:2.3.26 cpe:/o:linux:linux_kernel:2.3.27 cpe:/o:linux:linux_kernel:2.3.28 cpe:/o:linux:linux_kernel:2.3.29 cpe:/o:linux:linux_kernel:2.3.30 cpe:/o:linux:linux_kernel:2.3.31 cpe:/o:linux:linux_kernel:2.3.32 cpe:/o:linux:linux_kernel:2.3.33 cpe:/o:linux:linux_kernel:2.3.34 cpe:/o:linux:linux_kernel:2.3.35 cpe:/o:linux:linux_kernel:2.3.36 cpe:/o:linux:linux_kernel:2.3.37 cpe:/o:linux:linux_kernel:2.3.38 cpe:/o:linux:linux_kernel:2.3.39 cpe:/o:linux:linux_kernel:2.3.40 cpe:/o:linux:linux_kernel:2.3.41 cpe:/o:linux:linux_kernel:2.3.42 cpe:/o:linux:linux_kernel:2.3.43 cpe:/o:linux:linux_kernel:2.3.44 cpe:/o:linux:linux_kernel:2.3.45 cpe:/o:linux:linux_kernel:2.3.46 cpe:/o:linux:linux_kernel:2.3.47 cpe:/o:linux:linux_kernel:2.3.48 cpe:/o:linux:linux_kernel:2.3.49 cpe:/o:linux:linux_kernel:2.3.50 cpe:/o:linux:linux_kernel:2.3.51 cpe:/o:linux:linux_kernel:2.3.99 cpe:/o:linux:linux_kernel:2.3.99:pre1 cpe:/o:linux:linux_kernel:2.3.99:pre2 cpe:/o:linux:linux_kernel:2.3.99:pre3 cpe:/o:linux:linux_kernel:2.3.99:pre4 cpe:/o:linux:linux_kernel:2.3.99:pre5 cpe:/o:linux:linux_kernel:2.3.99:pre6 cpe:/o:linux:linux_kernel:2.3.99:pre7 cpe:/o:linux:linux_kernel:2.3.99:pre8 cpe:/o:linux:linux_kernel:2.3.99:pre9 cpe:/o:linux:linux_kernel:2.4.0 cpe:/o:linux:linux_kernel:2.4.0:test1 cpe:/o:linux:linux_kernel:2.4.0:test10 cpe:/o:linux:linux_kernel:2.4.0:test11 cpe:/o:linux:linux_kernel:2.4.0:test12 cpe:/o:linux:linux_kernel:2.4.0:test2 cpe:/o:linux:linux_kernel:2.4.0:test3 cpe:/o:linux:linux_kernel:2.4.0:test4 cpe:/o:linux:linux_kernel:2.4.0:test5 cpe:/o:linux:linux_kernel:2.4.0:test6 cpe:/o:linux:linux_kernel:2.4.0:test7 cpe:/o:linux:linux_kernel:2.4.0:test8 cpe:/o:linux:linux_kernel:2.4.0:test9 cpe:/o:linux:linux_kernel:2.4.1 cpe:/o:linux:linux_kernel:2.4.2 cpe:/o:linux:linux_kernel:2.4.3 cpe:/o:linux:linux_kernel:2.4.3:pre3 cpe:/o:linux:linux_kernel:2.4.4 cpe:/o:linux:linux_kernel:2.4.5 cpe:/o:linux:linux_kernel:2.4.6 cpe:/o:linux:linux_kernel:2.4.7 cpe:/o:linux:linux_kernel:2.4.8 cpe:/o:linux:linux_kernel:2.4.9 cpe:/o:linux:linux_kernel:2.4.10 cpe:/o:linux:linux_kernel:2.4.11 cpe:/o:linux:linux_kernel:2.4.11:pre3 cpe:/o:linux:linux_kernel:2.4.12 cpe:/o:linux:linux_kernel:2.4.13 cpe:/o:linux:linux_kernel:2.4.14 cpe:/o:linux:linux_kernel:2.4.15 cpe:/o:linux:linux_kernel:2.4.16 cpe:/o:linux:linux_kernel:2.4.17 cpe:/o:linux:linux_kernel:2.4.18 cpe:/o:linux:linux_kernel:2.4.18:pre1 cpe:/o:linux:linux_kernel:2.4.18:pre2 cpe:/o:linux:linux_kernel:2.4.18:pre3 cpe:/o:linux:linux_kernel:2.4.18:pre4 cpe:/o:linux:linux_kernel:2.4.18:pre5 cpe:/o:linux:linux_kernel:2.4.18:pre6 cpe:/o:linux:linux_kernel:2.4.18:pre7 cpe:/o:linux:linux_kernel:2.4.18:pre8 cpe:/o:linux:linux_kernel:2.4.18:pre9 cpe:/o:linux:linux_kernel:2.4.19 cpe:/o:linux:linux_kernel:2.4.19:pre1 cpe:/o:linux:linux_kernel:2.4.19:pre2 cpe:/o:linux:linux_kernel:2.4.19:pre3 cpe:/o:linux:linux_kernel:2.4.19:pre4 cpe:/o:linux:linux_kernel:2.4.19:pre5 cpe:/o:linux:linux_kernel:2.4.19:pre6 cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.4.21 cpe:/o:linux:linux_kernel:2.4.21:pre1 cpe:/o:linux:linux_kernel:2.4.21:pre4 cpe:/o:linux:linux_kernel:2.4.21:pre7 cpe:/o:linux:linux_kernel:2.4.22 cpe:/o:linux:linux_kernel:2.4.22:pre10 cpe:/o:linux:linux_kernel:2.4.23 cpe:/o:linux:linux_kernel:2.4.23:pre9 cpe:/o:linux:linux_kernel:2.4.24 cpe:/o:linux:linux_kernel:2.4.25 cpe:/o:linux:linux_kernel:2.4.26 cpe:/o:linux:linux_kernel:2.4.27 cpe:/o:linux:linux_kernel:2.4.27:pre1 cpe:/o:linux:linux_kernel:2.4.27:pre2 cpe:/o:linux:linux_kernel:2.4.27:pre3 cpe:/o:linux:linux_kernel:2.4.27:pre4 cpe:/o:linux:linux_kernel:2.4.27:pre5 cpe:/o:linux:linux_kernel:2.4.28 cpe:/o:linux:linux_kernel:2.4.29 cpe:/o:linux:linux_kernel:2.4.29:rc1 cpe:/o:linux:linux_kernel:2.4.29:rc2 cpe:/o:linux:linux_kernel:2.4.30 cpe:/o:linux:linux_kernel:2.4.30:rc2 cpe:/o:linux:linux_kernel:2.4.30:rc3 cpe:/o:linux:linux_kernel:2.4.31 cpe:/o:linux:linux_kernel:2.4.31:pre1 cpe:/o:linux:linux_kernel:2.4.32 cpe:/o:linux:linux_kernel:2.4.32:pre1 cpe:/o:linux:linux_kernel:2.4.32:pre2 cpe:/o:linux:linux_kernel:2.4.33 cpe:/o:linux:linux_kernel:2.4.33:pre1 cpe:/o:linux:linux_kernel:2.4.33.1 cpe:/o:linux:linux_kernel:2.4.33.2 cpe:/o:linux:linux_kernel:2.4.33.3 cpe:/o:linux:linux_kernel:2.4.33.4 cpe:/o:linux:linux_kernel:2.4.33.5 cpe:/o:linux:linux_kernel:2.4.34 cpe:/o:linux:linux_kernel:2.4.34:rc3 cpe:/o:linux:linux_kernel:2.4.34.1 cpe:/o:linux:linux_kernel:2.4.34.2 cpe:/o:linux:linux_kernel:2.4.35 cpe:/o:linux:linux_kernel:2.4.35.2 cpe:/o:linux:linux_kernel:2.5.0 cpe:/o:linux:linux_kernel:2.5.1 cpe:/o:linux:linux_kernel:2.5.2 cpe:/o:linux:linux_kernel:2.5.3 cpe:/o:linux:linux_kernel:2.5.4 cpe:/o:linux:linux_kernel:2.5.5 cpe:/o:linux:linux_kernel:2.5.6 cpe:/o:linux:linux_kernel:2.5.7 cpe:/o:linux:linux_kernel:2.5.8 cpe:/o:linux:linux_kernel:2.5.9 cpe:/o:linux:linux_kernel:2.5.10 cpe:/o:linux:linux_kernel:2.5.11 cpe:/o:linux:linux_kernel:2.5.12 cpe:/o:linux:linux_kernel:2.5.13 cpe:/o:linux:linux_kernel:2.5.14 cpe:/o:linux:linux_kernel:2.5.15 cpe:/o:linux:linux_kernel:2.5.16 cpe:/o:linux:linux_kernel:2.5.17 cpe:/o:linux:linux_kernel:2.5.18 cpe:/o:linux:linux_kernel:2.5.19 cpe:/o:linux:linux_kernel:2.5.20 cpe:/o:linux:linux_kernel:2.5.21 cpe:/o:linux:linux_kernel:2.5.22 cpe:/o:linux:linux_kernel:2.5.23 cpe:/o:linux:linux_kernel:2.5.24 cpe:/o:linux:linux_kernel:2.5.25 cpe:/o:linux:linux_kernel:2.5.26 cpe:/o:linux:linux_kernel:2.5.27 cpe:/o:linux:linux_kernel:2.5.28 cpe:/o:linux:linux_kernel:2.5.29 cpe:/o:linux:linux_kernel:2.5.30 cpe:/o:linux:linux_kernel:2.5.31 cpe:/o:linux:linux_kernel:2.5.32 cpe:/o:linux:linux_kernel:2.5.33 cpe:/o:linux:linux_kernel:2.5.34 cpe:/o:linux:linux_kernel:2.5.35 cpe:/o:linux:linux_kernel:2.5.36 cpe:/o:linux:linux_kernel:2.5.37 cpe:/o:linux:linux_kernel:2.5.38 cpe:/o:linux:linux_kernel:2.5.39 cpe:/o:linux:linux_kernel:2.5.40 cpe:/o:linux:linux_kernel:2.5.41 cpe:/o:linux:linux_kernel:2.5.42 cpe:/o:linux:linux_kernel:2.5.43 cpe:/o:linux:linux_kernel:2.5.44 cpe:/o:linux:linux_kernel:2.5.45 cpe:/o:linux:linux_kernel:2.5.46 cpe:/o:linux:linux_kernel:2.5.47 cpe:/o:linux:linux_kernel:2.5.48 cpe:/o:linux:linux_kernel:2.5.49 cpe:/o:linux:linux_kernel:2.5.50 cpe:/o:linux:linux_kernel:2.5.51 cpe:/o:linux:linux_kernel:2.5.52 cpe:/o:linux:linux_kernel:2.5.53 cpe:/o:linux:linux_kernel:2.5.54 cpe:/o:linux:linux_kernel:2.5.55 cpe:/o:linux:linux_kernel:2.5.56 cpe:/o:linux:linux_kernel:2.5.57 cpe:/o:linux:linux_kernel:2.5.58 cpe:/o:linux:linux_kernel:2.5.59 cpe:/o:linux:linux_kernel:2.5.60 cpe:/o:linux:linux_kernel:2.5.61 cpe:/o:linux:linux_kernel:2.5.62 cpe:/o:linux:linux_kernel:2.5.63 cpe:/o:linux:linux_kernel:2.5.64 cpe:/o:linux:linux_kernel:2.5.65 cpe:/o:linux:linux_kernel:2.5.66 cpe:/o:linux:linux_kernel:2.5.67 cpe:/o:linux:linux_kernel:2.5.68 cpe:/o:linux:linux_kernel:2.5.69 cpe:/o:linux:linux_kernel:2.5.75 cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.0:test1 cpe:/o:linux:linux_kernel:2.6.0:test10 cpe:/o:linux:linux_kernel:2.6.0:test11 cpe:/o:linux:linux_kernel:2.6.0:test2 cpe:/o:linux:linux_kernel:2.6.0:test3 cpe:/o:linux:linux_kernel:2.6.0:test4 cpe:/o:linux:linux_kernel:2.6.0:test5 cpe:/o:linux:linux_kernel:2.6.0:test6 cpe:/o:linux:linux_kernel:2.6.0:test7 cpe:/o:linux:linux_kernel:2.6.0:test8 cpe:/o:linux:linux_kernel:2.6.0:test9 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.1:rc1 cpe:/o:linux:linux_kernel:2.6.1:rc2 cpe:/o:linux:linux_kernel:2.6.1:rc3 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.2:rc1 cpe:/o:linux:linux_kernel:2.6.2:rc2 cpe:/o:linux:linux_kernel:2.6.2:rc3 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.3:rc1 cpe:/o:linux:linux_kernel:2.6.3:rc2 cpe:/o:linux:linux_kernel:2.6.3:rc3 cpe:/o:linux:linux_kernel:2.6.3:rc4 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.4:rc1 cpe:/o:linux:linux_kernel:2.6.4:rc2 cpe:/o:linux:linux_kernel:2.6.4:rc3 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.5:rc1 cpe:/o:linux:linux_kernel:2.6.5:rc2 cpe:/o:linux:linux_kernel:2.6.5:rc3 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.6:rc1 cpe:/o:linux:linux_kernel:2.6.6:rc2 cpe:/o:linux:linux_kernel:2.6.6:rc3 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.7:rc1 cpe:/o:linux:linux_kernel:2.6.7:rc2 cpe:/o:linux:linux_kernel:2.6.7:rc3 cpe:/o:linux:linux_kernel:2.6.8 cpe:/o:linux:linux_kernel:2.6.8:rc1 cpe:/o:linux:linux_kernel:2.6.8:rc2 cpe:/o:linux:linux_kernel:2.6.8:rc3 cpe:/o:linux:linux_kernel:2.6.8:rc4 cpe:/o:linux:linux_kernel:2.6.8.1 cpe:/o:linux:linux_kernel:2.6.9 cpe:/o:linux:linux_kernel:2.6.9:final cpe:/o:linux:linux_kernel:2.6.9:rc1 cpe:/o:linux:linux_kernel:2.6.9:rc2 cpe:/o:linux:linux_kernel:2.6.9:rc3 cpe:/o:linux:linux_kernel:2.6.9:rc4 cpe:/o:linux:linux_kernel:2.6.10 cpe:/o:linux:linux_kernel:2.6.10:rc1 cpe:/o:linux:linux_kernel:2.6.10:rc2 cpe:/o:linux:linux_kernel:2.6.10:rc3 cpe:/o:linux:linux_kernel:2.6.11 cpe:/o:linux:linux_kernel:2.6.11:rc1 cpe:/o:linux:linux_kernel:2.6.11:rc2 cpe:/o:linux:linux_kernel:2.6.11:rc3 cpe:/o:linux:linux_kernel:2.6.11:rc4 cpe:/o:linux:linux_kernel:2.6.11:rc5 cpe:/o:linux:linux_kernel:2.6.11.1 cpe:/o:linux:linux_kernel:2.6.11.2 cpe:/o:linux:linux_kernel:2.6.11.3 cpe:/o:linux:linux_kernel:2.6.11.4 cpe:/o:linux:linux_kernel:2.6.11.5 cpe:/o:linux:linux_kernel:2.6.11.6 cpe:/o:linux:linux_kernel:2.6.11.7 cpe:/o:linux:linux_kernel:2.6.11.8 cpe:/o:linux:linux_kernel:2.6.11.9 cpe:/o:linux:linux_kernel:2.6.11.10 cpe:/o:linux:linux_kernel:2.6.11.11 cpe:/o:linux:linux_kernel:2.6.11.12 cpe:/o:linux:linux_kernel:2.6.12 cpe:/o:linux:linux_kernel:2.6.12:rc1 cpe:/o:linux:linux_kernel:2.6.12:rc2 cpe:/o:linux:linux_kernel:2.6.12:rc3 cpe:/o:linux:linux_kernel:2.6.12:rc4 cpe:/o:linux:linux_kernel:2.6.12:rc5 cpe:/o:linux:linux_kernel:2.6.12:rc6 cpe:/o:linux:linux_kernel:2.6.12.1 cpe:/o:linux:linux_kernel:2.6.12.2 cpe:/o:linux:linux_kernel:2.6.12.3 cpe:/o:linux:linux_kernel:2.6.12.4 cpe:/o:linux:linux_kernel:2.6.12.5 cpe:/o:linux:linux_kernel:2.6.12.6 cpe:/o:linux:linux_kernel:2.6.13 cpe:/o:linux:linux_kernel:2.6.13:rc1 cpe:/o:linux:linux_kernel:2.6.13:rc2 cpe:/o:linux:linux_kernel:2.6.13:rc3 cpe:/o:linux:linux_kernel:2.6.13:rc4 cpe:/o:linux:linux_kernel:2.6.13:rc5 cpe:/o:linux:linux_kernel:2.6.13:rc6 cpe:/o:linux:linux_kernel:2.6.13:rc7 cpe:/o:linux:linux_kernel:2.6.13.1 cpe:/o:linux:linux_kernel:2.6.13.2 cpe:/o:linux:linux_kernel:2.6.13.3 cpe:/o:linux:linux_kernel:2.6.13.4 cpe:/o:linux:linux_kernel:2.6.13.5 cpe:/o:linux:linux_kernel:2.6.14 cpe:/o:linux:linux_kernel:2.6.14:rc1 cpe:/o:linux:linux_kernel:2.6.14:rc2 cpe:/o:linux:linux_kernel:2.6.14:rc3 cpe:/o:linux:linux_kernel:2.6.14:rc4 cpe:/o:linux:linux_kernel:2.6.14:rc5 cpe:/o:linux:linux_kernel:2.6.14.1 cpe:/o:linux:linux_kernel:2.6.14.2 cpe:/o:linux:linux_kernel:2.6.14.3 cpe:/o:linux:linux_kernel:2.6.14.4 cpe:/o:linux:linux_kernel:2.6.14.5 cpe:/o:linux:linux_kernel:2.6.14.6 cpe:/o:linux:linux_kernel:2.6.14.7 cpe:/o:linux:linux_kernel:2.6.15 cpe:/o:linux:linux_kernel:2.6.15:rc1 cpe:/o:linux:linux_kernel:2.6.15:rc2 cpe:/o:linux:linux_kernel:2.6.15:rc3 cpe:/o:linux:linux_kernel:2.6.15:rc4 cpe:/o:linux:linux_kernel:2.6.15:rc5 cpe:/o:linux:linux_kernel:2.6.15:rc6 cpe:/o:linux:linux_kernel:2.6.15:rc7 cpe:/o:linux:linux_kernel:2.6.15.1 cpe:/o:linux:linux_kernel:2.6.15.2 cpe:/o:linux:linux_kernel:2.6.15.3 cpe:/o:linux:linux_kernel:2.6.15.4 cpe:/o:linux:linux_kernel:2.6.15.5 cpe:/o:linux:linux_kernel:2.6.15.6 cpe:/o:linux:linux_kernel:2.6.15.7 cpe:/o:linux:linux_kernel:2.6.15.8 cpe:/o:linux:linux_kernel:2.6.15.9 cpe:/o:linux:linux_kernel:2.6.15.10 cpe:/o:linux:linux_kernel:2.6.15.11 cpe:/o:linux:linux_kernel:2.6.16 cpe:/o:linux:linux_kernel:2.6.16:rc1 cpe:/o:linux:linux_kernel:2.6.16:rc2 cpe:/o:linux:linux_kernel:2.6.16:rc3 cpe:/o:linux:linux_kernel:2.6.16:rc4 cpe:/o:linux:linux_kernel:2.6.16:rc5 cpe:/o:linux:linux_kernel:2.6.16:rc6 cpe:/o:linux:linux_kernel:2.6.16:rc7 cpe:/o:linux:linux_kernel:2.6.16.1 cpe:/o:linux:linux_kernel:2.6.16.2 cpe:/o:linux:linux_kernel:2.6.16.3 cpe:/o:linux:linux_kernel:2.6.16.4 cpe:/o:linux:linux_kernel:2.6.16.5 cpe:/o:linux:linux_kernel:2.6.16.6 cpe:/o:linux:linux_kernel:2.6.16.7 cpe:/o:linux:linux_kernel:2.6.16.8 cpe:/o:linux:linux_kernel:2.6.16.9 cpe:/o:linux:linux_kernel:2.6.16.10 cpe:/o:linux:linux_kernel:2.6.16.11 cpe:/o:linux:linux_kernel:2.6.16.12 cpe:/o:linux:linux_kernel:2.6.16.13 cpe:/o:linux:linux_kernel:2.6.16.14 cpe:/o:linux:linux_kernel:2.6.16.15 cpe:/o:linux:linux_kernel:2.6.16.16 cpe:/o:linux:linux_kernel:2.6.16.17 cpe:/o:linux:linux_kernel:2.6.16.18 cpe:/o:linux:linux_kernel:2.6.16.19 cpe:/o:linux:linux_kernel:2.6.16.20 cpe:/o:linux:linux_kernel:2.6.16.21 cpe:/o:linux:linux_kernel:2.6.16.22 cpe:/o:linux:linux_kernel:2.6.16.23 cpe:/o:linux:linux_kernel:2.6.16.24 cpe:/o:linux:linux_kernel:2.6.16.25 cpe:/o:linux:linux_kernel:2.6.16.26 cpe:/o:linux:linux_kernel:2.6.16.27 cpe:/o:linux:linux_kernel:2.6.16.28 cpe:/o:linux:linux_kernel:2.6.16.29 cpe:/o:linux:linux_kernel:2.6.16.30 cpe:/o:linux:linux_kernel:2.6.16.31 cpe:/o:linux:linux_kernel:2.6.16.32 cpe:/o:linux:linux_kernel:2.6.16.33 cpe:/o:linux:linux_kernel:2.6.16.34 cpe:/o:linux:linux_kernel:2.6.16.35 cpe:/o:linux:linux_kernel:2.6.16.36 cpe:/o:linux:linux_kernel:2.6.16.37 cpe:/o:linux:linux_kernel:2.6.16.38 cpe:/o:linux:linux_kernel:2.6.16.39 cpe:/o:linux:linux_kernel:2.6.16.40 cpe:/o:linux:linux_kernel:2.6.16.41 cpe:/o:linux:linux_kernel:2.6.16.42 cpe:/o:linux:linux_kernel:2.6.16.43 cpe:/o:linux:linux_kernel:2.6.16.44 cpe:/o:linux:linux_kernel:2.6.16.45 cpe:/o:linux:linux_kernel:2.6.16.46 cpe:/o:linux:linux_kernel:2.6.16.47 cpe:/o:linux:linux_kernel:2.6.16.48 cpe:/o:linux:linux_kernel:2.6.16.49 cpe:/o:linux:linux_kernel:2.6.16.50 cpe:/o:linux:linux_kernel:2.6.16.51 cpe:/o:linux:linux_kernel:2.6.16.52 cpe:/o:linux:linux_kernel:2.6.16.53 cpe:/o:linux:linux_kernel:2.6.16.54 cpe:/o:linux:linux_kernel:2.6.16.55 cpe:/o:linux:linux_kernel:2.6.16.56 cpe:/o:linux:linux_kernel:2.6.16.57 cpe:/o:linux:linux_kernel:2.6.16.58 cpe:/o:linux:linux_kernel:2.6.16.59 cpe:/o:linux:linux_kernel:2.6.16.60 cpe:/o:linux:linux_kernel:2.6.16.61 cpe:/o:linux:linux_kernel:2.6.16.62 cpe:/o:linux:linux_kernel:2.6.17 cpe:/o:linux:linux_kernel:2.6.17:rc1 cpe:/o:linux:linux_kernel:2.6.17:rc2 cpe:/o:linux:linux_kernel:2.6.17:rc3 cpe:/o:linux:linux_kernel:2.6.17:rc4 cpe:/o:linux:linux_kernel:2.6.17:rc5 cpe:/o:linux:linux_kernel:2.6.17:rc6 cpe:/o:linux:linux_kernel:2.6.17.1 cpe:/o:linux:linux_kernel:2.6.17.2 cpe:/o:linux:linux_kernel:2.6.17.3 cpe:/o:linux:linux_kernel:2.6.17.4 cpe:/o:linux:linux_kernel:2.6.17.5 cpe:/o:linux:linux_kernel:2.6.17.6 cpe:/o:linux:linux_kernel:2.6.17.7 cpe:/o:linux:linux_kernel:2.6.17.8 cpe:/o:linux:linux_kernel:2.6.17.9 cpe:/o:linux:linux_kernel:2.6.17.10 cpe:/o:linux:linux_kernel:2.6.17.11 cpe:/o:linux:linux_kernel:2.6.17.12 cpe:/o:linux:linux_kernel:2.6.17.13 cpe:/o:linux:linux_kernel:2.6.17.14 cpe:/o:linux:linux_kernel:2.6.18 cpe:/o:linux:linux_kernel:2.6.18:rc1 cpe:/o:linux:linux_kernel:2.6.18:rc2 cpe:/o:linux:linux_kernel:2.6.18:rc3 cpe:/o:linux:linux_kernel:2.6.18:rc4 cpe:/o:linux:linux_kernel:2.6.18:rc5 cpe:/o:linux:linux_kernel:2.6.18:rc6 cpe:/o:linux:linux_kernel:2.6.18:rc7 cpe:/o:linux:linux_kernel:2.6.18.1 cpe:/o:linux:linux_kernel:2.6.18.2 cpe:/o:linux:linux_kernel:2.6.18.3 cpe:/o:linux:linux_kernel:2.6.18.4 cpe:/o:linux:linux_kernel:2.6.18.5 cpe:/o:linux:linux_kernel:2.6.18.6 cpe:/o:linux:linux_kernel:2.6.18.7 cpe:/o:linux:linux_kernel:2.6.18.8 cpe:/o:linux:linux_kernel:2.6.19 cpe:/o:linux:linux_kernel:2.6.19:rc1 cpe:/o:linux:linux_kernel:2.6.19:rc2 cpe:/o:linux:linux_kernel:2.6.19:rc3 cpe:/o:linux:linux_kernel:2.6.19:rc4 cpe:/o:linux:linux_kernel:2.6.19:rc5 cpe:/o:linux:linux_kernel:2.6.19:rc6 cpe:/o:linux:linux_kernel:2.6.19.0 cpe:/o:linux:linux_kernel:2.6.19.1 cpe:/o:linux:linux_kernel:2.6.19.2 cpe:/o:linux:linux_kernel:2.6.19.3 cpe:/o:linux:linux_kernel:2.6.19.4 cpe:/o:linux:linux_kernel:2.6.19.5 cpe:/o:linux:linux_kernel:2.6.19.6 cpe:/o:linux:linux_kernel:2.6.19.7 cpe:/o:linux:linux_kernel:2.6.20 cpe:/o:linux:linux_kernel:2.6.20:rc1 cpe:/o:linux:linux_kernel:2.6.20:rc2 cpe:/o:linux:linux_kernel:2.6.20:rc3 cpe:/o:linux:linux_kernel:2.6.20:rc4 cpe:/o:linux:linux_kernel:2.6.20:rc5 cpe:/o:linux:linux_kernel:2.6.20:rc6 cpe:/o:linux:linux_kernel:2.6.20:rc7 cpe:/o:linux:linux_kernel:2.6.20.1 cpe:/o:linux:linux_kernel:2.6.20.2 cpe:/o:linux:linux_kernel:2.6.20.3 cpe:/o:linux:linux_kernel:2.6.20.4 cpe:/o:linux:linux_kernel:2.6.20.5 cpe:/o:linux:linux_kernel:2.6.20.6 cpe:/o:linux:linux_kernel:2.6.20.7 cpe:/o:linux:linux_kernel:2.6.20.8 cpe:/o:linux:linux_kernel:2.6.20.9 cpe:/o:linux:linux_kernel:2.6.20.10 cpe:/o:linux:linux_kernel:2.6.20.11 cpe:/o:linux:linux_kernel:2.6.20.12 cpe:/o:linux:linux_kernel:2.6.20.13 cpe:/o:linux:linux_kernel:2.6.20.14 cpe:/o:linux:linux_kernel:2.6.20.15 cpe:/o:linux:linux_kernel:2.6.20.16 cpe:/o:linux:linux_kernel:2.6.20.17 cpe:/o:linux:linux_kernel:2.6.20.18 cpe:/o:linux:linux_kernel:2.6.20.19 cpe:/o:linux:linux_kernel:2.6.20.20 cpe:/o:linux:linux_kernel:2.6.20.21 cpe:/o:linux:linux_kernel:2.6.21 cpe:/o:linux:linux_kernel:2.6.21:git1 cpe:/o:linux:linux_kernel:2.6.21:git2 cpe:/o:linux:linux_kernel:2.6.21:git3 cpe:/o:linux:linux_kernel:2.6.21:git4 cpe:/o:linux:linux_kernel:2.6.21:git5 cpe:/o:linux:linux_kernel:2.6.21:git6 cpe:/o:linux:linux_kernel:2.6.21:git7 cpe:/o:linux:linux_kernel:2.6.21:rc1 cpe:/o:linux:linux_kernel:2.6.21:rc2 cpe:/o:linux:linux_kernel:2.6.21:rc3 cpe:/o:linux:linux_kernel:2.6.21:rc4 cpe:/o:linux:linux_kernel:2.6.21:rc5 cpe:/o:linux:linux_kernel:2.6.21:rc6 cpe:/o:linux:linux_kernel:2.6.21:rc7 cpe:/o:linux:linux_kernel:2.6.21.1 cpe:/o:linux:linux_kernel:2.6.21.2 cpe:/o:linux:linux_kernel:2.6.21.3 cpe:/o:linux:linux_kernel:2.6.21.4 cpe:/o:linux:linux_kernel:2.6.21.5 cpe:/o:linux:linux_kernel:2.6.21.6 cpe:/o:linux:linux_kernel:2.6.21.7 cpe:/o:linux:linux_kernel:2.6.22 cpe:/o:linux:linux_kernel:2.6.22:rc1 cpe:/o:linux:linux_kernel:2.6.22:rc2 cpe:/o:linux:linux_kernel:2.6.22:rc3 cpe:/o:linux:linux_kernel:2.6.22:rc4 cpe:/o:linux:linux_kernel:2.6.22:rc5 cpe:/o:linux:linux_kernel:2.6.22:rc6 cpe:/o:linux:linux_kernel:2.6.22:rc7 cpe:/o:linux:linux_kernel:2.6.22.1 cpe:/o:linux:linux_kernel:2.6.22.2 cpe:/o:linux:linux_kernel:2.6.22.3 cpe:/o:linux:linux_kernel:2.6.22.4 cpe:/o:linux:linux_kernel:2.6.22.5 cpe:/o:linux:linux_kernel:2.6.22.6 cpe:/o:linux:linux_kernel:2.6.22.7 cpe:/o:linux:linux_kernel:2.6.22.8 cpe:/o:linux:linux_kernel:2.6.22.9 cpe:/o:linux:linux_kernel:2.6.22.10 cpe:/o:linux:linux_kernel:2.6.22.11 cpe:/o:linux:linux_kernel:2.6.22.12 cpe:/o:linux:linux_kernel:2.6.22.13 cpe:/o:linux:linux_kernel:2.6.22.14 cpe:/o:linux:linux_kernel:2.6.22.15 cpe:/o:linux:linux_kernel:2.6.22.16 cpe:/o:linux:linux_kernel:2.6.22.17 cpe:/o:linux:linux_kernel:2.6.22.18 cpe:/o:linux:linux_kernel:2.6.22.19 cpe:/o:linux:linux_kernel:2.6.22.20 cpe:/o:linux:linux_kernel:2.6.22.21 cpe:/o:linux:linux_kernel:2.6.22.22 cpe:/o:linux:linux_kernel:2.6.23 cpe:/o:linux:linux_kernel:2.6.23:rc1 cpe:/o:linux:linux_kernel:2.6.23:rc2 cpe:/o:linux:linux_kernel:2.6.23:rc3 cpe:/o:linux:linux_kernel:2.6.23:rc4 cpe:/o:linux:linux_kernel:2.6.23:rc5 cpe:/o:linux:linux_kernel:2.6.23:rc6 cpe:/o:linux:linux_kernel:2.6.23:rc7 cpe:/o:linux:linux_kernel:2.6.23:rc8 cpe:/o:linux:linux_kernel:2.6.23:rc9 cpe:/o:linux:linux_kernel:2.6.23.1 cpe:/o:linux:linux_kernel:2.6.23.2 cpe:/o:linux:linux_kernel:2.6.23.3 cpe:/o:linux:linux_kernel:2.6.23.4 cpe:/o:linux:linux_kernel:2.6.23.5 cpe:/o:linux:linux_kernel:2.6.23.6 cpe:/o:linux:linux_kernel:2.6.23.7 cpe:/o:linux:linux_kernel:2.6.23.8 cpe:/o:linux:linux_kernel:2.6.23.9 cpe:/o:linux:linux_kernel:2.6.23.10 cpe:/o:linux:linux_kernel:2.6.23.11 cpe:/o:linux:linux_kernel:2.6.23.12 cpe:/o:linux:linux_kernel:2.6.23.13 cpe:/o:linux:linux_kernel:2.6.23.14 cpe:/o:linux:linux_kernel:2.6.23.15 cpe:/o:linux:linux_kernel:2.6.23.16 cpe:/o:linux:linux_kernel:2.6.23.17 cpe:/o:linux:linux_kernel:2.6.24 cpe:/o:linux:linux_kernel:2.6.24:rc1 cpe:/o:linux:linux_kernel:2.6.24:rc2 cpe:/o:linux:linux_kernel:2.6.24:rc3 cpe:/o:linux:linux_kernel:2.6.24:rc4 cpe:/o:linux:linux_kernel:2.6.24:rc5 cpe:/o:linux:linux_kernel:2.6.24:rc6 cpe:/o:linux:linux_kernel:2.6.24:rc7 cpe:/o:linux:linux_kernel:2.6.24:rc8 cpe:/o:linux:linux_kernel:2.6.24.1 cpe:/o:linux:linux_kernel:2.6.24.2 cpe:/o:linux:linux_kernel:2.6.24.3 cpe:/o:linux:linux_kernel:2.6.24.4 cpe:/o:linux:linux_kernel:2.6.24.5 cpe:/o:linux:linux_kernel:2.6.24.6 cpe:/o:linux:linux_kernel:2.6.24.7 cpe:/o:linux:linux_kernel:2.6.25 cpe:/o:linux:linux_kernel:2.6.25:rc1 cpe:/o:linux:linux_kernel:2.6.25:rc2 cpe:/o:linux:linux_kernel:2.6.25:rc3 cpe:/o:linux:linux_kernel:2.6.25:rc4 cpe:/o:linux:linux_kernel:2.6.25:rc5 cpe:/o:linux:linux_kernel:2.6.25:rc6 cpe:/o:linux:linux_kernel:2.6.25:rc7 cpe:/o:linux:linux_kernel:2.6.25:rc8 cpe:/o:linux:linux_kernel:2.6.25:rc9 cpe:/o:linux:linux_kernel:2.6.25.1 cpe:/o:linux:linux_kernel:2.6.25.2 cpe:/o:linux:linux_kernel:2.6.25.3 cpe:/o:linux:linux_kernel:2.6.25.4 cpe:/o:linux:linux_kernel:2.6.25.5 cpe:/o:linux:linux_kernel:2.6.25.6 cpe:/o:linux:linux_kernel:2.6.25.7 cpe:/o:linux:linux_kernel:2.6.25.8 cpe:/o:linux:linux_kernel:2.6.25.9 cpe:/o:linux:linux_kernel:2.6.25.10 cpe:/o:linux:linux_kernel:2.6.25.11 cpe:/o:linux:linux_kernel:2.6.25.12 cpe:/o:linux:linux_kernel:2.6.25.13 cpe:/o:linux:linux_kernel:2.6.25.14 cpe:/o:linux:linux_kernel:2.6.25.15 cpe:/o:linux:linux_kernel:2.6.25.16 cpe:/o:linux:linux_kernel:2.6.25.17 cpe:/o:linux:linux_kernel:2.6.25.18 cpe:/o:linux:linux_kernel:2.6.25.19 cpe:/o:linux:linux_kernel:2.6.25.20 cpe:/o:linux:linux_kernel:2.6.26 cpe:/o:linux:linux_kernel:2.6.26:rc1 cpe:/o:linux:linux_kernel:2.6.26:rc2 cpe:/o:linux:linux_kernel:2.6.26:rc3 cpe:/o:linux:linux_kernel:2.6.26:rc4 cpe:/o:linux:linux_kernel:2.6.26:rc5 cpe:/o:linux:linux_kernel:2.6.26:rc6 cpe:/o:linux:linux_kernel:2.6.26:rc7 cpe:/o:linux:linux_kernel:2.6.26:rc8 cpe:/o:linux:linux_kernel:2.6.26:rc9 cpe:/o:linux:linux_kernel:2.6.26.1 cpe:/o:linux:linux_kernel:2.6.26.2 cpe:/o:linux:linux_kernel:2.6.26.3 cpe:/o:linux:linux_kernel:2.6.26.4 cpe:/o:linux:linux_kernel:2.6.26.5 cpe:/o:linux:linux_kernel:2.6.26.6 cpe:/o:linux:linux_kernel:2.6.26.7 cpe:/o:linux:linux_kernel:2.6.26.8 cpe:/o:linux:linux_kernel:2.6.27 cpe:/o:linux:linux_kernel:2.6.27:rc1 cpe:/o:linux:linux_kernel:2.6.27:rc2 cpe:/o:linux:linux_kernel:2.6.27:rc3 cpe:/o:linux:linux_kernel:2.6.27:rc4 cpe:/o:linux:linux_kernel:2.6.27:rc5 cpe:/o:linux:linux_kernel:2.6.27:rc6 cpe:/o:linux:linux_kernel:2.6.27:rc7 cpe:/o:linux:linux_kernel:2.6.27:rc8 cpe:/o:linux:linux_kernel:2.6.27:rc9 cpe:/o:linux:linux_kernel:2.6.27.1 cpe:/o:linux:linux_kernel:2.6.27.2 cpe:/o:linux:linux_kernel:2.6.27.3 cpe:/o:linux:linux_kernel:2.6.27.4 cpe:/o:linux:linux_kernel:2.6.27.5 cpe:/o:linux:linux_kernel:2.6.27.6 cpe:/o:linux:linux_kernel:2.6.27.7 cpe:/o:linux:linux_kernel:2.6.27.8 cpe:/o:linux:linux_kernel:2.6.27.9 cpe:/o:linux:linux_kernel:2.6.27.10 cpe:/o:linux:linux_kernel:2.6.27.11 cpe:/o:linux:linux_kernel:2.6.27.12 cpe:/o:linux:linux_kernel:2.6.27.13 cpe:/o:linux:linux_kernel:2.6.27.14 cpe:/o:linux:linux_kernel:2.6.27.15 cpe:/o:linux:linux_kernel:2.6.27.16 cpe:/o:linux:linux_kernel:2.6.27.17 cpe:/o:linux:linux_kernel:2.6.27.18 cpe:/o:linux:linux_kernel:2.6.27.19 cpe:/o:linux:linux_kernel:2.6.27.20 cpe:/o:linux:linux_kernel:2.6.27.21 cpe:/o:linux:linux_kernel:2.6.27.22 cpe:/o:linux:linux_kernel:2.6.27.23 cpe:/o:linux:linux_kernel:2.6.27.24 cpe:/o:linux:linux_kernel:2.6.27.25 cpe:/o:linux:linux_kernel:2.6.27.26 cpe:/o:linux:linux_kernel:2.6.27.27 cpe:/o:linux:linux_kernel:2.6.27.28 cpe:/o:linux:linux_kernel:2.6.27.29 cpe:/o:linux:linux_kernel:2.6.27.30 cpe:/o:linux:linux_kernel:2.6.27.31 cpe:/o:linux:linux_kernel:2.6.27.32 cpe:/o:linux:linux_kernel:2.6.27.33 cpe:/o:linux:linux_kernel:2.6.27.34 cpe:/o:linux:linux_kernel:2.6.27.35 cpe:/o:linux:linux_kernel:2.6.27.36 cpe:/o:linux:linux_kernel:2.6.27.37 cpe:/o:linux:linux_kernel:2.6.27.38 cpe:/o:linux:linux_kernel:2.6.27.39 cpe:/o:linux:linux_kernel:2.6.27.40 cpe:/o:linux:linux_kernel:2.6.27.41 cpe:/o:linux:linux_kernel:2.6.27.42 cpe:/o:linux:linux_kernel:2.6.27.43 cpe:/o:linux:linux_kernel:2.6.27.44 cpe:/o:linux:linux_kernel:2.6.27.45 cpe:/o:linux:linux_kernel:2.6.27.46 cpe:/o:linux:linux_kernel:2.6.27.47 cpe:/o:linux:linux_kernel:2.6.27.48 cpe:/o:linux:linux_kernel:2.6.27.49 cpe:/o:linux:linux_kernel:2.6.27.50 cpe:/o:linux:linux_kernel:2.6.27.51 cpe:/o:linux:linux_kernel:2.6.27.52 cpe:/o:linux:linux_kernel:2.6.27.53 cpe:/o:linux:linux_kernel:2.6.27.54 cpe:/o:linux:linux_kernel:2.6.27.55 cpe:/o:linux:linux_kernel:2.6.27.56 cpe:/o:linux:linux_kernel:2.6.27.57 cpe:/o:linux:linux_kernel:2.6.27.58 cpe:/o:linux:linux_kernel:2.6.27.59 cpe:/o:linux:linux_kernel:2.6.27.60 cpe:/o:linux:linux_kernel:2.6.27.61 cpe:/o:linux:linux_kernel:2.6.27.62 cpe:/o:linux:linux_kernel:2.6.28 cpe:/o:linux:linux_kernel:2.6.28:rc1 cpe:/o:linux:linux_kernel:2.6.28:rc2 cpe:/o:linux:linux_kernel:2.6.28:rc3 cpe:/o:linux:linux_kernel:2.6.28:rc4 cpe:/o:linux:linux_kernel:2.6.28:rc5 cpe:/o:linux:linux_kernel:2.6.28:rc6 cpe:/o:linux:linux_kernel:2.6.28:rc7 cpe:/o:linux:linux_kernel:2.6.28:rc8 cpe:/o:linux:linux_kernel:2.6.28:rc9 cpe:/o:linux:linux_kernel:2.6.28.1 cpe:/o:linux:linux_kernel:2.6.28.2 cpe:/o:linux:linux_kernel:2.6.28.3 cpe:/o:linux:linux_kernel:2.6.28.4 cpe:/o:linux:linux_kernel:2.6.28.5 cpe:/o:linux:linux_kernel:2.6.28.6 cpe:/o:linux:linux_kernel:2.6.28.7 cpe:/o:linux:linux_kernel:2.6.28.8 cpe:/o:linux:linux_kernel:2.6.28.9 cpe:/o:linux:linux_kernel:2.6.28.10 cpe:/o:linux:linux_kernel:2.6.29 cpe:/o:linux:linux_kernel:2.6.29:rc1 cpe:/o:linux:linux_kernel:2.6.29:rc2 cpe:/o:linux:linux_kernel:2.6.29:rc3 cpe:/o:linux:linux_kernel:2.6.29:rc4 cpe:/o:linux:linux_kernel:2.6.29:rc5 cpe:/o:linux:linux_kernel:2.6.29:rc6 cpe:/o:linux:linux_kernel:2.6.29:rc7 cpe:/o:linux:linux_kernel:2.6.29:rc8 cpe:/o:linux:linux_kernel:2.6.29.1 cpe:/o:linux:linux_kernel:2.6.29.2 cpe:/o:linux:linux_kernel:2.6.29.3 cpe:/o:linux:linux_kernel:2.6.29.4 cpe:/o:linux:linux_kernel:2.6.29.5 cpe:/o:linux:linux_kernel:2.6.29.6 cpe:/o:linux:linux_kernel:2.6.30 cpe:/o:linux:linux_kernel:2.6.30:rc1 cpe:/o:linux:linux_kernel:2.6.30:rc2 cpe:/o:linux:linux_kernel:2.6.30:rc3 cpe:/o:linux:linux_kernel:2.6.30:rc4 cpe:/o:linux:linux_kernel:2.6.30:rc5 cpe:/o:linux:linux_kernel:2.6.30:rc6 cpe:/o:linux:linux_kernel:2.6.30:rc7 cpe:/o:linux:linux_kernel:2.6.30:rc8 cpe:/o:linux:linux_kernel:2.6.30.1 cpe:/o:linux:linux_kernel:2.6.30.2 cpe:/o:linux:linux_kernel:2.6.30.3 cpe:/o:linux:linux_kernel:2.6.30.4 cpe:/o:linux:linux_kernel:2.6.30.5 cpe:/o:linux:linux_kernel:2.6.30.6 cpe:/o:linux:linux_kernel:2.6.30.7 cpe:/o:linux:linux_kernel:2.6.30.8 cpe:/o:linux:linux_kernel:2.6.30.9 cpe:/o:linux:linux_kernel:2.6.30.10 cpe:/o:linux:linux_kernel:2.6.31 cpe:/o:linux:linux_kernel:2.6.31:rc1 cpe:/o:linux:linux_kernel:2.6.31:rc2 cpe:/o:linux:linux_kernel:2.6.31:rc3 cpe:/o:linux:linux_kernel:2.6.31:rc4 cpe:/o:linux:linux_kernel:2.6.31:rc5 cpe:/o:linux:linux_kernel:2.6.31:rc6 cpe:/o:linux:linux_kernel:2.6.31:rc7 cpe:/o:linux:linux_kernel:2.6.31:rc8 cpe:/o:linux:linux_kernel:2.6.31:rc9 cpe:/o:linux:linux_kernel:2.6.31.1 cpe:/o:linux:linux_kernel:2.6.31.2 cpe:/o:linux:linux_kernel:2.6.31.3 cpe:/o:linux:linux_kernel:2.6.31.4 cpe:/o:linux:linux_kernel:2.6.31.5 cpe:/o:linux:linux_kernel:2.6.31.6 cpe:/o:linux:linux_kernel:2.6.31.7 cpe:/o:linux:linux_kernel:2.6.31.8 cpe:/o:linux:linux_kernel:2.6.31.9 cpe:/o:linux:linux_kernel:2.6.31.10 cpe:/o:linux:linux_kernel:2.6.31.11 cpe:/o:linux:linux_kernel:2.6.31.12 cpe:/o:linux:linux_kernel:2.6.31.13 cpe:/o:linux:linux_kernel:2.6.31.14 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:2.6.32:rc1 cpe:/o:linux:linux_kernel:2.6.32:rc2 cpe:/o:linux:linux_kernel:2.6.32:rc3 cpe:/o:linux:linux_kernel:2.6.32:rc4 cpe:/o:linux:linux_kernel:2.6.32:rc5 cpe:/o:linux:linux_kernel:2.6.32:rc6 cpe:/o:linux:linux_kernel:2.6.32:rc7 cpe:/o:linux:linux_kernel:2.6.32:rc8 cpe:/o:linux:linux_kernel:2.6.32.1 cpe:/o:linux:linux_kernel:2.6.32.2 cpe:/o:linux:linux_kernel:2.6.32.3 cpe:/o:linux:linux_kernel:2.6.32.4 cpe:/o:linux:linux_kernel:2.6.32.5 cpe:/o:linux:linux_kernel:2.6.32.6 cpe:/o:linux:linux_kernel:2.6.32.7

CVE-2010-0307

2010-02-17T13:30:00.417-05:00

2018-11-16T11:08:00.270-05:00

4.7

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2018-11-13T12:09:46.720-05:00

CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=221af7f87b97431e3ee21ce4b0e77d5411cf1549 FEDORA FEDORA-2010-1787 SUSE SUSE-SA:2010:014 MLIST [linux-mm] 20100128 DoS on x86_64 CONFIRM http://marc.info/?t=126466700200002&r=1&w=2 CONFIRM http://support.avaya.com/css/P8/documents/100088287 DEBIAN DSA-1996 MISC http://www.globalsecuritymag.com/Vigil-nce-Linux-kernel-denial-of,20100202,15754.html CONFIRM http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.8 MANDRIVA MDVSA-2010:066 MLIST [oss-security] 20100201 CVE request - kernel: DoS on x86_64 MLIST [oss-security] 20100201 Re: CVE request - kernel: DoS on x86_64 MLIST [oss-security] 20100203 Re: CVE request - kernel: DoS on x86_64 MLIST [oss-security] 20100204 Re: CVE request - kernel: DoS on x86_64 REDHAT RHSA-2010:0398 REDHAT RHSA-2010:0771 BUGTRAQ 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX BID 38027 UBUNTU USN-914-1 CONFIRM http://www.vmware.com/security/advisories/VMSA-2011-0003.html VUPEN ADV-2010-0638 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=560547 REDHAT RHSA-2010:0146 The load_elf_binary function in fs/binfmt_elf.c in the Linux kernel before 2.6.32.8 on the x86_64 platform does not ensure that the ELF interpreter is available before a call to the SET_PERSONALITY macro, which allows local users to cause a denial of service (system crash) via a 32-bit application that attempts to execute a 64-bit application and then triggers a segmentation fault, as demonstrated by amd64_killer, related to the flush_old_exec function.

cpe:/a:squid-cache:squid:2.0 cpe:/a:squid-cache:squid:2.1 cpe:/a:squid-cache:squid:2.2 cpe:/a:squid-cache:squid:2.3 cpe:/a:squid-cache:squid:2.4 cpe:/a:squid-cache:squid:2.5 cpe:/a:squid-cache:squid:2.6 cpe:/a:squid-cache:squid:2.7 cpe:/a:squid-cache:squid:3.0 cpe:/a:squid-cache:squid:3.0.stable1 cpe:/a:squid-cache:squid:3.0.stable2 cpe:/a:squid-cache:squid:3.0.stable3 cpe:/a:squid-cache:squid:3.0.stable4 cpe:/a:squid-cache:squid:3.0.stable5 cpe:/a:squid-cache:squid:3.0.stable6 cpe:/a:squid-cache:squid:3.0.stable7 cpe:/a:squid-cache:squid:3.0.stable8 cpe:/a:squid-cache:squid:3.0.stable9 cpe:/a:squid-cache:squid:3.0.stable11 cpe:/a:squid-cache:squid:3.0.stable12 cpe:/a:squid-cache:squid:3.0.stable13 cpe:/a:squid-cache:squid:3.0.stable14 cpe:/a:squid-cache:squid:3.0.stable15 cpe:/a:squid-cache:squid:3.0.stable16 cpe:/a:squid-cache:squid:3.0.stable17 cpe:/a:squid-cache:squid:3.0.stable18 cpe:/a:squid-cache:squid:3.0.stable19 cpe:/a:squid-cache:squid:3.0.stable20 cpe:/a:squid-cache:squid:3.0.stable21 cpe:/a:squid-cache:squid:3.0.stable22 cpe:/a:squid-cache:squid:3.1 cpe:/a:squid-cache:squid:3.1.0.1 cpe:/a:squid-cache:squid:3.1.0.2 cpe:/a:squid-cache:squid:3.1.0.3 cpe:/a:squid-cache:squid:3.1.0.4 cpe:/a:squid-cache:squid:3.1.0.5 cpe:/a:squid-cache:squid:3.1.0.6 cpe:/a:squid-cache:squid:3.1.0.7 cpe:/a:squid-cache:squid:3.1.0.8 cpe:/a:squid-cache:squid:3.1.0.9 cpe:/a:squid-cache:squid:3.1.0.10 cpe:/a:squid-cache:squid:3.1.0.11 cpe:/a:squid-cache:squid:3.1.0.12 cpe:/a:squid-cache:squid:3.1.0.13 cpe:/a:squid-cache:squid:3.1.0.14 cpe:/a:squid-cache:squid:3.1.0.15

CVE-2010-0308

2010-02-03T13:30:00.767-05:00

2017-09-18T21:30:21.830-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov MISC http://events.ccc.de/congress/2009/Fahrplan/attachments/1483_26c3_ipv4_fuckups.pdf BID 37522 SECTRACK 1023520 CONFIRM http://www.squid-cache.org/Advisories/SQUID-2010_1.txt MISC http://www.squid-cache.org/Versions/v2/HEAD/changesets/12597.patch MISC http://www.squid-cache.org/Versions/v3/3.0/changesets/squid-3.0-9163.patch MISC http://www.squid-cache.org/Versions/v3/3.1/changesets/squid-3.1-9853.patch VUPEN ADV-2010-0260 XF squid-dns-dos(56001) lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denial of service (assertion failure) via a crafted DNS packet that only contains a header.

cpe:/a:linux:kernel

CVE-2010-0309

2010-02-12T14:30:00.627-05:00

2017-09-18T21:30:21.893-04:00

6.8

NETWORK

LOW

SINGLE_INSTANCE

NONE

COMPLETE

http://nvd.nist.gov DEBIAN DSA-1996 MLIST [kvm] 20100129 KVM: PIT: control word is write-only MLIST [oss-security] 20100202 CVE request - kvm: cat /dev/port in the guest can cause host DoS MLIST [oss-security] 20100202 Re: CVE request - kvm: cat /dev/port in the guest can cause host DoS BID 38158 UBUNTU USN-914-1 VUPEN ADV-2010-0638 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=560887 REDHAT RHSA-2010:0088 REDHAT RHSA-2010:0095 The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly use the pit_state data structure, which allows guest OS users to cause a denial of service (host OS crash or hang) by attempting to read the /dev/port file.

cpe:/o:sun:solaris:10.0::sparc cpe:/o:sun:solaris:10.0::x86

CVE-2010-0310

2010-01-14T14:30:00.513-05:00

2017-09-18T21:30:21.970-04:00

6.8

LOCAL

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov SECTRACK 1023448 CONFIRM http://sunsolve.sun.com/search/document.do?assetkey=1-21-143502-01-1 SUNALERT 275410 BID 37754 Trusted Extensions in Sun Solaris 10 allows local users to gain privileges via vectors related to omission of unspecified libraries from software updates.

cpe:/a:sun:java_system_identity_server:8.1.0.5 cpe:/a:sun:java_system_identity_server:8.1.0.6

CVE-2010-0311

2010-01-14T14:30:00.547-05:00

2017-08-16T21:31:57.930-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SECTRACK 1023447 SUNALERT 275010 VUPEN ADV-2010-0108 XF jsim-unspecified-security-bypass(55572) Unspecified vulnerability in Sun Java System Identity Manager (aka IdM) 8.1.0.5 and 8.1.0.6, when Sun Java System Access Manager, OpenSSO Enterprise 8.0, or IBM Tivoli Access Manager is used, allows remote attackers to obtain administrative access via unknown vectors.

cpe:/a:ibm:tivoli_directory_server:6.2

CVE-2010-0312

2010-01-14T14:30:00.577-05:00

2011-08-08T00:00:00.000-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-01-15T12:19:00.000-05:00

MISC http://intevydis.blogspot.com/2010/01/tivoli-directory-server-62-doextendedop.html SECTRACK 1023433 The do_extendedOp function in ibmslapd in IBM Tivoli Directory Server (TDS) 6.2 on Linux allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted SecureWay 3.2 Event Registration Request (aka a 1.3.18.0.2.12.1 request).

cpe:/a:sun:java_system_directory_server:7.0:-:enterprise

CVE-2010-0313

2010-01-14T14:30:00.607-05:00

2017-08-16T21:31:57.977-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://intevydis.blogspot.com/2010/01/sun-directory-server-70.html SECTRACK 1023431 BID 37699 VUPEN ADV-2010-0085 XF jsds-coregetproxyauthdn-dos(55511) The core_get_proxyauth_dn function in ns-slapd in Sun Java System Directory Server Enterprise Edition 7.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted LDAP Search Request message.

cpe:/a:apple:safari

CVE-2010-0314

2010-01-14T14:30:00.670-05:00

2011-03-17T22:46:10.130-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://nomoreroot.blogspot.com/2010/01/little-bug-in-safari-and-google-chrome.html MANDRIVA MDVSA-2011:039 UBUNTU USN-1006-1 VUPEN ADV-2010-2722 VUPEN ADV-2011-0552 Apple Safari allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HREF attribute of a stylesheet LINK element, and then reading the document.styleSheets[0].href property value.

cpe:/a:google:chrome:0.2.149.27 cpe:/a:google:chrome:0.2.149.29 cpe:/a:google:chrome:0.2.149.30 cpe:/a:google:chrome:0.2.152.1 cpe:/a:google:chrome:0.2.153.1 cpe:/a:google:chrome:0.3.154.0 cpe:/a:google:chrome:0.3.154.3 cpe:/a:google:chrome:0.4.154.18 cpe:/a:google:chrome:0.4.154.22 cpe:/a:google:chrome:0.4.154.31 cpe:/a:google:chrome:0.4.154.33 cpe:/a:google:chrome:1.0.154.36 cpe:/a:google:chrome:1.0.154.39 cpe:/a:google:chrome:1.0.154.42 cpe:/a:google:chrome:1.0.154.43 cpe:/a:google:chrome:1.0.154.46 cpe:/a:google:chrome:1.0.154.48 cpe:/a:google:chrome:1.0.154.52 cpe:/a:google:chrome:1.0.154.53 cpe:/a:google:chrome:1.0.154.59 cpe:/a:google:chrome:1.0.154.65 cpe:/a:google:chrome:2.0.156.1 cpe:/a:google:chrome:2.0.157.0 cpe:/a:google:chrome:2.0.157.2 cpe:/a:google:chrome:2.0.158.0 cpe:/a:google:chrome:2.0.159.0 cpe:/a:google:chrome:2.0.169.0 cpe:/a:google:chrome:2.0.169.1 cpe:/a:google:chrome:2.0.170.0 cpe:/a:google:chrome:2.0.172 cpe:/a:google:chrome:2.0.172.2 cpe:/a:google:chrome:2.0.172.8 cpe:/a:google:chrome:2.0.172.27 cpe:/a:google:chrome:2.0.172.28 cpe:/a:google:chrome:2.0.172.30 cpe:/a:google:chrome:2.0.172.31 cpe:/a:google:chrome:2.0.172.33 cpe:/a:google:chrome:2.0.172.37 cpe:/a:google:chrome:2.0.172.38 cpe:/a:google:chrome:3.0.182.2 cpe:/a:google:chrome:3.0.190.2 cpe:/a:google:chrome:3.0.193.2:beta cpe:/a:google:chrome:3.0.195.21 cpe:/a:google:chrome:3.0.195.24 cpe:/a:google:chrome:3.0.195.32 cpe:/a:google:chrome:3.0.195.33 cpe:/a:google:chrome:4.0.249.78

CVE-2010-0315

2010-01-14T14:30:00.703-05:00

2017-09-18T21:30:22.047-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://code.google.com/p/chromium/issues/detail?id=32309 CONFIRM http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html SUSE SUSE-SR:2011:002 MISC http://nomoreroot.blogspot.com/2010/01/little-bug-in-safari-and-google-chrome.html SECTRACK 1023583 CONFIRM http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs CONFIRM http://trac.webkit.org/changeset/53607 BID 38177 VUPEN ADV-2010-0361 VUPEN ADV-2011-0212 CONFIRM https://bugs.webkit.org/show_bug.cgi?id=33683 XF google-chrome-href-info-disclosure(55683) XF googlechrome-iframe-info-disc(56215) WebKit before r53607, as used in Google Chrome before 4.0.249.89, allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HREF attribute of a stylesheet LINK element, and then reading the document.styleSheets[0].href property value, related to an IFRAME element.

cpe:/a:google:google_sketchup:7.0 cpe:/a:google:google_sketchup:7.0.10247 cpe:/a:google:google_sketchup:7.1.4871 cpe:/a:google:google_sketchup:7.1.6087

CVE-2010-0316

2010-01-15T12:30:00.640-05:00

2011-08-08T00:00:00.000-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2010-01-18T09:55:00.000-05:00

CONFIRM http://sketchup.google.com/support/bin/answer.py?hl=en&answer=141303 VUPEN ADV-2010-0133 Integer overflow in Google SketchUp before 7.1 M2 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via a crafted SKP file.

cpe:/o:novell:netware:6.5:sp8

CVE-2010-0317

2010-01-15T13:30:00.340-05:00

2018-10-10T15:52:20.283-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov MISC http://protekresearch.blogspot.com/2010/01/prl-cifsnlm-memory-consumption-denial.html EXPLOIT-DB 11009 BUGTRAQ 20100105 {PRL} Novell Netware CIFS And AFP Remote Memory Consumption DoS BID 37616 SECTRACK 1023400 VUPEN ADV-2010-0041 XF netware-afptcp-dos(55389) Novell Netware 6.5 SP8 allows remote attackers to cause a denial of service (NULL pointer dereference, memory consumption, ABEND, and crash) via a large number of malformed or AFP requests that are not properly handled by (1) the CIFS functionality in CIFS.nlm Semantic Agent (Build 163 MP) 3.27 or (2) the AFP functionality in AFPTCP.nlm Build 163 SP 3.27. NOTE: some of these details are obtained from third party information.

cpe:/o:freebsd:freebsd:7.1 cpe:/o:freebsd:freebsd:7.2 cpe:/o:freebsd:freebsd:8.0

CVE-2010-0318

2010-01-15T13:30:00.400-05:00

2011-08-08T00:00:00.000-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2010-01-18T10:25:00.000-05:00

FREEBSD FreeBSD-SA-10:03 BID 37657 SECTRACK 1023407 The replay functionality for ZFS Intent Log (ZIL) in FreeBSD 7.1, 7.2, and 8.0, when creating files during replay of a setattr transaction, uses 7777 permissions instead of the original permissions, which might allow local users to read or modify unauthorized files in opportunistic circumstances after a system crash or power failure.

cpe:/a:docmint:docmint:1.0 cpe:/a:docmint:docmint:2.1

CVE-2010-0319

2010-01-15T14:30:00.380-05:00

2017-08-16T21:31:58.163-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://packetstormsecurity.org/1001-exploits/docmintcms-xss.txt EXPLOIT-DB 11119 BID 37721 XF docmint-index-xss(55549) Cross-site scripting (XSS) vulnerability in index.php in Docmint 1.0 and 2.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: some of these details are obtained from third party information.

cpe:/a:x10media:glitter_central_script

CVE-2010-0320

2010-01-15T14:30:00.410-05:00

2017-08-16T21:31:58.227-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://packetstormsecurity.org/1001-exploits/glittercentral-xss.txt EXPLOIT-DB 11108 XF glittercentral-submitlink-xss(55537) Cross-site scripting (XSS) vulnerability in submitlink.php in Glitter Central Script allows remote attackers to inject arbitrary web script or HTML via the catid parameter.

cpe:/a:jamit:jamit_job_board:3.0

CVE-2010-0321

2010-01-15T14:30:00.443-05:00

2017-08-16T21:31:58.273-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://packetstormsecurity.org/1001-exploits/jamitjobboard-xss.txt EXPLOIT-DB 11073 BID 37701 XF jamit-jobboard-index-xss(55500) Cross-site scripting (XSS) vulnerability in jobs/index.php in Jamit Job Board 3.0 allows remote attackers to inject arbitrary web script or HTML via the post_id parameter.

cpe:/a:matthias_karr:mk_anydropdownmenu:0.3.10 cpe:/a:matthias_karr:mk_anydropdownmenu:0.3.12 cpe:/a:matthias_karr:mk_anydropdownmenu:0.3.13 cpe:/a:matthias_karr:mk_anydropdownmenu:0.3.23 cpe:/a:matthias_karr:mk_anydropdownmenu:0.3.25 cpe:/a:matthias_karr:mk_anydropdownmenu:0.3.26 cpe:/a:matthias_karr:mk_anydropdownmenu:0.3.27 cpe:/a:matthias_karr:mk_anydropdownmenu:0.3.28

CVE-2010-0322

2010-01-15T14:30:00.473-05:00

2010-01-18T09:02:02.407-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-01-18T08:44:00.000-05:00

CONFIRM http://typo3.org/extensions/repository/view/mk_anydropdownmenu/0.4.0/ CONFIRM http://typo3.org/extensions/repository/view/mk_anydropdownmenu/0.4.0/info/ChangeLog/ CONFIRM http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ SQL injection vulnerability in the init function in MK-AnydropdownMenu (mk_anydropdownmenu) extension 0.3.28 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

cpe:/a:arco_van_geest:goof_fotoboek:1.2.4 cpe:/a:arco_van_geest:goof_fotoboek:1.4.0 cpe:/a:arco_van_geest:goof_fotoboek:1.4.1 cpe:/a:arco_van_geest:goof_fotoboek:1.5.1 cpe:/a:arco_van_geest:goof_fotoboek:1.6.1 cpe:/a:arco_van_geest:goof_fotoboek:1.6.4 cpe:/a:arco_van_geest:goof_fotoboek:1.7.0 cpe:/a:arco_van_geest:goof_fotoboek:1.7.2 cpe:/a:arco_van_geest:goof_fotoboek:1.7.3 cpe:/a:arco_van_geest:goof_fotoboek:1.7.4 cpe:/a:arco_van_geest:goof_fotoboek:1.7.5 cpe:/a:arco_van_geest:goof_fotoboek:1.7.7 cpe:/a:arco_van_geest:goof_fotoboek:1.7.9 cpe:/a:arco_van_geest:goof_fotoboek:1.7.10 cpe:/a:arco_van_geest:goof_fotoboek:1.7.11 cpe:/a:arco_van_geest:goof_fotoboek:1.7.12 cpe:/a:arco_van_geest:goof_fotoboek:1.7.13 cpe:/a:arco_van_geest:goof_fotoboek:1.7.14

CVE-2010-0323

2010-01-15T14:30:00.507-05:00

2010-01-18T00:00:00.000-05:00

7.8

NETWORK

LOW

NONE

COMPLETE

NONE

http://nvd.nist.gov

2010-01-18T08:57:00.000-05:00

CONFIRM http://typo3.org/extensions/repository/view/goof_fotoboek/1.7.15/ CONFIRM http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ Unspecified vulnerability in the Photo Book (goof_fotoboek) extension 1.7.14 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown attack vectors.

cpe:/a:patrick_bauerochse:ref_list:1.0.1

CVE-2010-0324

2010-01-15T14:30:00.537-05:00

2010-01-18T00:00:00.000-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-01-18T09:12:00.000-05:00

CONFIRM http://typo3.org/extensions/repository/view/ref_list/1.0.2/ CONFIRM http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ SQL injection vulnerability in the Customer Reference List (ref_list) extension 1.0.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

cpe:/a:sebastian_baumann:sb_folderdownload:0.1.1 cpe:/a:sebastian_baumann:sb_folderdownload:0.2.0 cpe:/a:sebastian_baumann:sb_folderdownload:0.2.1 cpe:/a:sebastian_baumann:sb_folderdownload:0.2.2

CVE-2010-0325

2010-01-15T14:30:00.567-05:00

2010-01-18T00:00:00.000-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-01-18T09:19:00.000-05:00

CONFIRM http://typo3.org/extensions/repository/view/sb_folderdownload/0.2.3/ CONFIRM http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ Unspecified vulnerability in the SB Folderdownload (sb_folderdownload) extension 0.2.2 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown attack vectors.

cpe:/a:francois_suter:devlog:2.0.0 cpe:/a:francois_suter:devlog:2.1.0 cpe:/a:francois_suter:devlog:2.2.0 cpe:/a:francois_suter:devlog:2.3.0 cpe:/a:francois_suter:devlog:2.3.1 cpe:/a:francois_suter:devlog:2.3.2 cpe:/a:francois_suter:devlog:2.3.3 cpe:/a:francois_suter:devlog:2.4.0 cpe:/a:francois_suter:devlog:2.5.0 cpe:/a:francois_suter:devlog:2.6.0 cpe:/a:francois_suter:devlog:2.7.0 cpe:/a:francois_suter:devlog:2.8.0 cpe:/a:francois_suter:devlog:2.9.0 cpe:/a:francois_suter:devlog:2.9.1 cpe:/a:rene_fritz:devlog:1.1.0

CVE-2010-0326

2010-01-15T14:30:00.597-05:00

2010-01-18T00:00:00.000-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-01-18T09:52:00.000-05:00

CONFIRM http://typo3.org/extensions/repository/view/devlog/2.9.2/ CONFIRM http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ Cross-site scripting (XSS) vulnerability in the Developer log (devlog) extension 2.9.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

cpe:/a:julian_kleinhans:kj_imagelightbox2:1.4.0 cpe:/a:julian_kleinhans:kj_imagelightbox2:1.4.1 cpe:/a:julian_kleinhans:kj_imagelightbox2:1.4.2 cpe:/a:julian_kleinhans:kj_imagelightbox2:2.0.0

CVE-2010-0327

2010-01-15T14:30:00.647-05:00

2010-01-18T10:31:15.170-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-01-18T10:18:00.000-05:00

CONFIRM http://typo3.org/extensions/repository/view/kj_imagelightbox2/2.0.2/ CONFIRM http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ Cross-site scripting (XSS) vulnerability in the KJ: Imagelightbox (kj_imagelightbox2) extension 2.0.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2008-2490.

cpe:/a:rastislav_birka:cs2_unitconv:1.0.4

CVE-2010-0328

2010-01-15T14:30:00.677-05:00

2010-01-18T00:00:00.000-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-01-18T10:41:00.000-05:00

CONFIRM http://typo3.org/extensions/repository/view/cs2_unitconv/1.0.5/ CONFIRM http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ Cross-site scripting (XSS) vulnerability in the Unit Converter (cs2_unitconv) extension 1.0.4 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

cpe:/a:alex_kellner:powermail:1.0.1 cpe:/a:alex_kellner:powermail:1.0.2 cpe:/a:alex_kellner:powermail:1.0.3 cpe:/a:alex_kellner:powermail:1.0.4 cpe:/a:alex_kellner:powermail:1.0.5 cpe:/a:alex_kellner:powermail:1.0.6 cpe:/a:alex_kellner:powermail:1.0.7 cpe:/a:alex_kellner:powermail:1.0.8 cpe:/a:alex_kellner:powermail:1.0.9 cpe:/a:alex_kellner:powermail:1.0.10 cpe:/a:alex_kellner:powermail:1.0.11 cpe:/a:alex_kellner:powermail:1.0.12 cpe:/a:alex_kellner:powermail:1.1.0 cpe:/a:alex_kellner:powermail:1.1.1 cpe:/a:alex_kellner:powermail:1.1.2 cpe:/a:alex_kellner:powermail:1.1.3 cpe:/a:alex_kellner:powermail:1.1.4 cpe:/a:alex_kellner:powermail:1.1.5 cpe:/a:alex_kellner:powermail:1.1.6 cpe:/a:alex_kellner:powermail:1.1.7 cpe:/a:alex_kellner:powermail:1.1.8 cpe:/a:alex_kellner:powermail:1.1.9 cpe:/a:alex_kellner:powermail:1.1.10 cpe:/a:alex_kellner:powermail:1.2.0 cpe:/a:alex_kellner:powermail:1.2.1 cpe:/a:alex_kellner:powermail:1.2.2 cpe:/a:alex_kellner:powermail:1.2.3 cpe:/a:alex_kellner:powermail:1.2.4 cpe:/a:alex_kellner:powermail:1.3.1 cpe:/a:alex_kellner:powermail:1.3.2 cpe:/a:alex_kellner:powermail:1.3.3 cpe:/a:alex_kellner:powermail:1.3.4 cpe:/a:alex_kellner:powermail:1.3.5 cpe:/a:alex_kellner:powermail:1.3.6 cpe:/a:alex_kellner:powermail:1.3.7 cpe:/a:alex_kellner:powermail:1.3.8 cpe:/a:alex_kellner:powermail:1.3.9 cpe:/a:alex_kellner:powermail:1.3.10 cpe:/a:alex_kellner:powermail:1.3.11 cpe:/a:alex_kellner:powermail:1.3.12 cpe:/a:alex_kellner:powermail:1.3.13 cpe:/a:alex_kellner:powermail:1.3.14 cpe:/a:alex_kellner:powermail:1.3.15 cpe:/a:alex_kellner:powermail:1.3.16 cpe:/a:alex_kellner:powermail:1.4.1 cpe:/a:alex_kellner:powermail:1.4.2 cpe:/a:alex_kellner:powermail:1.4.3 cpe:/a:alex_kellner:powermail:1.4.4 cpe:/a:alex_kellner:powermail:1.4.5 cpe:/a:alex_kellner:powermail:1.4.6 cpe:/a:alex_kellner:powermail:1.4.7 cpe:/a:alex_kellner:powermail:1.4.8 cpe:/a:alex_kellner:powermail:1.4.9 cpe:/a:alex_kellner:powermail:1.4.10 cpe:/a:alex_kellner:powermail:1.4.11 cpe:/a:alex_kellner:powermail:1.4.12 cpe:/a:alex_kellner:powermail:1.4.13 cpe:/a:alex_kellner:powermail:1.4.14 cpe:/a:alex_kellner:powermail:1.4.15 cpe:/a:alex_kellner:powermail:1.4.16 cpe:/a:alex_kellner:powermail:1.4.17 cpe:/a:alex_kellner:powermail:1.4.18 cpe:/a:alex_kellner:powermail:1.5.0 cpe:/a:alex_kellner:powermail:1.5.1

CVE-2010-0329

2010-01-15T14:30:00.707-05:00

2011-08-08T00:00:00.000-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-01-18T11:43:00.000-05:00

CONFIRM http://typo3.org/extensions/repository/view/powermail/1.5.2/ CONFIRM http://typo3.org/extensions/repository/view/powermail/1.5.2/info/changelog.txt/ CONFIRM http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ SQL injection vulnerability in the powermail extension 1.5.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to the "SQL selection field" and "typoscript."

cpe:/a:julian_fries:jf_easymaps:1.0.2

CVE-2010-0330

2010-01-15T14:30:00.740-05:00

2010-01-18T00:00:00.000-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-01-18T11:17:00.000-05:00

MISC http://typo3.org/extensions/repository/view/jf_easymaps/1.0.3/ CONFIRM http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ SQL injection vulnerability in the Googlemaps for tt_news (jf_easymaps) extension 1.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

cpe:/a:stefan_tannhaeuser:tv21_talkshow:1.0.1

CVE-2010-0331

2010-01-15T14:30:00.753-05:00

2011-08-08T00:00:00.000-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-01-18T12:02:00.000-05:00

CONFIRM http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ Cross-site scripting (XSS) vulnerability in the TV21 Talkshow (tv21_talkshow) extension 1.0.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

cpe:/a:stefan_tannhaeuser:tv21_talkshow:1.0.1

CVE-2010-0332

2010-01-15T14:30:00.787-05:00

2011-08-08T00:00:00.000-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-01-18T12:09:00.000-05:00

ALLOWS_OTHER_ACCESS

CONFIRM http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ SQL injection vulnerability in the TV21 Talkshow (tv21_talkshow) extension 1.0.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

cpe:/a:matthias_graubner:mg_help:0.1.0 cpe:/a:matthias_graubner:mg_help:0.2.0 cpe:/a:matthias_graubner:mg_help:1.0.0 cpe:/a:matthias_graubner:mg_help:1.0.2 cpe:/a:matthias_graubner:mg_help:1.1.0 cpe:/a:matthias_graubner:mg_help:1.1.1 cpe:/a:matthias_graubner:mg_help:1.1.3 cpe:/a:matthias_graubner:mg_help:1.1.4 cpe:/a:matthias_graubner:mg_help:1.1.6

CVE-2010-0333

2010-01-15T14:30:00.817-05:00

2011-07-26T00:00:00.000-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-01-18T12:10:00.000-05:00

CONFIRM http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ SQL injection vulnerability in the Helpdesk (mg_help) extension 1.1.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

cpe:/a:francisco_cifuentes:vote_for_tt_news:1.0.1

CVE-2010-0334

2010-01-15T14:30:00.847-05:00

2011-07-25T00:00:00.000-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-01-18T12:21:00.000-05:00

CONFIRM http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ SQL injection vulnerability in the Vote rank for news (vote_for_tt_news) extension 1.0.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

cpe:/a:francisco_cifuentes:vote_for_tt_news:1.0.1

CVE-2010-0335

2010-01-15T14:30:00.880-05:00

2011-07-26T00:00:00.000-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-01-18T12:29:00.000-05:00

CONFIRM http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ Cross-site scripting (XSS) vulnerability in the Vote rank for news (vote_for_tt_news) extension 1.0.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

cpe:/a:typo3:kiddog_mysqldumper:0.0.3

CVE-2010-0336

2010-01-15T14:30:00.897-05:00

2011-04-29T00:00:00.000-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-01-18T12:30:00.000-05:00

CONFIRM http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ Unspecified vulnerability in the kiddog_mysqldumper (kiddog_mysqldumper) extension 0.0.3 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown attack vectors.

cpe:/a:typo3:dl3_tt_news_alerts:0.2.0

CVE-2010-0337

2010-01-15T14:30:00.927-05:00

2011-04-29T00:00:00.000-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-01-18T12:33:00.000-05:00

CONFIRM http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ SQL injection vulnerability in the tt_news Mail alert (dl3_tt_news_alerts) extension 0.2.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

cpe:/a:typo3:ttpedit:0.0.2

CVE-2010-0338

2010-01-15T14:30:00.957-05:00

2011-02-01T00:00:00.000-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-01-18T12:37:00.000-05:00

CONFIRM http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ SQL injection vulnerability in the TT_Products editor (ttpedit) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

cpe:/a:typo3:vm19_userlinks:0.1.1

CVE-2010-0339

2010-01-15T14:30:00.990-05:00

2011-04-29T00:00:00.000-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-01-18T12:49:00.000-05:00

CONFIRM http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ SQL injection vulnerability in the User Links (vm19_userlinks) extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

cpe:/a:typo3:mjseventpro:0.2.1

CVE-2010-0340

2010-01-15T14:30:01.003-05:00

2011-04-29T00:00:00.000-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-01-18T15:48:00.000-05:00

CONFIRM http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ SQL injection vulnerability in the MJS Event Pro (mjseventpro) extension 0.2.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

cpe:/a:typo3:bb_simplejobs:0.1.0

CVE-2010-0341

2010-01-15T14:30:01.037-05:00

2011-04-29T00:00:00.000-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-01-18T16:00:00.000-05:00

CONFIRM http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ SQL injection vulnerability in the BB Simple Jobs (bb_simplejobs) extension 0.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

cpe:/a:typo3:job_reports:0.1.0

CVE-2010-0342

2010-01-15T14:30:01.067-05:00

2011-04-29T00:00:00.000-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-01-18T16:12:00.000-05:00

CONFIRM http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ SQL injection vulnerability in the Reports for Job (job_reports) extension 0.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

cpe:/a:typo3:pb_clanlist:0.0.1

CVE-2010-0343

2010-01-15T14:30:01.097-05:00

2011-04-29T00:00:00.000-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-01-18T16:17:00.000-05:00

CONFIRM http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ SQL injection vulnerability in the Clan Users List (pb_clanlist) extension 0.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

cpe:/a:typo3:zak_store_management:1.0.0

CVE-2010-0344

2010-01-15T14:30:01.113-05:00

2011-04-29T00:00:00.000-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-01-18T16:20:00.000-05:00

CONFIRM http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ SQL injection vulnerability in the zak_store_management extension 1.0.0 and earlier TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

cpe:/a:typo3:majordomo:1.1.3

CVE-2010-0345

2010-01-15T14:30:01.147-05:00

2010-01-18T00:00:00.000-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-01-18T16:21:00.000-05:00

CONFIRM http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ Cross-site scripting (XSS) vulnerability in the Majordomo extension 1.1.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

cpe:/a:typo3:mimi_tipfriends:0.0.2

CVE-2010-0346

2010-01-15T14:30:01.177-05:00

2011-04-29T00:00:00.000-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-01-18T16:23:00.000-05:00

CONFIRM http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ Cross-site scripting (XSS) vulnerability in the Tip many friends (mimi_tipfriends) extension 0.0.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

cpe:/a:typo3:vd_gemomap:0.3.1

CVE-2010-0347

2010-01-15T14:30:01.223-05:00

2011-04-29T00:00:00.000-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-01-18T16:25:00.000-05:00

CONFIRM http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ Cross-site scripting (XSS) vulnerability in the VD / Geomap (vd_geomap) extension 0.3.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

cpe:/a:c-3.co.jp:webcalenderc3:0.31 cpe:/a:c-3.co.jp:webcalenderc3:0.31:s2 cpe:/a:c-3.co.jp:webcalenderc3:0.32

CVE-2010-0348

2010-01-15T14:30:01.253-05:00

2011-04-29T00:00:00.000-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-01-18T16:27:00.000-05:00

JVN JVN#22247093 JVNDB JVNDB-2010-000003 CONFIRM http://webcal.c-3.jp/zeijakusei.html Directory traversal vulnerability in C3 Corp. WebCalenderC3 0.32 and earlier allows remote attackers to read arbitrary files via unknown vectors.

cpe:/a:c-3.co.jp:webcalenderc3:0.31 cpe:/a:c-3.co.jp:webcalenderc3:0.31:s2 cpe:/a:c-3.co.jp:webcalenderc3:0.32

CVE-2010-0349

2010-01-15T15:30:00.373-05:00

2011-04-29T00:00:00.000-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-01-18T16:31:00.000-05:00

JVN JVN#33977065 JVNDB JVNDB-2010-000002 MISC http://webcal.c-3.jp/zeijakusei.html Cross-site scripting (XSS) vulnerability in C3 Corp. WebCalenderC3 0.32 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: this issue could not be reproduced by the vendor, but a patch was provided anyway. The original researcher is reliable.

CVE-2010-0350

2010-01-15T15:30:00.420-05:00

2011-05-02T00:00:00.000-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-01-18T12:16:00.000-05:00

CONFIRM http://typo3.org/extensions/repository/view/goof_fotoboek/1.7.15/ CONFIRM http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ Directory traversal vulnerability in the Photo Book (goof_fotoboek) extension 1.7.14 and earlier for TYPO3 has unknown impact and remote attack vectors.

cpe:/a:viscomsoft:movie_player_pro_sdk_activex:6.8

CVE-2010-0356

2010-01-18T14:30:00.650-05:00

2017-08-16T21:31:58.337-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov MISC http://www.shinnai.net/exploits/X6hU4E0E7P5H3qH5yXrn.txt VUPEN ADV-2010-0093 XF movieplayer-drawtext-activex-bo(55536) Stack-based buffer overflow in the MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX control in MoviePlayer.ocx 6.8.0.0 in Viscom Software Movie Player Pro SDK ActiveX 6.8 allows remote attackers to execute arbitrary code via a long strFontName parameter to the DrawText method.

cpe:/a:ibm:lotus_web_content_management:6.0.1.4 cpe:/a:ibm:lotus_web_content_management:6.0.1.5 cpe:/a:ibm:lotus_web_content_management:6.0.1.6 cpe:/a:ibm:lotus_web_content_management:6.1.0.1 cpe:/a:ibm:lotus_web_content_management:6.1.0.2

CVE-2010-0357

2010-01-20T11:30:00.447-05:00

2017-08-16T21:31:58.383-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1023463 BID 37825 VUPEN ADV-2010-0149 AIXAPAR PM02704 AIXAPAR PM03233 AIXAPAR PM04647 XF lotusweb-login-xss(55663) Cross-site scripting (XSS) vulnerability in the Login page in IBM Lotus Web Content Management (WCM) 6.0.1.4, 6.0.1.5, and 6.0.1.6 before iFix 32; and 6.1.0.1 and 6.1.0.2 before iFix 24; for WebSphere Portal allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

cpe:/a:ibm:lotus_domino:7.0 cpe:/a:ibm:lotus_domino:8.5.0.1

CVE-2010-0358

2010-01-20T11:30:00.493-05:00

2011-04-28T00:00:00.000-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2010-01-21T07:49:00.000-05:00

SECTRACK 1023456 Heap-based buffer overflow in the server in IBM Lotus Domino 7 and 8.5 FP1 allows remote attackers to cause a denial of service (daemon exit) and possibly have unspecified other impact via a long string in a crafted LDAP message to a TCP port, a different vulnerability than CVE-2009-3087.

cpe:/a:zeus:zeus_web_server:4.3r5

CVE-2010-0359

2010-01-20T11:30:00.523-05:00

2010-01-21T00:00:00.000-05:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2010-01-21T08:07:00.000-05:00

MISC http://intevydis.blogspot.com/2010/01/zeus-web-server-ssl2clienthello.html MISC http://intevydis.com/vd-list.shtml SECTRACK 1023465 CONFIRM http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES CONFIRM http://support.zeus.com/zws/news/2010/01/13/zws_4_3r5_released BID 37829 VUPEN ADV-2010-0147 Buffer overflow in the SSLv2 support in Zeus Web Server before 4.3r5 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long string in an invalid Client Hello message.

cpe:/a:sun:java_system_web_server:7.0:update_7

CVE-2010-0360

2010-01-20T11:30:00.557-05:00

2011-04-28T00:00:00.000-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2010-01-21T08:10:00.000-05:00

MISC http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70u7-trace.html MISC http://intevydis.com/vd-list.shtml Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to overwrite memory locations in the heap, and discover the contents of memory locations, via a malformed HTTP TRACE request that includes a long URI and many empty headers, related to an "overflow." NOTE: this might overlap CVE-2010-0272 and CVE-2010-0273.

cpe:/a:sun:java_system_web_server:7.0:update_7

CVE-2010-0361

2010-01-20T11:30:00.587-05:00

2011-04-28T00:00:00.000-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2010-01-21T08:18:00.000-05:00

MISC http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70u7-webdav.html Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via a long URI in an HTTP OPTIONS request.

cpe:/a:zeus:zeus_web_server:3.3 cpe:/a:zeus:zeus_web_server:3.3.1 cpe:/a:zeus:zeus_web_server:3.3.2 cpe:/a:zeus:zeus_web_server:3.3.3 cpe:/a:zeus:zeus_web_server:3.3.4 cpe:/a:zeus:zeus_web_server:3.3.5 cpe:/a:zeus:zeus_web_server:3.3.6 cpe:/a:zeus:zeus_web_server:3.3.7 cpe:/a:zeus:zeus_web_server:3.3.8 cpe:/a:zeus:zeus_web_server:3.4 cpe:/a:zeus:zeus_web_server:4.1 cpe:/a:zeus:zeus_web_server:4.1:r1 cpe:/a:zeus:zeus_web_server:4.2 cpe:/a:zeus:zeus_web_server:4.2:r2 cpe:/a:zeus:zeus_web_server:4.3 cpe:/a:zeus:zeus_web_server:4.3:r3 cpe:/a:zeus:zeus_web_server:4.3:r4

CVE-2010-0362

2010-01-20T11:30:00.617-05:00

2011-05-06T00:00:00.000-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-01-21T08:40:00.000-05:00

CONFIRM http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES Zeus Web Server before 4.3r5 does not use random transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses.

cpe:/a:zeus:zeus_web_server:3.3 cpe:/a:zeus:zeus_web_server:3.4 cpe:/a:zeus:zeus_web_server:4.1 cpe:/a:zeus:zeus_web_server:4.1r1 cpe:/a:zeus:zeus_web_server:4.2 cpe:/a:zeus:zeus_web_server:4.2r2 cpe:/a:zeus:zeus_web_server:4.3 cpe:/a:zeus:zeus_web_server:4.3r3 cpe:/a:zeus:zeus_web_server:4.3r4

CVE-2010-0363

2010-01-20T11:30:00.633-05:00

2010-02-02T00:00:00.000-05:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-01-21T10:29:00.000-05:00

CONFIRM http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES Cross-site scripting (XSS) vulnerability in Zeus Web Server before 4.3r5, when SSL is enabled for the admin server, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2002-1785.

cpe:/a:videolan:vlc_media_player:0.8.6

CVE-2010-0364

2010-01-21T15:30:00.430-05:00

2017-09-18T21:30:22.110-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov EXPLOIT-DB 11174 BID 37832 XF vlcmediaplayer-asas-bo(55717) Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a crafted Advanced SubStation Alpha Subtitle (.ass) file, probably involving the Dialogue field.

cpe:/a:bitscripts:bits_video_script:2.04 cpe:/a:bitscripts:bits_video_script:2.05:gold_beta

CVE-2010-0365

2010-01-21T15:30:00.570-05:00

2017-08-16T21:31:58.507-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://www.packetstormsecurity.com/1001-exploits/bitsvs-xssuploadrfi.txt XF bitsvideo-search-xss(55739) Cross-site scripting (XSS) vulnerability in search.php in BitScripts Bits Video Script 2.04 and 2.05 Gold Beta allows remote attackers to inject arbitrary web script or HTML via the order parameter.

cpe:/a:bitscripts:bits_video_script:2.04 cpe:/a:bitscripts:bits_video_script:2.05:gold_beta

CVE-2010-0366

2010-01-21T15:30:00.663-05:00

2017-08-16T21:31:58.570-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov MISC http://www.packetstormsecurity.com/1001-exploits/bitsvs-xssuploadrfi.txt XF bitsvideo-addvideo-file-upload(55738) Multiple unrestricted file upload vulnerabilities in (1) register.php and (2) addvideo.php in BitScripts Bits Video Script 2.04 and 2.05 Gold Beta allow remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.

cpe:/a:bitscripts:bits_video_script:2.04 cpe:/a:bitscripts:bits_video_script:2.05:gold_beta

CVE-2010-0367

2010-01-21T15:30:00.697-05:00

2017-08-16T21:31:58.617-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://www.packetstormsecurity.com/1001-exploits/bitsvs-xssuploadrfi.txt XF bitsvideo-showcasesearch-file-include(55740) Multiple PHP remote file inclusion vulnerabilities in BitScripts Bits Video Script 2.05 Gold Beta, and possibly 2.04, allow remote attackers to execute arbitrary PHP code via a URL in the rowptem[template] parameter to (1) showcasesearch.php and (2) showcase2search.php.

cpe:/a:roger_lopez:nodeblock:5.x-1.1 cpe:/a:thomas_turnbull:nodeblock:6.x-1.0 cpe:/a:thomas_turnbull:nodeblock:6.x-1.1 cpe:/a:thomas_turnbull:nodeblock:6.x-1.2 cpe:/a:thomas_turnbull:nodeblock:6.x-1.3 cpe:/a:thomas_turnbull:nodeblock:6.x-1.x:dev

CVE-2010-0370

2010-01-21T17:30:00.570-05:00

2018-10-10T15:52:20.987-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://drupal.org/node/683584 CONFIRM http://drupal.org/node/683586 CONFIRM http://drupal.org/node/683598 MISC http://packetstormsecurity.org/1001-exploits/drupalnb-xss.txt BUGTRAQ 20100114 XSS Vulnerability in Drupal's Node Blocks contributed module (6.x-1.3 and 5.x-1.1) BID 37782 XF nodeblocks-titles-xss(55606) Cross-site scripting (XSS) vulnerability in the Node Blocks module 5.x-1.1 and earlier, and 6.x-1.3 and earlier, a module for Drupal, allows remote authenticated users, with permissions to create or edit content and administer blocks, to inject arbitrary web script or HTML via the edit-title parameter (aka block title).

cpe:/a:hitmaaan:hitmaaan_gallery:1.3

CVE-2010-0371

2010-01-21T17:30:00.617-05:00

2017-08-16T21:31:58.727-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://packetstormsecurity.org/1001-exploits/galleriehitmaaan-xss.txt XF hitmaan-index-xss(55704) Multiple cross-site scripting (XSS) vulnerabilities in index.php in Hitmaaan Gallery 1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) gall and (2) levela parameters.

cpe:/a:hong_chuyen:com_articlemanager

CVE-2010-0372

2010-01-21T17:30:00.650-05:00

2017-08-16T21:31:58.773-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://packetstormsecurity.org/1001-exploits/joomlaarticlemanager-sql.txt EXPLOIT-DB 11140 BID 37799 XF articlemanager-index-sql-injection(55664) SQL injection vulnerability in the Articlemanager (com_articlemanager) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the artid parameter in a display action to index.php.

cpe:/a:joomla:com_libros

CVE-2010-0373

2010-01-21T17:30:00.680-05:00

2017-08-16T21:31:58.837-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://packetstormsecurity.org/1001-exploits/joomlalibros-sql.txt EXPLOIT-DB 11178 XF libros-index-sql-injection(55696) SQL injection vulnerability in the libros (com_libros) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php.

cpe:/a:codingfish:com_marketplace:1.2

CVE-2010-0374

2010-01-21T17:30:00.710-05:00

2017-08-16T21:31:58.883-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://www.packetstormsecurity.com/1001-exploits/joomlamarketplace-xss.txt BID 37819 XF marketplace-index-xss(55662) Cross-site scripting (XSS) vulnerability in the Marketplace (com_marketplace) component 1.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the catid parameter in a show_category action to index.php.

cpe:/a:jce-tech:php_calendars_script

CVE-2010-0375

2010-01-21T17:30:00.773-05:00

2017-08-16T21:31:58.947-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov EXPLOIT-DB 11082 BID 40757 XF phpcalendars-productlist-sql-injection(55518) SQL injection vulnerability in product_list.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:jce-tech:php_calendars_script

CVE-2010-0376

2010-01-21T17:30:00.807-05:00

2017-08-16T21:31:58.993-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://packetstormsecurity.org/1001-exploits/phpcalendars-xss.txt EXPLOIT-DB 11082 BID 40391 XF phpcalendars-productlist-xss(55517) Cross-site scripting (XSS) vulnerability in product_list.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows remote attackers to inject arbitrary web script or HTML via the cat parameter. NOTE: this issue is reportedly resultant from a forced SQL error message that occurs from exploitation of CVE-2010-0375.

cpe:/a:phpmyspace:phpmyspace:8.0::gold cpe:/a:phpmyspace:phpmyspace:8.10::gold

CVE-2010-0377

2010-01-21T17:30:00.853-05:00

2010-01-22T13:30:35.360-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-01-22T13:14:00.000-05:00

MISC http://packetstormsecurity.org/1001-exploits/phpmyspace-sql.txt SQL injection vulnerability in modules/arcade/index.php in PHP MySpace Gold Edition 8.0 and 8.10 allows remote attackers to execute arbitrary SQL commands via the gid parameter in a play_game action. NOTE: some of these details are obtained from third party information.

cpe:/a:adobe:flash_player:6.0.79 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_xp:-:sp2:x64

CVE-2010-0378

2010-01-21T18:30:00.460-05:00

2017-09-18T21:30:22.173-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1023435 CERT-VN VU#204889 CONFIRM http://www.microsoft.com/technet/security/advisory/979267.mspx Use-after-free vulnerability in Adobe Flash Player 6.0.79, as distributed in Microsoft Windows XP SP2 and SP3, allows remote attackers to execute arbitrary code by unloading a Flash object that is currently being accessed by a script, leading to memory corruption, aka a "Movie Unloading Vulnerability."

cpe:/a:adobe:flash_player:6.0.21.0 cpe:/a:adobe:flash_player:6.0.79 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_xp:-:sp2:x64

CVE-2010-0379

2010-01-21T18:30:00.507-05:00

2017-09-18T21:30:22.220-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1023435 CONFIRM http://www.microsoft.com/technet/security/advisory/979267.mspx Multiple unspecified vulnerabilities in the Macromedia Flash ActiveX control in Adobe Flash Player 6, as distributed in Microsoft Windows XP SP2 and SP3, might allow remote attackers to execute arbitrary code via unspecified vectors that are not related to the use-after-free "Movie Unloading Vulnerability" (CVE-2010-0378). NOTE: due to lack of details, it is not clear whether this overlaps any other CVE item.

cpe:/a:jce-tech:php_calendars_script

CVE-2010-0380

2010-01-22T17:00:00.693-05:00

2010-01-25T00:00:00.000-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-01-25T10:04:00.000-05:00

MISC http://packetstormsecurity.org/1001-exploits/phpcalendars-xss.txt EXPLOIT-DB 11082 install.php in JCE-Tech PHP Calendars, downloaded 20100121, allows remote attackers to bypass intended access restrictions and modify application settings via a direct request. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation.

cpe:/a:phpmyspace:phpmyspace:8.0::gold cpe:/a:phpmyspace:phpmyspace:8.10::gold

CVE-2010-0381

2010-01-22T17:00:00.727-05:00

2010-01-25T00:00:00.000-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-01-25T10:26:00.000-05:00

SQL injection vulnerability in modules/arcade/index.php in PHP MySpace Gold Edition 8.0 and 8.10 allows remote attackers to execute arbitrary SQL commands via the gid parameter in a show_stats action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:isc:bind:9.0 cpe:/a:isc:bind:9.0.0:rc1 cpe:/a:isc:bind:9.0.0:rc2 cpe:/a:isc:bind:9.0.0:rc3 cpe:/a:isc:bind:9.0.0:rc4 cpe:/a:isc:bind:9.0.0:rc5 cpe:/a:isc:bind:9.0.0:rc6 cpe:/a:isc:bind:9.0.1 cpe:/a:isc:bind:9.0.1:rc1 cpe:/a:isc:bind:9.0.1:rc2 cpe:/a:isc:bind:9.1 cpe:/a:isc:bind:9.1.0:rc1 cpe:/a:isc:bind:9.1.1 cpe:/a:isc:bind:9.1.1:rc1 cpe:/a:isc:bind:9.1.1:rc2 cpe:/a:isc:bind:9.1.1:rc3 cpe:/a:isc:bind:9.1.1:rc4 cpe:/a:isc:bind:9.1.1:rc5 cpe:/a:isc:bind:9.1.1:rc6 cpe:/a:isc:bind:9.1.1:rc7 cpe:/a:isc:bind:9.1.2 cpe:/a:isc:bind:9.1.2:rc1 cpe:/a:isc:bind:9.1.3 cpe:/a:isc:bind:9.1.3:rc1 cpe:/a:isc:bind:9.1.3:rc2 cpe:/a:isc:bind:9.1.3:rc3 cpe:/a:isc:bind:9.2 cpe:/a:isc:bind:9.2.0 cpe:/a:isc:bind:9.2.0:a1 cpe:/a:isc:bind:9.2.0:a2 cpe:/a:isc:bind:9.2.0:a3 cpe:/a:isc:bind:9.2.0:b1 cpe:/a:isc:bind:9.2.0:b2 cpe:/a:isc:bind:9.2.0:rc1 cpe:/a:isc:bind:9.2.0:rc10 cpe:/a:isc:bind:9.2.0:rc2 cpe:/a:isc:bind:9.2.0:rc3 cpe:/a:isc:bind:9.2.0:rc4 cpe:/a:isc:bind:9.2.0:rc5 cpe:/a:isc:bind:9.2.0:rc6 cpe:/a:isc:bind:9.2.0:rc7 cpe:/a:isc:bind:9.2.0:rc8 cpe:/a:isc:bind:9.2.0:rc9 cpe:/a:isc:bind:9.2.1 cpe:/a:isc:bind:9.2.1:rc1 cpe:/a:isc:bind:9.2.1:rc2 cpe:/a:isc:bind:9.2.2 cpe:/a:isc:bind:9.2.2:p2 cpe:/a:isc:bind:9.2.2:p3 cpe:/a:isc:bind:9.2.2:rc1 cpe:/a:isc:bind:9.2.3 cpe:/a:isc:bind:9.2.3:rc1 cpe:/a:isc:bind:9.2.3:rc2 cpe:/a:isc:bind:9.2.3:rc3 cpe:/a:isc:bind:9.2.3:rc4 cpe:/a:isc:bind:9.2.4 cpe:/a:isc:bind:9.2.4:rc2 cpe:/a:isc:bind:9.2.4:rc3 cpe:/a:isc:bind:9.2.4:rc4 cpe:/a:isc:bind:9.2.4:rc5 cpe:/a:isc:bind:9.2.4:rc6 cpe:/a:isc:bind:9.2.4:rc7 cpe:/a:isc:bind:9.2.4:rc8 cpe:/a:isc:bind:9.2.5 cpe:/a:isc:bind:9.2.5:b2 cpe:/a:isc:bind:9.2.5:rc1 cpe:/a:isc:bind:9.2.6 cpe:/a:isc:bind:9.2.6:rc1 cpe:/a:isc:bind:9.2.7 cpe:/a:isc:bind:9.2.7:rc1 cpe:/a:isc:bind:9.2.7:rc2 cpe:/a:isc:bind:9.2.7:rc3 cpe:/a:isc:bind:9.2.8 cpe:/a:isc:bind:9.2.9 cpe:/a:isc:bind:9.2.9:rc1 cpe:/a:isc:bind:9.3 cpe:/a:isc:bind:9.3.0 cpe:/a:isc:bind:9.3.0:b2 cpe:/a:isc:bind:9.3.0:b3 cpe:/a:isc:bind:9.3.0:b4 cpe:/a:isc:bind:9.3.0:rc1 cpe:/a:isc:bind:9.3.0:rc2 cpe:/a:isc:bind:9.3.0:rc3 cpe:/a:isc:bind:9.3.0:rc4 cpe:/a:isc:bind:9.3.1 cpe:/a:isc:bind:9.3.1:b2 cpe:/a:isc:bind:9.3.1:rc1 cpe:/a:isc:bind:9.3.2 cpe:/a:isc:bind:9.3.2:rc1 cpe:/a:isc:bind:9.3.3 cpe:/a:isc:bind:9.3.3:rc1 cpe:/a:isc:bind:9.3.3:rc2 cpe:/a:isc:bind:9.3.3:rc3 cpe:/a:isc:bind:9.3.4 cpe:/a:isc:bind:9.3.5 cpe:/a:isc:bind:9.3.5:rc1 cpe:/a:isc:bind:9.3.5:rc2 cpe:/a:isc:bind:9.3.6 cpe:/a:isc:bind:9.3.6:rc1 cpe:/a:isc:bind:9.4 cpe:/a:isc:bind:9.4.0 cpe:/a:isc:bind:9.4.0:a1 cpe:/a:isc:bind:9.4.0:a2 cpe:/a:isc:bind:9.4.0:a3 cpe:/a:isc:bind:9.4.0:a4 cpe:/a:isc:bind:9.4.0:a5 cpe:/a:isc:bind:9.4.0:a6 cpe:/a:isc:bind:9.4.0:b1 cpe:/a:isc:bind:9.4.0:b2 cpe:/a:isc:bind:9.4.0:b3 cpe:/a:isc:bind:9.4.0:b4 cpe:/a:isc:bind:9.4.0:rc1 cpe:/a:isc:bind:9.4.0:rc2 cpe:/a:isc:bind:9.4.1 cpe:/a:isc:bind:9.4.2 cpe:/a:isc:bind:9.4.2:rc1 cpe:/a:isc:bind:9.4.2:rc2 cpe:/a:isc:bind:9.4.3 cpe:/a:isc:bind:9.4.3:b1 cpe:/a:isc:bind:9.4.3:b2 cpe:/a:isc:bind:9.4.3:b3 cpe:/a:isc:bind:9.4.3:p1 cpe:/a:isc:bind:9.4.3:p2 cpe:/a:isc:bind:9.4.3:p3 cpe:/a:isc:bind:9.4.3:p4 cpe:/a:isc:bind:9.4.3:p5 cpe:/a:isc:bind:9.4.3:rc1 cpe:/a:isc:bind:9.6.0 cpe:/a:isc:bind:9.6.0:a1 cpe:/a:isc:bind:9.6.0:b1 cpe:/a:isc:bind:9.6.0:p1 cpe:/a:isc:bind:9.6.0:rc1 cpe:/a:isc:bind:9.6.0:rc2 cpe:/a:isc:bind:9.6.1 cpe:/a:isc:bind:9.6.1:b1 cpe:/a:isc:bind:9.6.1:p1 cpe:/a:isc:bind:9.6.1:p2 cpe:/a:isc:bind:9.6.1:rc1 cpe:/a:isc:bind:9.7.0:b1 cpe:/a:isc:bind:9.10.0 cpe:/a:isc:bind:9.10.0:a1 cpe:/a:isc:bind:9.10.0:a2 cpe:/a:isc:bind:9.10.0:b1 cpe:/a:isc:bind:9.10.0:b2 cpe:/a:isc:bind:9.10.0:p1 cpe:/a:isc:bind:9.10.0:p2 cpe:/a:isc:bind:9.10.0:rc1 cpe:/a:isc:bind:9.10.0:rc2 cpe:/a:isc:bind:9.10.1 cpe:/a:isc:bind:9.10.1:b1 cpe:/a:isc:bind:9.10.1:b2 cpe:/a:isc:bind:9.10.1:p1 cpe:/a:isc:bind:9.10.1:p2 cpe:/a:isc:bind:9.10.1:rc1 cpe:/a:isc:bind:9.10.1:rc2 cpe:/a:isc:bind:9.10.2:b1 cpe:/a:isc:bind:9.10.2:p1 cpe:/a:isc:bind:9.10.2:p2 cpe:/a:isc:bind:9.10.2:p3 cpe:/a:isc:bind:9.10.2:p4 cpe:/a:isc:bind:9.10.2:rc1 cpe:/a:isc:bind:9.10.2:rc2 cpe:/a:isc:bind:9.10.3 cpe:/a:isc:bind:9.10.3:b1 cpe:/a:isc:bind:9.10.3:p1 cpe:/a:isc:bind:9.10.3:p2 cpe:/a:isc:bind:9.10.3:p3 cpe:/a:isc:bind:9.10.3:rc1

CVE-2010-0382

2010-01-22T17:00:00.757-05:00

2017-09-18T21:30:22.313-04:00

7.6

NETWORK

HIGH

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018 DEBIAN DSA-2054 VUPEN ADV-2010-0622 VUPEN ADV-2010-1352 CONFIRM https://www.isc.org/advisories/CVE-2009-4022v6 ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta handles out-of-bailiwick data accompanying a secure response without re-fetching from the original source, which allows remote attackers to have an unspecified impact via a crafted response, aka Bug 20819. NOTE: this vulnerability exists because of a regression during the fix for CVE-2009-4022.

cpe:/a:tor:tor:0.0.2 cpe:/a:tor:tor:0.0.2_pre13 cpe:/a:tor:tor:0.0.2_pre14 cpe:/a:tor:tor:0.0.2_pre15 cpe:/a:tor:tor:0.0.2_pre16 cpe:/a:tor:tor:0.0.2_pre17 cpe:/a:tor:tor:0.0.2_pre18 cpe:/a:tor:tor:0.0.2_pre19 cpe:/a:tor:tor:0.0.2_pre20 cpe:/a:tor:tor:0.0.2_pre21 cpe:/a:tor:tor:0.0.2_pre22 cpe:/a:tor:tor:0.0.2_pre23 cpe:/a:tor:tor:0.0.2_pre24 cpe:/a:tor:tor:0.0.2_pre25 cpe:/a:tor:tor:0.0.2_pre26 cpe:/a:tor:tor:0.0.2_pre27 cpe:/a:tor:tor:0.0.3 cpe:/a:tor:tor:0.0.4 cpe:/a:tor:tor:0.0.5 cpe:/a:tor:tor:0.0.6 cpe:/a:tor:tor:0.0.6.1 cpe:/a:tor:tor:0.0.6.2 cpe:/a:tor:tor:0.0.7 cpe:/a:tor:tor:0.0.7.1 cpe:/a:tor:tor:0.0.7.2 cpe:/a:tor:tor:0.0.7.3 cpe:/a:tor:tor:0.0.8 cpe:/a:tor:tor:0.0.8.1 cpe:/a:tor:tor:0.0.9 cpe:/a:tor:tor:0.0.9.1 cpe:/a:tor:tor:0.0.9.2 cpe:/a:tor:tor:0.0.9.3 cpe:/a:tor:tor:0.0.9.4 cpe:/a:tor:tor:0.0.9.5 cpe:/a:tor:tor:0.0.9.6 cpe:/a:tor:tor:0.0.9.7 cpe:/a:tor:tor:0.0.9.8 cpe:/a:tor:tor:0.0.9.9 cpe:/a:tor:tor:0.0.9.10 cpe:/a:tor:tor:0.1.0.1 cpe:/a:tor:tor:0.1.0.2 cpe:/a:tor:tor:0.1.0.3 cpe:/a:tor:tor:0.1.0.4 cpe:/a:tor:tor:0.1.0.5 cpe:/a:tor:tor:0.1.0.6 cpe:/a:tor:tor:0.1.0.7 cpe:/a:tor:tor:0.1.0.8 cpe:/a:tor:tor:0.1.0.9 cpe:/a:tor:tor:0.1.0.10 cpe:/a:tor:tor:0.1.0.11 cpe:/a:tor:tor:0.1.0.12 cpe:/a:tor:tor:0.1.0.13 cpe:/a:tor:tor:0.1.0.14 cpe:/a:tor:tor:0.1.0.15 cpe:/a:tor:tor:0.1.0.16 cpe:/a:tor:tor:0.1.0.17 cpe:/a:tor:tor:0.1.0.18 cpe:/a:tor:tor:0.1.0.19 cpe:/a:tor:tor:0.1.1 cpe:/a:tor:tor:0.1.1.1 cpe:/a:tor:tor:0.1.1.1_alpha cpe:/a:tor:tor:0.1.1.2 cpe:/a:tor:tor:0.1.1.2_alpha cpe:/a:tor:tor:0.1.1.3 cpe:/a:tor:tor:0.1.1.3_alpha cpe:/a:tor:tor:0.1.1.4 cpe:/a:tor:tor:0.1.1.4_alpha cpe:/a:tor:tor:0.1.1.5 cpe:/a:tor:tor:0.1.1.5_alpha cpe:/a:tor:tor:0.1.1.6 cpe:/a:tor:tor:0.1.1.6_alpha cpe:/a:tor:tor:0.1.1.7 cpe:/a:tor:tor:0.1.1.7_alpha cpe:/a:tor:tor:0.1.1.8 cpe:/a:tor:tor:0.1.1.8_alpha cpe:/a:tor:tor:0.1.1.9 cpe:/a:tor:tor:0.1.1.9_alpha cpe:/a:tor:tor:0.1.1.10 cpe:/a:tor:tor:0.1.1.10_alpha cpe:/a:tor:tor:0.1.1.11 cpe:/a:tor:tor:0.1.1.12 cpe:/a:tor:tor:0.1.1.13 cpe:/a:tor:tor:0.1.1.14 cpe:/a:tor:tor:0.1.1.15 cpe:/a:tor:tor:0.1.1.16 cpe:/a:tor:tor:0.1.1.17 cpe:/a:tor:tor:0.1.1.18 cpe:/a:tor:tor:0.1.1.19 cpe:/a:tor:tor:0.1.1.20 cpe:/a:tor:tor:0.1.1.21 cpe:/a:tor:tor:0.1.1.22 cpe:/a:tor:tor:0.1.1.23 cpe:/a:tor:tor:0.1.1.25 cpe:/a:tor:tor:0.1.1.26 cpe:/a:tor:tor:0.1.2.1_alpha-cvs cpe:/a:tor:tor:0.1.2.2 cpe:/a:tor:tor:0.1.2.4 cpe:/a:tor:tor:0.1.2.5 cpe:/a:tor:tor:0.1.2.5:alpha cpe:/a:tor:tor:0.1.2.7:alpha cpe:/a:tor:tor:0.1.2.9 cpe:/a:tor:tor:0.1.2.10 cpe:/a:tor:tor:0.1.2.11 cpe:/a:tor:tor:0.1.2.12 cpe:/a:tor:tor:0.1.2.13 cpe:/a:tor:tor:0.1.2.14 cpe:/a:tor:tor:0.1.2.16 cpe:/a:tor:tor:0.1.2.18 cpe:/a:tor:tor:0.1.2.19 cpe:/a:tor:tor:0.1.2.30 cpe:/a:tor:tor:0.2.1.1.12 cpe:/a:tor:tor:0.2.1.1.13 cpe:/a:tor:tor:0.2.1.1.14 cpe:/a:tor:tor:0.2.1.1.15 cpe:/a:tor:tor:0.2.1.1.16 cpe:/a:tor:tor:0.2.1.1.17 cpe:/a:tor:tor:0.2.1.1.18 cpe:/a:tor:tor:0.2.1.1.19 cpe:/a:tor:tor:0.2.1.1.20 cpe:/a:tor:tor:0.2.1.1.21 cpe:/a:tor:tor:0.2.2.1:alpha cpe:/a:tor:tor:0.2.2.2:alpha cpe:/a:tor:tor:0.2.2.3:alpha cpe:/a:tor:tor:0.2.2.4:alpha cpe:/a:tor:tor:0.2.2.5:alpha cpe:/a:tor:tor:0.2.2.6:alpha cpe:/a:tor:tor:0.2.2.7:alpha

CVE-2010-0383

2010-01-25T14:30:01.637-05:00

2010-02-05T02:13:42.030-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MLIST [or-announce] 20100121 Tor 0.2.1.22 is released (security fix) MLIST [or-talk] 20100120 Tor Project infrastructure updates in response to security breach MLIST [or-talk] 20100120 Tor 0.2.2.7-alpha is out MLIST [or-talk] 20100120 Re: Tor Project infrastructure updates in response to security breach BID 37901 Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, uses deprecated identity keys for certain directory authorities, which makes it easier for man-in-the-middle attackers to compromise the anonymity of traffic sources and destinations.

cpe:/a:tor:tor:0.2.2.1 cpe:/a:tor:tor:0.2.2.1:alpha cpe:/a:tor:tor:0.2.2.2 cpe:/a:tor:tor:0.2.2.2:alpha cpe:/a:tor:tor:0.2.2.3 cpe:/a:tor:tor:0.2.2.3:alpha cpe:/a:tor:tor:0.2.2.4 cpe:/a:tor:tor:0.2.2.4:alpha cpe:/a:tor:tor:0.2.2.5 cpe:/a:tor:tor:0.2.2.5:alpha cpe:/a:tor:tor:0.2.2.6 cpe:/a:tor:tor:0.2.2.6:alpha

CVE-2010-0384

2010-01-25T14:30:01.667-05:00

2011-04-27T00:00:00.000-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-01-26T10:57:00.000-05:00

MLIST [or-talk] 20100120 Tor 0.2.2.7-alpha is out Tor 0.2.2.x before 0.2.2.7-alpha, when functioning as a directory mirror, does not prevent logging of the client IP address upon detection of erroneous client behavior, which might make it easier for local users to discover the identities of clients in opportunistic circumstances by reading log files.

CVE-2010-0385

2010-01-25T14:30:01.697-05:00

2010-01-26T00:00:00.000-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-01-26T11:37:00.000-05:00

MLIST [or-announce] 20100121 Tor 0.2.1.22 is released (security fix) MLIST [or-talk] 20100120 Tor 0.2.2.7-alpha is out BID 37901 Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, when functioning as a bridge directory authority, allows remote attackers to obtain sensitive information about bridge identities and bridge descriptors via a dbg-stability.txt directory query.

cpe:/a:sun:java_system_application_server:7.0 cpe:/a:sun:java_system_application_server:7.0::platform cpe:/a:sun:java_system_application_server:7.0::standard

CVE-2010-0386

2010-01-25T14:30:01.730-05:00

2010-01-31T00:00:00.000-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-01-26T10:38:00.000-05:00

SUNALERT 200942 The default configuration of Sun Java System Application Server 7 and 7 2004Q2 enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing (XST) attack, a related issue to CVE-2004-2763 and CVE-2005-3398.

cpe:/a:sun:java_system_web_server:7.0:update_7

CVE-2010-0387

2010-01-25T14:30:01.760-05:00

2017-08-16T21:31:59.053-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70u7-digest.html MLIST [dailydave] 20100120 Sun Web Server digest auth overflow SECTRACK 1023488 BID 37896 XF jsws-digest-header-bo(55792) Multiple heap-based buffer overflows in (1) webservd and (2) the admin server in Sun Java System Web Server 7.0 Update 7 allow remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via a long string in an "Authorization: Digest" HTTP header.

cpe:/a:sun:java_system_web_server:7.0:update_6

CVE-2010-0388

2010-01-25T14:30:01.807-05:00

2017-08-16T21:31:59.100-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70-webdav.html BID 37910 XF jsws-webdav-format-string(55812) Format string vulnerability in the WebDAV implementation in webservd in Sun Java System Web Server 7.0 Update 6 allows remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in the encoding attribute of the XML declaration in a PROPFIND request.

cpe:/a:sun:java_system_web_server:7.0:update_6 cpe:/a:sun:java_system_web_server:7.0:update_7

CVE-2010-0389

2010-01-25T14:30:01.840-05:00

2010-01-31T00:00:00.000-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-01-26T11:00:00.000-05:00

MISC http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70-admin.html The admin server in Sun Java System Web Server 7.0 Update 6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an HTTP request that lacks a method token.

cpe:/a:phpf1:max%27s_image_uploader:1.0

CVE-2010-0390

2010-01-26T13:30:01.137-05:00

2011-01-12T00:00:00.000-05:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2010-01-27T10:09:00.000-05:00

EXPLOIT-DB 11169 Unrestricted file upload vulnerability in maxImageUpload/index.php in PHP F1 Max's Image Uploader 1.0, when Apache is not configured to handle the mime-type for files with pjpeg or jpeg extensions, allows remote attackers to execute arbitrary code by uploading a file with a pjpeg or jpeg extension, then accessing it via a direct request to the file in original/. NOTE: some of these details are obtained from third party information.

cpe:/a:embarcadero:interbase_smp_2009:9.0.3.437

CVE-2010-0391

2010-01-26T13:30:01.167-05:00

2011-01-12T00:00:00.000-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-01-27T10:41:00.000-05:00

BID 37916 Multiple stack-based buffer overflows in Embarcadero Technologies InterBase SMP 2009 9.0.3.437 allow remote attackers to execute arbitrary code via unknown vectors involving crafted packets. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:thegreenbow:ipsec_vpn_client:4.51.001 cpe:/a:thegreenbow:ipsec_vpn_client:4.65.003

CVE-2010-0392

2010-01-26T13:30:01.197-05:00

2018-10-10T15:52:21.817-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BUGTRAQ 20100121 TheGreenBow VPN Client Local Stack Overflow Vulnerability - Security Advisory - SOS-10-001 BID 40387 MISC http://www.senseofsecurity.com.au/advisories/SOS-10-001 CONFIRM http://www.thegreenbow.com/download.php?id=1000150 XF ipsecvpnclient-tgb-bo(55793) Stack-based buffer overflow in vpnconf.exe in TheGreenBow IPSec VPN Client 4.51.001, 4.65.003, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a long OpenScriptAfterUp parameter in a policy (.tgb) file, related to "phase 2."

cpe:/a:apple:cups:1.2.2 cpe:/a:apple:cups:1.3.7 cpe:/a:apple:cups:1.3.9 cpe:/a:apple:cups:1.4.1

CVE-2010-0393

2010-03-05T14:30:00.470-05:00

2013-05-14T23:06:12.197-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

APPLE APPLE-SA-2010-03-29-1 GENTOO GLSA-201207-10 CONFIRM http://support.apple.com/kb/HT4077 MISC http://www.cups.org/str.php?L3482 MANDRIVA MDVSA-2010:072 MANDRIVA MDVSA-2010:073 BID 38524 UBUNTU USN-906-1 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=558460 The _cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4.1, relies on an environment variable to determine the file that provides localized message strings, which allows local users to gain privileges via a file that contains crafted localization data with format string specifiers.

cpe:/a:nanosleep:trac-git:0.0.20080710 cpe:/a:nanosleep:trac-git:0.0.20090320

CVE-2010-0394

2010-02-09T21:30:00.857-05:00

2017-08-16T21:31:59.243-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567039 DEBIAN DSA-1990 BID 38076 XF tracgit-command-execution(56105) PyGIT.py in the Trac Git plugin (trac-git) before 0.0.20080710-3+lenny1 and before 0.0.20090320-1 on Debian GNU/Linux, when enabled in Trac, allows remote attackers to execute arbitrary commands via shell metacharacters in a crafted HTTP query that is used to generate a certain git command.

cpe:/a:sun:openoffice.org:2.0.0 cpe:/a:sun:openoffice.org:2.1.0 cpe:/a:sun:openoffice.org:2.2.0 cpe:/a:sun:openoffice.org:2.3.0 cpe:/a:sun:openoffice.org:2.4.0 cpe:/a:sun:openoffice.org:2.4.1 cpe:/a:sun:openoffice.org:2.4.2 cpe:/a:sun:openoffice.org:3.0.0 cpe:/a:sun:openoffice.org:3.0.1 cpe:/a:sun:openoffice.org:3.1.0 cpe:/a:sun:openoffice.org:3.1.1 cpe:/a:sun:openoffice.org:3.2.0 cpe:/o:canonical:ubuntu_linux:8.04:-:lts cpe:/o:canonical:ubuntu_linux:9.10 cpe:/o:canonical:ubuntu_linux:10.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:10.10 cpe:/o:fedoraproject:fedora:12 cpe:/o:fedoraproject:fedora:13

CVE-2010-0395

2010-06-09T20:30:07.317-04:00

2017-09-18T21:30:22.440-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov FEDORA FEDORA-2010-9576 FEDORA FEDORA-2010-9628 FEDORA FEDORA-2010-9633 SUSE SUSE-SR:2010:014 UBUNTU USN-949-1 DEBIAN DSA-2055 GENTOO GLSA-201408-19 MANDRIVA MDVSA-2010:221 CONFIRM http://www.openoffice.org/security/cves/CVE-2010-0395.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html REDHAT RHSA-2010:0459 CERT TA10-287A VUPEN ADV-2010-1350 VUPEN ADV-2010-1353 VUPEN ADV-2010-1366 VUPEN ADV-2010-1369 VUPEN ADV-2010-2905 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=574119 OpenOffice.org 2.x and 3.0 before 3.2.1 allows user-assisted remote attackers to bypass Python macro security restrictions and execute arbitrary Python code via a crafted OpenDocument Text (ODT) file that triggers code execution when the macro directory structure is previewed.

cpe:/a:debian:dpkg:1.9.19 cpe:/a:debian:dpkg:1.9.20 cpe:/a:debian:dpkg:1.9.21 cpe:/a:debian:dpkg:1.10 cpe:/a:debian:dpkg:1.10.1 cpe:/a:debian:dpkg:1.10.2 cpe:/a:debian:dpkg:1.10.3 cpe:/a:debian:dpkg:1.10.4 cpe:/a:debian:dpkg:1.10.5 cpe:/a:debian:dpkg:1.10.6 cpe:/a:debian:dpkg:1.10.7 cpe:/a:debian:dpkg:1.10.8 cpe:/a:debian:dpkg:1.10.9 cpe:/a:debian:dpkg:1.10.10 cpe:/a:debian:dpkg:1.10.11 cpe:/a:debian:dpkg:1.10.12 cpe:/a:debian:dpkg:1.10.13 cpe:/a:debian:dpkg:1.10.14 cpe:/a:debian:dpkg:1.10.15 cpe:/a:debian:dpkg:1.10.16 cpe:/a:debian:dpkg:1.10.17 cpe:/a:debian:dpkg:1.10.18 cpe:/a:debian:dpkg:1.10.18.1 cpe:/a:debian:dpkg:1.10.19 cpe:/a:debian:dpkg:1.10.20 cpe:/a:debian:dpkg:1.10.21 cpe:/a:debian:dpkg:1.10.22 cpe:/a:debian:dpkg:1.10.23 cpe:/a:debian:dpkg:1.10.24 cpe:/a:debian:dpkg:1.10.25 cpe:/a:debian:dpkg:1.10.26 cpe:/a:debian:dpkg:1.10.27 cpe:/a:debian:dpkg:1.10.28 cpe:/a:debian:dpkg:1.13.0 cpe:/a:debian:dpkg:1.13.1 cpe:/a:debian:dpkg:1.13.2 cpe:/a:debian:dpkg:1.13.3 cpe:/a:debian:dpkg:1.13.4 cpe:/a:debian:dpkg:1.13.5 cpe:/a:debian:dpkg:1.13.6 cpe:/a:debian:dpkg:1.13.7 cpe:/a:debian:dpkg:1.13.8 cpe:/a:debian:dpkg:1.13.9 cpe:/a:debian:dpkg:1.13.10 cpe:/a:debian:dpkg:1.13.11 cpe:/a:debian:dpkg:1.13.11.1 cpe:/a:debian:dpkg:1.13.12 cpe:/a:debian:dpkg:1.13.13 cpe:/a:debian:dpkg:1.13.14 cpe:/a:debian:dpkg:1.13.15 cpe:/a:debian:dpkg:1.13.16 cpe:/a:debian:dpkg:1.13.17 cpe:/a:debian:dpkg:1.13.18 cpe:/a:debian:dpkg:1.13.19 cpe:/a:debian:dpkg:1.13.20 cpe:/a:debian:dpkg:1.13.21 cpe:/a:debian:dpkg:1.13.22 cpe:/a:debian:dpkg:1.13.23 cpe:/a:debian:dpkg:1.13.24 cpe:/a:debian:dpkg:1.13.25 cpe:/a:debian:dpkg:1.14.0 cpe:/a:debian:dpkg:1.14.1 cpe:/a:debian:dpkg:1.14.2 cpe:/a:debian:dpkg:1.14.3 cpe:/a:debian:dpkg:1.14.4 cpe:/a:debian:dpkg:1.14.5 cpe:/a:debian:dpkg:1.14.6 cpe:/a:debian:dpkg:1.14.7 cpe:/a:debian:dpkg:1.14.8 cpe:/a:debian:dpkg:1.14.9 cpe:/a:debian:dpkg:1.14.10 cpe:/a:debian:dpkg:1.14.11 cpe:/a:debian:dpkg:1.14.12 cpe:/a:debian:dpkg:1.14.13 cpe:/a:debian:dpkg:1.14.14 cpe:/a:debian:dpkg:1.14.15 cpe:/a:debian:dpkg:1.14.16 cpe:/a:debian:dpkg:1.14.16.1 cpe:/a:debian:dpkg:1.14.16.2 cpe:/a:debian:dpkg:1.14.16.3 cpe:/a:debian:dpkg:1.14.16.4 cpe:/a:debian:dpkg:1.14.16.5 cpe:/a:debian:dpkg:1.14.16.6 cpe:/a:debian:dpkg:1.14.17 cpe:/a:debian:dpkg:1.14.18 cpe:/a:debian:dpkg:1.14.19 cpe:/a:debian:dpkg:1.14.20 cpe:/a:debian:dpkg:1.14.21 cpe:/a:debian:dpkg:1.14.22 cpe:/a:debian:dpkg:1.14.23 cpe:/a:debian:dpkg:1.14.24 cpe:/a:debian:dpkg:1.14.25 cpe:/a:debian:dpkg:1.14.26 cpe:/a:debian:dpkg:1.14.27 cpe:/a:debian:dpkg:1.14.28

CVE-2010-0396

2010-03-15T09:28:25.747-04:00

2017-08-16T21:31:59.303-04:00

5.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://security.debian.org/pool/updates/main/d/dpkg/dpkg_1.14.29.tar.gz DEBIAN DSA-2011 VUPEN ADV-2010-0582 XF dpkg-dpkgsource-dir-traversal(56887) Directory traversal vulnerability in the dpkg-source component in dpkg before 1.14.29 allows remote attackers to modify arbitrary files via a crafted Debian source archive.

cpe:/a:php:php:5.3.1

CVE-2010-0397

2010-03-16T15:30:00.337-04:00

2010-12-10T01:37:48.483-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=573573 APPLE APPLE-SA-2010-08-24-1 APPLE APPLE-SA-2010-11-10-1 SUSE SUSE-SR:2010:012 SUSE SUSE-SR:2010:013 SUSE SUSE-SR:2010:017 CONFIRM http://support.apple.com/kb/HT4312 CONFIRM http://support.apple.com/kb/HT4435 MANDRIVA MDVSA-2010:068 MLIST [oss-security] 20100312 CVE-2010-0397: NULL pointer dereference in PHP's xmlrpc extension REDHAT RHSA-2010:0919 BID 38708 VUPEN ADV-2010-0724 VUPEN ADV-2010-3081 The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the first argument to the xmlrpc_decode_request function, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) and possibly have unspecified other impact via a crafted argument.

cpe:/a:mahara:mahara:1.0.4

CVE-2010-0400

2010-04-07T11:30:00.360-04:00

2010-04-08T09:25:49.127-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-04-08T09:11:00.000-04:00

CONFIRM http://security.debian.org/pool/updates/main/m/mahara/mahara_1.0.4-4+lenny5.diff.gz DEBIAN DSA-2030 BID 39253 SQL injection vulnerability in lib/user.php in mahara 1.0.4 allows remote attackers to execute arbitrary SQL commands via a username.

cpe:/a:openttd:openttd:0.1.1 cpe:/a:openttd:openttd:0.1.2 cpe:/a:openttd:openttd:0.1.3 cpe:/a:openttd:openttd:0.1.4 cpe:/a:openttd:openttd:0.2.0 cpe:/a:openttd:openttd:0.2.1 cpe:/a:openttd:openttd:0.3.0 cpe:/a:openttd:openttd:0.3.1 cpe:/a:openttd:openttd:0.3.2 cpe:/a:openttd:openttd:0.3.2.1 cpe:/a:openttd:openttd:0.3.3 cpe:/a:openttd:openttd:0.3.4 cpe:/a:openttd:openttd:0.3.5 cpe:/a:openttd:openttd:0.3.6 cpe:/a:openttd:openttd:0.3.7 cpe:/a:openttd:openttd:0.4.0 cpe:/a:openttd:openttd:0.4.0.1 cpe:/a:openttd:openttd:0.4.5 cpe:/a:openttd:openttd:0.4.6 cpe:/a:openttd:openttd:0.4.7 cpe:/a:openttd:openttd:0.4.8 cpe:/a:openttd:openttd:0.4.8:rc1 cpe:/a:openttd:openttd:0.5.0 cpe:/a:openttd:openttd:0.5.0:rc1 cpe:/a:openttd:openttd:0.5.0:rc2 cpe:/a:openttd:openttd:0.5.0:rc3 cpe:/a:openttd:openttd:0.5.0:rc4 cpe:/a:openttd:openttd:0.5.0:rc5 cpe:/a:openttd:openttd:0.5.1 cpe:/a:openttd:openttd:0.5.1:rc1 cpe:/a:openttd:openttd:0.5.1:rc2 cpe:/a:openttd:openttd:0.5.1:rc3 cpe:/a:openttd:openttd:0.5.2 cpe:/a:openttd:openttd:0.5.2:rc1 cpe:/a:openttd:openttd:0.5.3 cpe:/a:openttd:openttd:0.5.3:rc1 cpe:/a:openttd:openttd:0.5.3:rc2 cpe:/a:openttd:openttd:0.5.3:rc3 cpe:/a:openttd:openttd:0.6.0 cpe:/a:openttd:openttd:0.6.0:beta1 cpe:/a:openttd:openttd:0.6.0:beta2 cpe:/a:openttd:openttd:0.6.0:beta3 cpe:/a:openttd:openttd:0.6.0:beta4 cpe:/a:openttd:openttd:0.6.0:beta5 cpe:/a:openttd:openttd:0.6.0:rc1 cpe:/a:openttd:openttd:0.6.1 cpe:/a:openttd:openttd:0.6.1:rc1 cpe:/a:openttd:openttd:0.6.1:rc2 cpe:/a:openttd:openttd:0.6.2:rc1 cpe:/a:openttd:openttd:0.6.2:rc2 cpe:/a:openttd:openttd:0.7.4 cpe:/a:openttd:openttd:1.0.0

CVE-2010-0401

2010-05-05T09:22:54.927-04:00

2010-05-11T00:00:00.000-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

2010-05-05T18:50:00.000-04:00

CONFIRM http://bugs.openttd.org/task/3754 CONFIRM http://security.openttd.org/en/CVE-2010-0401 OpenTTD before 1.0.1 accepts a company password for authentication in response to a request for the server password, which allows remote authenticated users to bypass intended access restrictions or cause a denial of service (daemon crash) by sending a company password packet.

CVE-2010-0402

2010-05-05T09:22:54.973-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

2010-05-05T18:55:00.000-04:00

CONFIRM http://security.openttd.org/en/CVE-2010-0402 OpenTTD before 1.0.1 does not properly validate index values of certain items, which allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted in-game command.

cpe:/a:phpgroupware:phpgroupware:0.9.16 cpe:/a:phpgroupware:phpgroupware:0.9.16.000 cpe:/a:phpgroupware:phpgroupware:0.9.16.001 cpe:/a:phpgroupware:phpgroupware:0.9.16.002 cpe:/a:phpgroupware:phpgroupware:0.9.16.003 cpe:/a:phpgroupware:phpgroupware:0.9.16.005 cpe:/a:phpgroupware:phpgroupware:0.9.16.010 cpe:/a:phpgroupware:phpgroupware:0.9.16.011 cpe:/a:phpgroupware:phpgroupware:0.9.16.012 cpe:/a:phpgroupware:phpgroupware:0.9.16.014 cpe:/a:phpgroupware:phpgroupware:0.9.16.015

CVE-2010-0403

2010-05-19T08:08:08.070-04:00

2018-10-10T15:52:22.363-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://download.phpgroupware.org/ CONFIRM http://forums.phpgroupware.org/index.php?t=msg&th=98662&start=0&rid=0 MLIST [phpgroupware-users] 20100512 Phpgroupware security release 0.9.16.016 DEBIAN DSA-2046 BUGTRAQ 20100514 phpGroupWare SQL Injections and Local File Inclusion Vulnerabilities (CVE-2010-0403 and CVE-2010-0404) BID 40167 VUPEN ADV-2010-1145 VUPEN ADV-2010-1146 XF phpgroupware-about-file-include(58657) Directory traversal vulnerability in about.php in phpGroupWare (phpgw) before 0.9.16.016 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the app parameter.

CVE-2010-0404

2010-05-19T08:08:08.100-04:00

2018-10-10T15:52:23.253-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://download.phpgroupware.org/ CONFIRM http://forums.phpgroupware.org/index.php?t=msg&th=98662&start=0&rid=0 MLIST [phpgroupware-users] 20100512 Phpgroupware security release 0.9.16.016 DEBIAN DSA-2046 BUGTRAQ 20100514 phpGroupWare SQL Injections and Local File Inclusion Vulnerabilities (CVE-2010-0403 and CVE-2010-0404) VUPEN ADV-2010-1145 VUPEN ADV-2010-1146 Multiple SQL injection vulnerabilities in phpGroupWare (phpgw) before 0.9.16.016 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) class.sessions_db.inc.php, (2) class.translation_sql.inc.php, or (3) class.auth_sql.inc.php in phpgwapi/inc/.

cpe:/a:bzip:bzip2:0.9 cpe:/a:bzip:bzip2:0.9.0 cpe:/a:bzip:bzip2:0.9.0a cpe:/a:bzip:bzip2:0.9.0b cpe:/a:bzip:bzip2:0.9.0c cpe:/a:bzip:bzip2:0.9.5_a cpe:/a:bzip:bzip2:0.9.5_b cpe:/a:bzip:bzip2:0.9.5_c cpe:/a:bzip:bzip2:0.9.5_d cpe:/a:bzip:bzip2:0.9.5a cpe:/a:bzip:bzip2:0.9.5b cpe:/a:bzip:bzip2:0.9.5c cpe:/a:bzip:bzip2:0.9.5d cpe:/a:bzip:bzip2:0.9_a cpe:/a:bzip:bzip2:0.9_b cpe:/a:bzip:bzip2:0.9_c cpe:/a:bzip:bzip2:1.0 cpe:/a:bzip:bzip2:1.0.1 cpe:/a:bzip:bzip2:1.0.2 cpe:/a:bzip:bzip2:1.0.3 cpe:/a:bzip:bzip2:1.0.4 cpe:/a:bzip:bzip2:1.0.5 cpe:/a:libzip2:libzip2:1.0.5

CVE-2010-0405

2010-09-28T14:00:02.340-04:00

2018-10-10T15:52:24.017-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://blogs.sun.com/security/entry/cve_2010_0405_integer_overflow CONFIRM http://git.clamav.net/gitweb?p=clamav-devel.git;a=blob_plain;f=ChangeLog;hb=clamav-0.96.3 APPLE APPLE-SA-2011-03-21-1 FEDORA FEDORA-2010-17439 FEDORA FEDORA-2010-1512 SUSE SUSE-SR:2010:018 MLIST [oss-security] 20100921 bzip2 CVE-2010-0405 integer overflow GENTOO GLSA-201301-05 CONFIRM http://support.apple.com/kb/HT4581 CONFIRM http://www.bzip.org/ REDHAT RHSA-2010:0703 REDHAT RHSA-2010:0858 BUGTRAQ 20101207 VMSA-2010-0019 VMware ESX third party updates for Service Console UBUNTU USN-986-1 UBUNTU USN-986-2 UBUNTU USN-986-3 CONFIRM http://www.vmware.com/security/advisories/VMSA-2010-0019.html VUPEN ADV-2010-2455 VUPEN ADV-2010-3043 VUPEN ADV-2010-3052 VUPEN ADV-2010-3073 VUPEN ADV-2010-3126 VUPEN ADV-2010-3127 CONFIRM http://xorl.wordpress.com/2010/09/21/cve-2010-0405-bzip2-integer-overflow/ CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=627882 CONFIRM https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2230 CONFIRM https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2231 Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file.

CVE-2010-0406

2010-05-05T09:22:55.003-04:00

2010-05-11T00:00:00.000-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov

2010-05-05T18:57:00.000-04:00

CONFIRM http://bugs.openttd.org/task/3785 CONFIRM http://security.openttd.org/en/CVE-2010-0406 OpenTTD before 1.0.1 allows remote attackers to cause a denial of service (file-descriptor exhaustion and daemon crash) by performing incomplete downloads of the map.

cpe:/a:muscle:pcsc-lite:1.1.2:beta2 cpe:/a:muscle:pcsc-lite:1.1.2:beta3 cpe:/a:muscle:pcsc-lite:1.1.2:beta4 cpe:/a:muscle:pcsc-lite:1.1.2:beta5 cpe:/a:muscle:pcsc-lite:1.2.0 cpe:/a:muscle:pcsc-lite:1.2.0:rc1 cpe:/a:muscle:pcsc-lite:1.2.0:rc2 cpe:/a:muscle:pcsc-lite:1.2.0:rc3 cpe:/a:muscle:pcsc-lite:1.2.9:beta1 cpe:/a:muscle:pcsc-lite:1.2.9:beta10 cpe:/a:muscle:pcsc-lite:1.2.9:beta2 cpe:/a:muscle:pcsc-lite:1.2.9:beta3 cpe:/a:muscle:pcsc-lite:1.2.9:beta4 cpe:/a:muscle:pcsc-lite:1.2.9:beta5 cpe:/a:muscle:pcsc-lite:1.2.9:beta6 cpe:/a:muscle:pcsc-lite:1.2.9:beta7 cpe:/a:muscle:pcsc-lite:1.2.9:beta8 cpe:/a:muscle:pcsc-lite:1.2.9:beta9 cpe:/a:muscle:pcsc-lite:1.3.0 cpe:/a:muscle:pcsc-lite:1.3.1 cpe:/a:muscle:pcsc-lite:1.3.2 cpe:/a:muscle:pcsc-lite:1.3.3 cpe:/a:muscle:pcsc-lite:1.4.0 cpe:/a:muscle:pcsc-lite:1.4.1 cpe:/a:muscle:pcsc-lite:1.4.2 cpe:/a:muscle:pcsc-lite:1.4.3 cpe:/a:muscle:pcsc-lite:1.4.4 cpe:/a:muscle:pcsc-lite:1.4.99 cpe:/a:muscle:pcsc-lite:1.4.100 cpe:/a:muscle:pcsc-lite:1.4.101 cpe:/a:muscle:pcsc-lite:1.4.102 cpe:/a:muscle:pcsc-lite:1.5.0 cpe:/a:muscle:pcsc-lite:1.5.1 cpe:/a:muscle:pcsc-lite:1.5.2 cpe:/a:muscle:pcsc-lite:1.5.3

CVE-2010-0407

2010-06-18T12:30:01.343-04:00

2016-12-07T22:01:32.397-05:00

6.8

LOCAL

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov CONFIRM http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691 CONFIRM http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 FEDORA FEDORA-2010-10764 FEDORA FEDORA-2010-9995 FEDORA FEDORA-2010-10014 SUSE SUSE-SR:2010:017 CONFIRM http://svn.debian.org/wsvn/pcsclite/?sc=1&rev=4208 DEBIAN DSA-2059 BID 40758 VUPEN ADV-2010-1427 VUPEN ADV-2010-1508 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=596426 Multiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled.

cpe:/a:apache:http_server:- cpe:/a:apache:http_server:2.2 cpe:/a:apache:http_server:2.2.0 cpe:/a:apache:http_server:2.2.2 cpe:/a:apache:http_server:2.2.3 cpe:/a:apache:http_server:2.2.4 cpe:/a:apache:http_server:2.2.6 cpe:/a:apache:http_server:2.2.8 cpe:/a:apache:http_server:2.2.9 cpe:/a:apache:http_server:2.2.11 cpe:/a:apache:http_server:2.2.12 cpe:/a:apache:http_server:2.2.13 cpe:/a:apache:http_server:2.2.14

CVE-2010-0408

2010-03-05T11:30:00.660-05:00

2018-10-30T12:25:27.497-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://httpd.apache.org/security/vulnerabilities_22.html APPLE APPLE-SA-2010-11-10-1 FEDORA FEDORA-2010-5942 FEDORA FEDORA-2010-6131 SUSE SUSE-SR:2010:010 HP SSRT100108 CONFIRM http://support.apple.com/kb/HT4435 CONFIRM http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/modules/proxy/mod_proxy_ajp.c?r1=917876&r2=917875&pathrev=917876 CONFIRM http://svn.apache.org/viewvc?view=revision&revision=917876 DEBIAN DSA-2035 MANDRIVA MDVSA-2010:053 MANDRIVA MDVSA-2013:150 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html REDHAT RHSA-2010:0168 BID 38491 VUPEN ADV-2010-0911 VUPEN ADV-2010-0994 VUPEN ADV-2010-1001 VUPEN ADV-2010-1057 VUPEN ADV-2010-1411 AIXAPAR PM08939 AIXAPAR PM12247 AIXAPAR PM15829 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=569905 MLIST [httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html MLIST [httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html The ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in the Apache HTTP Server 2.2.x before 2.2.15 does not properly handle certain situations in which a client sends no request body, which allows remote attackers to cause a denial of service (backend server outage) via a crafted request, related to use of a 500 error code instead of the appropriate 400 error code.

cpe:/a:gnome:gmime:2.4.0 cpe:/a:gnome:gmime:2.4.1 cpe:/a:gnome:gmime:2.4.2 cpe:/a:gnome:gmime:2.4.3 cpe:/a:gnome:gmime:2.4.4 cpe:/a:gnome:gmime:2.4.5 cpe:/a:gnome:gmime:2.4.6 cpe:/a:gnome:gmime:2.4.7 cpe:/a:gnome:gmime:2.4.8 cpe:/a:gnome:gmime:2.4.9 cpe:/a:gnome:gmime:2.4.10 cpe:/a:gnome:gmime:2.4.11 cpe:/a:gnome:gmime:2.4.12 cpe:/a:gnome:gmime:2.4.13

CVE-2010-0409

2010-02-08T16:30:00.373-05:00

2010-03-31T01:41:32.500-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://ftp.gnome.org/pub/GNOME/sources/gmime/2.4/gmime-2.4.14-2.4.15.diff.gz CONFIRM http://ftp.gnome.org/pub/GNOME/sources/gmime/2.4/gmime-2.4.15.changes SUSE SUSE-SR:2010:006 MLIST [oss-security] 20100203 CVE Request -- GMime-2.4.15 MLIST [oss-security] 20100203 Re: CVE Request -- GMime-2.4.15 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=561457 Buffer overflow in the GMIME_UUENCODE_LEN macro in gmime/gmime-encodings.h in GMime before 2.4.15 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via input data for a uuencode operation.

CVE-2010-0410

2010-02-22T08:00:02.783-05:00

2018-11-16T11:06:28.410-05:00

4.9

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2018-11-13T12:06:44.890-05:00

CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f98bfbd78c37c5946cc53089da32a5f741efdeb7 FEDORA FEDORA-2010-1804 FEDORA FEDORA-2010-1787 SUSE SUSE-SA:2010:014 SUSE SUSE-SA:2010:018 SUSE SUSE-SA:2010:019 CONFIRM http://support.avaya.com/css/P8/documents/100088287 DEBIAN DSA-1996 DEBIAN DSA-2005 CONFIRM http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.8 MANDRIVA MDVSA-2010:088 SUSE SUSE-SA:2010:023 MLIST [oss-security] 20100203 CVE request: kernel OOM/crash in drivers/connector MLIST [oss-security] 20100203 Re: CVE request: kernel OOM/crash in drivers/connector REDHAT RHSA-2010:0161 REDHAT RHSA-2010:0398 BUGTRAQ 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX BID 38058 UBUNTU USN-914-1 CONFIRM http://www.vmware.com/security/advisories/VMSA-2011-0003.html VUPEN ADV-2010-0638 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=561682 drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and system crash) by sending the kernel many NETLINK_CONNECTOR messages.

cpe:/a:systemtap:systemtap:1.1

CVE-2010-0411

2010-02-08T15:30:01.310-05:00

2017-09-18T21:30:22.703-04:00

4.9

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov FEDORA FEDORA-2010-1373 FEDORA FEDORA-2010-1720 SUSE SUSE-SR:2010:010 MLIST [oss-security] 20100204 systemtap DoS issue (CVE-2010-0411) SECTRACK 1023664 CONFIRM http://sourceware.org/bugzilla/show_bug.cgi?id=11234 CONFIRM http://sourceware.org/git/gitweb.cgi?p=systemtap.git;a=commit;h=a2d399c87a642190f08ede63dc6fc434a5a8363a REDHAT RHSA-2010:0124 REDHAT RHSA-2010:0125 BID 38120 VUPEN ADV-2010-1001 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=559719 Multiple integer signedness errors in the (1) __get_argv and (2) __get_compat_argv functions in tapset/aux_syscalls.stp in SystemTap 1.1 allow local users to cause a denial of service (script crash, or system crash or hang) via a process with a large number of arguments, leading to a buffer overflow.

cpe:/a:systemtap:systemtap:1.1

CVE-2010-0412

2010-02-24T19:30:00.517-05:00

2017-08-16T21:31:59.447-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FEDORA FEDORA-2010-1373 FEDORA FEDORA-2010-1720 MLIST [scm-commits] 20100215 rpms/systemtap/devel systemtap-1.1-tighten-server-params.patch, NONE, 1.1 systemtap.spec, 1.59, 1.60 BID 38316 XF systemtap-stapserver-unspecified(56611) stap-server in SystemTap 1.1 does not properly restrict the value of the -B (aka BUILD) option, which allows attackers to have an unspecified impact via vectors associated with executing the make program, a different vulnerability than CVE-2009-4273.

cpe:/a:gnome:screensaver:2.13 cpe:/a:gnome:screensaver:2.20 cpe:/a:gnome:screensaver:2.20.0 cpe:/a:gnome:screensaver:2.26.1 cpe:/a:gnome:screensaver:2.28.0 cpe:/a:gnome:screensaver:2.28.1

CVE-2010-0414

2010-02-11T15:30:00.783-05:00

2010-02-26T02:11:13.623-05:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://ftp.gnome.org/pub/GNOME/sources/gnome-screensaver/2.28/gnome-screensaver-2.28.2.news CONFIRM http://git.gnome.org/browse/gnome-screensaver/commit/?id=a5f66339be6719c2b8fc478a1d5fc6545297d950 CONFIRM http://git.gnome.org/browse/gnome-screensaver/commit/?id=dcca89b7ab6e1220815af38da246434b2e13fd9f FEDORA FEDORA-2010-1556 MANDRIVA MDVSA-2010:040 BID 38149 UBUNTU USN-898-1 CONFIRM https://bugzilla.gnome.org/show_bug.cgi?id=609337 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=562217 gnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking and access an unattended workstation by moving the mouse position to an external monitor and then disconnecting that monitor.

CVE-2010-0415

2010-02-17T13:30:00.477-05:00

2018-10-10T15:52:33.300-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6f5a55f1a6c5abee15a0e878e5c74d9f1569b8b0 FEDORA FEDORA-2010-1804 FEDORA FEDORA-2010-1787 SUSE SUSE-SA:2010:014 SUSE SUSE-SA:2010:018 DEBIAN DSA-1996 DEBIAN DSA-2005 CONFIRM http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.33-rc7 MANDRIVA MDVSA-2010:066 MANDRIVA MDVSA-2010:198 MLIST [oss-security] 20100207 CVE request: information leak / potential crash in sys_move_pages MLIST [oss-security] 20100207 Re: CVE request: information leak / potential crash in sys_move_pages MLIST [oss-security] 20100208 Re: CVE request: information leak / potential crash in sys_move_pages REDHAT RHSA-2010:0147 REDHAT RHSA-2010:0161 BUGTRAQ 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX BID 38144 UBUNTU USN-914-1 CONFIRM http://www.vmware.com/security/advisories/VMSA-2011-0003.html VUPEN ADV-2010-0638 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=562582 The do_pages_move function in mm/migrate.c in the Linux kernel before 2.6.33-rc7 does not validate node values, which allows local users to read arbitrary kernel memory locations, cause a denial of service (OOPS), and possibly have unspecified other impact by specifying a node that is not part of the kernel's node set.

cpe:/a:realnetworks:helix_player:1.0.6::linux cpe:/a:realnetworks:realplayer:::linux

CVE-2010-0416

2010-02-18T18:30:00.537-05:00

2017-09-18T21:30:22.860-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MLIST [common-cvs] 20070703 util hxurl.cpp,1.24.4.1,1.24.4.1.4.1 REDHAT RHSA-2010:0094 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=561856 CONFIRM https://helixcommunity.org/viewcvs/common/util/hxurl.cpp?view=log#rev1.24.4.1.4.1 Buffer overflow in the Unescape function in common/util/hxurl.cpp and player/hxclientkit/src/CHXClientSink.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a URL argument containing a % (percent) character that is not followed by two hex digits.

cpe:/a:realnetworks:helix_player:1.0.6 cpe:/a:realnetworks:realplayer

CVE-2010-0417

2010-02-18T18:30:00.583-05:00

2017-09-18T21:30:22.923-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MLIST [common-cvs] 20080114 util rlstate.cpp,1.9,1.10 REDHAT RHSA-2010:0094 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=561860 CONFIRM https://helixcommunity.org/viewcvs/common/util/rlstate.cpp?view=log#rev1.10 Buffer overflow in common/util/rlstate.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a RuleBook structure with a large number of rule-separator characters that trigger heap memory corruption.

cpe:/h:chumby:chumby_classic:0.9 cpe:/h:chumby:chumby_classic:1.1 cpe:/h:chumby:chumby_classic:1.2 cpe:/h:chumby:chumby_classic:1.4 cpe:/h:chumby:chumby_classic:1.5 cpe:/h:chumby:chumby_classic:1.6 cpe:/h:chumby:chumby_classic:1.7 cpe:/h:chumby:chumby_classic:1.7.1 cpe:/h:chumby:chumby_one:1.0.2 cpe:/h:chumby:chumby_one:1.0.3

CVE-2010-0418

2010-03-10T15:13:03.747-05:00

2010-03-31T01:41:33.750-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov MISC http://www.awe.com/mark/blog/20100305.html CONFIRM http://www.chumby.com/pages/release10mar The web interface in chumby one before 1.0.4 and chumby classic before 1.7.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a request.

cpe:/a:kvm_qumranet:kvm:83

CVE-2010-0419

2010-03-05T11:30:00.707-05:00

2017-09-18T21:30:22.987-04:00

4.4

LOCAL

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SECTRACK 1023663 REDHAT RHSA-2010:0126 BID 38467 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=563463 XF kernel-selectors-privilege-escalation(56662) The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not properly restrict writing of segment selectors to segment registers, which might allow guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, and replacing an instruction in between emulator entry and instruction fetch.

cpe:/a:pidgin:pidgin:2.0.0 cpe:/a:pidgin:pidgin:2.0.1 cpe:/a:pidgin:pidgin:2.0.2 cpe:/a:pidgin:pidgin:2.1.0 cpe:/a:pidgin:pidgin:2.1.1 cpe:/a:pidgin:pidgin:2.2.0 cpe:/a:pidgin:pidgin:2.2.1 cpe:/a:pidgin:pidgin:2.2.2 cpe:/a:pidgin:pidgin:2.3.0 cpe:/a:pidgin:pidgin:2.3.1 cpe:/a:pidgin:pidgin:2.4.0 cpe:/a:pidgin:pidgin:2.4.1 cpe:/a:pidgin:pidgin:2.4.2 cpe:/a:pidgin:pidgin:2.4.3 cpe:/a:pidgin:pidgin:2.5.0 cpe:/a:pidgin:pidgin:2.5.1 cpe:/a:pidgin:pidgin:2.5.2 cpe:/a:pidgin:pidgin:2.5.3 cpe:/a:pidgin:pidgin:2.5.4 cpe:/a:pidgin:pidgin:2.5.5 cpe:/a:pidgin:pidgin:2.5.6 cpe:/a:pidgin:pidgin:2.5.7 cpe:/a:pidgin:pidgin:2.5.8 cpe:/a:pidgin:pidgin:2.5.9 cpe:/a:pidgin:pidgin:2.6.0 cpe:/a:pidgin:pidgin:2.6.1 cpe:/a:pidgin:pidgin:2.6.2 cpe:/a:pidgin:pidgin:2.6.4 cpe:/a:pidgin:pidgin:2.6.5

CVE-2010-0420

2010-02-24T13:30:00.420-05:00

2017-09-18T21:30:23.063-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://developer.pidgin.im/wiki/ChangeLog FEDORA FEDORA-2010-1279 FEDORA FEDORA-2010-1934 FEDORA FEDORA-2010-1383 SUSE SUSE-SR:2010:006 CONFIRM http://pidgin.im/news/security/?id=44 DEBIAN DSA-2038 MANDRIVA MDVSA-2010:041 MANDRIVA MDVSA-2010:085 BID 38294 UBUNTU USN-902-1 VUPEN ADV-2010-0413 VUPEN ADV-2010-0914 VUPEN ADV-2010-1020 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=565786 XF pidgin-xmpp-nickname-dos(56399) REDHAT RHSA-2010:0115 libpurple in Finch in Pidgin before 2.6.6, when an XMPP multi-user chat (MUC) room is used, does not properly parse nicknames containing <br> sequences, which allows remote attackers to cause a denial of service (application crash) via a crafted nickname.

cpe:/a:pango:pango:1.27

CVE-2010-0421

2010-03-18T13:30:00.463-04:00

2017-09-18T21:30:23.127-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://ftp.gnome.org/pub/GNOME/sources/pango/1.27/pango-1.27.1.tar.bz2 SUSE SUSE-SR:2010:009 SUSE SUSE-SR:2010:012 SUSE SUSE-SR:2010:013 SECTRACK 1023711 DEBIAN DSA-2019 MANDRIVA MDVSA-2010:121 REDHAT RHSA-2010:0140 BID 38760 VUPEN ADV-2010-0627 VUPEN ADV-2010-0661 VUPEN ADV-2010-1552 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=555831 Array index error in the hb_ot_layout_build_glyph_classes function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service (application crash) via a crafted font file, related to building a synthetic Glyph Definition (aka GDEF) table by using this font's charmap and the Unicode property database.

cpe:/a:gnome:screensaver:2.28.0 cpe:/a:gnome:screensaver:2.28.1 cpe:/a:gnome:screensaver:2.28.2

CVE-2010-0422

2010-02-24T13:30:00.467-05:00

2017-08-16T21:31:59.633-04:00

4.0

LOCAL

HIGH

NONE

COMPLETE

NONE

http://nvd.nist.gov CONFIRM http://ftp.gnome.org/pub/GNOME/sources/gnome-screensaver/2.28/gnome-screensaver-2.28.3.news CONFIRM http://git.gnome.org/browse/gnome-screensaver/commit/?id=271ae93d7b140b8ba40d77f9e4ce894e5fd1b554 CONFIRM http://git.gnome.org/browse/gnome-screensaver/commit/?id=d4dcbd65a2df3c093c4e3a74bbbc75383eb9eadb CONFIRM http://git.gnome.org/browse/gnome-screensaver/commit/?id=f93a22c175090cf02e80bc3ee676b53f1251f685 FEDORA FEDORA-2010-1855 MLIST [oss-security] 20100212 Re: gnome-screensaver vulnerability (CVE-2010-0414) BID 38248 CONFIRM https://bugzilla.gnome.org/show_bug.cgi?id=609789 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=564464 XF gnome-screensaver-monitor-sec-bypass(56364) gnome-screensaver 2.28.x before 2.28.3 does not properly synchronize the state of screen locking and the unlock dialog in situations involving a change to the number of monitors, which allows physically proximate attackers to bypass screen locking and access an unattended workstation by connecting and disconnecting monitors multiple times, a related issue to CVE-2010-0414.

CVE-2010-0423

2010-02-24T13:30:00.530-05:00

2017-09-18T21:30:23.207-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://developer.pidgin.im/wiki/ChangeLog FEDORA FEDORA-2010-1279 FEDORA FEDORA-2010-1934 FEDORA FEDORA-2010-1383 SUSE SUSE-SR:2010:006 CONFIRM http://pidgin.im/news/security/?id=45 DEBIAN DSA-2038 MANDRIVA MDVSA-2010:041 MANDRIVA MDVSA-2010:085 BID 38294 UBUNTU USN-902-1 VUPEN ADV-2010-0413 VUPEN ADV-2010-0914 VUPEN ADV-2010-1020 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=565792 XF pidgin-smileys-dos(56394) REDHAT RHSA-2010:0115 gtkimhtml.c in Pidgin before 2.6.6 allows remote attackers to cause a denial of service (CPU consumption and application hang) by sending many smileys in a (1) IM or (2) chat.

cpe:/a:fedorahosted:cronie:1.4.3 cpe:/a:paul_vixie:vixie_cron

CVE-2010-0424

2010-02-25T14:30:00.467-05:00

2018-01-05T21:29:00.597-05:00

3.3

LOCAL

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://git.fedorahosted.org/git/cronie.git?p=cronie.git;a=commit;h=9e4a8fa5f9171fb724981f53879c9b20264aeb61 FEDORA FEDORA-2010-2751 SECUNIA 48104 BID 38391 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=565809 The edit_cmd function in crontab.c in (1) cronie before 1.4.4 and (2) Vixie cron (vixie-cron) allows local users to change the modification times of arbitrary files, and consequently cause a denial of service, via a symlink attack on a temporary file in the /tmp directory.

cpe:/a:apache:http_server:- cpe:/a:apache:http_server:2.0.9 cpe:/a:apache:http_server:2.0.28 cpe:/a:apache:http_server:2.0.28:beta cpe:/a:apache:http_server:2.0.32 cpe:/a:apache:http_server:2.0.32:beta cpe:/a:apache:http_server:2.0.34:beta cpe:/a:apache:http_server:2.0.35 cpe:/a:apache:http_server:2.0.36 cpe:/a:apache:http_server:2.0.37 cpe:/a:apache:http_server:2.0.38 cpe:/a:apache:http_server:2.0.39 cpe:/a:apache:http_server:2.0.40 cpe:/a:apache:http_server:2.0.41 cpe:/a:apache:http_server:2.0.42 cpe:/a:apache:http_server:2.0.43 cpe:/a:apache:http_server:2.0.44 cpe:/a:apache:http_server:2.0.45 cpe:/a:apache:http_server:2.0.46 cpe:/a:apache:http_server:2.0.47 cpe:/a:apache:http_server:2.0.48 cpe:/a:apache:http_server:2.0.49 cpe:/a:apache:http_server:2.0.50 cpe:/a:apache:http_server:2.0.51 cpe:/a:apache:http_server:2.0.52 cpe:/a:apache:http_server:2.0.53 cpe:/a:apache:http_server:2.0.54 cpe:/a:apache:http_server:2.0.55 cpe:/a:apache:http_server:2.0.56 cpe:/a:apache:http_server:2.0.57 cpe:/a:apache:http_server:2.0.58 cpe:/a:apache:http_server:2.0.59 cpe:/a:apache:http_server:2.0.60 cpe:/a:apache:http_server:2.0.61 cpe:/a:apache:http_server:2.0.63 cpe:/a:apache:http_server:2.2.0 cpe:/a:apache:http_server:2.2.1 cpe:/a:apache:http_server:2.2.2 cpe:/a:apache:http_server:2.2.3 cpe:/a:apache:http_server:2.2.4 cpe:/a:apache:http_server:2.2.6 cpe:/a:apache:http_server:2.2.7 cpe:/a:apache:http_server:2.2.8 cpe:/a:apache:http_server:2.2.9 cpe:/a:apache:http_server:2.2.10 cpe:/a:apache:http_server:2.2.11 cpe:/a:apache:http_server:2.2.12 cpe:/a:apache:http_server:2.2.13 cpe:/a:apache:http_server:2.2.14 cpe:/a:apache:http_server:2.3.0 cpe:/a:apache:http_server:2.3.1 cpe:/a:apache:http_server:2.3.2 cpe:/a:apache:http_server:2.3.3 cpe:/a:apache:http_server:2.3.4 cpe:/a:apache:http_server:2.3.5 cpe:/a:apache:http_server:2.3.6

CVE-2010-0425

2010-03-05T14:30:00.517-05:00

2018-10-30T12:25:27.497-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://httpd.apache.org/security/vulnerabilities_20.html CONFIRM http://httpd.apache.org/security/vulnerabilities_22.html MLIST [security-announce] 20100923 VMSA-2010-0014 VMware Workstation, Player, and ACE address several security issues CONFIRM http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?r1=917870&r2=917869&pathrev=917870 CONFIRM http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/arch/win32/mod_isapi.c?r1=917870&r2=917869&pathrev=917870 CONFIRM http://svn.apache.org/viewvc?view=revision&revision=917870 CERT-VN VU#280613 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html BID 38494 SECTRACK 1023701 MISC http://www.senseofsecurity.com.au/advisories/SOS-10-002 CONFIRM http://www.vmware.com/security/advisories/VMSA-2010-0014.html VUPEN ADV-2010-0634 VUPEN ADV-2010-0994 AIXAPAR PM09447 AIXAPAR PM12247 XF apache-http-modisapi-ocp-unspecified(56624) MLIST [httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html MLIST [httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html MLIST [httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html MLIST [httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure that request processing is complete before calling isapi_unload for an ISAPI .dll module, which allows remote attackers to execute arbitrary code via unspecified vectors related to a crafted request, a reset packet, and "orphaned callback pointers."

cpe:/a:todd_miller:sudo:1.6 cpe:/a:todd_miller:sudo:1.6.1 cpe:/a:todd_miller:sudo:1.6.2 cpe:/a:todd_miller:sudo:1.6.3 cpe:/a:todd_miller:sudo:1.6.3_p1 cpe:/a:todd_miller:sudo:1.6.3_p2 cpe:/a:todd_miller:sudo:1.6.3_p3 cpe:/a:todd_miller:sudo:1.6.3_p4 cpe:/a:todd_miller:sudo:1.6.3_p5 cpe:/a:todd_miller:sudo:1.6.3_p6 cpe:/a:todd_miller:sudo:1.6.3_p7 cpe:/a:todd_miller:sudo:1.6.4_p1 cpe:/a:todd_miller:sudo:1.6.4_p2 cpe:/a:todd_miller:sudo:1.6.5_p1 cpe:/a:todd_miller:sudo:1.6.5_p2 cpe:/a:todd_miller:sudo:1.6.7_p5 cpe:/a:todd_miller:sudo:1.6.8_p1 cpe:/a:todd_miller:sudo:1.6.8_p2 cpe:/a:todd_miller:sudo:1.6.8_p5 cpe:/a:todd_miller:sudo:1.6.8_p7 cpe:/a:todd_miller:sudo:1.6.8_p8 cpe:/a:todd_miller:sudo:1.6.8_p9 cpe:/a:todd_miller:sudo:1.6.8_p12 cpe:/a:todd_miller:sudo:1.6.9_p17 cpe:/a:todd_miller:sudo:1.6.9_p18 cpe:/a:todd_miller:sudo:1.6.9_p19 cpe:/a:todd_miller:sudo:1.7.0 cpe:/a:todd_miller:sudo:1.7.1 cpe:/a:todd_miller:sudo:1.7.2 cpe:/a:todd_miller:sudo:1.7.2p1 cpe:/a:todd_miller:sudo:1.7.2p2 cpe:/a:todd_miller:sudo:1.7.2p3

CVE-2010-0426

2010-02-24T13:30:00.627-05:00

2018-10-10T15:52:37.647-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.9p21.patch.gz MISC http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=570737 FEDORA FEDORA-2010-6701 FEDORA FEDORA-2010-6749 SUSE SUSE-SR:2010:006 SECTRACK 1023658 SLACKWARE SSA:2010-110-01 CONFIRM http://sudo.ws/bugs/show_bug.cgi?id=389 CONFIRM http://sudo.ws/repos/sudo/rev/88f3181692fe CONFIRM http://sudo.ws/repos/sudo/rev/f86e1b56d074 CONFIRM http://wiki.rpath.com/Advisories:rPSA-2010-0075 DEBIAN DSA-2006 GENTOO GLSA-201003-01 MISC http://www.linuxquestions.org/questions/linux-security-4/the-use-of-sudoedit-command-question-785442/ MANDRIVA MDVSA-2010:049 BUGTRAQ 20101027 rPSA-2010-0075-1 sudo BID 38362 CONFIRM http://www.sudo.ws/sudo/stable.html UBUNTU USN-905-1 VUPEN ADV-2010-0450 VUPEN ADV-2010-0949 sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain privileges via a crafted executable file, as demonstrated by a file named sudoedit in a user's home directory.

cpe:/a:todd_miller:sudo:1.6 cpe:/a:todd_miller:sudo:1.6.1 cpe:/a:todd_miller:sudo:1.6.2 cpe:/a:todd_miller:sudo:1.6.3 cpe:/a:todd_miller:sudo:1.6.3_p1 cpe:/a:todd_miller:sudo:1.6.3_p2 cpe:/a:todd_miller:sudo:1.6.3_p3 cpe:/a:todd_miller:sudo:1.6.3_p4 cpe:/a:todd_miller:sudo:1.6.3_p5 cpe:/a:todd_miller:sudo:1.6.3_p6 cpe:/a:todd_miller:sudo:1.6.3_p7 cpe:/a:todd_miller:sudo:1.6.4_p1 cpe:/a:todd_miller:sudo:1.6.4_p2 cpe:/a:todd_miller:sudo:1.6.5 cpe:/a:todd_miller:sudo:1.6.5_p1 cpe:/a:todd_miller:sudo:1.6.5_p2 cpe:/a:todd_miller:sudo:1.6.6 cpe:/a:todd_miller:sudo:1.6.7 cpe:/a:todd_miller:sudo:1.6.7_p5 cpe:/a:todd_miller:sudo:1.6.8 cpe:/a:todd_miller:sudo:1.6.8_p1 cpe:/a:todd_miller:sudo:1.6.8_p5 cpe:/a:todd_miller:sudo:1.6.8_p8 cpe:/a:todd_miller:sudo:1.6.8_p9 cpe:/a:todd_miller:sudo:1.6.8_p12 cpe:/a:todd_miller:sudo:1.6.9_p17 cpe:/a:todd_miller:sudo:1.6.9_p18 cpe:/a:todd_miller:sudo:1.6.9_p19

CVE-2010-0427

2010-02-25T14:30:00.517-05:00

2018-10-10T15:52:41.367-04:00

4.4

LOCAL

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.9p21.patch.gz SUSE SUSE-SR:2010:006 SECTRACK 1023658 CONFIRM http://sudo.ws/repos/sudo/rev/aa0b6c01c462 CONFIRM http://wiki.rpath.com/Advisories:rPSA-2010-0075 DEBIAN DSA-2006 GENTOO GLSA-201003-01 CONFIRM http://www.gratisoft.us/bugzilla/attachment.cgi?id=255 CONFIRM http://www.gratisoft.us/bugzilla/show_bug.cgi?id=349 MLIST [oss-security] 20100223 CVE assignment notification -- CVE-2010-0427 -- sudo fails to reset group permissions if runas_default set MLIST [oss-security] 20100224 Re: CVE assignment notification -- CVE-2010-0427 -- sudo fails to reset group permissions if runas_default set BUGTRAQ 20101027 rPSA-2010-0075-1 sudo CONFIRM http://www.sudo.ws/cgi-bin/cvsweb/sudo/set_perms.c.diff?r1=1.30.2.7&r2=1.30.2.8 UBUNTU USN-905-1 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=567622 sudo 1.6.x before 1.6.9p21, when the runas_default option is used, does not properly set group memberships, which allows local users to gain privileges via a sudo command.

cpe:/a:redhat:enterprise_virtualization:2.2 cpe:/a:redhat:qspice:0.3.0

CVE-2010-0428

2010-08-24T14:00:01.537-04:00

2010-08-25T00:00:00.000-04:00

6.6

LOCAL

MEDIUM

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov

2010-08-25T08:35:00.000-04:00

CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=568699 REDHAT RHSA-2010:0622 REDHAT RHSA-2010:0633 libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0, does not properly validate guest QXL driver pointers, which allows guest OS users to cause a denial of service (invalid pointer dereference and guest OS crash) or possibly gain privileges via unspecified vectors.

cpe:/a:redhat:enterprise_virtualization:2.2 cpe:/a:redhat:qspice:0.3.0

CVE-2010-0429

2010-08-24T14:00:23.190-04:00

2010-08-25T00:00:00.000-04:00

6.6

LOCAL

MEDIUM

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov

2010-08-25T08:51:00.000-04:00

CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=568701 REDHAT RHSA-2010:0622 REDHAT RHSA-2010:0633 libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0, does not properly restrict the addresses upon which memory-management actions are performed, which allows guest OS users to cause a denial of service (guest OS crash) or possibly gain privileges via unspecified vectors.

cpe:/a:redhat:enterprise_virtualization_hypervisor:5.4-2.1

CVE-2010-0430

2013-12-26T20:55:04.957-05:00

2013-12-27T10:20:29.413-05:00

7.4

ADJACENT_NETWORK

MEDIUM

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov

2013-12-27T10:20:29.240-05:00

REDHAT RHSA-2010:0271 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=568702 REDHAT RHSA-2010:0476 libspice, as used in QEMU-KVM in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 and possibly other products, allows guest OS users to read from or write to arbitrary QEMU memory by modifying the address that is used by Cairo for memory mappings.

cpe:/a:redhat:enterprise_virtualization:2.2 cpe:/a:redhat:kvm:83

CVE-2010-0431

2010-08-24T14:00:38.817-04:00

2010-08-25T00:00:00.000-04:00

6.6

LOCAL

MEDIUM

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov

2010-08-25T09:19:00.000-04:00

CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=568809 REDHAT RHSA-2010:0622 REDHAT RHSA-2010:0627 QEMU-KVM, as used in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and KVM 83, does not properly validate guest QXL driver pointers, which allows guest OS users to cause a denial of service (invalid pointer dereference and guest OS crash) or possibly gain privileges via unspecified vectors.

cpe:/a:apache:ofbiz:09.04

CVE-2010-0432

2010-04-15T13:30:00.337-04:00

2018-07-30T08:31:49.510-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2018-07-18T14:59:24.757-04:00

CONFIRM http://svn.apache.org/viewvc?view=revision&revision=920369 CONFIRM http://svn.apache.org/viewvc?view=revision&revision=920370 CONFIRM http://svn.apache.org/viewvc?view=revision&revision=920371 CONFIRM http://svn.apache.org/viewvc?view=revision&revision=920372 CONFIRM http://svn.apache.org/viewvc?view=revision&revision=920379 CONFIRM http://svn.apache.org/viewvc?view=revision&revision=920380 CONFIRM http://svn.apache.org/viewvc?view=revision&revision=920381 CONFIRM http://svn.apache.org/viewvc?view=revision&revision=920382 MISC http://www.bonsai-sec.com/en/research/vulnerabilities/apacheofbiz-multiple-xss-0103.php BID 39489 Multiple cross-site scripting (XSS) vulnerabilities in the Apache Open For Business Project (aka OFBiz) 09.04 and earlier, as used in Opentaps, Neogia, and Entente Oya, allow remote attackers to inject arbitrary web script or HTML via (1) the productStoreId parameter to control/exportProductListing, (2) the partyId parameter to partymgr/control/viewprofile (aka partymgr/control/login), (3) the start parameter to myportal/control/showPortalPage, (4) an invalid URI beginning with /facility/control/ReceiveReturn (aka /crmsfa/control/ReceiveReturn or /cms/control/ReceiveReturn), (5) the contentId parameter (aka the entityName variable) to ecommerce/control/ViewBlogArticle, (6) the entityName parameter to webtools/control/FindGeneric, or the (7) subject or (8) content parameter to an unspecified component under ecommerce/control/contactus.

cpe:/a:openssl:openssl:0.9.8 cpe:/a:openssl:openssl:0.9.8a cpe:/a:openssl:openssl:0.9.8b cpe:/a:openssl:openssl:0.9.8c cpe:/a:openssl:openssl:0.9.8d cpe:/a:openssl:openssl:0.9.8e cpe:/a:openssl:openssl:0.9.8f cpe:/a:openssl:openssl:0.9.8g cpe:/a:openssl:openssl:0.9.8h cpe:/a:openssl:openssl:0.9.8i cpe:/a:openssl:openssl:0.9.8j cpe:/a:openssl:openssl:0.9.8k cpe:/a:openssl:openssl:0.9.8l cpe:/a:openssl:openssl:0.9.8m

CVE-2010-0433

2010-03-05T14:30:00.547-05:00

2018-10-10T15:52:43.817-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc CONFIRM http://cvs.openssl.org/chngview?cn=19374 MISC http://groups.google.com/group/mailing.openssl.users/browse_thread/thread/c3e1ab0034ca4b4c/66aa896c3a78b2f7 FEDORA FEDORA-2010-5744 FEDORA FEDORA-2010-5357 HP HPSBUX02517 HP HPSBUX02531 MLIST [dovecot] 20100219 segfault - (imap|pop3)-login during nessus scan MANDRIVA MDVSA-2010:076 CONFIRM http://www.openssl.org/news/changelog.html MLIST [oss-security] 20100303 OpenSSL (with KRB5) remote crash - CVE-2010-0433 BUGTRAQ 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX CONFIRM http://www.vmware.com/security/advisories/VMSA-2011-0003.html CONFIRM http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html VUPEN ADV-2010-0839 VUPEN ADV-2010-0916 VUPEN ADV-2010-0933 VUPEN ADV-2010-1216 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=567711 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=569774 CONFIRM https://kb.bluecoat.com/index?page=content&id=SA50 MLIST [syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.0.6a has been released MLIST [syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.2.1a has been released The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, does not check a certain return value, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via SSL cipher negotiation, as demonstrated by a chroot installation of Dovecot or stunnel without Kerberos configuration files inside the chroot.

cpe:/a:apache:http_server:- cpe:/a:apache:http_server:2.2 cpe:/a:apache:http_server:2.2.0 cpe:/a:apache:http_server:2.2.1 cpe:/a:apache:http_server:2.2.2 cpe:/a:apache:http_server:2.2.3 cpe:/a:apache:http_server:2.2.4 cpe:/a:apache:http_server:2.2.6 cpe:/a:apache:http_server:2.2.8 cpe:/a:apache:http_server:2.2.9 cpe:/a:apache:http_server:2.2.11 cpe:/a:apache:http_server:2.2.12 cpe:/a:apache:http_server:2.2.13 cpe:/a:apache:http_server:2.2.14

CVE-2010-0434

2010-03-05T14:30:00.577-05:00

2018-10-30T12:25:27.497-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://httpd.apache.org/security/vulnerabilities_22.html APPLE APPLE-SA-2010-11-10-1 FEDORA FEDORA-2010-5942 FEDORA FEDORA-2010-6131 SUSE SUSE-SR:2010:010 MLIST [security-announce] 20100923 VMSA-2010-0014 VMware Workstation, Player, and ACE address several security issues HP SSRT100108 CONFIRM http://support.apple.com/kb/HT4435 CONFIRM http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/server/protocol.c?r1=917617&r2=917867&pathrev=917867&diff_format=h CONFIRM http://svn.apache.org/viewvc?view=revision&revision=917867 CONFIRM http://svn.apache.org/viewvc?view=revision&revision=918427 DEBIAN DSA-2035 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html REDHAT RHSA-2010:0168 REDHAT RHSA-2010:0175 BID 38494 CONFIRM http://www.vmware.com/security/advisories/VMSA-2010-0014.html VUPEN ADV-2010-0911 VUPEN ADV-2010-0994 VUPEN ADV-2010-1001 VUPEN ADV-2010-1057 VUPEN ADV-2010-1411 AIXAPAR PM08939 AIXAPAR PM12247 AIXAPAR PM15829 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=570171 XF apache-http-rh-info-disclosure(56625) CONFIRM https://issues.apache.org/bugzilla/show_bug.cgi?id=48359 MLIST [httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html MLIST [httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain sensitive information via a crafted request that triggers access to memory locations associated with an earlier request.

cpe:/a:redhat:enterprise_virtualization:2.2 cpe:/a:redhat:kvm:83

CVE-2010-0435

2010-08-24T14:00:38.927-04:00

2011-01-19T01:54:34.073-05:00

4.6

LOCAL

LOW

SINGLE_INSTANCE

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SA:2011:001 VUPEN ADV-2011-0012 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=570528 REDHAT RHSA-2010:0622 REDHAT RHSA-2010:0627 The Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2, and KVM 83, when the Intel VT-x extension is enabled, allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) via vectors related to instruction emulation.

cpe:/a:kde:kde_sc:2.2.0 cpe:/a:kde:kde_sc:3.5.10 cpe:/a:kde:kde_sc:4.1.2 cpe:/a:kde:kde_sc:4.2.2 cpe:/a:kde:kde_sc:4.3.0 cpe:/a:kde:kde_sc:4.3.1 cpe:/a:kde:kde_sc:4.3.4 cpe:/a:kde:kde_sc:4.3.5 cpe:/a:kde:kde_sc:4.4.0 cpe:/a:kde:kde_sc:4.4.1 cpe:/a:kde:kde_sc:4.4.2

CVE-2010-0436

2010-04-15T13:30:00.477-04:00

2017-09-18T21:30:23.720-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM ftp://ftp.kde.org/pub/kde/security_patches/kdebase-workspace-4.3.5-CVE-2010-0436.diff FEDORA FEDORA-2010-6605 SUSE SUSE-SR:2010:009 REDHAT RHSA-2010:0348 DEBIAN DSA-2037 CONFIRM http://www.kde.org/info/security/advisory-20100413-1.txt BID 39467 VUPEN ADV-2010-0879 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=570613 XF kde-kdm-privilege-escalation(57823) Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to improper interaction with ksm.

cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.8 cpe:/o:linux:linux_kernel:2.6.8.1 cpe:/o:linux:linux_kernel:2.6.9 cpe:/o:linux:linux_kernel:2.6.9:rc1 cpe:/o:linux:linux_kernel:2.6.9:rc2 cpe:/o:linux:linux_kernel:2.6.9:rc3 cpe:/o:linux:linux_kernel:2.6.9:rc4 cpe:/o:linux:linux_kernel:2.6.10 cpe:/o:linux:linux_kernel:2.6.11 cpe:/o:linux:linux_kernel:2.6.11.1 cpe:/o:linux:linux_kernel:2.6.11.2 cpe:/o:linux:linux_kernel:2.6.11.3 cpe:/o:linux:linux_kernel:2.6.11.4 cpe:/o:linux:linux_kernel:2.6.11.5 cpe:/o:linux:linux_kernel:2.6.11.6 cpe:/o:linux:linux_kernel:2.6.11.7 cpe:/o:linux:linux_kernel:2.6.11.8 cpe:/o:linux:linux_kernel:2.6.11.9 cpe:/o:linux:linux_kernel:2.6.11.10 cpe:/o:linux:linux_kernel:2.6.11.11 cpe:/o:linux:linux_kernel:2.6.11.12 cpe:/o:linux:linux_kernel:2.6.12 cpe:/o:linux:linux_kernel:2.6.12.1 cpe:/o:linux:linux_kernel:2.6.12.2 cpe:/o:linux:linux_kernel:2.6.12.3 cpe:/o:linux:linux_kernel:2.6.12.4 cpe:/o:linux:linux_kernel:2.6.12.5 cpe:/o:linux:linux_kernel:2.6.12.6 cpe:/o:linux:linux_kernel:2.6.13 cpe:/o:linux:linux_kernel:2.6.13.1 cpe:/o:linux:linux_kernel:2.6.13.2 cpe:/o:linux:linux_kernel:2.6.13.3 cpe:/o:linux:linux_kernel:2.6.13.4 cpe:/o:linux:linux_kernel:2.6.13.5 cpe:/o:linux:linux_kernel:2.6.14 cpe:/o:linux:linux_kernel:2.6.14.1 cpe:/o:linux:linux_kernel:2.6.14.2 cpe:/o:linux:linux_kernel:2.6.14.3 cpe:/o:linux:linux_kernel:2.6.14.4 cpe:/o:linux:linux_kernel:2.6.14.5 cpe:/o:linux:linux_kernel:2.6.14.6 cpe:/o:linux:linux_kernel:2.6.14.7 cpe:/o:linux:linux_kernel:2.6.15 cpe:/o:linux:linux_kernel:2.6.15.1 cpe:/o:linux:linux_kernel:2.6.15.2 cpe:/o:linux:linux_kernel:2.6.15.3 cpe:/o:linux:linux_kernel:2.6.15.4 cpe:/o:linux:linux_kernel:2.6.15.5 cpe:/o:linux:linux_kernel:2.6.15.6 cpe:/o:linux:linux_kernel:2.6.15.7 cpe:/o:linux:linux_kernel:2.6.16 cpe:/o:linux:linux_kernel:2.6.16.1 cpe:/o:linux:linux_kernel:2.6.16.2 cpe:/o:linux:linux_kernel:2.6.16.3 cpe:/o:linux:linux_kernel:2.6.16.4 cpe:/o:linux:linux_kernel:2.6.16.5 cpe:/o:linux:linux_kernel:2.6.16.6 cpe:/o:linux:linux_kernel:2.6.16.7 cpe:/o:linux:linux_kernel:2.6.16.8 cpe:/o:linux:linux_kernel:2.6.16.9 cpe:/o:linux:linux_kernel:2.6.16.10 cpe:/o:linux:linux_kernel:2.6.16.11 cpe:/o:linux:linux_kernel:2.6.16.12 cpe:/o:linux:linux_kernel:2.6.16.13 cpe:/o:linux:linux_kernel:2.6.16.14 cpe:/o:linux:linux_kernel:2.6.16.15 cpe:/o:linux:linux_kernel:2.6.16.16 cpe:/o:linux:linux_kernel:2.6.16.17 cpe:/o:linux:linux_kernel:2.6.16.18 cpe:/o:linux:linux_kernel:2.6.16.19 cpe:/o:linux:linux_kernel:2.6.16.20 cpe:/o:linux:linux_kernel:2.6.16.21 cpe:/o:linux:linux_kernel:2.6.16.22 cpe:/o:linux:linux_kernel:2.6.16.23 cpe:/o:linux:linux_kernel:2.6.16.24 cpe:/o:linux:linux_kernel:2.6.16.25 cpe:/o:linux:linux_kernel:2.6.16.26 cpe:/o:linux:linux_kernel:2.6.16.27 cpe:/o:linux:linux_kernel:2.6.16.28 cpe:/o:linux:linux_kernel:2.6.16.29 cpe:/o:linux:linux_kernel:2.6.16.30 cpe:/o:linux:linux_kernel:2.6.16.31 cpe:/o:linux:linux_kernel:2.6.16.31:-rc1 cpe:/o:linux:linux_kernel:2.6.16.31:-rc2 cpe:/o:linux:linux_kernel:2.6.16.31:-rc3 cpe:/o:linux:linux_kernel:2.6.16.31:-rc4 cpe:/o:linux:linux_kernel:2.6.16.31:-rc5 cpe:/o:linux:linux_kernel:2.6.16.32 cpe:/o:linux:linux_kernel:2.6.16.33 cpe:/o:linux:linux_kernel:2.6.16.34 cpe:/o:linux:linux_kernel:2.6.16.35 cpe:/o:linux:linux_kernel:2.6.16.36 cpe:/o:linux:linux_kernel:2.6.16.37 cpe:/o:linux:linux_kernel:2.6.16.38 cpe:/o:linux:linux_kernel:2.6.16.39 cpe:/o:linux:linux_kernel:2.6.16.40 cpe:/o:linux:linux_kernel:2.6.16.41 cpe:/o:linux:linux_kernel:2.6.16.42 cpe:/o:linux:linux_kernel:2.6.16.43 cpe:/o:linux:linux_kernel:2.6.16.44 cpe:/o:linux:linux_kernel:2.6.16.45 cpe:/o:linux:linux_kernel:2.6.16.46 cpe:/o:linux:linux_kernel:2.6.16.47 cpe:/o:linux:linux_kernel:2.6.16.48 cpe:/o:linux:linux_kernel:2.6.16.49 cpe:/o:linux:linux_kernel:2.6.16.50 cpe:/o:linux:linux_kernel:2.6.16.51 cpe:/o:linux:linux_kernel:2.6.16.52 cpe:/o:linux:linux_kernel:2.6.16.53 cpe:/o:linux:linux_kernel:2.6.16.54 cpe:/o:linux:linux_kernel:2.6.16.55 cpe:/o:linux:linux_kernel:2.6.16.56 cpe:/o:linux:linux_kernel:2.6.16.57 cpe:/o:linux:linux_kernel:2.6.16.58 cpe:/o:linux:linux_kernel:2.6.16.59 cpe:/o:linux:linux_kernel:2.6.16.60 cpe:/o:linux:linux_kernel:2.6.16.61 cpe:/o:linux:linux_kernel:2.6.16.62 cpe:/o:linux:linux_kernel:2.6.17 cpe:/o:linux:linux_kernel:2.6.17:rc1 cpe:/o:linux:linux_kernel:2.6.17:rc2 cpe:/o:linux:linux_kernel:2.6.17:rc3 cpe:/o:linux:linux_kernel:2.6.17:rc4 cpe:/o:linux:linux_kernel:2.6.17:rc5 cpe:/o:linux:linux_kernel:2.6.17:rc6 cpe:/o:linux:linux_kernel:2.6.17.1 cpe:/o:linux:linux_kernel:2.6.17.2 cpe:/o:linux:linux_kernel:2.6.17.3 cpe:/o:linux:linux_kernel:2.6.17.4 cpe:/o:linux:linux_kernel:2.6.17.5 cpe:/o:linux:linux_kernel:2.6.17.6 cpe:/o:linux:linux_kernel:2.6.17.7 cpe:/o:linux:linux_kernel:2.6.17.8 cpe:/o:linux:linux_kernel:2.6.17.9 cpe:/o:linux:linux_kernel:2.6.17.10 cpe:/o:linux:linux_kernel:2.6.17.11 cpe:/o:linux:linux_kernel:2.6.17.12 cpe:/o:linux:linux_kernel:2.6.17.13 cpe:/o:linux:linux_kernel:2.6.17.14 cpe:/o:linux:linux_kernel:2.6.18 cpe:/o:linux:linux_kernel:2.6.18:rc1 cpe:/o:linux:linux_kernel:2.6.18:rc2 cpe:/o:linux:linux_kernel:2.6.18:rc3 cpe:/o:linux:linux_kernel:2.6.18:rc4 cpe:/o:linux:linux_kernel:2.6.18:rc5 cpe:/o:linux:linux_kernel:2.6.18:rc6 cpe:/o:linux:linux_kernel:2.6.18:rc7 cpe:/o:linux:linux_kernel:2.6.18.1 cpe:/o:linux:linux_kernel:2.6.18.2 cpe:/o:linux:linux_kernel:2.6.18.3 cpe:/o:linux:linux_kernel:2.6.18.4 cpe:/o:linux:linux_kernel:2.6.18.5 cpe:/o:linux:linux_kernel:2.6.18.6 cpe:/o:linux:linux_kernel:2.6.18.7 cpe:/o:linux:linux_kernel:2.6.18.8 cpe:/o:linux:linux_kernel:2.6.19 cpe:/o:linux:linux_kernel:2.6.19.1 cpe:/o:linux:linux_kernel:2.6.19.2 cpe:/o:linux:linux_kernel:2.6.19.3 cpe:/o:linux:linux_kernel:2.6.19.4 cpe:/o:linux:linux_kernel:2.6.19.5 cpe:/o:linux:linux_kernel:2.6.19.6 cpe:/o:linux:linux_kernel:2.6.19.7 cpe:/o:linux:linux_kernel:2.6.20 cpe:/o:linux:linux_kernel:2.6.20.1 cpe:/o:linux:linux_kernel:2.6.20.2 cpe:/o:linux:linux_kernel:2.6.20.3 cpe:/o:linux:linux_kernel:2.6.20.4 cpe:/o:linux:linux_kernel:2.6.20.5 cpe:/o:linux:linux_kernel:2.6.20.6 cpe:/o:linux:linux_kernel:2.6.20.7 cpe:/o:linux:linux_kernel:2.6.20.8 cpe:/o:linux:linux_kernel:2.6.20.9 cpe:/o:linux:linux_kernel:2.6.20.10 cpe:/o:linux:linux_kernel:2.6.20.11 cpe:/o:linux:linux_kernel:2.6.20.12 cpe:/o:linux:linux_kernel:2.6.20.13 cpe:/o:linux:linux_kernel:2.6.20.14 cpe:/o:linux:linux_kernel:2.6.20.15 cpe:/o:linux:linux_kernel:2.6.20.16 cpe:/o:linux:linux_kernel:2.6.20.17 cpe:/o:linux:linux_kernel:2.6.20.18 cpe:/o:linux:linux_kernel:2.6.20.19 cpe:/o:linux:linux_kernel:2.6.20.20 cpe:/o:linux:linux_kernel:2.6.20.21 cpe:/o:linux:linux_kernel:2.6.21 cpe:/o:linux:linux_kernel:2.6.21.1 cpe:/o:linux:linux_kernel:2.6.21.2 cpe:/o:linux:linux_kernel:2.6.21.3 cpe:/o:linux:linux_kernel:2.6.21.4 cpe:/o:linux:linux_kernel:2.6.21.5 cpe:/o:linux:linux_kernel:2.6.21.6 cpe:/o:linux:linux_kernel:2.6.21.7 cpe:/o:linux:linux_kernel:2.6.22 cpe:/o:linux:linux_kernel:2.6.22.1 cpe:/o:linux:linux_kernel:2.6.22.2 cpe:/o:linux:linux_kernel:2.6.22.3 cpe:/o:linux:linux_kernel:2.6.22.4 cpe:/o:linux:linux_kernel:2.6.22.5 cpe:/o:linux:linux_kernel:2.6.22.6 cpe:/o:linux:linux_kernel:2.6.22.7 cpe:/o:linux:linux_kernel:2.6.22.8 cpe:/o:linux:linux_kernel:2.6.22.9 cpe:/o:linux:linux_kernel:2.6.22.10 cpe:/o:linux:linux_kernel:2.6.22.11 cpe:/o:linux:linux_kernel:2.6.22.12 cpe:/o:linux:linux_kernel:2.6.22.13 cpe:/o:linux:linux_kernel:2.6.22.14 cpe:/o:linux:linux_kernel:2.6.22.15 cpe:/o:linux:linux_kernel:2.6.22.16 cpe:/o:linux:linux_kernel:2.6.22.17 cpe:/o:linux:linux_kernel:2.6.22.18 cpe:/o:linux:linux_kernel:2.6.22.19 cpe:/o:linux:linux_kernel:2.6.22.20 cpe:/o:linux:linux_kernel:2.6.22.21 cpe:/o:linux:linux_kernel:2.6.22.22 cpe:/o:linux:linux_kernel:2.6.23 cpe:/o:linux:linux_kernel:2.6.23:rc1 cpe:/o:linux:linux_kernel:2.6.23:rc2 cpe:/o:linux:linux_kernel:2.6.23.1 cpe:/o:linux:linux_kernel:2.6.23.2 cpe:/o:linux:linux_kernel:2.6.23.3 cpe:/o:linux:linux_kernel:2.6.23.4 cpe:/o:linux:linux_kernel:2.6.23.5 cpe:/o:linux:linux_kernel:2.6.23.6 cpe:/o:linux:linux_kernel:2.6.23.7 cpe:/o:linux:linux_kernel:2.6.23.8 cpe:/o:linux:linux_kernel:2.6.23.9 cpe:/o:linux:linux_kernel:2.6.23.10 cpe:/o:linux:linux_kernel:2.6.23.11 cpe:/o:linux:linux_kernel:2.6.23.12 cpe:/o:linux:linux_kernel:2.6.23.13 cpe:/o:linux:linux_kernel:2.6.23.14 cpe:/o:linux:linux_kernel:2.6.23.15 cpe:/o:linux:linux_kernel:2.6.23.16 cpe:/o:linux:linux_kernel:2.6.23.17 cpe:/o:linux:linux_kernel:2.6.24 cpe:/o:linux:linux_kernel:2.6.24:rc1 cpe:/o:linux:linux_kernel:2.6.24:rc2 cpe:/o:linux:linux_kernel:2.6.24:rc3 cpe:/o:linux:linux_kernel:2.6.24:rc4 cpe:/o:linux:linux_kernel:2.6.24:rc5 cpe:/o:linux:linux_kernel:2.6.24.1 cpe:/o:linux:linux_kernel:2.6.24.2 cpe:/o:linux:linux_kernel:2.6.24.3 cpe:/o:linux:linux_kernel:2.6.24.4 cpe:/o:linux:linux_kernel:2.6.24.5 cpe:/o:linux:linux_kernel:2.6.24.6 cpe:/o:linux:linux_kernel:2.6.24.7 cpe:/o:linux:linux_kernel:2.6.25 cpe:/o:linux:linux_kernel:2.6.25.1 cpe:/o:linux:linux_kernel:2.6.25.2 cpe:/o:linux:linux_kernel:2.6.25.3 cpe:/o:linux:linux_kernel:2.6.25.4 cpe:/o:linux:linux_kernel:2.6.25.5 cpe:/o:linux:linux_kernel:2.6.25.6 cpe:/o:linux:linux_kernel:2.6.25.7 cpe:/o:linux:linux_kernel:2.6.25.8 cpe:/o:linux:linux_kernel:2.6.25.9 cpe:/o:linux:linux_kernel:2.6.25.10 cpe:/o:linux:linux_kernel:2.6.25.11 cpe:/o:linux:linux_kernel:2.6.25.12 cpe:/o:linux:linux_kernel:2.6.25.13 cpe:/o:linux:linux_kernel:2.6.25.14 cpe:/o:linux:linux_kernel:2.6.25.15 cpe:/o:linux:linux_kernel:2.6.25.16 cpe:/o:linux:linux_kernel:2.6.25.17 cpe:/o:linux:linux_kernel:2.6.25.18 cpe:/o:linux:linux_kernel:2.6.25.19 cpe:/o:linux:linux_kernel:2.6.25.20 cpe:/o:linux:linux_kernel:2.6.26 cpe:/o:linux:linux_kernel:2.6.26.1 cpe:/o:linux:linux_kernel:2.6.26.2 cpe:/o:linux:linux_kernel:2.6.26.3 cpe:/o:linux:linux_kernel:2.6.26.4 cpe:/o:linux:linux_kernel:2.6.26.5 cpe:/o:linux:linux_kernel:2.6.26.6 cpe:/o:linux:linux_kernel:2.6.26.7 cpe:/o:linux:linux_kernel:2.6.26.8

CVE-2010-0437

2010-03-24T09:34:34.280-04:00

2018-10-10T15:52:47.787-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://bugzilla.kernel.org/show_bug.cgi?id=11469 CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=e550dfb0c2c31b6363aa463a035fc9f8dcaa3c9b CONFIRM http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27 MLIST [oss-security] 20100211 CVE request - kernel: ip6_dst_lookup_tail() NULL pointer dereference MLIST [oss-security] 20100304 Re: CVE request - kernel: ip6_dst_lookup_tail() NULL pointer dereference REDHAT RHSA-2010:0147 REDHAT RHSA-2010:0161 BUGTRAQ 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX CONFIRM http://www.vmware.com/security/advisories/VMSA-2011-0003.html CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=563781 The ip6_dst_lookup_tail function in net/ipv6/ip6_output.c in the Linux kernel before 2.6.27 does not properly handle certain circumstances involving an IPv6 TUN network interface and a large number of neighbors, which allows attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via unknown vectors.

cpe:/a:otrs:otrs:2.1.1 cpe:/a:otrs:otrs:2.1.2 cpe:/a:otrs:otrs:2.1.3 cpe:/a:otrs:otrs:2.1.4 cpe:/a:otrs:otrs:2.1.5 cpe:/a:otrs:otrs:2.1.6 cpe:/a:otrs:otrs:2.1.7 cpe:/a:otrs:otrs:2.1.8 cpe:/a:otrs:otrs:2.2.1 cpe:/a:otrs:otrs:2.2.2 cpe:/a:otrs:otrs:2.2.3 cpe:/a:otrs:otrs:2.2.4 cpe:/a:otrs:otrs:2.2.5 cpe:/a:otrs:otrs:2.2.6 cpe:/a:otrs:otrs:2.2.7 cpe:/a:otrs:otrs:2.2.8 cpe:/a:otrs:otrs:2.3.1 cpe:/a:otrs:otrs:2.3.2 cpe:/a:otrs:otrs:2.3.3 cpe:/a:otrs:otrs:2.3.4 cpe:/a:otrs:otrs:2.4.1 cpe:/a:otrs:otrs:2.4.2 cpe:/a:otrs:otrs:2.4.3 cpe:/a:otrs:otrs:2.4.4 cpe:/a:otrs:otrs:2.4.5 cpe:/a:otrs:otrs:2.4.6

CVE-2010-0438

2010-02-09T14:30:00.453-05:00

2010-09-09T01:39:26.523-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov SUSE SUSE-SR:2010:014 CONFIRM http://otrs.org/advisory/OSA-2010-01-en/ CONFIRM http://otrs.org/releases/2.4.7/ CONFIRM http://source.otrs.org/viewvc.cgi/otrs/Kernel/System/Ticket.pm?view=log CONFIRM http://www.otrs.org/news/2010/otrs_2-4-7/ BID 38146 Multiple SQL injection vulnerabilities in Kernel/System/Ticket.pm in OTRS-Core in Open Ticket Request System (OTRS) 2.1.x before 2.1.9, 2.2.x before 2.2.9, 2.3.x before 2.3.5, and 2.4.x before 2.4.7 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

cpe:/a:chip_salzenberg:deliver:2.1.14

CVE-2010-0439

2010-03-26T14:30:00.360-04:00

2018-10-10T15:52:50.117-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BUGTRAQ 20100324 Multiple vulnerabilities in Deliver BID 38924 Chip Salzenberg Deliver allows local users to cause a denial of service, obtain sensitive information, and possibly change the ownership of arbitrary files via a symlink attack on an unspecified file.

cpe:/a:cisco:adaptive_security_appliance_software:8.0 cpe:/a:cisco:adaptive_security_appliance_software:8.0%282%29 cpe:/a:cisco:adaptive_security_appliance_software:8.0%283%29 cpe:/a:cisco:adaptive_security_appliance_software:8.0%284%29 cpe:/a:cisco:adaptive_security_appliance_software:8.1 cpe:/a:cisco:adaptive_security_appliance_software:8.2 cpe:/a:cisco:secure_desktop:- cpe:/a:cisco:secure_desktop:3.0_base cpe:/a:cisco:secure_desktop:3.1 cpe:/a:cisco:secure_desktop:3.1.0.31 cpe:/a:cisco:secure_desktop:3.1.1 cpe:/a:cisco:secure_desktop:3.1.1.27 cpe:/a:cisco:secure_desktop:3.1.1.33 cpe:/a:cisco:secure_desktop:3.1.1.45 cpe:/a:cisco:secure_desktop:3.1_base cpe:/a:cisco:secure_desktop:3.2 cpe:/a:cisco:secure_desktop:3.2.0.136 cpe:/a:cisco:secure_desktop:3.2.1 cpe:/a:cisco:secure_desktop:3.2.1.103 cpe:/a:cisco:secure_desktop:3.2.1.126 cpe:/a:cisco:secure_desktop:3.2_base cpe:/a:cisco:secure_desktop:3.3 cpe:/a:cisco:secure_desktop:3.3.0.118 cpe:/a:cisco:secure_desktop:3.3.0.151 cpe:/a:cisco:secure_desktop:3.3_base cpe:/a:cisco:secure_desktop:3.4 cpe:/a:cisco:secure_desktop:3.4.1 cpe:/a:cisco:secure_desktop:3.4.2 cpe:/a:cisco:secure_desktop:3.4.0373 cpe:/a:cisco:secure_desktop:3.4.1108 cpe:/a:cisco:secure_desktop:3.4.2048 cpe:/a:cisco:secure_desktop:3.4_base

CVE-2010-0440

2010-02-03T13:30:00.813-05:00

2018-11-15T13:52:59.370-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2018-11-14T13:02:49.500-05:00

CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=19843 MISC http://www.coresecurity.com/content/cisco-secure-desktop-xss BUGTRAQ 20100201 [CORE-2010-0106] Cisco Secure Desktop XSS/JavaScript Injection BID 37960 VUPEN ADV-2010-0273 Cross-site scripting (XSS) vulnerability in +CSCOT+/translation in Cisco Secure Desktop 3.4.2048, and other versions before 3.5; as used in Cisco ASA appliance before 8.2(1), 8.1(2.7), and 8.0(5); allows remote attackers to inject arbitrary web script or HTML via a crafted POST parameter, which is not properly handled by an eval statement in binary/mainv.js that writes to start.html.

cpe:/a:asterisk:asterisk:1.6.0 cpe:/a:asterisk:asterisk:1.6.0.1 cpe:/a:asterisk:asterisk:1.6.0.2 cpe:/a:asterisk:asterisk:1.6.0.3 cpe:/a:asterisk:asterisk:1.6.0.5 cpe:/a:asterisk:asterisk:1.6.0.6 cpe:/a:asterisk:asterisk:1.6.0.7 cpe:/a:asterisk:asterisk:1.6.0.8 cpe:/a:asterisk:asterisk:1.6.0.9 cpe:/a:asterisk:asterisk:1.6.0.10 cpe:/a:asterisk:asterisk:1.6.0.12 cpe:/a:asterisk:asterisk:1.6.0.13 cpe:/a:asterisk:asterisk:1.6.0.14 cpe:/a:asterisk:asterisk:1.6.0.15 cpe:/a:asterisk:asterisk:1.6.0.16-rc1 cpe:/a:asterisk:asterisk:1.6.0.16-rc2 cpe:/a:asterisk:asterisk:1.6.0.17 cpe:/a:asterisk:asterisk:1.6.0.18 cpe:/a:asterisk:asterisk:1.6.0.18-rc1 cpe:/a:asterisk:asterisk:1.6.0.18-rc2 cpe:/a:asterisk:asterisk:1.6.0.18-rc3 cpe:/a:asterisk:asterisk:1.6.0.19 cpe:/a:asterisk:asterisk:1.6.0.20 cpe:/a:asterisk:asterisk:1.6.0.20-rc1 cpe:/a:asterisk:asterisk:1.6.0.21 cpe:/a:asterisk:asterisk:1.6.0.21-rc1 cpe:/a:asterisk:asterisk:1.6.1.0 cpe:/a:asterisk:asterisk:1.6.1.1 cpe:/a:asterisk:asterisk:1.6.1.2 cpe:/a:asterisk:asterisk:1.6.1.4 cpe:/a:asterisk:asterisk:1.6.1.5 cpe:/a:asterisk:asterisk:1.6.1.6 cpe:/a:asterisk:asterisk:1.6.1.7-rc1 cpe:/a:asterisk:asterisk:1.6.1.7-rc2 cpe:/a:asterisk:asterisk:1.6.1.8 cpe:/a:asterisk:asterisk:1.6.1.9 cpe:/a:asterisk:asterisk:1.6.1.10 cpe:/a:asterisk:asterisk:1.6.1.10-rc1 cpe:/a:asterisk:asterisk:1.6.1.10-rc2 cpe:/a:asterisk:asterisk:1.6.1.10-rc3 cpe:/a:asterisk:asterisk:1.6.1.11 cpe:/a:asterisk:asterisk:1.6.1.12 cpe:/a:asterisk:asterisk:1.6.1.12-rc1 cpe:/a:asterisk:asterisk:1.6.1.13 cpe:/a:asterisk:asterisk:1.6.1.13-rc1 cpe:/a:asterisk:asterisk:1.6.2.1 cpe:/a:asterisk:asterisk:1.6.2.1-rc1 cpe:/a:asterisk:asterisk:1.6.10-rc1 cpe:/a:asterisk:asterisk:1.6.10-rc2 cpe:/a:asterisk:asterisk:c.3.1.0::business cpe:/a:asterisk:asterisk:c.3.1.1::business cpe:/a:asterisk:asterisk:c.3.2.2::business cpe:/a:asterisk:asterisk:c.3.3.3::business

CVE-2010-0441

2010-02-04T15:15:24.030-05:00

2018-10-10T15:52:50.927-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://downloads.asterisk.org/pub/security/AST-2010-001.html CONFIRM http://downloads.asterisk.org/pub/security/AST-2010-001-1.6.0.diff CONFIRM http://downloads.asterisk.org/pub/security/AST-2010-001-1.6.1.diff CONFIRM http://downloads.asterisk.org/pub/security/AST-2010-001-1.6.2.diff FEDORA FEDORA-2010-3724 SECTRACK 1023532 BUGTRAQ 20100202 AST-2010-001: T.38 Remote Crash Vulnerability BID 38047 VUPEN ADV-2010-0289 CONFIRM https://issues.asterisk.org/view.php?id=16517 CONFIRM https://issues.asterisk.org/view.php?id=16634 CONFIRM https://issues.asterisk.org/view.php?id=16724 Asterisk Open Source 1.6.0.x before 1.6.0.22, 1.6.1.x before 1.6.1.14, and 1.6.2.x before 1.6.2.2, and Business Edition C.3 before C.3.3.2, allows remote attackers to cause a denial of service (daemon crash) via an SIP T.38 negotiation with an SDP FaxMaxDatagram field that is (1) missing, (2) modified to contain a negative number, or (3) modified to contain a large number.

cpe:/a:postgresql:postgresql:8.0.23 cpe:/a:postgresql:postgresql:8.1.11 cpe:/a:postgresql:postgresql:8.3.8

CVE-2010-0442

2010-02-02T13:30:00.360-05:00

2017-09-18T21:30:23.923-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov MLIST [pgsql-committers] 20100107 pgsql: Make bit/varbit substring() treat any negative length as meaning MLIST [pgsql-hackers] 20100107 Re: Patch: Allow substring/replace() to get/set bit values MISC http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567058 CONFIRM http://git.postgresql.org/gitweb?p=postgresql.git;a=commit;h=75dea10196c31d98d98c0bafeeb576ae99c09b12 CONFIRM http://git.postgresql.org/gitweb?p=postgresql.git;a=commit;h=b15087cb39ca9e4bde3c8920fcee3741045d2b83 MISC http://intevydis.blogspot.com/2010/01/postgresql-8023-bitsubstr-overflow.html SECTRACK 1023510 UBUNTU USN-933-1 DEBIAN DSA-2051 MANDRIVA MDVSA-2010:103 MLIST [oss-security] 20100127 Re: CVE id request: postgresql bitsubstr overflow REDHAT RHSA-2010:0427 REDHAT RHSA-2010:0428 REDHAT RHSA-2010:0429 BID 37973 VUPEN ADV-2010-1022 VUPEN ADV-2010-1197 VUPEN ADV-2010-1207 VUPEN ADV-2010-1221 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=559194 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=559259 XF postgresql-substring-bo(55902) The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticated users to cause a denial of service (daemon crash) or have unspecified other impact via vectors involving a negative integer in the third argument, as demonstrated by a SELECT statement that contains a call to the substring function for a bit string, related to an "overflow."

cpe:/a:hp:openvms_rms:vms83a_rms-v1000 cpe:/a:hp:openvms_rms:vms83a_update-v1100

CVE-2010-0443

2010-02-04T15:15:24.077-05:00

2017-08-16T21:32:00.100-04:00

6.8

LOCAL

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP SSRT100023 BID 38048 VUPEN ADV-2010-0286 XF openvms-rms-privilege-escalation(56062) Unspecified vulnerability in Record Management Services (RMS) before VMS83A_RMS-V1100 for HP OpenVMS on the Alpha platform allows local users to gain privileges via unknown vectors.

cpe:/a:hp:operations_agent:8.51 cpe:/a:hp:operations_agent:8.52 cpe:/a:hp:operations_agent:8.53

CVE-2010-0444

2010-02-09T14:30:00.500-05:00

2010-02-13T02:22:34.313-05:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP SSRT100024 SECTRACK 1023555 BID 38150 HP Operations Agent 8.51, 8.52, 8.53, and 8.60 on Solaris 10 uses a blank password for the opc_op account, which allows remote attackers to execute arbitrary code via unspecified vectors.

cpe:/a:hp:network_node_manager:8.10 cpe:/a:hp:network_node_manager:8.11 cpe:/a:hp:network_node_manager:8.12 cpe:/a:hp:network_node_manager:8.13

CVE-2010-0445

2010-02-11T12:30:00.847-05:00

2019-10-09T19:00:03.090-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov HP SSRT090076 Unspecified vulnerability in HP Network Node Manager (NNM) 8.10, 8.11, 8.12, and 8.13 allows remote attackers to execute arbitrary commands via unknown vectors.

cpe:/a:hp:dreamscreen:100 cpe:/a:hp:dreamscreen:130

CVE-2010-0446

2010-02-12T14:30:00.673-05:00

2010-02-26T02:11:16.153-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov HP SSRT100012 SECTRACK 1023581 BID 38190 Unspecified vulnerability on the HP DreamScreen 100 and 130 with firmware before 1.6.0.0, when using a web-connected configuration, allows remote attackers to obtain sensitive information via unknown vectors.

cpe:/a:hp:openview_performance_insight:5.4

CVE-2010-0447

2010-03-10T17:30:01.277-05:00

2018-10-10T15:52:52.367-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov HP HPSBMA02489 BUGTRAQ 20100309 ZDI-10-026: Hewlett-Packard OVPI helpmanager Servlet Remote Code Execution Vulnerability BID 38611 VUPEN ADV-2010-0555 MISC http://www.zerodayinitiative.com/advisories/ZDI-10-026 XF hp-performance-unspec-command-exec(56757) The helpmanager servlet in the web server in HP OpenView Performance Insight (OVPI) 5.4 and earlier does not properly authenticate and validate requests, which allows remote attackers to execute arbitrary commands via vectors involving upload of a JSP document.

cpe:/a:hp:soa_registry_foundation:6.63 cpe:/a:hp:soa_registry_foundation:6.64

CVE-2010-0448

2010-03-31T14:00:00.377-04:00

2019-10-09T19:00:03.403-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov HP SSRT090222 BID 39059 SECTRACK 1023765 Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to obtain "unauthorized access to data" via unknown vectors.

cpe:/a:hp:soa_registry_foundation:6.63 cpe:/a:hp:soa_registry_foundation:6.64

CVE-2010-0449

2010-03-31T14:00:00.420-04:00

2019-10-09T19:00:03.607-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov HP HPSBMA02490 BID 39060 SECTRACK 1023765 Cross-site scripting (XSS) vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

cpe:/a:hp:soa_registry_foundation:6.63 cpe:/a:hp:soa_registry_foundation:6.64

CVE-2010-0450

2010-03-31T14:00:00.453-04:00

2019-10-09T19:00:03.717-04:00

8.5

NETWORK

LOW

SINGLE_INSTANCE

COMPLETE

NONE

http://nvd.nist.gov HP HPSBMA02490 BID 39061 SECTRACK 1023765 Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote authenticated users to gain privileges via unknown vectors.

cpe:/o:hp:hp-ux:11.31 cpe:/o:hp:hp-ux:b.11.31

CVE-2010-0451

2010-03-29T18:30:00.297-04:00

2017-09-18T21:30:23.987-04:00

4.0

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov HP SSRT100032 SECTRACK 1023758 BID 38982 VUPEN ADV-2010-0731 XF hpux-oncplus-weak-security(57216) The installation process for NFS/ONCplus B.11.31_08 and earlier on HP HP-UX B.11.31 changes the NFS_SERVER setting in the nfsconf file, which might allow remote attackers to obtain filesystem access via NFS requests.

cpe:/a:hp:project_and_portfolio_management_center:7.1:sp10 cpe:/a:hp:project_and_portfolio_management_center:7.5:sp3

CVE-2010-0452

2010-03-29T14:30:00.610-04:00

2019-10-09T19:00:03.887-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov HP SSRT080064 SECTRACK 1023749 BID 38961 Multiple cross-site scripting (XSS) vulnerabilities in HP Project and Portfolio Management Center (PPMC, formerly Mercury IT Governance) 7.1 through SP10 and 7.5 through SP3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

cpe:/o:sun:opensolaris:snv_69::x86 cpe:/o:sun:opensolaris:snv_70::x86 cpe:/o:sun:opensolaris:snv_71::x86 cpe:/o:sun:opensolaris:snv_72::x86 cpe:/o:sun:opensolaris:snv_73::x86 cpe:/o:sun:opensolaris:snv_74::x86 cpe:/o:sun:opensolaris:snv_75::x86 cpe:/o:sun:opensolaris:snv_76::x86 cpe:/o:sun:opensolaris:snv_77::x86 cpe:/o:sun:opensolaris:snv_78::x86 cpe:/o:sun:opensolaris:snv_79::x86 cpe:/o:sun:opensolaris:snv_80::x86 cpe:/o:sun:opensolaris:snv_81::x86 cpe:/o:sun:opensolaris:snv_82::x86 cpe:/o:sun:opensolaris:snv_83::x86 cpe:/o:sun:opensolaris:snv_84::x86 cpe:/o:sun:opensolaris:snv_85::x86 cpe:/o:sun:opensolaris:snv_86::x86 cpe:/o:sun:opensolaris:snv_87::x86 cpe:/o:sun:opensolaris:snv_88::x86 cpe:/o:sun:opensolaris:snv_89::x86 cpe:/o:sun:opensolaris:snv_90::x86 cpe:/o:sun:opensolaris:snv_91::x86 cpe:/o:sun:opensolaris:snv_92::x86 cpe:/o:sun:opensolaris:snv_93::x86 cpe:/o:sun:opensolaris:snv_94::x86 cpe:/o:sun:opensolaris:snv_95::x86 cpe:/o:sun:opensolaris:snv_96::x86 cpe:/o:sun:opensolaris:snv_97::x86 cpe:/o:sun:opensolaris:snv_98::x86 cpe:/o:sun:opensolaris:snv_99::x86 cpe:/o:sun:opensolaris:snv_100::x86 cpe:/o:sun:opensolaris:snv_101::x86 cpe:/o:sun:opensolaris:snv_102::x86 cpe:/o:sun:opensolaris:snv_103::x86 cpe:/o:sun:opensolaris:snv_104::x86 cpe:/o:sun:opensolaris:snv_105::x86 cpe:/o:sun:opensolaris:snv_106::x86 cpe:/o:sun:opensolaris:snv_107::x86 cpe:/o:sun:opensolaris:snv_108::x86 cpe:/o:sun:opensolaris:snv_109::x86 cpe:/o:sun:opensolaris:snv_110::x86 cpe:/o:sun:opensolaris:snv_111::x86 cpe:/o:sun:opensolaris:snv_112::x86 cpe:/o:sun:opensolaris:snv_113::x86 cpe:/o:sun:opensolaris:snv_114::x86 cpe:/o:sun:opensolaris:snv_115::x86 cpe:/o:sun:opensolaris:snv_116::x86 cpe:/o:sun:opensolaris:snv_117::x86 cpe:/o:sun:opensolaris:snv_118::x86 cpe:/o:sun:opensolaris:snv_119::x86 cpe:/o:sun:opensolaris:snv_120::x86 cpe:/o:sun:opensolaris:snv_121::x86 cpe:/o:sun:opensolaris:snv_122::x86 cpe:/o:sun:opensolaris:snv_123::x86 cpe:/o:sun:opensolaris:snv_124::x86 cpe:/o:sun:opensolaris:snv_125::x86 cpe:/o:sun:opensolaris:snv_126::x86 cpe:/o:sun:opensolaris:snv_127::x86 cpe:/o:sun:opensolaris:snv_128::x86 cpe:/o:sun:opensolaris:snv_129::x86 cpe:/o:sun:opensolaris:snv_130::x86 cpe:/o:sun:opensolaris:snv_131::x86 cpe:/o:sun:opensolaris:snv_132::x86 cpe:/o:sun:opensolaris:snv_133::x86 cpe:/o:sun:solaris:10.0::x86

CVE-2010-0453

2010-02-03T13:30:00.843-05:00

2018-10-10T15:52:53.117-04:00

4.9

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://sunsolve.sun.com/search/document.do?assetkey=1-21-143913-01-1 SUNALERT 275910 SUNALERT 1021799 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html BUGTRAQ 20100131 [TKADV2010-001] Oracle Solaris UCODE_GET_VERSION IOCTL Kernel NULL Pointer Dereference BID 38016 MISC http://www.trapkit.de/advisories/TKADV2010-001.txt CERT TA10-103B VUPEN ADV-2010-0270 XF solaris-microcode-dos(55991) The ucode_ioctl function in intel/io/ucode_drv.c in Sun Solaris 10 and OpenSolaris snv_69 through snv_133, when running on x86 architectures, allows local users to cause a denial of service (panic) via a request with a 0 size value to the UCODE_GET_VERSION IOCTL, which triggers a NULL pointer dereference in the ucode_get_rev function, related to retrieval of the microcode revision.

cpe:/a:fabricadigital:publique%21:2.3

CVE-2010-0454

2010-01-28T15:30:01.590-05:00

2018-10-10T15:52:54.600-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://packetstormsecurity.org/1001-exploits/publique-sql.txt BUGTRAQ 20100125 Publique! CMS SQL Injection Vulnerabilities SQL injection vulnerability in cgi/cgilua.exe/sys/start.htm in Publique! 2.3 allows remote attackers to execute arbitrary SQL commands via the sid parameter.

cpe:/a:punbb:punbb:1.3

CVE-2010-0455

2010-01-28T15:30:01.620-05:00

2017-08-16T21:32:00.337-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://www.packetstormsecurity.com/1001-exploits/punbb13-xss.txt BID 37930 XF punbb-viewtopic-xss(55853) Cross-site scripting (XSS) vulnerability in forum/viewtopic.php in PunBB 1.3 allows remote attackers to inject arbitrary web script or HTML via the pid parameter.

cpe:/a:indianpulses:com_gameserver:1.2

CVE-2010-0456

2010-01-28T15:30:01.650-05:00

2017-08-16T21:32:00.383-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov EXPLOIT-DB 11222 BID 37920 BID 37934 XF gameserver-grp-sql-injection(55829) SQL injection vulnerability in the indianpulse Game Server (com_gameserver) component 1.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the grp parameter in a gameserver action to index.php.

cpe:/a:a3malnet:magic-portal:2.1

CVE-2010-0457

2010-01-28T15:30:01.683-05:00

2017-08-16T21:32:00.447-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://packetstormsecurity.org/1001-exploits/magicportal-sql.txt EXPLOIT-DB 11235 XF magicportal-home-sql-injection(55849) SQL injection vulnerability in home.php in magic-portal 2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

cpe:/a:netartmedia:blog_system:1.5

CVE-2010-0458

2010-01-28T15:30:01.713-05:00

2017-08-16T21:32:00.507-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://packetstormsecurity.org/0512-exploits/blog12SQL.txt EXPLOIT-DB 11216 BID 37911 XF blogsystem-index-sql-injection(55818) XF blogsystem-blog-sql-injection(55862) Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to index.php and the (2) note parameter to blog.php.

cpe:/a:yoflash:com_mochigames:0.51

CVE-2010-0459

2010-01-28T15:30:01.747-05:00

2017-08-16T21:32:00.553-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://packetstormsecurity.org/1001-exploits/joomlamochigames-sql.txt EXPLOIT-DB 11243 BID 37931 XF mochigames-index-sql-injection(55841) SQL injection vulnerability in the Mochigames (com_mochigames) component 0.51 and possibly other versions for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.

cpe:/a:kayako:esupport:3.60.04 cpe:/a:kayako:supportsuite:3.0 cpe:/a:kayako:supportsuite:3.00.26 cpe:/a:kayako:supportsuite:3.00.32 cpe:/a:kayako:supportsuite:3.10.00 cpe:/a:kayako:supportsuite:3.10.02 cpe:/a:kayako:supportsuite:3.11.00 cpe:/a:kayako:supportsuite:3.11.01 cpe:/a:kayako:supportsuite:3.20.02 cpe:/a:kayako:supportsuite:3.30:rc2 cpe:/a:kayako:supportsuite:3.30:rc3 cpe:/a:kayako:supportsuite:3.50.06

CVE-2010-0460

2010-01-28T15:30:01.777-05:00

2018-10-10T15:52:54.947-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://packetstormsecurity.org/1001-advisories/kayako-xss.txt BUGTRAQ 20100121 Kayako SupportSuite Multiple Persistent Cross Site Scripting (Current Versions) BID 37947 XF supportsuite-contents-xss(55859) Multiple cross-site scripting (XSS) vulnerabilities in staff/index.php in Kayako SupportSuite 3.60.04 and earlier allow remote authenticated users to inject arbitrary web script or HTML via the (1) subject parameter and (2) contents parameter (aka body) in an insertquestion action. NOTE: some of these details are obtained from third party information.

cpe:/a:joomla:com_casino:1.0

CVE-2010-0461

2010-01-28T15:30:01.807-05:00

2017-08-16T21:32:00.663-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://packetstormsecurity.org/1001-exploits/joomlacasino1-sql.txt EXPLOIT-DB 11237 BID 37938 XF casino-indexphp-sql-injection(55846) SQL injection vulnerability in the casino (com_casino) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a (1) category or (2) player action to index.php.

cpe:/a:ibm:db2:9.1 cpe:/a:ibm:db2:9.1:fp1 cpe:/a:ibm:db2:9.1:fp2 cpe:/a:ibm:db2:9.1:fp2a cpe:/a:ibm:db2:9.1:fp3 cpe:/a:ibm:db2:9.1:fp3a cpe:/a:ibm:db2:9.1:fp4 cpe:/a:ibm:db2:9.1:fp4a cpe:/a:ibm:db2:9.1:fp5 cpe:/a:ibm:db2:9.1:fp6 cpe:/a:ibm:db2:9.1:fp6a cpe:/a:ibm:db2:9.1:fp7 cpe:/a:ibm:db2:9.1:fp7a cpe:/a:ibm:db2:9.1:fp8 cpe:/a:ibm:db2:9.5 cpe:/a:ibm:db2:9.5:fp1 cpe:/a:ibm:db2:9.5:fp2 cpe:/a:ibm:db2:9.5:fp2a cpe:/a:ibm:db2:9.5:fp3 cpe:/a:ibm:db2:9.5:fp3a cpe:/a:ibm:db2:9.5:fp3b cpe:/a:ibm:db2:9.5:fp4 cpe:/a:ibm:db2:9.5:fp4a cpe:/a:ibm:db2:9.5:fp5 cpe:/a:ibm:db2:9.7 cpe:/a:ibm:db2:9.7:fp1

CVE-2010-0462

2010-01-28T15:30:01.840-05:00

2017-09-18T21:30:24.127-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov CONFIRM ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT MISC http://intevydis.blogspot.com/2010/01/ibm-db2-97-heap-overflow.html SECTRACK 1023509 BID 37976 AIXAPAR IC65922 AIXAPAR IC65933 AIXAPAR IC65935 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21426108 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21432298 XF db2-sysibm-bo(55899) Heap-based buffer overflow in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows remote authenticated users to have an unspecified impact via a SELECT statement that has a long column name generated with the REPEAT function.

cpe:/a:horde:imp:2.0 cpe:/a:horde:imp:2.2 cpe:/a:horde:imp:2.2.1 cpe:/a:horde:imp:2.2.2 cpe:/a:horde:imp:2.2.3 cpe:/a:horde:imp:2.2.4 cpe:/a:horde:imp:2.2.5 cpe:/a:horde:imp:2.2.6 cpe:/a:horde:imp:2.2.7 cpe:/a:horde:imp:2.2.8 cpe:/a:horde:imp:2.3 cpe:/a:horde:imp:3.0 cpe:/a:horde:imp:3.1 cpe:/a:horde:imp:3.1.2 cpe:/a:horde:imp:3.2 cpe:/a:horde:imp:3.2.1 cpe:/a:horde:imp:3.2.2 cpe:/a:horde:imp:3.2.3 cpe:/a:horde:imp:3.2.4 cpe:/a:horde:imp:3.2.5 cpe:/a:horde:imp:3.2.6 cpe:/a:horde:imp:3.2.7 cpe:/a:horde:imp:3.2.7:rc1 cpe:/a:horde:imp:4.0 cpe:/a:horde:imp:4.0.1 cpe:/a:horde:imp:4.0.2 cpe:/a:horde:imp:4.0.3 cpe:/a:horde:imp:4.0.4 cpe:/a:horde:imp:4.1.3 cpe:/a:horde:imp:4.1.5 cpe:/a:horde:imp:4.1.6 cpe:/a:horde:imp:4.2 cpe:/a:horde:imp:4.2.1 cpe:/a:horde:imp:4.2.2 cpe:/a:horde:imp:4.3 cpe:/a:horde:imp:4.3.1 cpe:/a:horde:imp:4.3.2 cpe:/a:horde:imp:4.3.3 cpe:/a:horde:imp:4.3.4 cpe:/a:horde:imp:4.3.5 cpe:/a:horde:imp:4.3.6

CVE-2010-0463

2010-01-29T13:30:01.103-05:00

2017-08-16T21:32:00.790-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://bugs.horde.org/ticket/8836 XF horde-dns-info-disclosure(56052) MISC https://secure.grepular.com/DNS_Prefetch_Exposure_on_Thunderbird_and_Webmail Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests.

cpe:/a:roundcube:webmail:0.1 cpe:/a:roundcube:webmail:0.1:20050811 cpe:/a:roundcube:webmail:0.1:20050820 cpe:/a:roundcube:webmail:0.1:20051007 cpe:/a:roundcube:webmail:0.1:20051021 cpe:/a:roundcube:webmail:0.1:alpha cpe:/a:roundcube:webmail:0.1:beta cpe:/a:roundcube:webmail:0.1:beta2 cpe:/a:roundcube:webmail:0.1:rc1 cpe:/a:roundcube:webmail:0.1:rc2 cpe:/a:roundcube:webmail:0.1:stable cpe:/a:roundcube:webmail:0.1.1 cpe:/a:roundcube:webmail:0.2 cpe:/a:roundcube:webmail:0.2:alpha cpe:/a:roundcube:webmail:0.2:beta cpe:/a:roundcube:webmail:0.2:stable cpe:/a:roundcube:webmail:0.2.1 cpe:/a:roundcube:webmail:0.2.2 cpe:/a:roundcube:webmail:0.3 cpe:/a:roundcube:webmail:0.3:beta cpe:/a:roundcube:webmail:0.3:rc1 cpe:/a:roundcube:webmail:0.3:stable cpe:/a:roundcube:webmail:0.3.1

CVE-2010-0464

2010-01-29T13:30:01.137-05:00

2015-08-24T12:43:30.897-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-08-24T10:51:23.160-04:00

CONFIRM http://trac.roundcube.net/ticket/1486449 MANDRIVA MDVSA-2010:048 MISC https://secure.grepular.com/DNS_Prefetch_Exposure_on_Thunderbird_and_Webmail Roundcube 0.3.1 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests.

cpe:/a:sugarcrm:sugarcrm:5.2.0g cpe:/a:sugarcrm:sugarcrm:5.2a cpe:/a:sugarcrm:sugarcrm:5.2c cpe:/a:sugarcrm:sugarcrm:5.2d cpe:/a:sugarcrm:sugarcrm:5.2e cpe:/a:sugarcrm:sugarcrm:5.2f cpe:/a:sugarcrm:sugarcrm:5.2g cpe:/a:sugarcrm:sugarcrm:5.2h cpe:/a:sugarcrm:sugarcrm:5.5:beta1 cpe:/a:sugarcrm:sugarcrm:5.5:beta2 cpe:/a:sugarcrm:sugarcrm:5.5.0

CVE-2010-0465

2010-03-19T15:30:00.453-04:00

2018-10-10T15:52:55.523-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20100316 SugarCRM Stored XSS vulnerability BID 38772 CONFIRM http://www.sugarcrm.com/crm/support/bugs.html?task=view&caseID=db4489b7-b5a8-4a6d-555b-4b9ffa7b4ffa Cross-site scripting (XSS) vulnerability in the online Documents functionality in SugarCRM 5.2.x before 5.2.0l and 5.5.x before 5.5.0a allows remote authenticated users to inject arbitrary web script or HTML via the Document Name field.

cpe:/a:chillcreations:com_ccnewsletter:1.0.5

CVE-2010-0467

2010-02-02T12:30:00.407-05:00

2019-09-27T12:53:31.993-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2019-09-27T10:54:22.963-04:00

CONFIRM http://www.chillcreations.com/en/blog/ccnewsletter-joomla-newsletter/ccnewsletter-106-security-release.html EXPLOIT-DB 11277 EXPLOIT-DB 11282 BID 37987 XF ccnewsletter-index-dir-traversal(55953) Directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter in a ccnewsletter action to index.php.

cpe:/a:paperthin:commonspot_content_server:-

CVE-2010-0468

2010-02-02T12:30:00.437-05:00

2018-10-10T15:52:55.897-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20100128 PR09-19: Cross-Site Scripting (XSS) on CommonSpot server BUGTRAQ 20100128 PR09-19: Cross-Site Scripting (XSS) on CommonSpot server BID 37986 XF commonspot-longproc-xss(55955) Cross-site scripting (XSS) vulnerability in utilities/longproc.cfm in PaperThin CommonSpot Content Server allows remote attackers to inject arbitrary web script or HTML via the url parameter.

cpe:/h:files2links:f2l_3000_appliance:4.0.0

CVE-2010-0469

2010-02-02T12:30:00.483-05:00

2017-08-16T21:32:00.960-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FULLDISC 20100125 DDIVRT-2009-27 F2L-3000 files2links SQL Injection Vulnerability MISC http://packetstormsecurity.org/1001-advisories/DDIVRT-2009-27.txt XF f2l3000-login-sql-injection(55950) SQL injection vulnerability in Files2Links F2L 3000 appliance 4.0.0, and possibly other versions and models, allows remote attackers to execute arbitrary SQL commands via unspecified parameters to the login page.

cpe:/h:comtrend:ct-507it_adsl_router

CVE-2010-0470

2010-02-02T12:30:00.517-05:00

2010-02-03T00:00:00.000-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-02-03T12:14:00.000-05:00

MISC http://packetstormsecurity.org/1001-exploits/comtrend-xss.txt BID 38004 Cross-site scripting (XSS) vulnerability in scvrtsrv.cmd in Comtrend CT-507IT ADSL Router allows remote attackers to inject arbitrary web script or HTML via the srvName parameter.

cpe:/a:enanocms:enanocms:0.8.1 cpe:/a:enanocms:enanocms:0.8.2 cpe:/a:enanocms:enanocms:0.8.3 cpe:/a:enanocms:enanocms:0.8.4 cpe:/a:enanocms:enanocms:0.9.1 cpe:/a:enanocms:enanocms:0.9.2 cpe:/a:enanocms:enanocms:0.9.3 cpe:/a:enanocms:enanocms:1.0 cpe:/a:enanocms:enanocms:1.0.1 cpe:/a:enanocms:enanocms:1.0.2 cpe:/a:enanocms:enanocms:1.0.2b1 cpe:/a:enanocms:enanocms:1.0.3 cpe:/a:enanocms:enanocms:1.0.4 cpe:/a:enanocms:enanocms:1.0.5 cpe:/a:enanocms:enanocms:1.0.6

CVE-2010-0471

2010-02-02T12:30:00.547-05:00

2010-06-23T00:00:00.000-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-02-03T13:01:00.000-05:00

CONFIRM http://enanocms.org/Release_notes/1.0.6pl1 SQL injection vulnerability in the comment submission interface (includes/comment.php) in Enano CMS before 1.0.6pl1 allows remote attackers to execute arbitrary SQL commands via unspecified parameters.

cpe:/a:ibm:db2:9.7.0.1::linux

CVE-2010-0472

2010-02-02T13:30:00.407-05:00

2017-09-18T21:30:24.173-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://intevydis.blogspot.com/2010/01/ibm-db2-97-kuddb2-dos.html BID 38018 AIXAPAR IC68762 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21432298 kuddb2 in Tivoli Monitoring for DB2, as distributed in IBM DB2 9.7 FP1 on Linux, allows remote attackers to cause a denial of service (daemon crash) via a certain byte sequence.

cpe:/h:palo_alto_networks:firewall:3.0.8 cpe:/h:palo_alto_networks:firewall:3.1.0

CVE-2010-0475

2010-05-14T15:30:01.250-04:00

2017-08-16T21:32:01.023-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20100512 Palo Alto Network Vulnerability - Cross-Site Scripting (XSS) MISC http://www.jeromiejackson.com/index.php?view=article&id=83:palo-alto-cross-site-scripting-vulnerability&tmpl=component&print=1&layout=default&page= XF paloalto-edituser-xss(58624) Cross-site scripting (XSS) vulnerability in esp/editUser.esp in the Palo Alto Networks firewall 3.0.x before 3.0.9 and 3.1.x before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the role parameter.

cpe:/o:microsoft:windows_2003_server::sp2 cpe:/o:microsoft:windows_2003_server::sp2:itanium cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_7:- cpe:/o:microsoft:windows_7:-:beta cpe:/o:microsoft:windows_server_2003::sp2 cpe:/o:microsoft:windows_server_2008:::itanium cpe:/o:microsoft:windows_server_2008:::x64 cpe:/o:microsoft:windows_server_2008::r2:itanium cpe:/o:microsoft:windows_server_2008::r2:x64 cpe:/o:microsoft:windows_server_2008:-:sp2 cpe:/o:microsoft:windows_server_2008:-:sp2:itanium cpe:/o:microsoft:windows_server_2008:-:sp2:x64 cpe:/o:microsoft:windows_server_2008:-:sp2:x86 cpe:/o:microsoft:windows_vista cpe:/o:microsoft:windows_vista:::x64 cpe:/o:microsoft:windows_vista::sp1:x64 cpe:/o:microsoft:windows_vista::sp2:x64 cpe:/o:microsoft:windows_vista:-:sp1 cpe:/o:microsoft:windows_vista:-:sp2

CVE-2010-0476

2010-04-14T12:00:01.680-04:00

2019-02-26T09:04:00.993-05:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov BID 39336 CERT TA10-103A MS MS10-020 The SMB client in Microsoft Windows Server 2003 SP2, Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and reboot) via a crafted SMB transaction response that uses (1) SMBv1 or (2) SMBv2, aka "SMB Client Response Parsing Vulnerability."

cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_7:- cpe:/o:microsoft:windows_server_2008::r2:itanium cpe:/o:microsoft:windows_server_2008::r2:x64

CVE-2010-0477

2010-04-14T12:00:01.710-04:00

2018-10-30T12:27:21.030-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CERT TA10-103A MS MS10-020 The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly handle (1) SMBv1 and (2) SMBv2 response packets, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted packet that causes the client to read the entirety of the response, and then improperly interact with the Winsock Kernel (WSK), aka "SMB Client Message Size Vulnerability."

cpe:/o:microsoft:windows_2000::sp4

CVE-2010-0478

2010-04-14T12:00:01.757-04:00

2019-04-30T10:27:13.913-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CERT TA10-103A MS MS10-025 Stack-based buffer overflow in nsum.exe in the Windows Media Unicast Service in Media Services for Microsoft Windows 2000 Server SP4 allows remote attackers to execute arbitrary code via crafted packets associated with transport information, aka "Media Services Stack-based Buffer Overflow Vulnerability."

cpe:/a:microsoft:publisher:2002:sp3 cpe:/a:microsoft:publisher:2003:sp3 cpe:/a:microsoft:publisher:2007:sp1 cpe:/a:microsoft:publisher:2007:sp2

CVE-2010-0479

2010-04-14T12:00:01.790-04:00

2018-10-12T17:56:51.307-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CERT TA10-103A MS MS10-023 Buffer overflow in Microsoft Office Publisher 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability."

CVE-2010-0480

2010-04-14T12:00:01.803-04:00

2019-02-26T09:04:00.993-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SREASON 8336 CERT TA10-103A MS MS10-026 Multiple stack-based buffer overflows in the MPEG Layer-3 audio codecs in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to execute arbitrary code via a crafted AVI file, aka "MPEG Layer-3 Audio Decoder Stack Overflow Vulnerability."

cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_7:- cpe:/o:microsoft:windows_server_2008:::itanium cpe:/o:microsoft:windows_server_2008:::x64 cpe:/o:microsoft:windows_server_2008::r2:itanium cpe:/o:microsoft:windows_server_2008::r2:x64 cpe:/o:microsoft:windows_server_2008:-:sp2 cpe:/o:microsoft:windows_server_2008:-:sp2:itanium cpe:/o:microsoft:windows_server_2008:-:sp2:x64 cpe:/o:microsoft:windows_server_2008:-:sp2:x86 cpe:/o:microsoft:windows_vista cpe:/o:microsoft:windows_vista:::x64 cpe:/o:microsoft:windows_vista::sp1:x64 cpe:/o:microsoft:windows_vista::sp2:x64 cpe:/o:microsoft:windows_vista:-:sp1 cpe:/o:microsoft:windows_vista:-:sp2

CVE-2010-0481

2010-04-14T12:00:01.837-04:00

2018-10-30T12:27:21.030-04:00

4.7

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1023850 CERT TA10-103A MS MS10-021 The kernel in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly translate a registry key's virtual path to its real path, which allows local users to cause a denial of service (reboot) via a crafted application, aka "Windows Virtual Path Parsing Vulnerability."

cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_7:- cpe:/o:microsoft:windows_server_2008::r2:itanium cpe:/o:microsoft:windows_server_2008::r2:x64

CVE-2010-0482

2010-04-14T12:00:01.867-04:00

2018-10-30T12:27:21.030-04:00

4.7

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1023850 CERT TA10-103A MS MS10-021 The kernel in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate relocation sections of image files, which allows local users to cause a denial of service (reboot) via a crafted file, aka "Windows Kernel Malformed Image Vulnerability."

CVE-2010-0483

2010-03-03T14:30:00.587-05:00

2019-02-26T09:04:00.993-05:00

7.6

NETWORK

HIGH

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://blogs.technet.com/msrc/archive/2010/02/28/investigating-a-new-win32hlp-and-internet-explorer-issue.aspx CONFIRM http://blogs.technet.com/msrc/archive/2010/03/01/security-advisory-981169-released.aspx CONFIRM http://blogs.technet.com/srd/archive/2010/03/01/help-keypress-vulnerability-in-vbscript-enabling-remote-code-execution.aspx MISC http://isec.pl/vulnerabilities/isec-0027-msgbox-helpfile-ie.txt MISC http://isec.pl/vulnerabilities10.html SECTRACK 1023668 MISC http://www.computerworld.com/s/article/9163298/New_zero_day_involves_IE_puts_Windows_XP_users_at_risk CERT-VN VU#612021 CONFIRM http://www.microsoft.com/technet/security/advisory/981169.mspx BID 38463 MISC http://www.theregister.co.uk/2010/03/01/ie_code_execution_bug/ CERT TA10-103A VUPEN ADV-2010-0485 MS MS10-022 XF ms-win-msgbox-code-execution(56558) MISC https://www.metasploit.com/svn/framework3/trunk/modules/exploits/windows/browser/ie_winhlp32.rb vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute arbitrary code by referencing a (1) local pathname, (2) UNC share pathname, or (3) WebDAV server with a crafted .hlp file in the fourth argument (aka helpfile argument) to the MsgBox function, leading to code execution involving winhlp32.exe when the F1 key is pressed, aka "VBScript Help Keypress Vulnerability."

cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server::sp2 cpe:/o:microsoft:windows_2003_server::sp2:itanium cpe:/o:microsoft:windows_2003_server::sp2:x64 cpe:/o:microsoft:windows_server_2008:::itanium cpe:/o:microsoft:windows_server_2008:::x32 cpe:/o:microsoft:windows_server_2008:::x64 cpe:/o:microsoft:windows_server_2008::sp2:x32 cpe:/o:microsoft:windows_server_2008::sp2:x64 cpe:/o:microsoft:windows_server_2008:-:sp2:itanium cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_vista::sp1:x64 cpe:/o:microsoft:windows_vista::sp2 cpe:/o:microsoft:windows_vista::sp2:x64 cpe:/o:microsoft:windows_vista:-:sp1 cpe:/o:microsoft:windows_vista:-:sp2 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_xp:-:sp2:x64

CVE-2010-0484

2010-06-08T18:30:01.350-04:00

2018-10-12T17:56:56.790-04:00

6.8

LOCAL

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://www.opera.com/support/kb/view/954/ BUGTRAQ 20100608 VUPEN Security Research - Microsoft Windows Kernel "GetDCEx()" Memory Corruption Vulnerability (CVE-2010-0484) CERT TA10-159B MS MS10-032 The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 "do not properly validate changes in certain kernel objects," which allows local users to execute arbitrary code via vectors related to Device Contexts (DC) and the GetDCEx function, aka "Win32k Improper Data Validation Vulnerability."

cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server::sp2 cpe:/o:microsoft:windows_2003_server::sp2:itanium cpe:/o:microsoft:windows_2003_server::sp2:x64 cpe:/o:microsoft:windows_7:- cpe:/o:microsoft:windows_server_2008:::itanium cpe:/o:microsoft:windows_server_2008:::x32 cpe:/o:microsoft:windows_server_2008:::x64 cpe:/o:microsoft:windows_server_2008::sp2:x32 cpe:/o:microsoft:windows_server_2008::sp2:x64 cpe:/o:microsoft:windows_server_2008:-:sp2:itanium cpe:/o:microsoft:windows_server_2008:r2::itanium cpe:/o:microsoft:windows_server_2008:r2::x64 cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_vista::sp1:x64 cpe:/o:microsoft:windows_vista::sp2 cpe:/o:microsoft:windows_vista::sp2:x64 cpe:/o:microsoft:windows_vista:-:sp1 cpe:/o:microsoft:windows_vista:-:sp2 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_xp:-:sp2:x64

CVE-2010-0485

2010-06-08T18:30:01.380-04:00

2018-10-30T12:27:21.030-04:00

6.8

LOCAL

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://www.opera.com/support/kb/view/954/ CERT TA10-159B MS MS10-032 The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 Gold and SP2, Windows 7, and Server 2008 R2 "do not properly validate all callback parameters when creating a new window," which allows local users to execute arbitrary code, aka "Win32k Window Creation Vulnerability."

CVE-2010-0486

2010-04-14T12:00:01.897-04:00

2019-02-26T09:04:00.993-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CERT TA10-103A MS MS10-019 The WinVerifyTrust function in Authenticode Signature Verification 5.1, 6.0, and 6.1 in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly use unspecified fields in a file digest, which allows user-assisted remote attackers to execute arbitrary code via a modified (1) Portable Executable (PE) or (2) cabinet (aka .CAB) file that incorrectly appears to have a valid signature, aka "WinVerifyTrust Signature Validation Vulnerability."

CVE-2010-0487

2010-04-14T12:00:01.913-04:00

2019-02-26T09:04:00.993-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CERT TA10-103A MS MS10-019 The Authenticode Signature verification functionality in cabview.dll in Cabinet File Viewer Shell Extension 5.1, 6.0, and 6.1 in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly use unspecified fields in a file digest, which allows remote attackers to execute arbitrary code via a modified cabinet (aka .CAB) file that incorrectly appears to have a valid signature, aka "Cabview Corruption Validation Vulnerability."

cpe:/a:microsoft:ie:5.01:sp4 cpe:/a:microsoft:ie:6 cpe:/a:microsoft:ie:6:sp1 cpe:/a:microsoft:ie:7 cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server::sp2 cpe:/o:microsoft:windows_2003_server::sp2:itanium cpe:/o:microsoft:windows_server_2003::sp2 cpe:/o:microsoft:windows_server_2008:::itanium cpe:/o:microsoft:windows_server_2008:::x32 cpe:/o:microsoft:windows_server_2008:::x64 cpe:/o:microsoft:windows_server_2008::sp2:x32 cpe:/o:microsoft:windows_server_2008:-:sp2:itanium cpe:/o:microsoft:windows_server_2008:-:sp2:x64 cpe:/o:microsoft:windows_vista cpe:/o:microsoft:windows_vista:::x64 cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_vista::sp1:x64 cpe:/o:microsoft:windows_vista::sp2 cpe:/o:microsoft:windows_vista::sp2:x64 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_xp:-:sp2:x64

CVE-2010-0488

2010-03-31T15:30:00.343-04:00

2019-02-26T09:04:00.993-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov JVN JVN#49467403 JVNDB JVNDB-2010-000011 SECTRACK 1023773 BID 39028 CERT TA10-068A CERT TA10-089A VUPEN ADV-2010-0744 MS MS10-018 Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 does not properly handle unspecified "encoding strings," which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site, aka "Post Encoding Information Disclosure Vulnerability."

CVE-2010-0489

2010-03-31T15:30:00.390-04:00

2019-02-26T09:04:00.993-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1023773 BID 39026 CERT TA10-068A CERT TA10-089A VUPEN ADV-2010-0744 MS MS10-018 Race condition in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corruption, aka "Race Condition Memory Corruption Vulnerability."

cpe:/a:microsoft:ie:6 cpe:/a:microsoft:ie:7 cpe:/a:microsoft:ie:8 cpe:/a:microsoft:ie:8.0.6001 cpe:/o:microsoft:windows_2003_server::sp2 cpe:/o:microsoft:windows_2003_server::sp2:itanium cpe:/o:microsoft:windows_7:- cpe:/o:microsoft:windows_server_2003::sp2 cpe:/o:microsoft:windows_server_2008:::itanium cpe:/o:microsoft:windows_server_2008:::x32 cpe:/o:microsoft:windows_server_2008:::x64 cpe:/o:microsoft:windows_server_2008::r2:itanium cpe:/o:microsoft:windows_server_2008::r2:x64 cpe:/o:microsoft:windows_server_2008::sp2:x32 cpe:/o:microsoft:windows_server_2008::sp2:x64 cpe:/o:microsoft:windows_server_2008:-:sp2:itanium cpe:/o:microsoft:windows_server_2008:-:sp2:x64 cpe:/o:microsoft:windows_vista cpe:/o:microsoft:windows_vista:::x64 cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_vista::sp1:x64 cpe:/o:microsoft:windows_vista::sp2 cpe:/o:microsoft:windows_vista::sp2:x64 cpe:/o:microsoft:windows_vista:-:sp1 cpe:/o:microsoft:windows_vista:-:sp2 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_xp:-:sp2:x64

CVE-2010-0490

2010-03-31T15:30:00.420-04:00

2019-02-26T09:04:00.993-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1023773 BID 39031 CERT TA10-068A CERT TA10-089A VUPEN ADV-2010-0744 MS MS10-018 Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability."

cpe:/a:microsoft:ie:5.01:sp4 cpe:/a:microsoft:ie:6 cpe:/a:microsoft:ie:6:sp1 cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server::sp2:itanium cpe:/o:microsoft:windows_server_2003::sp2 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_xp:-:sp2:x64

CVE-2010-0491

2010-03-31T15:30:00.467-04:00

2019-02-26T09:04:00.993-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov IDEFENSE 20100330 Microsoft Internet Explorer 'onreadystatechange' Use After Free Vulnerability SECTRACK 1023773 BID 39027 CERT TA10-068A CERT TA10-089A VUPEN ADV-2010-0744 MS MS10-018 Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 6 SP1 allows remote attackers to execute arbitrary code by changing unspecified properties of an HTML object that has an onreadystatechange event handler, aka "HTML Object Memory Corruption Vulnerability."

cpe:/a:microsoft:ie:8 cpe:/a:microsoft:ie:8.0.6001 cpe:/o:microsoft:windows_2003_server::sp2 cpe:/o:microsoft:windows_2003_server::sp2:itanium cpe:/o:microsoft:windows_7:- cpe:/o:microsoft:windows_server_2003::sp2 cpe:/o:microsoft:windows_server_2008:::x64 cpe:/o:microsoft:windows_server_2008::r2:itanium cpe:/o:microsoft:windows_server_2008::r2:x64 cpe:/o:microsoft:windows_server_2008::sp2:x64 cpe:/o:microsoft:windows_vista cpe:/o:microsoft:windows_vista:::x64 cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_vista::sp1:x64 cpe:/o:microsoft:windows_vista::sp2 cpe:/o:microsoft:windows_vista::sp2:x64 cpe:/o:microsoft:windows_vista:-:sp1 cpe:/o:microsoft:windows_vista:-:sp2 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_xp:-:sp2:x64

CVE-2010-0492

2010-03-31T15:30:00.517-04:00

2019-02-26T09:04:00.993-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1023773 BUGTRAQ 20100402 ZDI-10-033: Microsoft Internet Explorer TIME2 Behavior Remote Code Execution Vulnerability BID 39030 CERT TA10-068A CERT TA10-089A VUPEN ADV-2010-0744 MISC http://www.zerodayinitiative.com/advisories/ZDI-10-033 MS MS10-018 Use-after-free vulnerability in mstime.dll in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via vectors related to the TIME2 behavior, the CTimeAction object, and destruction of markup, leading to memory corruption, aka "HTML Object Memory Corruption Vulnerability."

CVE-2010-0493

2017-05-11T10:29:10.400-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2010. Notes: none.

cpe:/a:microsoft:ie:6 cpe:/a:microsoft:ie:6:sp1 cpe:/a:microsoft:ie:7 cpe:/a:microsoft:ie:8 cpe:/a:microsoft:ie:8.0.6001 cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server::sp2 cpe:/o:microsoft:windows_2003_server::sp2:itanium cpe:/o:microsoft:windows_7:- cpe:/o:microsoft:windows_server_2003::sp2 cpe:/o:microsoft:windows_server_2008:::itanium cpe:/o:microsoft:windows_server_2008:::x32 cpe:/o:microsoft:windows_server_2008:::x64 cpe:/o:microsoft:windows_server_2008::r2:itanium cpe:/o:microsoft:windows_server_2008::r2:x64 cpe:/o:microsoft:windows_server_2008::sp2:x32 cpe:/o:microsoft:windows_server_2008::sp2:x64 cpe:/o:microsoft:windows_server_2008:-:sp2:itanium cpe:/o:microsoft:windows_server_2008:-:sp2:x64 cpe:/o:microsoft:windows_vista cpe:/o:microsoft:windows_vista:::x64 cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_vista::sp1:x64 cpe:/o:microsoft:windows_vista::sp2 cpe:/o:microsoft:windows_vista::sp2:x64 cpe:/o:microsoft:windows_vista:-:sp1 cpe:/o:microsoft:windows_vista:-:sp2 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_xp::sp3 cpe:/o:microsoft:windows_xp:-:sp2:x64

CVE-2010-0494

2010-03-31T15:30:00.547-04:00

2019-02-26T09:04:00.993-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1023773 BID 39047 CERT TA10-068A CERT TA10-089A VUPEN ADV-2010-0744 MS MS10-018 Cross-domain vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted HTML document in a situation where the client user drags one browser window across another browser window, aka "HTML Element Cross-Domain Vulnerability."

CVE-2010-0495

2017-05-11T10:29:10.433-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2010. Notes: none.

cpe:/a:freebit:serversman:3.1.5

CVE-2010-0496

2010-02-03T14:30:00.547-05:00

2017-08-16T21:32:01.180-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FULLDISC 20100127 Apple Iphone/Ipod - Serversman 3.1.5 HTTP Remote DoS exploit XF serversman-iphone-ipod-dos(55949) FreeBit ServersMan 3.1.5 on Apple iPhone OS 3.1.2, and iPhone OS for iPod touch, allows remote attackers to cause a denial of service (daemon crash) via a HEAD request for the / URI.

CVE-2010-0497

2010-03-30T14:30:00.517-04:00

2010-03-31T11:30:43.343-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2010-03-31T11:29:00.000-04:00

APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 Disk Images in Apple Mac OS X before 10.6.3 does not provide the expected warning for an unsafe file type in an internet enabled disk image, which makes it easier for user-assisted remote attackers to execute arbitrary code via a package file type.

CVE-2010-0498

2010-03-30T14:30:00.547-04:00

2010-03-31T11:37:58.390-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2010-03-31T11:36:00.000-04:00

APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 Directory Services in Apple Mac OS X before 10.6.3 does not properly perform authorization during processing of record names, which allows local users to gain privileges via unspecified vectors.

CVE-2010-0500

2010-03-30T14:30:00.577-04:00

2010-03-31T00:00:00.000-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2010-03-31T12:16:00.000-04:00

APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 Event Monitor in Apple Mac OS X before 10.6.3 does not properly validate hostnames of SSH clients, which allows remote attackers to cause a denial of service (arbitrary client blacklisting) via a crafted DNS PTR record, related to a "plist injection issue."

cpe:/o:apple:mac_os_x_server:10.5 cpe:/o:apple:mac_os_x_server:10.5.0 cpe:/o:apple:mac_os_x_server:10.5.1 cpe:/o:apple:mac_os_x_server:10.5.2 cpe:/o:apple:mac_os_x_server:10.5.3 cpe:/o:apple:mac_os_x_server:10.5.4 cpe:/o:apple:mac_os_x_server:10.5.5 cpe:/o:apple:mac_os_x_server:10.5.6 cpe:/o:apple:mac_os_x_server:10.5.7 cpe:/o:apple:mac_os_x_server:10.5.8 cpe:/o:apple:mac_os_x_server:10.6.0 cpe:/o:apple:mac_os_x_server:10.6.1 cpe:/o:apple:mac_os_x_server:10.6.2

CVE-2010-0501

2010-03-30T14:30:00.610-04:00

2010-03-31T00:00:00.000-04:00

6.8

NETWORK

LOW

SINGLE_INSTANCE

COMPLETE

NONE

http://nvd.nist.gov

2010-03-31T12:31:00.000-04:00

APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 Directory traversal vulnerability in FTP Server in Apple Mac OS X Server before 10.6.3 allows remote authenticated users to read arbitrary files via crafted filenames.

CVE-2010-0502

2010-03-30T14:30:00.640-04:00

2010-03-31T00:00:00.000-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-03-31T12:45:00.000-04:00

APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 iChat Server in Apple Mac OS X Server before 10.6.3, when group chat is used, does not perform logging for all types of messages, which might allow remote attackers to avoid message auditing via an unspecified selection of message type.

CVE-2010-0503

2010-03-30T14:30:00.670-04:00

2010-03-31T13:07:24.157-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

2010-03-31T13:06:00.000-04:00

APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 Use-after-free vulnerability in iChat Server in Apple Mac OS X Server 10.5.8 allows remote authenticated users to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.

CVE-2010-0504

2010-03-30T14:30:00.703-04:00

2010-03-31T13:14:20.313-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-03-31T13:13:00.000-04:00

APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 Multiple stack-based buffer overflows in iChat Server in Apple Mac OS X Server before 10.6.3 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.

CVE-2010-0505

2010-03-30T14:30:00.733-04:00

2018-10-10T15:52:57.883-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 BUGTRAQ 20100405 ZDI-10-058: Apple Mac OS X ImageIO Framework JPEG2000 Remote Code Execution Vulnerability MISC http://www.zerodayinitiative.com/advisories/ZDI-10-058 Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JP2 (JPEG2000) image, related to incorrect calculation and the CGImageReadGetBytesAtOffset function.

cpe:/o:apple:mac_os_x:10.5.8 cpe:/o:apple:mac_os_x_server:10.5.8

CVE-2010-0506

2010-03-30T14:30:00.767-04:00

2010-03-31T00:00:00.000-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2010-03-31T13:23:00.000-04:00

APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted NEF image.

CVE-2010-0507

2010-03-30T14:30:00.797-04:00

2010-03-31T00:00:00.000-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2010-03-31T13:27:00.000-04:00

APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 Buffer overflow in Image RAW in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PEF image.

CVE-2010-0508

2010-03-30T14:30:00.827-04:00

2010-03-31T00:00:00.000-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2010-03-31T13:32:00.000-04:00

APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 Mail in Apple Mac OS X before 10.6.3 does not disable the filter rules associated with a deleted mail account, which has unspecified impact and attack vectors.

CVE-2010-0509

2010-03-30T14:30:00.843-04:00

2010-03-31T00:00:00.000-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2010-03-31T13:53:00.000-04:00

APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 SFLServer in OS Services in Apple Mac OS X before 10.6.3 allows local users to gain privileges via vectors related to use of wheel group membership during access to the home directories of user accounts.

CVE-2010-0510

2010-03-30T14:30:00.877-04:00

2010-03-31T14:08:56.907-04:00

9.0

NETWORK

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov

2010-03-31T14:00:00.000-04:00

APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 Password Server in Apple Mac OS X Server before 10.6.3 does not properly perform password replication, which might allow remote authenticated users to obtain login access via an expired password.

cpe:/o:apple:mac_os_x_server:10.6.0 cpe:/o:apple:mac_os_x_server:10.6.1 cpe:/o:apple:mac_os_x_server:10.6.2

CVE-2010-0511

2010-03-30T14:30:00.907-04:00

2010-03-31T00:00:00.000-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-03-31T14:18:00.000-04:00

APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 Podcast Producer in Apple Mac OS X 10.6 before 10.6.3 deletes the access restrictions of a Podcast Composer workflow when this workflow is overwritten, which allows attackers to access a workflow via unspecified vectors.

cpe:/o:apple:mac_os_x:10.6.0 cpe:/o:apple:mac_os_x:10.6.1 cpe:/o:apple:mac_os_x:10.6.2 cpe:/o:apple:mac_os_x_server:10.6.0 cpe:/o:apple:mac_os_x_server:10.6.1 cpe:/o:apple:mac_os_x_server:10.6.2

CVE-2010-0512

2010-03-30T14:30:00.937-04:00

2010-05-21T01:57:07.030-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 BID 39153 The Accounts Preferences implementation in Apple Mac OS X 10.6 before 10.6.3, when a network account server is used, does not support Login Window access control that is based solely on group membership, which allows attackers to bypass intended access restrictions by entering login credentials.

CVE-2010-0513

2010-03-30T14:30:00.967-04:00

2010-04-09T01:42:26.217-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 BID 39151 Stack-based buffer overflow in PS Normalizer in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PostScript document.

cpe:/o:apple:mac_os_x:10.6.0 cpe:/o:apple:mac_os_x:10.6.1 cpe:/o:apple:mac_os_x:10.6.2 cpe:/o:apple:mac_os_x_server:10.6.0 cpe:/o:apple:mac_os_x_server:10.6.1 cpe:/o:apple:mac_os_x_server:10.6.2

CVE-2010-0514

2010-03-30T14:30:00.983-04:00

2017-09-18T21:30:25.563-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2010-03-29-1 APPLE APPLE-SA-2010-03-30-1 CONFIRM http://support.apple.com/kb/HT4077 Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.261 encoding.

cpe:/o:apple:mac_os_x:10.6.0 cpe:/o:apple:mac_os_x:10.6.1 cpe:/o:apple:mac_os_x:10.6.2 cpe:/o:apple:mac_os_x_server:10.6.0 cpe:/o:apple:mac_os_x_server:10.6.1 cpe:/o:apple:mac_os_x_server:10.6.2

CVE-2010-0515

2010-03-30T14:30:01.017-04:00

2017-09-18T21:30:25.610-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2010-03-29-1 APPLE APPLE-SA-2010-03-30-1 CONFIRM http://support.apple.com/kb/HT4077 QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file with H.264 encoding.

cpe:/o:apple:mac_os_x:10.6.0 cpe:/o:apple:mac_os_x:10.6.1 cpe:/o:apple:mac_os_x:10.6.2 cpe:/o:apple:mac_os_x_server:10.6.0 cpe:/o:apple:mac_os_x_server:10.6.1 cpe:/o:apple:mac_os_x_server:10.6.2

CVE-2010-0516

2010-03-30T14:30:01.063-04:00

2018-10-10T15:52:58.257-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2010-03-29-1 APPLE APPLE-SA-2010-03-30-1 CONFIRM http://support.apple.com/kb/HT4077 BUGTRAQ 20100402 ZDI-10-040: Apple QuickTime RLE Bit Depth Remote Code Execution Vulnerability MISC http://www.zerodayinitiative.com/advisories/ZDI-10-040 Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with RLE encoding, which triggers memory corruption when the length of decompressed data exceeds that of the allocated heap chunk.

cpe:/o:apple:mac_os_x:10.6.0 cpe:/o:apple:mac_os_x:10.6.1 cpe:/o:apple:mac_os_x:10.6.2 cpe:/o:apple:mac_os_x_server:10.6.0 cpe:/o:apple:mac_os_x_server:10.6.1 cpe:/o:apple:mac_os_x_server:10.6.2

CVE-2010-0517

2010-03-30T14:30:01.093-04:00

2018-10-10T15:52:58.837-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2010-03-29-1 APPLE APPLE-SA-2010-03-30-1 CONFIRM http://support.apple.com/kb/HT4077 BUGTRAQ 20100402 ZDI-10-037: Apple QuickTime MJPEG Sample Dimensions Remote Code Execution Vulnerability MISC http://www.zerodayinitiative.com/advisories/ZDI-10-037 Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with M-JPEG encoding, which causes QuickTime to calculate a buffer size using height and width fields, but to use a different field to control the length of a copy operation.

cpe:/o:apple:mac_os_x:10.6.0 cpe:/o:apple:mac_os_x:10.6.1 cpe:/o:apple:mac_os_x:10.6.2 cpe:/o:apple:mac_os_x_server:10.6.0 cpe:/o:apple:mac_os_x_server:10.6.1 cpe:/o:apple:mac_os_x_server:10.6.2

CVE-2010-0518

2010-03-30T14:30:01.110-04:00

2017-09-18T21:30:25.767-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

cpe:/o:apple:mac_os_x:10.6.0 cpe:/o:apple:mac_os_x:10.6.1 cpe:/o:apple:mac_os_x:10.6.2 cpe:/o:apple:mac_os_x_server:10.6.0 cpe:/o:apple:mac_os_x_server:10.6.1 cpe:/o:apple:mac_os_x_server:10.6.2

CVE-2010-0519

2010-03-30T14:30:01.140-04:00

2018-10-10T15:52:59.397-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2010-03-29-1 APPLE APPLE-SA-2010-03-30-1 CONFIRM http://support.apple.com/kb/HT4077 BUGTRAQ 20100402 ZDI-10-043: Apple QuickTime FlashPix NumberOfTiles Remote Code Execution Vulnerability MISC http://www.zerodayinitiative.com/advisories/ZDI-10-043 Integer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a FlashPix image with a malformed SubImage Header Stream containing a NumberOfTiles field with a large value.

cpe:/o:apple:mac_os_x:10.6.0 cpe:/o:apple:mac_os_x:10.6.1 cpe:/o:apple:mac_os_x:10.6.2 cpe:/o:apple:mac_os_x_server:10.6.0 cpe:/o:apple:mac_os_x_server:10.6.1 cpe:/o:apple:mac_os_x_server:10.6.2

CVE-2010-0520

2010-03-30T14:30:01.170-04:00

2018-10-10T15:52:59.913-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2010-03-29-1 APPLE APPLE-SA-2010-03-30-1 CONFIRM http://support.apple.com/kb/HT4077 BUGTRAQ 20100402 ZDI-10-044: Apple QuickTime FLI LinePacket Remote Code Execution Vulnerability MISC http://www.zerodayinitiative.com/advisories/ZDI-10-044 Heap-based buffer overflow in QuickTimeAuthoring.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FLC file, related to crafted DELTA_FLI chunks and untrusted length values in a .fli file, which are not properly handled during decompression.

cpe:/o:apple:mac_os_x:10.6.0 cpe:/o:apple:mac_os_x:10.6.1 cpe:/o:apple:mac_os_x:10.6.2 cpe:/o:apple:mac_os_x_server:10.5 cpe:/o:apple:mac_os_x_server:10.5.0 cpe:/o:apple:mac_os_x_server:10.5.1 cpe:/o:apple:mac_os_x_server:10.5.2 cpe:/o:apple:mac_os_x_server:10.5.3 cpe:/o:apple:mac_os_x_server:10.5.4 cpe:/o:apple:mac_os_x_server:10.5.5 cpe:/o:apple:mac_os_x_server:10.5.6 cpe:/o:apple:mac_os_x_server:10.5.7 cpe:/o:apple:mac_os_x_server:10.5.8 cpe:/o:apple:mac_os_x_server:10.6.0 cpe:/o:apple:mac_os_x_server:10.6.1 cpe:/o:apple:mac_os_x_server:10.6.2

CVE-2010-0521

2010-03-30T14:30:01.203-04:00

2010-06-21T00:00:00.000-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-03-31T19:03:00.000-04:00

APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 Server Admin in Apple Mac OS X Server before 10.6.3 does not properly enforce authentication for directory binding, which allows remote attackers to obtain potentially sensitive information from Open Directory via unspecified LDAP requests.

cpe:/o:apple:mac_os_x_server:10.5.8

CVE-2010-0522

2010-03-30T14:30:01.233-04:00

2010-06-21T00:00:00.000-04:00

9.0

NETWORK

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov

2010-03-31T19:14:00.000-04:00

ALLOWS_ADMIN_ACCESS

APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 Server Admin in Apple Mac OS X Server 10.5.8 does not properly determine the privileges of users who had former membership in the admin group, which allows remote authenticated users to leverage this former membership to obtain a server connection via screen sharing.

cpe:/o:apple:mac_os_x_server:10.5.8

CVE-2010-0523

2010-03-30T14:30:01.250-04:00

2010-06-21T00:00:00.000-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-03-31T19:26:00.000-04:00

APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 Wiki Server in Apple Mac OS X 10.5.8 does not restrict the file types of uploaded files, which allows remote attackers to obtain sensitive information or possibly have unspecified other impact via a crafted file, as demonstrated by a Java applet.

cpe:/o:apple:mac_os_x:10.6.0 cpe:/o:apple:mac_os_x:10.6.1 cpe:/o:apple:mac_os_x:10.6.2 cpe:/o:apple:mac_os_x_server:10.6.0 cpe:/o:apple:mac_os_x_server:10.6.1 cpe:/o:apple:mac_os_x_server:10.6.2

CVE-2010-0524

2010-03-30T14:30:01.280-04:00

2010-05-21T01:57:08.280-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 BID 39234 The default configuration of the FreeRADIUS server in Apple Mac OS X Server before 10.6.3 permits EAP-TLS authenticated connections on the basis of an arbitrary client certificate, which allows remote attackers to obtain network connectivity via a crafted RADIUS Access Request message.

cpe:/o:apple:mac_os_x:10.5.0 cpe:/o:apple:mac_os_x:10.5.1 cpe:/o:apple:mac_os_x:10.5.2 cpe:/o:apple:mac_os_x:10.5.3 cpe:/o:apple:mac_os_x:10.5.4 cpe:/o:apple:mac_os_x:10.5.5 cpe:/o:apple:mac_os_x:10.5.6 cpe:/o:apple:mac_os_x:10.5.7 cpe:/o:apple:mac_os_x:10.5.8 cpe:/o:apple:mac_os_x:10.6.0 cpe:/o:apple:mac_os_x:10.6.1 cpe:/o:apple:mac_os_x:10.6.2 cpe:/o:apple:mac_os_x_server:10.5.0 cpe:/o:apple:mac_os_x_server:10.5.1 cpe:/o:apple:mac_os_x_server:10.5.2 cpe:/o:apple:mac_os_x_server:10.5.3 cpe:/o:apple:mac_os_x_server:10.5.4 cpe:/o:apple:mac_os_x_server:10.5.5 cpe:/o:apple:mac_os_x_server:10.5.6 cpe:/o:apple:mac_os_x_server:10.5.7 cpe:/o:apple:mac_os_x_server:10.5.8 cpe:/o:apple:mac_os_x_server:10.6.0 cpe:/o:apple:mac_os_x_server:10.6.1 cpe:/o:apple:mac_os_x_server:10.6.2

CVE-2010-0525

2010-03-30T14:30:01.313-04:00

2010-06-21T00:00:00.000-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-03-31T19:43:00.000-04:00

APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 Mail in Apple Mac OS X before 10.6.3 does not properly enforce the key usage extension during processing of a keychain that specifies multiple certificates for an e-mail recipient, which might make it easier for remote attackers to obtain sensitive information via a brute-force attack on a weakly encrypted e-mail message.

cpe:/o:apple:mac_os_x:10.6.0 cpe:/o:apple:mac_os_x:10.6.1 cpe:/o:apple:mac_os_x:10.6.2 cpe:/o:apple:mac_os_x_server:10.6.0 cpe:/o:apple:mac_os_x_server:10.6.1 cpe:/o:apple:mac_os_x_server:10.6.2

CVE-2010-0526

2010-03-30T14:30:01.343-04:00

2018-10-10T15:53:00.447-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2010-03-29-1 APPLE APPLE-SA-2010-03-30-1 CONFIRM http://support.apple.com/kb/HT4077 BUGTRAQ 20100402 ZDI-10-035: Apple QuickTime genl Atom Remote Code Execution Vulnerability BUGTRAQ 20100402 ZDI-10-045: Apple QuickTime MPEG-1 genl Atom Remote Code Execution Vulnerability MISC http://www.zerodayinitiative.com/advisories/ZDI-10-035 MISC http://www.zerodayinitiative.com/advisories/ZDI-10-045 Heap-based buffer overflow in QuickTimeMPEG.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted genl atom in a QuickTime movie file with MPEG encoding, which is not properly handled during decompression.

cpe:/a:apple:quicktime:7.0.0:-:windows cpe:/a:apple:quicktime:7.0.1:-:windows cpe:/a:apple:quicktime:7.0.2:-:windows cpe:/a:apple:quicktime:7.0.3:-:windows cpe:/a:apple:quicktime:7.0.4:-:windows cpe:/a:apple:quicktime:7.1.0:-:windows cpe:/a:apple:quicktime:7.1.1:-:windows cpe:/a:apple:quicktime:7.1.2:-:windows cpe:/a:apple:quicktime:7.1.3:-:windows cpe:/a:apple:quicktime:7.1.4:-:windows cpe:/a:apple:quicktime:7.1.5:-:windows cpe:/a:apple:quicktime:7.1.6:-:windows cpe:/a:apple:quicktime:7.2.0:-:windows cpe:/a:apple:quicktime:7.2.1:-:windows cpe:/a:apple:quicktime:7.3.0:-:windows cpe:/a:apple:quicktime:7.3.1:-:windows cpe:/a:apple:quicktime:7.4.0:-:windows cpe:/a:apple:quicktime:7.4.1:-:windows cpe:/a:apple:quicktime:7.4.5:-:windows cpe:/a:apple:quicktime:7.5.0:-:windows cpe:/a:apple:quicktime:7.5.5:-:windows cpe:/a:apple:quicktime:7.6.0:-:windows

CVE-2010-0527

2010-03-31T14:30:00.280-04:00

2017-09-18T21:30:26.017-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov APPLE APPLE-SA-2010-03-30-1 Integer overflow in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image.

CVE-2010-0528

2010-03-31T14:30:00.313-04:00

2018-10-10T15:53:01.227-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov APPLE APPLE-SA-2010-03-30-1 BUGTRAQ 20100402 ZDI-10-042: Apple QuickTime MediaVideo Compressor Name Remote Code Execution Vulnerability MISC http://www.zerodayinitiative.com/advisories/ZDI-10-042 Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted color tables in a movie file, related to malformed MediaVideo data, a sample description atom (STSD), and a crafted length value.

CVE-2010-0529

2010-03-31T14:30:00.343-04:00

2018-10-10T15:53:01.697-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov APPLE APPLE-SA-2010-03-30-1 BUGTRAQ 20100406 ZDI-10-067: Apple QuickTime Pict BkPixPat Remote Code Execution Vulnerability MISC http://www.zerodayinitiative.com/advisories/ZDI-10-067 Heap-based buffer overflow in QuickTime.qts in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PICT image with a BkPixPat opcode (0x12) containing crafted values that are used in a calculation for memory allocation.

cpe:/a:apple:quicktime:3.0 cpe:/a:apple:quicktime:4.1.2 cpe:/a:apple:quicktime:5.0 cpe:/a:apple:quicktime:5.0.1 cpe:/a:apple:quicktime:5.0.2 cpe:/a:apple:quicktime:6.0 cpe:/a:apple:quicktime:6.0.0 cpe:/a:apple:quicktime:6.0.1 cpe:/a:apple:quicktime:6.0.2 cpe:/a:apple:quicktime:6.1 cpe:/a:apple:quicktime:6.1.0 cpe:/a:apple:quicktime:6.1.1 cpe:/a:apple:quicktime:6.2.0 cpe:/a:apple:quicktime:6.3.0 cpe:/a:apple:quicktime:6.4.0 cpe:/a:apple:quicktime:6.5 cpe:/a:apple:quicktime:6.5.0 cpe:/a:apple:quicktime:6.5.1 cpe:/a:apple:quicktime:6.5.2 cpe:/a:apple:quicktime:7.0 cpe:/a:apple:quicktime:7.0.0 cpe:/a:apple:quicktime:7.0.1 cpe:/a:apple:quicktime:7.0.2 cpe:/a:apple:quicktime:7.0.3 cpe:/a:apple:quicktime:7.0.4 cpe:/a:apple:quicktime:7.1 cpe:/a:apple:quicktime:7.1.0 cpe:/a:apple:quicktime:7.1.1 cpe:/a:apple:quicktime:7.1.2 cpe:/a:apple:quicktime:7.1.3 cpe:/a:apple:quicktime:7.1.4 cpe:/a:apple:quicktime:7.1.5 cpe:/a:apple:quicktime:7.1.6 cpe:/a:apple:quicktime:7.2 cpe:/a:apple:quicktime:7.2.0 cpe:/a:apple:quicktime:7.2.1 cpe:/a:apple:quicktime:7.3 cpe:/a:apple:quicktime:7.3.0 cpe:/a:apple:quicktime:7.3.1 cpe:/a:apple:quicktime:7.3.1.70 cpe:/a:apple:quicktime:7.4 cpe:/a:apple:quicktime:7.4.0 cpe:/a:apple:quicktime:7.4.1 cpe:/a:apple:quicktime:7.4.5 cpe:/a:apple:quicktime:7.5.0 cpe:/a:apple:quicktime:7.5.5 cpe:/a:apple:quicktime:7.6.0 cpe:/a:apple:quicktime:7.6.1 cpe:/a:apple:quicktime:7.6.2 cpe:/a:apple:quicktime:7.6.5 cpe:/a:apple:quicktime:7.6.6 cpe:/a:apple:quicktime:7.6.7 cpe:/a:apple:quicktime:7.6.8

CVE-2010-0530

2010-12-09T15:00:16.210-05:00

2017-09-18T21:30:26.203-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov APPLE APPLE-SA-2010-12-07-1 CONFIRM http://support.apple.com/kb/HT4447 SECTRACK 1024829 Apple QuickTime before 7.6.9 on Windows sets weak permissions for the Apple Computer directory in the profile of a user account, which allows local users to obtain sensitive information by reading files in this directory.

cpe:/a:apple:itunes:9.0:-:mac cpe:/a:apple:itunes:9.0:-:windows cpe:/a:apple:itunes:9.0.0:-:mac cpe:/a:apple:itunes:9.0.0:-:windows cpe:/a:apple:itunes:9.0.1:-:mac cpe:/a:apple:itunes:9.0.1:-:windows cpe:/a:apple:itunes:9.0.2:-:mac cpe:/a:apple:itunes:9.0.2:-:windows cpe:/a:apple:itunes:9.0.3:-:mac cpe:/a:apple:itunes:9.0.3:-:windows

CVE-2010-0531

2010-03-31T14:30:00.377-04:00

2017-09-18T21:30:26.267-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2010-03-30-2 CONFIRM http://support.apple.com/kb/HT4105 Apple iTunes before 9.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted MP4 podcast file.

cpe:/a:apple:itunes:9.0:-:windows cpe:/a:apple:itunes:9.0.0:-:windows cpe:/a:apple:itunes:9.0.1:-:windows cpe:/a:apple:itunes:9.0.2:-:windows cpe:/a:apple:itunes:9.0.3:-:windows

CVE-2010-0532

2010-03-31T14:30:00.407-04:00

2017-09-18T21:30:26.313-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov APPLE APPLE-SA-2010-03-30-2 CONFIRM http://support.apple.com/kb/HT4105 Race condition in the installation package in Apple iTunes before 9.1 on Windows allows local users to gain privileges by replacing an unspecified file with a Trojan horse.

cpe:/o:apple:mac_os_x:10.6.0 cpe:/o:apple:mac_os_x:10.6.1 cpe:/o:apple:mac_os_x:10.6.2 cpe:/o:apple:mac_os_x_server:10.6.0 cpe:/o:apple:mac_os_x_server:10.6.1 cpe:/o:apple:mac_os_x_server:10.6.2

CVE-2010-0533

2010-03-30T13:30:00.593-04:00

2013-09-10T13:18:50.223-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2013-08-15T05:48:43.000-04:00

APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 Directory traversal vulnerability in AFP Server in Apple Mac OS X before 10.6.3 allows remote attackers to list a share root's parent directory, and read and modify files in that directory, via unspecified vectors.

cpe:/o:apple:mac_os_x:10.6.0 cpe:/o:apple:mac_os_x:10.6.1 cpe:/o:apple:mac_os_x:10.6.2 cpe:/o:apple:mac_os_x_server:10.6.0 cpe:/o:apple:mac_os_x_server:10.6.1 cpe:/o:apple:mac_os_x_server:10.6.2

CVE-2010-0534

2010-03-30T14:30:01.377-04:00

2010-06-21T00:00:00.000-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-03-31T19:57:00.000-04:00

APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 Wiki Server in Apple Mac OS X 10.6 before 10.6.3 does not enforce the service access control list (SACL) for weblogs during weblog creation, which allows remote authenticated users to publish content via HTTP requests.

cpe:/o:apple:mac_os_x:10.6.0 cpe:/o:apple:mac_os_x:10.6.1 cpe:/o:apple:mac_os_x:10.6.2 cpe:/o:apple:mac_os_x_server:10.6.0 cpe:/o:apple:mac_os_x_server:10.6.1 cpe:/o:apple:mac_os_x_server:10.6.2

CVE-2010-0535

2010-03-30T14:30:01.407-04:00

2010-06-21T00:00:00.000-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

2010-03-31T20:24:00.000-04:00

ALLOWS_OTHER_ACCESS

APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 Dovecot in Apple Mac OS X 10.6 before 10.6.3, when Kerberos is enabled, does not properly enforce the service access control list (SACL) for sending and receiving e-mail, which allows remote authenticated users to bypass intended access restrictions via unspecified vectors.

CVE-2010-0536

2010-03-31T14:30:00.437-04:00

2017-09-18T21:30:26.393-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov APPLE APPLE-SA-2010-03-30-1 Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted BMP image.

cpe:/o:apple:mac_os_x:10.6.0 cpe:/o:apple:mac_os_x:10.6.1 cpe:/o:apple:mac_os_x:10.6.2 cpe:/o:apple:mac_os_x_server:10.6.0 cpe:/o:apple:mac_os_x_server:10.6.1 cpe:/o:apple:mac_os_x_server:10.6.2

CVE-2010-0537

2010-03-30T14:30:01.420-04:00

2010-06-18T00:00:00.000-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-03-31T20:32:00.000-04:00

APPLE APPLE-SA-2010-03-29-1 CONFIRM http://support.apple.com/kb/HT4077 DesktopServices in Apple Mac OS X 10.6 before 10.6.3 does not properly resolve pathnames in certain circumstances involving an application's save panel, which allows user-assisted remote attackers to trigger unintended remote file copying via a crafted share name.

cpe:/a:apple:java

CVE-2010-0538

2010-05-21T15:30:01.583-04:00

2010-05-24T00:00:00.000-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2010-05-24T09:39:00.000-04:00

APPLE APPLE-SA-2010-05-18-1 APPLE APPLE-SA-2010-05-18-2 SECTRACK 1024011 CONFIRM http://support.apple.com/kb/HT4170 CONFIRM http://support.apple.com/kb/HT4171 BID 40238 VUPEN ADV-2010-1191 Apple Java for Mac OS X 10.5 before Update 7 and Java for Mac OS X 10.6 before Update 2 do not properly handle mediaLibImage objects, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted applet, related to the com.sun.medialib.mlib package.

cpe:/a:apple:java_1.5:0:23 cpe:/a:apple:java_1.6:0:17

CVE-2010-0539

2010-05-21T15:30:01.647-04:00

2010-05-24T00:00:00.000-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2010-05-24T09:47:00.000-04:00

APPLE APPLE-SA-2010-05-18-1 APPLE APPLE-SA-2010-05-18-2 SECTRACK 1024012 CONFIRM http://support.apple.com/kb/HT4170 CONFIRM http://support.apple.com/kb/HT4171 BID 40240 VUPEN ADV-2010-1191 Integer signedness error in the window drawing implementation in Apple Java for Mac OS X 10.5 before Update 7 and Java for Mac OS X 10.6 before Update 2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted applet.

cpe:/o:apple:mac_os_x:10.5.8 cpe:/o:apple:mac_os_x:10.6.0 cpe:/o:apple:mac_os_x:10.6.1 cpe:/o:apple:mac_os_x:10.6.2 cpe:/o:apple:mac_os_x:10.6.3 cpe:/o:apple:mac_os_x_server:10.5.8 cpe:/o:apple:mac_os_x_server:10.6.0 cpe:/o:apple:mac_os_x_server:10.6.1 cpe:/o:apple:mac_os_x_server:10.6.2 cpe:/o:apple:mac_os_x_server:10.6.3

CVE-2010-0540

2010-06-17T12:30:01.327-04:00

2017-09-18T21:30:26.470-04:00

6.0

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov CONFIRM http://cups.org/articles.php?L596 CONFIRM http://cups.org/str.php?L3498 APPLE APPLE-SA-2010-06-15-1 GENTOO GLSA-201207-10 CONFIRM http://support.apple.com/kb/HT4188 DEBIAN DSA-2176 MANDRIVA MDVSA-2010:232 MANDRIVA MDVSA-2010:233 MANDRIVA MDVSA-2010:234 BID 40871 SECTRACK 1024122 VUPEN ADV-2010-1481 VUPEN ADV-2011-0535 Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, allows remote attackers to hijack the authentication of administrators for requests that change settings.

CVE-2010-0541

2010-06-17T12:30:01.357-04:00

2012-11-05T23:36:28.390-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov APPLE APPLE-SA-2010-06-15-1 CONFIRM http://support.apple.com/kb/HT4188 MANDRIVA MDVSA-2011:097 MANDRIVA MDVSA-2011:098 REDHAT RHSA-2011:0908 REDHAT RHSA-2011:0909 BID 40871 BID 40895 VUPEN ADV-2010-1481 Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote attackers to inject arbitrary web script or HTML via a crafted URI that triggers a UTF-7 error page.

cpe:/a:apple:cups:1.1 cpe:/a:apple:cups:1.1.1 cpe:/a:apple:cups:1.1.2 cpe:/a:apple:cups:1.1.3 cpe:/a:apple:cups:1.1.4 cpe:/a:apple:cups:1.1.5 cpe:/a:apple:cups:1.1.5-1 cpe:/a:apple:cups:1.1.5-2 cpe:/a:apple:cups:1.1.6 cpe:/a:apple:cups:1.1.6-1 cpe:/a:apple:cups:1.1.6-2 cpe:/a:apple:cups:1.1.6-3 cpe:/a:apple:cups:1.1.7 cpe:/a:apple:cups:1.1.8 cpe:/a:apple:cups:1.1.9 cpe:/a:apple:cups:1.1.9-1 cpe:/a:apple:cups:1.1.10 cpe:/a:apple:cups:1.1.10-1 cpe:/a:apple:cups:1.1.11 cpe:/a:apple:cups:1.1.12 cpe:/a:apple:cups:1.1.13 cpe:/a:apple:cups:1.1.14 cpe:/a:apple:cups:1.1.15 cpe:/a:apple:cups:1.1.16 cpe:/a:apple:cups:1.1.17 cpe:/a:apple:cups:1.1.18 cpe:/a:apple:cups:1.1.19 cpe:/a:apple:cups:1.1.19:rc1 cpe:/a:apple:cups:1.1.19:rc2 cpe:/a:apple:cups:1.1.19:rc3 cpe:/a:apple:cups:1.1.19:rc4 cpe:/a:apple:cups:1.1.19:rc5 cpe:/a:apple:cups:1.1.20 cpe:/a:apple:cups:1.1.20:rc1 cpe:/a:apple:cups:1.1.20:rc2 cpe:/a:apple:cups:1.1.20:rc3 cpe:/a:apple:cups:1.1.20:rc4 cpe:/a:apple:cups:1.1.20:rc5 cpe:/a:apple:cups:1.1.20:rc6 cpe:/a:apple:cups:1.1.21 cpe:/a:apple:cups:1.1.21:rc1 cpe:/a:apple:cups:1.1.21:rc2 cpe:/a:apple:cups:1.1.22 cpe:/a:apple:cups:1.1.22:rc1 cpe:/a:apple:cups:1.1.22:rc2 cpe:/a:apple:cups:1.1.23 cpe:/a:apple:cups:1.1.23:rc1 cpe:/a:apple:cups:1.2:b1 cpe:/a:apple:cups:1.2:b2 cpe:/a:apple:cups:1.2:rc1 cpe:/a:apple:cups:1.2:rc2 cpe:/a:apple:cups:1.2:rc3 cpe:/a:apple:cups:1.2.0 cpe:/a:apple:cups:1.2.1 cpe:/a:apple:cups:1.2.2 cpe:/a:apple:cups:1.2.3 cpe:/a:apple:cups:1.2.4 cpe:/a:apple:cups:1.2.5 cpe:/a:apple:cups:1.2.6 cpe:/a:apple:cups:1.2.7 cpe:/a:apple:cups:1.2.8 cpe:/a:apple:cups:1.2.9 cpe:/a:apple:cups:1.2.10 cpe:/a:apple:cups:1.2.11 cpe:/a:apple:cups:1.2.12 cpe:/a:apple:cups:1.3:b1 cpe:/a:apple:cups:1.3:rc1 cpe:/a:apple:cups:1.3:rc2 cpe:/a:apple:cups:1.3.0 cpe:/a:apple:cups:1.3.1 cpe:/a:apple:cups:1.3.2 cpe:/a:apple:cups:1.3.3 cpe:/a:apple:cups:1.3.4 cpe:/a:apple:cups:1.3.5 cpe:/a:apple:cups:1.3.6 cpe:/a:apple:cups:1.3.7 cpe:/a:apple:cups:1.3.8 cpe:/a:apple:cups:1.3.9 cpe:/a:apple:cups:1.3.10 cpe:/a:apple:cups:1.3.11 cpe:/a:apple:cups:1.4.0 cpe:/a:apple:cups:1.4.1 cpe:/a:apple:cups:1.4.2 cpe:/a:apple:cups:1.4.3

CVE-2010-0542

2010-06-21T12:30:01.087-04:00

2017-09-18T21:30:26.533-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://cups.org/articles.php?L596 CONFIRM http://cups.org/str.php?L3516 CONFIRM http://cups.org/strfiles/3516/str3516.patch SUSE SUSE-SR:2010:023 GENTOO GLSA-201207-10 SECTRACK 1024121 DEBIAN DSA-2176 MANDRIVA MDVSA-2010:232 MANDRIVA MDVSA-2010:234 BID 40943 VUPEN ADV-2011-0535 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=587746 The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.

cpe:/o:apple:mac_os_x:10.5.8 cpe:/o:apple:mac_os_x:10.6.0 cpe:/o:apple:mac_os_x:10.6.1 cpe:/o:apple:mac_os_x_server:10.5.8 cpe:/o:apple:mac_os_x_server:10.6.0 cpe:/o:apple:mac_os_x_server:10.6.1

CVE-2010-0543

2010-06-17T12:30:01.403-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2010-06-17T17:14:00.000-04:00

APPLE APPLE-SA-2010-06-15-1 SECTRACK 1024103 CONFIRM http://support.apple.com/kb/HT4188 BID 40871 VUPEN ADV-2010-1481 ImageIO in Apple Mac OS X 10.5.8, and 10.6 before 10.6.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file with MPEG2 encoding.

cpe:/a:apple:safari:4.0 cpe:/a:apple:safari:4.0.0b cpe:/a:apple:safari:4.0.1 cpe:/a:apple:safari:4.0.2 cpe:/a:apple:safari:4.0.3 cpe:/a:apple:safari:4.0.4 cpe:/a:apple:safari:4.0.5 cpe:/a:apple:webkit

CVE-2010-0544

2010-06-11T15:30:12.253-04:00

2017-09-18T21:30:26.610-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov APPLE APPLE-SA-2010-06-16-1 APPLE APPLE-SA-2010-11-22-1 APPLE APPLE-SA-2010-06-07-1 APPLE APPLE-SA-2010-06-21-1 SECTRACK 1024067 CONFIRM http://support.apple.com/kb/HT4196 CONFIRM http://support.apple.com/kb/HT4220 CONFIRM http://support.apple.com/kb/HT4225 CONFIRM http://support.apple.com/kb/HT4456 BID 40620 VUPEN ADV-2010-1373 VUPEN ADV-2010-1512 Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to inject arbitrary web script or HTML via vectors related to a malformed URL.

CVE-2010-0545

2010-06-17T12:30:01.437-04:00

4.4

LOCAL

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2010-06-17T17:19:00.000-04:00

APPLE APPLE-SA-2010-06-15-1 SECTRACK 1024103 CONFIRM http://support.apple.com/kb/HT4188 BID 40871 VUPEN ADV-2010-1481 The Finder in DesktopServices in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, does not set the expected file ownerships during an "Apply to enclosed items" action, which allows local users to bypass intended access restrictions via normal filesystem operations.

CVE-2010-0546

2010-06-17T12:30:01.467-04:00

3.3

LOCAL

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2010-06-17T17:25:00.000-04:00

APPLE APPLE-SA-2010-06-15-1 SECTRACK 1024103 CONFIRM http://support.apple.com/kb/HT4188 BID 40871 VUPEN ADV-2010-1481 Folder Manager in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows local users to delete arbitrary folders via a symlink attack in conjunction with an unmount operation on a crafted volume, related to the Cleanup At Startup folder.

cpe:/a:samba:samba:1.9.17 cpe:/a:samba:samba:1.9.17:p1 cpe:/a:samba:samba:1.9.17:p2 cpe:/a:samba:samba:1.9.17:p3 cpe:/a:samba:samba:1.9.17:p4 cpe:/a:samba:samba:1.9.17:p5 cpe:/a:samba:samba:1.9.18 cpe:/a:samba:samba:1.9.18:p1 cpe:/a:samba:samba:1.9.18:p10 cpe:/a:samba:samba:1.9.18:p2 cpe:/a:samba:samba:1.9.18:p3 cpe:/a:samba:samba:1.9.18:p4 cpe:/a:samba:samba:1.9.18:p5 cpe:/a:samba:samba:1.9.18:p6 cpe:/a:samba:samba:1.9.18:p7 cpe:/a:samba:samba:1.9.18:p8 cpe:/a:samba:samba:2.2.0 cpe:/a:samba:samba:2.2.0a cpe:/a:samba:samba:2.2.1 cpe:/a:samba:samba:2.2.1a cpe:/a:samba:samba:2.2.2 cpe:/a:samba:samba:2.2.3 cpe:/a:samba:samba:2.2.3a cpe:/a:samba:samba:2.2.4 cpe:/a:samba:samba:2.2.5 cpe:/a:samba:samba:2.2.6 cpe:/a:samba:samba:2.2.7 cpe:/a:samba:samba:2.2.7a cpe:/a:samba:samba:2.2.8 cpe:/a:samba:samba:2.2.8a cpe:/a:samba:samba:2.2.9 cpe:/a:samba:samba:2.2.10 cpe:/a:samba:samba:2.2.11 cpe:/a:samba:samba:2.2.12 cpe:/a:samba:samba:2.2a cpe:/a:samba:samba:3.0.0 cpe:/a:samba:samba:3.0.1 cpe:/a:samba:samba:3.0.2 cpe:/a:samba:samba:3.0.2a cpe:/a:samba:samba:3.0.3 cpe:/a:samba:samba:3.0.4 cpe:/a:samba:samba:3.0.4:rc1 cpe:/a:samba:samba:3.0.5 cpe:/a:samba:samba:3.0.6 cpe:/a:samba:samba:3.0.8 cpe:/a:samba:samba:3.0.9 cpe:/a:samba:samba:3.0.10 cpe:/a:samba:samba:3.0.11 cpe:/a:samba:samba:3.0.12 cpe:/a:samba:samba:3.0.13 cpe:/a:samba:samba:3.0.14 cpe:/a:samba:samba:3.0.14a cpe:/a:samba:samba:3.0.20 cpe:/a:samba:samba:3.0.20a cpe:/a:samba:samba:3.0.20b cpe:/a:samba:samba:3.0.21 cpe:/a:samba:samba:3.0.21a cpe:/a:samba:samba:3.0.21b cpe:/a:samba:samba:3.0.21c cpe:/a:samba:samba:3.0.22 cpe:/a:samba:samba:3.0.23 cpe:/a:samba:samba:3.0.23a cpe:/a:samba:samba:3.0.23b cpe:/a:samba:samba:3.0.23c cpe:/a:samba:samba:3.0.23d cpe:/a:samba:samba:3.0.24 cpe:/a:samba:samba:3.0.25 cpe:/a:samba:samba:3.0.25:pre1 cpe:/a:samba:samba:3.0.25:pre2 cpe:/a:samba:samba:3.0.25:rc1 cpe:/a:samba:samba:3.0.25:rc2 cpe:/a:samba:samba:3.0.25:rc3 cpe:/a:samba:samba:3.0.25a cpe:/a:samba:samba:3.0.25b cpe:/a:samba:samba:3.0.25c cpe:/a:samba:samba:3.0.26 cpe:/a:samba:samba:3.0.26a cpe:/a:samba:samba:3.0.27 cpe:/a:samba:samba:3.0.27a cpe:/a:samba:samba:3.0.28 cpe:/a:samba:samba:3.0.28a cpe:/a:samba:samba:3.0.29 cpe:/a:samba:samba:3.0.30 cpe:/a:samba:samba:3.0.31 cpe:/a:samba:samba:3.0.32 cpe:/a:samba:samba:3.0.33 cpe:/a:samba:samba:3.0.34 cpe:/a:samba:samba:3.0.35 cpe:/a:samba:samba:3.0.36 cpe:/a:samba:samba:3.0.37 cpe:/a:samba:samba:3.2.0 cpe:/a:samba:samba:3.2.1 cpe:/a:samba:samba:3.2.2 cpe:/a:samba:samba:3.2.3 cpe:/a:samba:samba:3.2.4 cpe:/a:samba:samba:3.2.5 cpe:/a:samba:samba:3.2.6 cpe:/a:samba:samba:3.2.7 cpe:/a:samba:samba:3.2.8 cpe:/a:samba:samba:3.2.9 cpe:/a:samba:samba:3.2.10 cpe:/a:samba:samba:3.2.11 cpe:/a:samba:samba:3.2.12 cpe:/a:samba:samba:3.2.13 cpe:/a:samba:samba:3.2.14 cpe:/a:samba:samba:3.2.15 cpe:/a:samba:samba:3.3.0 cpe:/a:samba:samba:3.3.1 cpe:/a:samba:samba:3.3.2 cpe:/a:samba:samba:3.3.3 cpe:/a:samba:samba:3.3.4 cpe:/a:samba:samba:3.3.5 cpe:/a:samba:samba:3.3.6 cpe:/a:samba:samba:3.3.7 cpe:/a:samba:samba:3.3.8 cpe:/a:samba:samba:3.3.9 cpe:/a:samba:samba:3.3.10 cpe:/a:samba:samba:3.4.0 cpe:/a:samba:samba:3.4.1 cpe:/a:samba:samba:3.4.2 cpe:/a:samba:samba:3.4.3 cpe:/a:samba:samba:3.4.4 cpe:/a:samba:samba:3.4.5

CVE-2010-0547

2010-02-04T15:15:24.110-05:00

2013-04-18T22:58:39.933-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://git.samba.org/?p=samba.git;a=commit;h=a065c177dfc8f968775593ba00dffafeebb2e054 SUSE SUSE-SR:2010:008 SUSE SUSE-SR:2010:014 GENTOO GLSA-201206-29 MANDRIVA MDVSA-2010:090 BID 38326 VUPEN ADV-2010-1062 client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.

cpe:/h:xerox:workcentre_5632 cpe:/h:xerox:workcentre_5638 cpe:/h:xerox:workcentre_5645 cpe:/h:xerox:workcentre_5655 cpe:/h:xerox:workcentre_5665 cpe:/h:xerox:workcentre_5675 cpe:/h:xerox:workcentre_5687

CVE-2010-0548

2010-02-04T15:15:50.000-05:00

2010-02-05T00:00:00.000-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-02-05T12:11:00.000-05:00

VUPEN ADV-2010-0209 CONFIRM http://www.xerox.com/downloads/usa/en/c/cert_XRX10-002_v1.0.pdf Multiple unspecified vulnerabilities in the Network Controller and Web Server in Xerox WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, and 5687 allow remote attackers to (1) access mailboxes via unknown vectors that bypass Scan to Mailbox authorization or (2) read device configuration information via via unknown vectors that bypass web server authorization.

cpe:/a:xerox:workcentre_6400_net_controller:060.079.11410 cpe:/a:xerox:workcentre_6400_net_controller:060.079.29310 cpe:/a:xerox:workcentre_6400_system_software:060.070.109.11407 cpe:/a:xerox:workcentre_6400_system_software:060.070.109.29510

CVE-2010-0549

2010-02-04T15:15:50.030-05:00

2011-01-06T00:00:00.000-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-02-05T12:24:00.000-05:00

SECTRACK 1023500 VUPEN ADV-2010-0208 CONFIRM http://www.xerox.com/downloads/usa/en/c/cert_XRX10-001_v1.0.pdf Unspecified vulnerability in the Network Controller in Xerox WorkCentre 6400 System Software 060.070.109.11407 through 060.070.109.29510, and Net Controller 060.079.11410 through 060.079.29310, allows remote attackers to access "directory structure" via a crafted PostScript file, aka "Unauthorized Directory Structure Access Vulnerability."

cpe:/a:geopp:geo%2b%2b_gncaster:1.4.0.0 cpe:/a:geopp:geo%2b%2b_gncaster:1.4.0.7

CVE-2010-0550

2010-02-04T15:15:50.077-05:00

2018-10-10T15:53:02.117-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://www.redteam-pentesting.de/en/advisories/rt-sa-2010-003/-geo-r-gncaster-faulty-implementation-of-http-digest-authentication BUGTRAQ 20100127 [RT-SA-2010-003] Geo++(R) GNCASTER: Faulty implementation of HTTPDigest Authentication XF gncaster-httpbasic-weak-security(55976) admin.htm in Geo++ GNCASTER 1.4.0.7 and earlier does not properly enforce HTTP Digest Authentication, which allows remote authenticated users to use HTTP Basic Authentication, bypassing intended server policy.

cpe:/a:geopp:geo%2b%2b_gncaster:1.4.0.0 cpe:/a:geopp:geo%2b%2b_gncaster:1.4.0.7

CVE-2010-0551

2010-02-04T15:15:50.110-05:00

2018-10-10T15:53:02.523-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://www.redteam-pentesting.de/en/advisories/rt-sa-2010-003/-geo-r-gncaster-faulty-implementation-of-http-digest-authentication BUGTRAQ 20100127 [RT-SA-2010-003] Geo++(R) GNCASTER: Faulty implementation of HTTPDigest Authentication XF gncaster-server-info-disclosure(55978) HTTP authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier allows remote attackers to read authentication headers of other users via a large request with an incorrect authentication attempt, which includes sensitive memory in the response. NOTE: this is referred to as a "memory leak" by some sources, but is better characterized as "memory disclosure."

cpe:/a:geopp:geo%2b%2b_gncaster:1.4.0.0 cpe:/a:geopp:geo%2b%2b_gncaster:1.4.0.7

CVE-2010-0552

2010-02-04T15:15:50.140-05:00

2018-10-10T15:53:03.040-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://www.redteam-pentesting.de/en/advisories/rt-sa-2010-001/-geo-r-gncaster-insecure-handling-of-long-urls BUGTRAQ 20100127 [RT-SA-2010-001] Geo++(R) GNCASTER: Insecure handling of long URLs XF gncaster-httpget-code-execution(55974) Geo++ GNCASTER 1.4.0.7 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via multiple requests for a non-existent file using a long URI.

cpe:/a:geopp:geo%2b%2b_gncaster:1.4.0.0 cpe:/a:geopp:geo%2b%2b_gncaster:1.4.0.7

CVE-2010-0553

2010-02-04T15:15:50.187-05:00

2018-10-10T15:53:03.523-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov MISC http://www.redteam-pentesting.de/en/advisories/rt-sa-2010-002/-geo-r-gncaster-insecure-handling-of-nmea-data BUGTRAQ 20100127 [RT-SA-2010-002] Geo++(R) GNCASTER: Insecure handling of NMEA-data XF gncaster-nmea-code-execution(55975) Geo++ GNCASTER 1.4.0.7 and earlier allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a long NMEA data sentence.

cpe:/a:geopp:geo%2b%2b_gncaster:1.4.0.0 cpe:/a:geopp:geo%2b%2b_gncaster:1.4.0.7

CVE-2010-0554

2010-02-04T15:15:50.217-05:00

2018-10-10T15:53:04.007-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://www.redteam-pentesting.de/en/advisories/rt-sa-2010-003/-geo-r-gncaster-faulty-implementation-of-http-digest-authentication BUGTRAQ 20100127 [RT-SA-2010-003] Geo++(R) GNCASTER: Faulty implementation of HTTPDigest Authentication XF gncaster-nonce-replay(55977) The HTTP Authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier uses the same nonce for all authentication, which allows remote attackers to hijack web sessions or bypass authentication via a replay attack.

cpe:/a:microsoft:ie:5.01:sp4 cpe:/a:microsoft:ie:6 cpe:/a:microsoft:ie:6:sp1 cpe:/a:microsoft:ie:7 cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_server_2003 cpe:/o:microsoft:windows_server_2003::sp1 cpe:/o:microsoft:windows_server_2003::sp1:itanium cpe:/o:microsoft:windows_server_2003::sp2 cpe:/o:microsoft:windows_server_2008 cpe:/o:microsoft:windows_server_2008:::32_bit cpe:/o:microsoft:windows_server_2008:::itanium cpe:/o:microsoft:windows_server_2008:::x64 cpe:/o:microsoft:windows_vista cpe:/o:microsoft:windows_vista:::x64 cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_vista::sp1:x64 cpe:/o:microsoft:windows_vista:gold cpe:/o:microsoft:windows_xp:::pro_x64 cpe:/o:microsoft:windows_xp:::x64 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_xp::sp2:pro_x64 cpe:/o:microsoft:windows_xp::sp2:x64 cpe:/o:microsoft:windows_xp::sp3

CVE-2010-0555

2010-02-04T15:15:25.000-05:00

2019-02-26T09:04:00.993-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov MISC http://blogs.technet.com/msrc/archive/2010/02/03/security-advisory-980088-released.aspx MISC http://isc.sans.org/diary.html?n&storyid=8152 MISC http://www.coresecurity.com/content/internet-explorer-dynamic-object-tag MISC http://www.microsoft.com/technet/security/advisory/980088.mspx BUGTRAQ 20100203 CORE-2009-0625: Internet Explorer Dynamic OBJECT tag and URLMON sniffing vulnerabilities BID 38055 BID 38056 Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML documents, which allows remote attackers to bypass intended access restrictions and read arbitrary files via vectors involving the product's use of text/html as the default content type for files that are encountered after a redirection, aka the URLMON sniffing vulnerability, a variant of CVE-2009-1140 and related to CVE-2008-1448.

CVE-2010-0556

2010-02-18T12:30:00.583-05:00

2018-10-10T15:53:05.447-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://code.google.com/p/chromium/issues/detail?id=32718 CONFIRM http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html SECTRACK 1023583 CONFIRM http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs BUGTRAQ 20100216 Chrome Password Manager Cross Origin Weakness (CVE-2010-0556) BID 38177 MISC http://www.vsecurity.com/advisory/20100215-1.txt VUPEN ADV-2010-0361 XF googlechrome-dialogs-phishing(56216) browser/login/login_prompt.cc in Google Chrome before 4.0.249.89 populates an authentication dialog with credentials that were stored by Password Manager for a different web site, which allows user-assisted remote HTTP servers to obtain sensitive information via a URL that requires authentication, as demonstrated by a URL in the SRC attribute of an IMG element.

cpe:/a:ibm:cognos_express:9.0

CVE-2010-0557

2010-02-05T17:30:02.360-05:00

2010-02-08T00:00:00.000-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-02-08T11:03:00.000-05:00

BID 38084 VUPEN ADV-2010-0297 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21419179 IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial of service, by leveraging hardcoded credentials.

cpe:/o:sun:opensolaris:snv_77::sparc cpe:/o:sun:opensolaris:snv_77::x86 cpe:/o:sun:opensolaris:snv_78::sparc cpe:/o:sun:opensolaris:snv_78::x86 cpe:/o:sun:opensolaris:snv_79::sparc cpe:/o:sun:opensolaris:snv_79::x86 cpe:/o:sun:opensolaris:snv_80::sparc cpe:/o:sun:opensolaris:snv_80::x86 cpe:/o:sun:opensolaris:snv_81::sparc cpe:/o:sun:opensolaris:snv_81::x86 cpe:/o:sun:opensolaris:snv_82::sparc cpe:/o:sun:opensolaris:snv_82::x86 cpe:/o:sun:opensolaris:snv_83::sparc cpe:/o:sun:opensolaris:snv_83::x86 cpe:/o:sun:opensolaris:snv_84::sparc cpe:/o:sun:opensolaris:snv_84::x86 cpe:/o:sun:opensolaris:snv_85::sparc cpe:/o:sun:opensolaris:snv_85::x86 cpe:/o:sun:opensolaris:snv_86::sparc cpe:/o:sun:opensolaris:snv_86::x86 cpe:/o:sun:opensolaris:snv_87::sparc cpe:/o:sun:opensolaris:snv_87::x86 cpe:/o:sun:opensolaris:snv_88::sparc cpe:/o:sun:opensolaris:snv_88::x86 cpe:/o:sun:opensolaris:snv_89::sparc cpe:/o:sun:opensolaris:snv_89::x86 cpe:/o:sun:opensolaris:snv_90::sparc cpe:/o:sun:opensolaris:snv_90::x86 cpe:/o:sun:opensolaris:snv_91::sparc cpe:/o:sun:opensolaris:snv_91::x86 cpe:/o:sun:opensolaris:snv_92::sparc cpe:/o:sun:opensolaris:snv_92::x86 cpe:/o:sun:opensolaris:snv_93::sparc cpe:/o:sun:opensolaris:snv_93::x86 cpe:/o:sun:opensolaris:snv_94::sparc cpe:/o:sun:opensolaris:snv_94::x86 cpe:/o:sun:opensolaris:snv_95::sparc cpe:/o:sun:opensolaris:snv_95::x86 cpe:/o:sun:opensolaris:snv_96::sparc cpe:/o:sun:opensolaris:snv_96::x86 cpe:/o:sun:opensolaris:snv_97::sparc cpe:/o:sun:opensolaris:snv_97::x86 cpe:/o:sun:opensolaris:snv_98::sparc cpe:/o:sun:opensolaris:snv_98::x86 cpe:/o:sun:opensolaris:snv_99::sparc cpe:/o:sun:opensolaris:snv_99::x86 cpe:/o:sun:opensolaris:snv_100::sparc cpe:/o:sun:opensolaris:snv_100::x86 cpe:/o:sun:opensolaris:snv_101::sparc cpe:/o:sun:opensolaris:snv_101::x86 cpe:/o:sun:opensolaris:snv_102::x86 cpe:/o:sun:opensolaris:snv_103::sparc cpe:/o:sun:opensolaris:snv_103::x86 cpe:/o:sun:opensolaris:snv_104::x86 cpe:/o:sun:opensolaris:snv_105::sparc cpe:/o:sun:opensolaris:snv_105::x86 cpe:/o:sun:opensolaris:snv_106::x86 cpe:/o:sun:opensolaris:snv_107::sparc cpe:/o:sun:opensolaris:snv_107::x86 cpe:/o:sun:opensolaris:snv_108::x86 cpe:/o:sun:opensolaris:snv_109::sparc cpe:/o:sun:opensolaris:snv_109::x86 cpe:/o:sun:opensolaris:snv_110::sparc cpe:/o:sun:opensolaris:snv_110::x86 cpe:/o:sun:opensolaris:snv_111::sparc cpe:/o:sun:opensolaris:snv_111::x86 cpe:/o:sun:opensolaris:snv_112::x86 cpe:/o:sun:opensolaris:snv_113::sparc cpe:/o:sun:opensolaris:snv_113::x86 cpe:/o:sun:opensolaris:snv_114::x86 cpe:/o:sun:opensolaris:snv_115::sparc cpe:/o:sun:opensolaris:snv_115::x86 cpe:/o:sun:opensolaris:snv_116::x86 cpe:/o:sun:opensolaris:snv_117::sparc cpe:/o:sun:opensolaris:snv_117::x86 cpe:/o:sun:opensolaris:snv_118::x86 cpe:/o:sun:opensolaris:snv_119::sparc cpe:/o:sun:opensolaris:snv_119::x86 cpe:/o:sun:opensolaris:snv_120::sparc cpe:/o:sun:opensolaris:snv_120::x86 cpe:/o:sun:opensolaris:snv_121::sparc cpe:/o:sun:opensolaris:snv_121::x86 cpe:/o:sun:opensolaris:snv_122::sparc cpe:/o:sun:opensolaris:snv_122::x86 cpe:/o:sun:opensolaris:snv_123::sparc cpe:/o:sun:opensolaris:snv_124::sparc cpe:/o:sun:opensolaris:snv_124::x86 cpe:/o:sun:opensolaris:snv_125::sparc cpe:/o:sun:opensolaris:snv_125::x86 cpe:/o:sun:opensolaris:snv_126::sparc cpe:/o:sun:opensolaris:snv_126::x86 cpe:/o:sun:opensolaris:snv_127::sparc cpe:/o:sun:opensolaris:snv_127::x86 cpe:/o:sun:opensolaris:snv_128::x86 cpe:/o:sun:opensolaris:snv_129::sparc cpe:/o:sun:opensolaris:snv_129::x86 cpe:/o:sun:opensolaris:snv_130::sparc cpe:/o:sun:opensolaris:snv_130::x86 cpe:/o:sun:opensolaris:snv_131::sparc cpe:/o:sun:opensolaris:snv_131::x86

CVE-2010-0558

2010-02-05T17:30:02.453-05:00

2017-08-16T21:32:01.587-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SUNALERT 275790 SECTRACK 1023545 XF opensolaris-smbadm-unspecified(56521) The default configuration of Oracle OpenSolaris snv_77 through snv_131 allows attackers to have an unspecified impact via vectors related to using smbadm to join a Windows Active Directory domain.

cpe:/o:sun:opensolaris:snv_91::sparc cpe:/o:sun:opensolaris:snv_91::x86 cpe:/o:sun:opensolaris:snv_92::sparc cpe:/o:sun:opensolaris:snv_92::x86 cpe:/o:sun:opensolaris:snv_93::sparc cpe:/o:sun:opensolaris:snv_93::x86 cpe:/o:sun:opensolaris:snv_94::sparc cpe:/o:sun:opensolaris:snv_94::x86 cpe:/o:sun:opensolaris:snv_95::sparc cpe:/o:sun:opensolaris:snv_95::x86 cpe:/o:sun:opensolaris:snv_96::sparc cpe:/o:sun:opensolaris:snv_96::x86 cpe:/o:sun:opensolaris:snv_97::sparc cpe:/o:sun:opensolaris:snv_97::x86 cpe:/o:sun:opensolaris:snv_98::sparc cpe:/o:sun:opensolaris:snv_98::x86 cpe:/o:sun:opensolaris:snv_99::sparc cpe:/o:sun:opensolaris:snv_99::x86 cpe:/o:sun:opensolaris:snv_100::sparc cpe:/o:sun:opensolaris:snv_100::x86 cpe:/o:sun:opensolaris:snv_101::sparc cpe:/o:sun:opensolaris:snv_101::x86 cpe:/o:sun:opensolaris:snv_102::sparc cpe:/o:sun:opensolaris:snv_102::x86 cpe:/o:sun:opensolaris:snv_103::sparc cpe:/o:sun:opensolaris:snv_103::x86 cpe:/o:sun:opensolaris:snv_104::sparc cpe:/o:sun:opensolaris:snv_104::x86 cpe:/o:sun:opensolaris:snv_105::sparc cpe:/o:sun:opensolaris:snv_105::x86 cpe:/o:sun:opensolaris:snv_106::sparc cpe:/o:sun:opensolaris:snv_106::x86 cpe:/o:sun:opensolaris:snv_107::sparc cpe:/o:sun:opensolaris:snv_107::x86 cpe:/o:sun:opensolaris:snv_108::sparc cpe:/o:sun:opensolaris:snv_108::x86 cpe:/o:sun:opensolaris:snv_109::sparc cpe:/o:sun:opensolaris:snv_109::x86 cpe:/o:sun:opensolaris:snv_110::sparc cpe:/o:sun:opensolaris:snv_110::x86 cpe:/o:sun:opensolaris:snv_111::sparc cpe:/o:sun:opensolaris:snv_111::x86 cpe:/o:sun:opensolaris:snv_112::sparc cpe:/o:sun:opensolaris:snv_112::x86 cpe:/o:sun:opensolaris:snv_113::sparc cpe:/o:sun:opensolaris:snv_113::x86 cpe:/o:sun:opensolaris:snv_114::sparc cpe:/o:sun:opensolaris:snv_114::x86 cpe:/o:sun:opensolaris:snv_115::sparc cpe:/o:sun:opensolaris:snv_115::x86 cpe:/o:sun:opensolaris:snv_116::sparc cpe:/o:sun:opensolaris:snv_116::x86 cpe:/o:sun:opensolaris:snv_117::sparc cpe:/o:sun:opensolaris:snv_117::x86 cpe:/o:sun:opensolaris:snv_118::sparc cpe:/o:sun:opensolaris:snv_118::x86 cpe:/o:sun:opensolaris:snv_119::sparc cpe:/o:sun:opensolaris:snv_119::x86 cpe:/o:sun:opensolaris:snv_120::sparc cpe:/o:sun:opensolaris:snv_120::x86 cpe:/o:sun:opensolaris:snv_121::sparc cpe:/o:sun:opensolaris:snv_121::x86 cpe:/o:sun:opensolaris:snv_122::sparc cpe:/o:sun:opensolaris:snv_122::x86 cpe:/o:sun:opensolaris:snv_123::sparc cpe:/o:sun:opensolaris:snv_124::sparc cpe:/o:sun:opensolaris:snv_124::x86 cpe:/o:sun:opensolaris:snv_125::sparc cpe:/o:sun:opensolaris:snv_125::x86 cpe:/o:sun:opensolaris:snv_126::sparc cpe:/o:sun:opensolaris:snv_126::x86 cpe:/o:sun:opensolaris:snv_127::sparc cpe:/o:sun:opensolaris:snv_128::sparc cpe:/o:sun:opensolaris:snv_128::x86 cpe:/o:sun:opensolaris:snv_129::sparc cpe:/o:sun:opensolaris:snv_129::x86 cpe:/o:sun:opensolaris:snv_130::sparc cpe:/o:sun:opensolaris:snv_131::sparc cpe:/o:sun:opensolaris:snv_131::x86

CVE-2010-0559

2010-02-05T17:30:02.483-05:00

2010-05-25T01:51:26.030-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SUNALERT 275790 SUNALERT 1021793 SECTRACK 1023545 The default configuration of Oracle OpenSolaris snv_91 through snv_131 allows attackers to have an unspecified impact via vectors related to using kclient to join a Windows Active Directory domain.

cpe:/h:intel:intel_desktop_board:db cpe:/h:intel:intel_desktop_board:dg cpe:/h:intel:intel_desktop_board:dh cpe:/h:intel:intel_desktop_board:dp cpe:/h:intel:intel_desktop_board:dq

CVE-2010-0560

2010-02-08T16:30:00.420-05:00

2017-08-16T21:32:01.647-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00022&languageid=en-fr BID 38251 VUPEN ADV-2010-0271 XF intel-bios-privilege-escalation(56384) Unspecified vulnerability in the BIOS in Intel Desktop Board DB, DG, DH, DP, and DQ Series allows local administrators to execute arbitrary code in System Management Mode (SSM) via unknown attack vectors.

cpe:/o:netbsd:netbsd:4.0 cpe:/o:netbsd:netbsd:5.0

CVE-2010-0561

2010-02-08T16:30:00.453-05:00

2010-02-09T00:00:00.000-05:00

4.9

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2010-02-09T09:08:00.000-05:00

NETBSD NetBSD-SA2010-003 BID 38057 SECTRACK 1023539 Integer signedness error in NetBSD 4.0, 5.0, and NetBSD-current before 2010-01-21 allows local users to cause a denial of service (kernel panic) via a negative mixer index number being passed to (1) the azalia_query_devinfo function in the azalia audio driver (src/sys/dev/pci/azalia.c) or (2) the hdaudio_afg_query_devinfo function in the hdaudio audio driver (src/sys/dev/pci/hdaudio/hdaudio_afg.c).

cpe:/a:fetchmail:fetchmail:6.3.11 cpe:/a:fetchmail:fetchmail:6.3.12 cpe:/a:fetchmail:fetchmail:6.3.13

CVE-2010-0562

2010-02-08T16:30:00.483-05:00

2011-04-27T00:00:00.000-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2010-02-09T09:15:00.000-05:00

CONFIRM http://mknod.org/svn/fetchmail/branches/BRANCH_6-3/fetchmail-SA-2010-01.txt CONFIRM http://www.fetchmail.info/fetchmail-SA-2010-01.txt MANDRIVA MDVSA-2010:037 BID 38088 SECTRACK 1023543 VUPEN ADV-2010-0296 The sdump function in sdump.c in fetchmail 6.3.11, 6.3.12, and 6.3.13, when running in verbose mode on platforms for which char is signed, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an SSL X.509 certificate containing non-printable characters with the high bit set, which triggers a heap-based buffer overflow during escaping.

cpe:/a:ibm:websphere_application_server:7.0 cpe:/a:ibm:websphere_application_server:7.0.0.1 cpe:/a:ibm:websphere_application_server:7.0.0.3 cpe:/a:ibm:websphere_application_server:7.0.0.5 cpe:/a:ibm:websphere_application_server:7.0.0.7 cpe:/a:ibm:websphere_application_server:7.0.0.8

CVE-2010-0563

2010-02-08T16:30:00.530-05:00

2010-11-03T00:00:00.000-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-02-09T09:32:00.000-05:00

SECTRACK 1023551 BID 38122 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21417839 AIXAPAR PM00610 The Single Sign-on (SSO) functionality in IBM WebSphere Application Server (WAS) 7.0.0.0 through 7.0.0.8 does not recognize the Requires SSL configuration option, which might allow remote attackers to obtain sensitive information by sniffing network sessions that were expected to be encrypted.

cpe:/a:trendmicro:officescan:8.0:sp1

CVE-2010-0564

2010-02-09T21:30:00.890-05:00

2017-08-16T21:32:01.697-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 38083 SECTRACK 1023553 CONFIRM http://www.trendmicro.com/ftp/documentation/readme/OSCE_80_Win_SP1_Patch_5_en_readme.txt MISC http://www.trendmicro.com/ftp/documentation/readme/readme_1224.txt VUPEN ADV-2010-0295 XF officescan-tmufe-bo(56097) Buffer overflow in Trend Micro URL Filtering Engine (TMUFE) in OfficeScan 8.0 before SP1 Patch 5 - Build 3510, possibly tmufeng.dll before 3.0.0.1029, allows attackers to cause a denial of service (crash or OfficeScan hang) via unspecified vectors. NOTE: it is likely that this issue also affects tmufeng.dll before 2.0.0.1049 for OfficeScan 10.0.

cpe:/h:cisco:asa_5500:7.1 cpe:/h:cisco:asa_5500:7.2 cpe:/h:cisco:asa_5500:8.0 cpe:/h:cisco:asa_5500:8.1 cpe:/h:cisco:asa_5500:8.2 cpe:/h:cisco:pix_500

CVE-2010-0565

2010-02-19T12:30:00.847-05:00

2017-08-16T21:32:01.757-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20100217 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances BID 38280 SECTRACK 1023612 VUPEN ADV-2010-0415 XF cisco-asa-webvpn-dtls-dos(56339) Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.2(4.45), 8.0 before 8.0(4.44), 8.1 before 8.1(2.35), and 8.2 before 8.2(1.10), allows remote attackers to cause a denial of service (page fault and device reload) via a malformed DTLS message, aka Bug ID CSCtb64913 and "WebVPN DTLS Denial of Service Vulnerability."

cpe:/h:cisco:asa_5500:7.1 cpe:/h:cisco:asa_5500:7.2 cpe:/h:cisco:asa_5500:8.0 cpe:/h:cisco:asa_5500:8.1 cpe:/h:cisco:asa_5500:8.2 cpe:/h:cisco:pix_500

CVE-2010-0566

2010-02-19T12:30:00.880-05:00

2017-08-16T21:32:01.803-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CISCO 20100217 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances BID 38278 SECTRACK 1023612 VUPEN ADV-2010-0415 XF cisco-asa-nat-aipssm-dos(56340) Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.0(8.10), 7.2 before 7.2(4.45), 8.0 before 8.0(4.44), 8.1 before 8.1(2.35), and 8.2 before 8.2(1.10) allows remote attackers to cause a denial of service (device reload) via a malformed TCP segment when certain NAT translation and Cisco AIP-SSM configurations are used, aka Bug ID CSCtb37219.

cpe:/h:cisco:asa_5500:7.1 cpe:/h:cisco:asa_5500:7.2 cpe:/h:cisco:asa_5500:8.0 cpe:/h:cisco:asa_5500:8.1 cpe:/h:cisco:asa_5500:8.2 cpe:/h:cisco:pix_500

CVE-2010-0567

2010-02-19T12:30:00.910-05:00

2017-08-16T21:32:01.850-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CISCO 20100217 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances BID 38279 SECTRACK 1023612 VUPEN ADV-2010-0415 XF cisco-asa-ike-dos(56341) Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.0(8.10), 7.2 before 7.2(4.45), 8.0 before 8.0(5.1), 8.1 before 8.1(2.37), and 8.2 before 8.2(1.15); and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service (active IPsec tunnel loss and prevention of new tunnels) via a malformed IKE message through an existing tunnel to UDP port 4500, aka Bug ID CSCtc47782.

cpe:/h:cisco:asa_5500:7.1 cpe:/h:cisco:asa_5500:7.2 cpe:/h:cisco:asa_5500:8.0 cpe:/h:cisco:asa_5500:8.1 cpe:/h:cisco:asa_5500:8.2 cpe:/h:cisco:pix_500

CVE-2010-0568

2010-02-19T12:30:00.957-05:00

2017-08-16T21:32:01.913-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

NONE

http://nvd.nist.gov CISCO 20100217 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances BID 38279 SECTRACK 1023612 VUPEN ADV-2010-0415 XF cisco-asa-ntlmv1-security-bypass(56342) Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.0(8.10), 7.2 before 7.2(4.45), 8.0 before 8.0(5.7), 8.1 before 8.1(2.40), and 8.2 before 8.2(2.1); and Cisco PIX 500 Series Security Appliance; allows remote attackers to bypass NTLMv1 authentication via a crafted username, aka Bug ID CSCte21953.

cpe:/h:cisco:asa_5500:7.1 cpe:/h:cisco:asa_5500:7.2 cpe:/h:cisco:asa_5500:8.0 cpe:/h:cisco:asa_5500:8.1 cpe:/h:cisco:asa_5500:8.2 cpe:/h:cisco:pix_500

CVE-2010-0569

2010-02-19T12:30:00.987-05:00

2017-08-16T21:32:01.977-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20100217 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances BID 38281 SECTRACK 1023612 VUPEN ADV-2010-0415 XF cisco-asa-sip-dos(56337) Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.0(8.10), 7.2 before 7.2(4.45), 8.0 before 8.0(5.2), 8.1 before 8.1(2.37), and 8.2 before 8.2(1.16); and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service (device reload) via malformed SIP messages, aka Bug ID CSCtc96018.

cpe:/a:cisco:digital_media_manager:5.0 cpe:/a:cisco:digital_media_manager:5.0.1 cpe:/a:cisco:digital_media_manager:5.0.2 cpe:/a:cisco:digital_media_manager:5.0.3 cpe:/a:cisco:digital_media_manager:5.1

CVE-2010-0570

2010-03-05T14:30:00.627-05:00

2017-08-16T21:32:02.023-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1023671 CISCO 20100303 Multiple Vulnerabilities in Cisco Digital Media Manager BID 38503 VUPEN ADV-2010-0531 XF cisco-ddm-default-credentials(56634) Cisco Digital Media Manager (DMM) 5.0.x and 5.1.x has a default password for the Tomcat administration account, which makes it easier for remote attackers to execute arbitrary code via a crafted web application, aka Bug ID CSCta03378.

CVE-2010-0571

2010-03-05T14:30:00.657-05:00

2017-08-16T21:32:02.070-04:00

8.5

NETWORK

MEDIUM

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov SECTRACK 1023671 CISCO 20100303 Multiple Vulnerabilities in Cisco Digital Media Manager BID 38500 VUPEN ADV-2010-0531 XF cisco-ddm-privilege-escalation(56636) Unspecified vulnerability in Cisco Digital Media Manager (DMM) 5.0.x and 5.1.x allows remote authenticated users to gain privileges via unknown vectors, and consequently execute arbitrary code via a crafted web application, aka Bug ID CSCtc46008.

CVE-2010-0572

2010-03-05T14:30:00.687-05:00

2017-08-16T21:32:02.133-04:00

7.1

NETWORK

HIGH

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov SECTRACK 1023671 CISCO 20100303 Multiple Vulnerabilities in Cisco Digital Media Manager BID 38502 VUPEN ADV-2010-0531 XF cisco-ddm-mediaplayer-info-disc(56637) Cisco Digital Media Manager (DMM) before 5.2 allows remote authenticated users to discover Cisco Digital Media Player credentials via vectors related to reading a (1) error log or (2) stack trace, aka Bug ID CSCtc46050.

cpe:/h:cisco:digital_media_player:5.2 cpe:/h:cisco:digital_media_player_4300g:5.2 cpe:/h:cisco:digital_media_player_4305g:5.2 cpe:/h:cisco:digital_media_player_4400g:5.2

CVE-2010-0573

2010-03-05T14:30:00.720-05:00

2017-08-16T21:32:02.180-04:00

8.5

NETWORK

LOW

NONE

PARTIAL

COMPLETE

http://nvd.nist.gov SECTRACK 1023672 CISCO 20100303 Cisco Digital Media Player Remote Display Unauthorized Content Injection Vulnerability BID 38504 VUPEN ADV-2010-0532 XF cisco-mediaplayer-content-data-manipulation(56639) Unspecified vulnerability on the Cisco Digital Media Player before 5.2 allows remote attackers to hijack the source of (1) video or (2) data for a display via unknown vectors, related to a "content injection" issue, aka Bug ID CSCtc46024.

cpe:/o:cisco:wireless_lan_controller_software:3.2 cpe:/o:cisco:wireless_lan_controller_software:3.2.78.0 cpe:/o:cisco:wireless_lan_controller_software:3.2.116.21 cpe:/o:cisco:wireless_lan_controller_software:3.2.150.6 cpe:/o:cisco:wireless_lan_controller_software:3.2.150.10 cpe:/o:cisco:wireless_lan_controller_software:3.2.171.5 cpe:/o:cisco:wireless_lan_controller_software:3.2.171.6 cpe:/o:cisco:wireless_lan_controller_software:3.2.185.0 cpe:/o:cisco:wireless_lan_controller_software:3.2.193.5 cpe:/o:cisco:wireless_lan_controller_software:3.2.195.10 cpe:/o:cisco:wireless_lan_controller_software:4.0.108 cpe:/o:cisco:wireless_lan_controller_software:4.0.155.0 cpe:/o:cisco:wireless_lan_controller_software:4.0.155.5 cpe:/o:cisco:wireless_lan_controller_software:4.0.179.8 cpe:/o:cisco:wireless_lan_controller_software:4.0.179.11 cpe:/o:cisco:wireless_lan_controller_software:4.0.196 cpe:/o:cisco:wireless_lan_controller_software:4.0.206.0 cpe:/o:cisco:wireless_lan_controller_software:4.0.217.0 cpe:/o:cisco:wireless_lan_controller_software:4.0.219.0 cpe:/o:cisco:wireless_lan_controller_software:4.1 cpe:/o:cisco:wireless_lan_controller_software:4.1.171.0 cpe:/o:cisco:wireless_lan_controller_software:4.1.181.0 cpe:/o:cisco:wireless_lan_controller_software:4.1.185.0 cpe:/o:cisco:wireless_lan_controller_software:4.1m cpe:/o:cisco:wireless_lan_controller_software:4.2 cpe:/o:cisco:wireless_lan_controller_software:4.2.61.0 cpe:/o:cisco:wireless_lan_controller_software:4.2.99.0 cpe:/o:cisco:wireless_lan_controller_software:4.2.112.0 cpe:/o:cisco:wireless_lan_controller_software:4.2.117.0 cpe:/o:cisco:wireless_lan_controller_software:4.2.130.0 cpe:/o:cisco:wireless_lan_controller_software:4.2.173.0 cpe:/o:cisco:wireless_lan_controller_software:4.2.174.0 cpe:/o:cisco:wireless_lan_controller_software:4.2.176.0 cpe:/o:cisco:wireless_lan_controller_software:4.2.182.0 cpe:/o:cisco:wireless_lan_controller_software:4.2m cpe:/o:cisco:wireless_lan_controller_software:5.0.148.0 cpe:/o:cisco:wireless_lan_controller_software:5.0.148.2 cpe:/o:cisco:wireless_lan_controller_software:5.1 cpe:/o:cisco:wireless_lan_controller_software:5.1.151.0 cpe:/o:cisco:wireless_lan_controller_software:5.1.152.0 cpe:/o:cisco:wireless_lan_controller_software:5.1.160.0 cpe:/o:cisco:wireless_lan_controller_software:5.2 cpe:/o:cisco:wireless_lan_controller_software:5.2.157.0 cpe:/o:cisco:wireless_lan_controller_software:5.2.169.0 cpe:/o:cisco:wireless_lan_controller_software:6.0 cpe:/o:cisco:wireless_lan_controller_software:6.0.182.0

CVE-2010-0574

2010-09-10T14:00:01.800-04:00

2010-09-13T00:00:00.000-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2010-09-13T11:50:00.000-04:00

CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=21287 CISCO 20100908 Multiple Vulnerabilities in Cisco Wireless LAN Controllers Unspecified vulnerability in Cisco Wireless LAN Controller (WLC) software 3.2 before 3.2.215.0; 4.1 and 4.2 before 4.2.205.0; 4.1M and 4.2M before 4.2.207.54M; 5.0, 5.1, and 6.0 before 6.0.188.0; and 5.2 before 5.2.193.11 allows remote attackers to cause a denial of service (device reload) via a crafted IKE packet, aka Bug ID CSCta56653.

cpe:/o:cisco:wireless_lan_controller_software:4.2 cpe:/o:cisco:wireless_lan_controller_software:4.2.61.0 cpe:/o:cisco:wireless_lan_controller_software:4.2.99.0 cpe:/o:cisco:wireless_lan_controller_software:4.2.112.0 cpe:/o:cisco:wireless_lan_controller_software:4.2.117.0 cpe:/o:cisco:wireless_lan_controller_software:4.2.130.0 cpe:/o:cisco:wireless_lan_controller_software:4.2.173.0 cpe:/o:cisco:wireless_lan_controller_software:4.2.174.0 cpe:/o:cisco:wireless_lan_controller_software:4.2.176.0 cpe:/o:cisco:wireless_lan_controller_software:4.2.182.0 cpe:/o:cisco:wireless_lan_controller_software:5.0.148.0 cpe:/o:cisco:wireless_lan_controller_software:5.0.148.2 cpe:/o:cisco:wireless_lan_controller_software:5.1 cpe:/o:cisco:wireless_lan_controller_software:5.1.151.0 cpe:/o:cisco:wireless_lan_controller_software:5.1.152.0 cpe:/o:cisco:wireless_lan_controller_software:5.1.160.0 cpe:/o:cisco:wireless_lan_controller_software:6.0 cpe:/o:cisco:wireless_lan_controller_software:6.0.182.0

CVE-2010-0575

2010-09-10T14:00:01.863-04:00

2010-09-13T00:00:00.000-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-09-13T12:23:00.000-04:00

CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=21291 CISCO 20100908 Multiple Vulnerabilities in Cisco Wireless LAN Controllers Cisco Wireless LAN Controller (WLC) software, possibly 6.0.x or possibly 4.1 through 6.0.x, allows remote attackers to bypass ACLs in the controller CPU, and consequently send network traffic to unintended segments or devices, via unspecified vectors, a different vulnerability than CVE-2010-3034.

cpe:/o:cisco:ios:12.0s cpe:/o:cisco:ios:12.0sl cpe:/o:cisco:ios:12.0sx cpe:/o:cisco:ios:12.0sy cpe:/o:cisco:ios:12.0sz cpe:/o:cisco:ios:12.1ax cpe:/o:cisco:ios:12.1e cpe:/o:cisco:ios:12.1ea cpe:/o:cisco:ios:12.1eb cpe:/o:cisco:ios:12.1ec cpe:/o:cisco:ios:12.1eo cpe:/o:cisco:ios:12.1ex cpe:/o:cisco:ios:12.1ey cpe:/o:cisco:ios:12.1xv cpe:/o:cisco:ios:12.1yb cpe:/o:cisco:ios:12.1yd cpe:/o:cisco:ios:12.1ye cpe:/o:cisco:ios:12.2b cpe:/o:cisco:ios:12.2bc cpe:/o:cisco:ios:12.2bw cpe:/o:cisco:ios:12.2bx cpe:/o:cisco:ios:12.2by cpe:/o:cisco:ios:12.2bz cpe:/o:cisco:ios:12.2cx cpe:/o:cisco:ios:12.2cy cpe:/o:cisco:ios:12.2dd cpe:/o:cisco:ios:12.2dx cpe:/o:cisco:ios:12.2ex cpe:/o:cisco:ios:12.2ey cpe:/o:cisco:ios:12.2ira cpe:/o:cisco:ios:12.2irb cpe:/o:cisco:ios:12.2irc cpe:/o:cisco:ios:12.2ird cpe:/o:cisco:ios:12.2ixa cpe:/o:cisco:ios:12.2ixb cpe:/o:cisco:ios:12.2ixc cpe:/o:cisco:ios:12.2ixd cpe:/o:cisco:ios:12.2ixe cpe:/o:cisco:ios:12.2ixf cpe:/o:cisco:ios:12.2ixg cpe:/o:cisco:ios:12.2ixh cpe:/o:cisco:ios:12.2mc cpe:/o:cisco:ios:12.2s cpe:/o:cisco:ios:12.2sb cpe:/o:cisco:ios:12.2sbc cpe:/o:cisco:ios:12.2sca cpe:/o:cisco:ios:12.2scb cpe:/o:cisco:ios:12.2scc cpe:/o:cisco:ios:12.2se cpe:/o:cisco:ios:12.2sed cpe:/o:cisco:ios:12.2see cpe:/o:cisco:ios:12.2seg cpe:/o:cisco:ios:12.2sg cpe:/o:cisco:ios:12.2so cpe:/o:cisco:ios:12.2sra cpe:/o:cisco:ios:12.2srb cpe:/o:cisco:ios:12.2src cpe:/o:cisco:ios:12.2srd cpe:/o:cisco:ios:12.2su cpe:/o:cisco:ios:12.2sv cpe:/o:cisco:ios:12.2sva cpe:/o:cisco:ios:12.2svc cpe:/o:cisco:ios:12.2svd cpe:/o:cisco:ios:12.2sve cpe:/o:cisco:ios:12.2sw cpe:/o:cisco:ios:12.2sx cpe:/o:cisco:ios:12.2sxa cpe:/o:cisco:ios:12.2sxb cpe:/o:cisco:ios:12.2sxd cpe:/o:cisco:ios:12.2sxe cpe:/o:cisco:ios:12.2sxf cpe:/o:cisco:ios:12.2sxh cpe:/o:cisco:ios:12.2sxi cpe:/o:cisco:ios:12.2sy cpe:/o:cisco:ios:12.2sz cpe:/o:cisco:ios:12.2t cpe:/o:cisco:ios:12.2tpc cpe:/o:cisco:ios:12.2xa cpe:/o:cisco:ios:12.2xb cpe:/o:cisco:ios:12.2xf cpe:/o:cisco:ios:12.2xg cpe:/o:cisco:ios:12.2xk cpe:/o:cisco:ios:12.2xl cpe:/o:cisco:ios:12.2xn cpe:/o:cisco:ios:12.2xt cpe:/o:cisco:ios:12.2xu cpe:/o:cisco:ios:12.2xv cpe:/o:cisco:ios:12.2yd cpe:/o:cisco:ios:12.2yj cpe:/o:cisco:ios:12.2yn cpe:/o:cisco:ios:12.2yp cpe:/o:cisco:ios:12.2yt cpe:/o:cisco:ios:12.2yx cpe:/o:cisco:ios:12.2yy cpe:/o:cisco:ios:12.2yz cpe:/o:cisco:ios:12.2za cpe:/o:cisco:ios:12.2zd cpe:/o:cisco:ios:12.2ze cpe:/o:cisco:ios:12.2zj cpe:/o:cisco:ios:12.2zu cpe:/o:cisco:ios:12.2zx cpe:/o:cisco:ios:12.2zy cpe:/o:cisco:ios:12.2zya cpe:/o:cisco:ios:12.3 cpe:/o:cisco:ios:12.3b cpe:/o:cisco:ios:12.3bc cpe:/o:cisco:ios:12.3bw cpe:/o:cisco:ios:12.3t cpe:/o:cisco:ios:12.3xc cpe:/o:cisco:ios:12.3xd cpe:/o:cisco:ios:12.3xe cpe:/o:cisco:ios:12.3xf cpe:/o:cisco:ios:12.3xi cpe:/o:cisco:ios:12.3xj cpe:/o:cisco:ios:12.3xl cpe:/o:cisco:ios:12.3xr cpe:/o:cisco:ios:12.3xw cpe:/o:cisco:ios:12.3xx cpe:/o:cisco:ios:12.3xz cpe:/o:cisco:ios:12.3yf cpe:/o:cisco:ios:12.3yg cpe:/o:cisco:ios:12.3yh cpe:/o:cisco:ios:12.3yi cpe:/o:cisco:ios:12.3yk cpe:/o:cisco:ios:12.3ys cpe:/o:cisco:ios:12.3yt cpe:/o:cisco:ios:12.3yu cpe:/o:cisco:ios:12.3yx cpe:/o:cisco:ios:12.3yz cpe:/o:cisco:ios:12.3za cpe:/o:cisco:ios:12.4 cpe:/o:cisco:ios:12.4gc cpe:/o:cisco:ios:12.4ja cpe:/o:cisco:ios:12.4jda cpe:/o:cisco:ios:12.4jdc cpe:/o:cisco:ios:12.4jk cpe:/o:cisco:ios:12.4jl cpe:/o:cisco:ios:12.4jma cpe:/o:cisco:ios:12.4jmb cpe:/o:cisco:ios:12.4jx cpe:/o:cisco:ios:12.4mr cpe:/o:cisco:ios:12.4sw cpe:/o:cisco:ios:12.4t cpe:/o:cisco:ios:12.4xa cpe:/o:cisco:ios:12.4xb cpe:/o:cisco:ios:12.4xc cpe:/o:cisco:ios:12.4xd cpe:/o:cisco:ios:12.4xe cpe:/o:cisco:ios:12.4xf cpe:/o:cisco:ios:12.4xg cpe:/o:cisco:ios:12.4xj cpe:/o:cisco:ios:12.4xk cpe:/o:cisco:ios:12.4xl cpe:/o:cisco:ios:12.4xm cpe:/o:cisco:ios:12.4xn cpe:/o:cisco:ios:12.4xp cpe:/o:cisco:ios:12.4xq cpe:/o:cisco:ios:12.4xr cpe:/o:cisco:ios:12.4xt cpe:/o:cisco:ios:12.4xv cpe:/o:cisco:ios:12.4xw cpe:/o:cisco:ios:12.4xy cpe:/o:cisco:ios:12.4xz cpe:/o:cisco:ios:12.4ya cpe:/o:cisco:ios:12.4yb cpe:/o:cisco:ios:12.4yd cpe:/o:cisco:ios:12.4ye cpe:/o:cisco:ios:12.4yg cpe:/o:cisco:ios_xe:2.1 cpe:/o:cisco:ios_xe:2.2 cpe:/o:cisco:ios_xe:2.3 cpe:/o:cisco:ios_xr:3.2 cpe:/o:cisco:ios_xr:3.2.1 cpe:/o:cisco:ios_xr:3.2.2 cpe:/o:cisco:ios_xr:3.2.4 cpe:/o:cisco:ios_xr:3.2.50 cpe:/o:cisco:ios_xr:3.3.0 cpe:/o:cisco:ios_xr:3.3.1 cpe:/o:cisco:ios_xr:3.3.2 cpe:/o:cisco:ios_xr:3.3.3 cpe:/o:cisco:ios_xr:3.3.4 cpe:/o:cisco:ios_xr:3.3.5 cpe:/o:cisco:ios_xr:3.4.0 cpe:/o:cisco:ios_xr:3.4.1 cpe:/o:cisco:ios_xr:3.4.2 cpe:/o:cisco:ios_xr:3.4.3

CVE-2010-0576

2010-03-25T17:00:00.657-04:00

2017-08-16T21:32:02.277-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20100324 Cisco IOS Software Multiprotocol Label Switching Packet Vulnerability BID 38938 SECTRACK 1023740 VUPEN ADV-2010-0707 XF ciscoios-ldp-dos(57143) Unspecified vulnerability in Cisco IOS 12.0 through 12.4, IOS XE 2.1.x through 2.3.x before 2.3.2, and IOS XR 3.2.x through 3.4.3, when Multiprotocol Label Switching (MPLS) and Label Distribution Protocol (LDP) are enabled, allows remote attackers to cause a denial of service (device reload or process restart) via a crafted LDP packet, aka Bug IDs CSCsz45567 and CSCsj25893.

cpe:/o:cisco:ios:12.2b cpe:/o:cisco:ios:12.2bc cpe:/o:cisco:ios:12.2bx cpe:/o:cisco:ios:12.2by cpe:/o:cisco:ios:12.2bz cpe:/o:cisco:ios:12.2cx cpe:/o:cisco:ios:12.2cy cpe:/o:cisco:ios:12.2cz cpe:/o:cisco:ios:12.2jx cpe:/o:cisco:ios:12.2mc cpe:/o:cisco:ios:12.2t cpe:/o:cisco:ios:12.2tpc cpe:/o:cisco:ios:12.2xj cpe:/o:cisco:ios:12.2xk cpe:/o:cisco:ios:12.2xl cpe:/o:cisco:ios:12.2xm cpe:/o:cisco:ios:12.2xr cpe:/o:cisco:ios:12.2xw cpe:/o:cisco:ios:12.2ya cpe:/o:cisco:ios:12.2yb cpe:/o:cisco:ios:12.2yd cpe:/o:cisco:ios:12.2yf cpe:/o:cisco:ios:12.2yg cpe:/o:cisco:ios:12.2yh cpe:/o:cisco:ios:12.2yj cpe:/o:cisco:ios:12.2yl cpe:/o:cisco:ios:12.2ym cpe:/o:cisco:ios:12.2yn cpe:/o:cisco:ios:12.2yp cpe:/o:cisco:ios:12.2yq cpe:/o:cisco:ios:12.2yr cpe:/o:cisco:ios:12.2yt cpe:/o:cisco:ios:12.2yu cpe:/o:cisco:ios:12.2yv cpe:/o:cisco:ios:12.2yw cpe:/o:cisco:ios:12.2yy cpe:/o:cisco:ios:12.2zb cpe:/o:cisco:ios:12.2zc cpe:/o:cisco:ios:12.2zd cpe:/o:cisco:ios:12.2ze cpe:/o:cisco:ios:12.2zf cpe:/o:cisco:ios:12.2zg cpe:/o:cisco:ios:12.2zh cpe:/o:cisco:ios:12.2zj cpe:/o:cisco:ios:12.2zl cpe:/o:cisco:ios:12.2zp cpe:/o:cisco:ios:12.3 cpe:/o:cisco:ios:12.3b cpe:/o:cisco:ios:12.3bc cpe:/o:cisco:ios:12.3bw cpe:/o:cisco:ios:12.3ja cpe:/o:cisco:ios:12.3jea cpe:/o:cisco:ios:12.3jeb cpe:/o:cisco:ios:12.3jec cpe:/o:cisco:ios:12.3jed cpe:/o:cisco:ios:12.3jk cpe:/o:cisco:ios:12.3jl cpe:/o:cisco:ios:12.3jx cpe:/o:cisco:ios:12.3t cpe:/o:cisco:ios:12.3tpc cpe:/o:cisco:ios:12.3xa cpe:/o:cisco:ios:12.3xb cpe:/o:cisco:ios:12.3xc cpe:/o:cisco:ios:12.3xd cpe:/o:cisco:ios:12.3xe cpe:/o:cisco:ios:12.3xf cpe:/o:cisco:ios:12.3xg cpe:/o:cisco:ios:12.3xi cpe:/o:cisco:ios:12.3xj cpe:/o:cisco:ios:12.3xk cpe:/o:cisco:ios:12.3xl cpe:/o:cisco:ios:12.3xq cpe:/o:cisco:ios:12.3xr cpe:/o:cisco:ios:12.3xs cpe:/o:cisco:ios:12.3xu cpe:/o:cisco:ios:12.3xw cpe:/o:cisco:ios:12.3xx cpe:/o:cisco:ios:12.3xy cpe:/o:cisco:ios:12.3xz cpe:/o:cisco:ios:12.3ya cpe:/o:cisco:ios:12.3yd cpe:/o:cisco:ios:12.3yf cpe:/o:cisco:ios:12.3yg cpe:/o:cisco:ios:12.3yh cpe:/o:cisco:ios:12.3yi cpe:/o:cisco:ios:12.3yj cpe:/o:cisco:ios:12.3yk cpe:/o:cisco:ios:12.3ym cpe:/o:cisco:ios:12.3yq cpe:/o:cisco:ios:12.3ys cpe:/o:cisco:ios:12.3yt cpe:/o:cisco:ios:12.3yu cpe:/o:cisco:ios:12.3yx cpe:/o:cisco:ios:12.3yz cpe:/o:cisco:ios:12.3za cpe:/o:cisco:ios:12.4 cpe:/o:cisco:ios:12.4gc cpe:/o:cisco:ios:12.4ja cpe:/o:cisco:ios:12.4jda cpe:/o:cisco:ios:12.4jdc cpe:/o:cisco:ios:12.4jdd cpe:/o:cisco:ios:12.4jk cpe:/o:cisco:ios:12.4jl cpe:/o:cisco:ios:12.4jma cpe:/o:cisco:ios:12.4jmb cpe:/o:cisco:ios:12.4jx cpe:/o:cisco:ios:12.4md cpe:/o:cisco:ios:12.4mda cpe:/o:cisco:ios:12.4mr cpe:/o:cisco:ios:12.4sw cpe:/o:cisco:ios:12.4t cpe:/o:cisco:ios:12.4xa cpe:/o:cisco:ios:12.4xb cpe:/o:cisco:ios:12.4xc cpe:/o:cisco:ios:12.4xd cpe:/o:cisco:ios:12.4xe cpe:/o:cisco:ios:12.4xf cpe:/o:cisco:ios:12.4xg cpe:/o:cisco:ios:12.4xj cpe:/o:cisco:ios:12.4xk cpe:/o:cisco:ios:12.4xl cpe:/o:cisco:ios:12.4xm cpe:/o:cisco:ios:12.4xn cpe:/o:cisco:ios:12.4xp cpe:/o:cisco:ios:12.4xq cpe:/o:cisco:ios:12.4xr cpe:/o:cisco:ios:12.4xt cpe:/o:cisco:ios:12.4xv cpe:/o:cisco:ios:12.4xw cpe:/o:cisco:ios:12.4xy cpe:/o:cisco:ios:12.4xz cpe:/o:cisco:ios:12.4ya cpe:/o:cisco:ios:12.4yb cpe:/o:cisco:ios:12.4yd cpe:/o:cisco:ios:12.4ye cpe:/o:cisco:ios:12.4yg

CVE-2010-0577

2010-03-25T17:00:00.687-04:00

2017-08-16T21:32:02.337-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CISCO 20100324 Cisco IOS Software Crafted TCP Packet Denial of Service Vulnerability BID 38930 SECTRACK 1023743 VUPEN ADV-2010-0703 XF ciscoios-tcpsegment-dos(57129) Cisco IOS 12.2 through 12.4, when certain PMTUD, SNAT, or window-size configurations are used, allows remote attackers to cause a denial of service (infinite loop, and device reload or hang) via a TCP segment with crafted options, aka Bug ID CSCsz75186.

cpe:/o:cisco:ios:12.2sb cpe:/o:cisco:ios:12.2sca cpe:/o:cisco:ios:12.2scb cpe:/o:cisco:ios:12.2scc cpe:/o:cisco:ios:12.2sra cpe:/o:cisco:ios:12.3t cpe:/o:cisco:ios:12.3xe cpe:/o:cisco:ios:12.3xj cpe:/o:cisco:ios:12.3xr cpe:/o:cisco:ios:12.3xu cpe:/o:cisco:ios:12.3xw cpe:/o:cisco:ios:12.3xx cpe:/o:cisco:ios:12.3yf cpe:/o:cisco:ios:12.3yg cpe:/o:cisco:ios:12.3yk cpe:/o:cisco:ios:12.3yq cpe:/o:cisco:ios:12.3ys cpe:/o:cisco:ios:12.3yu cpe:/o:cisco:ios:12.3yx cpe:/o:cisco:ios:12.3za cpe:/o:cisco:ios:12.4 cpe:/o:cisco:ios:12.4gc cpe:/o:cisco:ios:12.4ja cpe:/o:cisco:ios:12.4jda cpe:/o:cisco:ios:12.4jdc cpe:/o:cisco:ios:12.4jdd cpe:/o:cisco:ios:12.4jk cpe:/o:cisco:ios:12.4jl cpe:/o:cisco:ios:12.4jma cpe:/o:cisco:ios:12.4jmb cpe:/o:cisco:ios:12.4jx cpe:/o:cisco:ios:12.4md cpe:/o:cisco:ios:12.4mda cpe:/o:cisco:ios:12.4mr cpe:/o:cisco:ios:12.4sw cpe:/o:cisco:ios:12.4t cpe:/o:cisco:ios:12.4xa cpe:/o:cisco:ios:12.4xb cpe:/o:cisco:ios:12.4xc cpe:/o:cisco:ios:12.4xd cpe:/o:cisco:ios:12.4xe cpe:/o:cisco:ios:12.4xf cpe:/o:cisco:ios:12.4xg cpe:/o:cisco:ios:12.4xj cpe:/o:cisco:ios:12.4xk cpe:/o:cisco:ios:12.4xl cpe:/o:cisco:ios:12.4xm cpe:/o:cisco:ios:12.4xn cpe:/o:cisco:ios:12.4xp cpe:/o:cisco:ios:12.4xq cpe:/o:cisco:ios:12.4xr cpe:/o:cisco:ios:12.4xt cpe:/o:cisco:ios:12.4xv cpe:/o:cisco:ios:12.4xw cpe:/o:cisco:ios:12.4xy cpe:/o:cisco:ios:12.4xz cpe:/o:cisco:ios:12.4ya cpe:/o:cisco:ios:12.4yb cpe:/o:cisco:ios:12.4yd cpe:/o:cisco:ios:12.4ye cpe:/o:cisco:ios:12.4yg

CVE-2010-0578

2010-03-25T17:00:00.733-04:00

2017-08-16T21:32:02.413-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20100324 Cisco IOS Software IPsec Vulnerability BID 38932 SECTRACK 1023741 VUPEN ADV-2010-0709 XF ciscoios-vpn-dos(57148) The IKE implementation in Cisco IOS 12.2 through 12.4 on Cisco 7200 and 7301 routers with VAM2+ allows remote attackers to cause a denial of service (device reload) via a malformed IKE packet, aka Bug ID CSCtb13491.

cpe:/o:cisco:ios:12.3jk cpe:/o:cisco:ios:12.3t cpe:/o:cisco:ios:12.3xd cpe:/o:cisco:ios:12.3xf cpe:/o:cisco:ios:12.3xg cpe:/o:cisco:ios:12.3xi cpe:/o:cisco:ios:12.3xj cpe:/o:cisco:ios:12.3xk cpe:/o:cisco:ios:12.3xl cpe:/o:cisco:ios:12.3xq cpe:/o:cisco:ios:12.3xr cpe:/o:cisco:ios:12.3xu cpe:/o:cisco:ios:12.3xw cpe:/o:cisco:ios:12.3xx cpe:/o:cisco:ios:12.3xy cpe:/o:cisco:ios:12.3yf cpe:/o:cisco:ios:12.3yg cpe:/o:cisco:ios:12.3yk cpe:/o:cisco:ios:12.3ym cpe:/o:cisco:ios:12.3yq cpe:/o:cisco:ios:12.3ys cpe:/o:cisco:ios:12.3yt cpe:/o:cisco:ios:12.3yu cpe:/o:cisco:ios:12.3yx cpe:/o:cisco:ios:12.3yz cpe:/o:cisco:ios:12.3za cpe:/o:cisco:ios:12.4 cpe:/o:cisco:ios:12.4gc cpe:/o:cisco:ios:12.4md cpe:/o:cisco:ios:12.4mda cpe:/o:cisco:ios:12.4mr cpe:/o:cisco:ios:12.4t cpe:/o:cisco:ios:12.4xa cpe:/o:cisco:ios:12.4xb cpe:/o:cisco:ios:12.4xd cpe:/o:cisco:ios:12.4xp cpe:/o:cisco:ios:12.4xr cpe:/o:cisco:ios:12.4xt cpe:/o:cisco:ios:12.4ya cpe:/o:cisco:ios:12.4yb cpe:/o:cisco:ios:12.4yd cpe:/o:cisco:ios:12.4ye cpe:/o:cisco:ios:12.4yg

CVE-2010-0579

2010-03-25T17:00:00.767-04:00

2010-04-13T01:43:30.767-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1023744 CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=20063 CISCO 20100324 Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities The SIP implementation in Cisco IOS 12.3 and 12.4 allows remote attackers to cause a denial of service (device reload) via a malformed SIP message, aka Bug ID CSCtb93416, the "SIP Message Handling Denial of Service Vulnerability."

CVE-2010-0580

2010-03-25T17:00:00.797-04:00

2010-04-13T01:43:30.920-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1023744 CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=20064 CISCO 20100324 Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities Unspecified vulnerability in the SIP implementation in Cisco IOS 12.3 and 12.4 allows remote attackers to execute arbitrary code via a malformed SIP message, aka Bug ID CSCsz48680, the "SIP Message Processing Arbitrary Code Execution Vulnerability."

cpe:/o:cisco:ios:12.3jk cpe:/o:cisco:ios:12.3t cpe:/o:cisco:ios:12.3xd cpe:/o:cisco:ios:12.3xf cpe:/o:cisco:ios:12.3xg cpe:/o:cisco:ios:12.3xi cpe:/o:cisco:ios:12.3xj cpe:/o:cisco:ios:12.3xk cpe:/o:cisco:ios:12.3xl cpe:/o:cisco:ios:12.3xq cpe:/o:cisco:ios:12.3xr cpe:/o:cisco:ios:12.3xu cpe:/o:cisco:ios:12.3xw cpe:/o:cisco:ios:12.3xx cpe:/o:cisco:ios:12.3xy cpe:/o:cisco:ios:12.3xz cpe:/o:cisco:ios:12.3yf cpe:/o:cisco:ios:12.3yg cpe:/o:cisco:ios:12.3yk cpe:/o:cisco:ios:12.3ym cpe:/o:cisco:ios:12.3yq cpe:/o:cisco:ios:12.3ys cpe:/o:cisco:ios:12.3yt cpe:/o:cisco:ios:12.3yu cpe:/o:cisco:ios:12.3yx cpe:/o:cisco:ios:12.3yz cpe:/o:cisco:ios:12.3za cpe:/o:cisco:ios:12.4 cpe:/o:cisco:ios:12.4gc cpe:/o:cisco:ios:12.4md cpe:/o:cisco:ios:12.4mda cpe:/o:cisco:ios:12.4mr cpe:/o:cisco:ios:12.4t cpe:/o:cisco:ios:12.4xa cpe:/o:cisco:ios:12.4xb cpe:/o:cisco:ios:12.4xd cpe:/o:cisco:ios:12.4xp cpe:/o:cisco:ios:12.4xr cpe:/o:cisco:ios:12.4xt cpe:/o:cisco:ios:12.4ya cpe:/o:cisco:ios:12.4yb cpe:/o:cisco:ios:12.4yd cpe:/o:cisco:ios:12.4ye cpe:/o:cisco:ios:12.4yg

CVE-2010-0581

2010-03-25T17:00:00.827-04:00

2010-04-13T01:43:31.063-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1023744 CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=20065 CISCO 20100324 Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities Unspecified vulnerability in the SIP implementation in Cisco IOS 12.3 and 12.4 allows remote attackers to execute arbitrary code via a malformed SIP message, aka Bug ID CSCsz89904, the "SIP Packet Parsing Arbitrary Code Execution Vulnerability."

cpe:/o:cisco:ios:12.1xu cpe:/o:cisco:ios:12.1yd cpe:/o:cisco:ios:12.2b cpe:/o:cisco:ios:12.2bw cpe:/o:cisco:ios:12.2bx cpe:/o:cisco:ios:12.2by cpe:/o:cisco:ios:12.2cz cpe:/o:cisco:ios:12.2mc cpe:/o:cisco:ios:12.2t cpe:/o:cisco:ios:12.2tpc cpe:/o:cisco:ios:12.2xa cpe:/o:cisco:ios:12.2xb cpe:/o:cisco:ios:12.2xc cpe:/o:cisco:ios:12.2xd cpe:/o:cisco:ios:12.2xg cpe:/o:cisco:ios:12.2xh cpe:/o:cisco:ios:12.2xi cpe:/o:cisco:ios:12.2xj cpe:/o:cisco:ios:12.2xk cpe:/o:cisco:ios:12.2xl cpe:/o:cisco:ios:12.2xm cpe:/o:cisco:ios:12.2xq cpe:/o:cisco:ios:12.2xt cpe:/o:cisco:ios:12.2xu cpe:/o:cisco:ios:12.2xv cpe:/o:cisco:ios:12.2xw cpe:/o:cisco:ios:12.2ya cpe:/o:cisco:ios:12.2yb cpe:/o:cisco:ios:12.2yc cpe:/o:cisco:ios:12.2yd cpe:/o:cisco:ios:12.2yf cpe:/o:cisco:ios:12.2yh cpe:/o:cisco:ios:12.2yj cpe:/o:cisco:ios:12.2yl cpe:/o:cisco:ios:12.2ym cpe:/o:cisco:ios:12.2yn cpe:/o:cisco:ios:12.2yt cpe:/o:cisco:ios:12.2yu cpe:/o:cisco:ios:12.2yv cpe:/o:cisco:ios:12.2yw cpe:/o:cisco:ios:12.2yy cpe:/o:cisco:ios:12.2zc cpe:/o:cisco:ios:12.2zd cpe:/o:cisco:ios:12.2ze cpe:/o:cisco:ios:12.2zf cpe:/o:cisco:ios:12.2zh cpe:/o:cisco:ios:12.2zj cpe:/o:cisco:ios:12.2zl cpe:/o:cisco:ios:12.2zp cpe:/o:cisco:ios:12.3 cpe:/o:cisco:ios:12.3b cpe:/o:cisco:ios:12.3t cpe:/o:cisco:ios:12.3xa cpe:/o:cisco:ios:12.3xb cpe:/o:cisco:ios:12.3xc cpe:/o:cisco:ios:12.3xd cpe:/o:cisco:ios:12.3xe cpe:/o:cisco:ios:12.3xf cpe:/o:cisco:ios:12.3xg cpe:/o:cisco:ios:12.3xi cpe:/o:cisco:ios:12.3xj cpe:/o:cisco:ios:12.3xk cpe:/o:cisco:ios:12.3xl cpe:/o:cisco:ios:12.3xq cpe:/o:cisco:ios:12.3xr cpe:/o:cisco:ios:12.3xu cpe:/o:cisco:ios:12.3xw cpe:/o:cisco:ios:12.3xx cpe:/o:cisco:ios:12.3xy cpe:/o:cisco:ios:12.3xz cpe:/o:cisco:ios:12.3yf cpe:/o:cisco:ios:12.3yg cpe:/o:cisco:ios:12.3yk cpe:/o:cisco:ios:12.3ym cpe:/o:cisco:ios:12.3yq cpe:/o:cisco:ios:12.3ys cpe:/o:cisco:ios:12.3yt cpe:/o:cisco:ios:12.3yu cpe:/o:cisco:ios:12.3yx cpe:/o:cisco:ios:12.3yz cpe:/o:cisco:ios:12.3za cpe:/o:cisco:ios:12.4 cpe:/o:cisco:ios:12.4gc cpe:/o:cisco:ios:12.4mr cpe:/o:cisco:ios:12.4t cpe:/o:cisco:ios:12.4xa cpe:/o:cisco:ios:12.4xb cpe:/o:cisco:ios:12.4xc cpe:/o:cisco:ios:12.4xd cpe:/o:cisco:ios:12.4xe cpe:/o:cisco:ios:12.4xj cpe:/o:cisco:ios:12.4xl cpe:/o:cisco:ios:12.4xp cpe:/o:cisco:ios:12.4xt cpe:/o:cisco:ios:12.4xv cpe:/o:cisco:ios:12.4xw cpe:/o:cisco:ios:12.4xy cpe:/o:cisco:ios:12.4xz cpe:/o:cisco:ios:12.4ya cpe:/o:cisco:ios:12.4yb cpe:/o:cisco:ios:15.0m

CVE-2010-0582

2010-03-25T17:00:00.860-04:00

2010-04-13T01:43:31.217-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20100324 Cisco IOS Software H.323 Denial of Service Vulnerabilities SECTRACK 1023742 VUPEN ADV-2010-0706 Cisco IOS 12.1 through 12.4, and 15.0M before 15.0(1)M1, allows remote attackers to cause a denial of service (interface queue wedge) via malformed H.323 packets, aka Bug ID CSCta19962.

cpe:/o:cisco:ios:12.1xu cpe:/o:cisco:ios:12.1yd cpe:/o:cisco:ios:12.2b

CVE-2010-0583

2010-03-25T17:00:00.877-04:00

2017-08-16T21:32:02.477-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20100324 Cisco IOS Software H.323 Denial of Service Vulnerabilities BID 38934 SECTRACK 1023742 VUPEN ADV-2010-0706 XF ciscoios-memory-dos(57140) Memory leak in the H.323 implementation in Cisco IOS 12.1 through 12.4, and 15.0M before 15.0(1)M1, allows remote attackers to cause a denial of service (memory consumption and device reload) via malformed H.323 packets, aka Bug ID CSCtb93855.

cpe:/o:cisco:ios:12.4gc cpe:/o:cisco:ios:12.4md cpe:/o:cisco:ios:12.4mda cpe:/o:cisco:ios:12.4sw cpe:/o:cisco:ios:12.4t cpe:/o:cisco:ios:12.4xe cpe:/o:cisco:ios:12.4xf cpe:/o:cisco:ios:12.4xg cpe:/o:cisco:ios:12.4xj cpe:/o:cisco:ios:12.4xk cpe:/o:cisco:ios:12.4xl cpe:/o:cisco:ios:12.4xm cpe:/o:cisco:ios:12.4xn cpe:/o:cisco:ios:12.4xp cpe:/o:cisco:ios:12.4xq cpe:/o:cisco:ios:12.4xr cpe:/o:cisco:ios:12.4xt cpe:/o:cisco:ios:12.4xv cpe:/o:cisco:ios:12.4xw cpe:/o:cisco:ios:12.4xy cpe:/o:cisco:ios:12.4xz cpe:/o:cisco:ios:12.4ya cpe:/o:cisco:ios:12.4yb cpe:/o:cisco:ios:12.4yd cpe:/o:cisco:ios:12.4ye cpe:/o:cisco:ios:12.4yg

CVE-2010-0584

2010-03-25T17:00:00.907-04:00

2010-07-13T01:50:11.343-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20100324 Cisco IOS Software NAT Skinny Call Control Protocol Vulnerability SECTRACK 1023739 VUPEN ADV-2010-0708 Unspecified vulnerability in Cisco IOS 12.4, when NAT SCCP fragmentation support is enabled, allows remote attackers to cause a denial of service (device reload) via crafted Skinny Client Control Protocol (SCCP) packets, aka Bug ID CSCsy09250.

cpe:/o:cisco:ios:12.1yd cpe:/o:cisco:ios:12.1ye cpe:/o:cisco:ios:12.1yi cpe:/o:cisco:ios:12.2b cpe:/o:cisco:ios:12.2bx cpe:/o:cisco:ios:12.2by cpe:/o:cisco:ios:12.2mc cpe:/o:cisco:ios:12.2t cpe:/o:cisco:ios:12.2tpc cpe:/o:cisco:ios:12.2xb cpe:/o:cisco:ios:12.2xg cpe:/o:cisco:ios:12.2xm cpe:/o:cisco:ios:12.2xt cpe:/o:cisco:ios:12.2xu cpe:/o:cisco:ios:12.2xw cpe:/o:cisco:ios:12.2ya cpe:/o:cisco:ios:12.2yb cpe:/o:cisco:ios:12.2yc cpe:/o:cisco:ios:12.2yd cpe:/o:cisco:ios:12.2yh cpe:/o:cisco:ios:12.2yj cpe:/o:cisco:ios:12.2yl cpe:/o:cisco:ios:12.2ym cpe:/o:cisco:ios:12.2yn cpe:/o:cisco:ios:12.2yt cpe:/o:cisco:ios:12.2yu cpe:/o:cisco:ios:12.2yv cpe:/o:cisco:ios:12.2yw cpe:/o:cisco:ios:12.2yy cpe:/o:cisco:ios:12.2zb cpe:/o:cisco:ios:12.2zc cpe:/o:cisco:ios:12.2zd cpe:/o:cisco:ios:12.2ze cpe:/o:cisco:ios:12.2zf cpe:/o:cisco:ios:12.2zh cpe:/o:cisco:ios:12.2zj cpe:/o:cisco:ios:12.2zl cpe:/o:cisco:ios:12.2zp cpe:/o:cisco:ios:12.3 cpe:/o:cisco:ios:12.3b cpe:/o:cisco:ios:12.3jk cpe:/o:cisco:ios:12.3t cpe:/o:cisco:ios:12.3tpc cpe:/o:cisco:ios:12.3xa cpe:/o:cisco:ios:12.3xb cpe:/o:cisco:ios:12.3xc cpe:/o:cisco:ios:12.3xd cpe:/o:cisco:ios:12.3xe cpe:/o:cisco:ios:12.3xf cpe:/o:cisco:ios:12.3xg cpe:/o:cisco:ios:12.3xi cpe:/o:cisco:ios:12.3xj cpe:/o:cisco:ios:12.3xk cpe:/o:cisco:ios:12.3xl cpe:/o:cisco:ios:12.3xq cpe:/o:cisco:ios:12.3xr cpe:/o:cisco:ios:12.3xu cpe:/o:cisco:ios:12.3xw cpe:/o:cisco:ios:12.3xx cpe:/o:cisco:ios:12.3xy cpe:/o:cisco:ios:12.3xz cpe:/o:cisco:ios:12.3yf cpe:/o:cisco:ios:12.3yg cpe:/o:cisco:ios:12.3yk cpe:/o:cisco:ios:12.3ym cpe:/o:cisco:ios:12.3yq cpe:/o:cisco:ios:12.3ys cpe:/o:cisco:ios:12.3yt cpe:/o:cisco:ios:12.3yu cpe:/o:cisco:ios:12.3yx cpe:/o:cisco:ios:12.3yz cpe:/o:cisco:ios:12.3za cpe:/o:cisco:ios:12.4 cpe:/o:cisco:ios:12.4gc cpe:/o:cisco:ios:12.4mr cpe:/o:cisco:ios:12.4t cpe:/o:cisco:ios:12.4xa cpe:/o:cisco:ios:12.4xb cpe:/o:cisco:ios:12.4xc cpe:/o:cisco:ios:12.4xd cpe:/o:cisco:ios:12.4xe cpe:/o:cisco:ios:12.4xg cpe:/o:cisco:ios:12.4xj cpe:/o:cisco:ios:12.4xl cpe:/o:cisco:ios:12.4xm cpe:/o:cisco:ios:12.4xp cpe:/o:cisco:ios:12.4xt cpe:/o:cisco:ios:12.4xv cpe:/o:cisco:ios:12.4xw cpe:/o:cisco:ios:12.4xy cpe:/o:cisco:ios:12.4xz cpe:/o:cisco:ios:12.4ya cpe:/o:cisco:ios:12.4yb

CVE-2010-0585

2010-03-25T17:00:00.937-04:00

2010-04-01T01:40:04.813-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=20069 CISCO 20100324 Cisco Unified Communications Manager Express Denial of Service Vulnerabilities Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony (SRST) is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed Skinny Client Control Protocol (SCCP) message, aka Bug ID CSCsz48614, the "SCCP Packet Processing Denial of Service Vulnerability."

CVE-2010-0586

2010-03-25T17:00:00.967-04:00

2017-09-18T21:30:26.767-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=20070 CISCO 20100324 Cisco Unified Communications Manager Express Denial of Service Vulnerabilities Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony (SRST) is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed Skinny Client Control Protocol (SCCP) message, aka Bug ID CSCsz49741, the "SCCP Request Handling Denial of Service Vulnerability."

cpe:/a:cisco:unified_communications_manager:4.1 cpe:/a:cisco:unified_communications_manager:4.1:%283%29sr.5 cpe:/a:cisco:unified_communications_manager:4.1:%283%29sr4 cpe:/a:cisco:unified_communications_manager:4.1:%283%29sr5 cpe:/a:cisco:unified_communications_manager:4.1:%283%29sr5b cpe:/a:cisco:unified_communications_manager:4.1:%283%29sr5c cpe:/a:cisco:unified_communications_manager:4.1%283%29 cpe:/a:cisco:unified_communications_manager:4.1%283%29sr1 cpe:/a:cisco:unified_communications_manager:4.1%283%29sr2 cpe:/a:cisco:unified_communications_manager:4.1%283%29sr3 cpe:/a:cisco:unified_communications_manager:4.1%283%29sr4 cpe:/a:cisco:unified_communications_manager:4.1.1 cpe:/a:cisco:unified_communications_manager:4.1.2 cpe:/a:cisco:unified_communications_manager:4.1.3 cpe:/a:cisco:unified_communications_manager:4.2 cpe:/a:cisco:unified_communications_manager:4.2:4.2%283%29sr.2 cpe:/a:cisco:unified_communications_manager:4.2:4.2_%283%29sr2b cpe:/a:cisco:unified_communications_manager:4.2:4.2_%283%29sr3 cpe:/a:cisco:unified_communications_manager:4.2%283%29sr1 cpe:/a:cisco:unified_communications_manager:4.2%283%29sr2b cpe:/a:cisco:unified_communications_manager:4.2%283%29sr3 cpe:/a:cisco:unified_communications_manager:4.2%283%29sr4 cpe:/a:cisco:unified_communications_manager:4.2.1 cpe:/a:cisco:unified_communications_manager:4.2.2 cpe:/a:cisco:unified_communications_manager:4.2.3 cpe:/a:cisco:unified_communications_manager:4.2.3_sr3 cpe:/a:cisco:unified_communications_manager:4.2.3sr1 cpe:/a:cisco:unified_communications_manager:4.2.3sr2 cpe:/a:cisco:unified_communications_manager:4.2.3sr2b cpe:/a:cisco:unified_communications_manager:4.2_1 cpe:/a:cisco:unified_communications_manager:4.2_2 cpe:/a:cisco:unified_communications_manager:4.2_3 cpe:/a:cisco:unified_communications_manager:4.2_3sr1 cpe:/a:cisco:unified_communications_manager:4.3 cpe:/a:cisco:unified_communications_manager:4.3:4.3%281%29sr.1 cpe:/a:cisco:unified_communications_manager:4.3%281%29 cpe:/a:cisco:unified_communications_manager:4.3%281%29sr.1 cpe:/a:cisco:unified_communications_manager:4.3%282%29 cpe:/a:cisco:unified_communications_manager:4.3%282%29sr1 cpe:/a:cisco:unified_communications_manager:4.3.1 cpe:/a:cisco:unified_communications_manager:4.3_1 cpe:/a:cisco:unified_communications_manager:6.0 cpe:/a:cisco:unified_communications_manager:6.0%281%29 cpe:/a:cisco:unified_communications_manager:6.0%281a%29 cpe:/a:cisco:unified_communications_manager:6.1 cpe:/a:cisco:unified_communications_manager:6.1:%281a%29 cpe:/a:cisco:unified_communications_manager:6.1%281%29 cpe:/a:cisco:unified_communications_manager:6.1%281a%29 cpe:/a:cisco:unified_communications_manager:6.1%281b%29 cpe:/a:cisco:unified_communications_manager:6.1%282%29 cpe:/a:cisco:unified_communications_manager:6.1%282%29su1 cpe:/a:cisco:unified_communications_manager:6.1%282%29su1a cpe:/a:cisco:unified_communications_manager:6.1%283%29 cpe:/a:cisco:unified_communications_manager:6.1%284%29 cpe:/a:cisco:unified_communications_manager:6.1.0 cpe:/a:cisco:unified_communications_manager:7.0 cpe:/a:cisco:unified_communications_manager:7.0%281%29 cpe:/a:cisco:unified_communications_manager:7.0%282%29 cpe:/a:cisco:unified_communications_manager:7.1 cpe:/a:cisco:unified_communications_manager:8.0

CVE-2010-0587

2010-03-05T11:30:00.740-05:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2010-03-05T15:58:00.000-05:00

SECTRACK 1023670 CISCO 20100303 Cisco Unified Communications Manager Denial of Service Vulnerabilities BID 38496 Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x before 4.3(2)SR2, 6.x before 6.1(5), 7.x before 7.1(3a)su1, and 8.x before 8.0(1) allows remote attackers to cause a denial of service (process failure) via a malformed SCCP StationCapabilitiesRes message with an invalid MaxCap field, aka Bug ID CSCtc38985.

cpe:/a:cisco:unified_communications_manager:6.0 cpe:/a:cisco:unified_communications_manager:6.0%281%29 cpe:/a:cisco:unified_communications_manager:6.0%281a%29 cpe:/a:cisco:unified_communications_manager:6.1 cpe:/a:cisco:unified_communications_manager:6.1:%281a%29 cpe:/a:cisco:unified_communications_manager:6.1%281%29 cpe:/a:cisco:unified_communications_manager:6.1%281a%29 cpe:/a:cisco:unified_communications_manager:6.1%281b%29 cpe:/a:cisco:unified_communications_manager:6.1%282%29 cpe:/a:cisco:unified_communications_manager:6.1%282%29su1 cpe:/a:cisco:unified_communications_manager:6.1%282%29su1a cpe:/a:cisco:unified_communications_manager:6.1%283%29 cpe:/a:cisco:unified_communications_manager:6.1%284%29 cpe:/a:cisco:unified_communications_manager:6.1.0 cpe:/a:cisco:unified_communications_manager:7.0 cpe:/a:cisco:unified_communications_manager:7.0%281%29 cpe:/a:cisco:unified_communications_manager:7.0%282%29 cpe:/a:cisco:unified_communications_manager:7.1 cpe:/a:cisco:unified_communications_manager:8.0

CVE-2010-0588

2010-03-05T11:30:00.770-05:00

2010-03-05T16:21:21.530-05:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2010-03-05T16:17:00.000-05:00

SECTRACK 1023670 CISCO 20100303 Cisco Unified Communications Manager Denial of Service Vulnerabilities BID 38501 Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5), 7.x before 7.1(3a)su1, and 8.x before 8.0(1) allows remote attackers to cause a denial of service (process failure) via a malformed SCCP (1) RegAvailableLines or (2) FwdStatReq message with an invalid Line number, aka Bug ID CSCtc47823.

cpe:/a:cisco:secure_desktop:3.1 cpe:/a:cisco:secure_desktop:3.1.1 cpe:/a:cisco:secure_desktop:3.1.1.27 cpe:/a:cisco:secure_desktop:3.1.1.33 cpe:/a:cisco:secure_desktop:3.2 cpe:/a:cisco:secure_desktop:3.2.1 cpe:/a:cisco:secure_desktop:3.3 cpe:/a:cisco:secure_desktop:3.4 cpe:/a:cisco:secure_desktop:3.4.1 cpe:/a:cisco:secure_desktop:3.4.2 cpe:/a:cisco:secure_desktop:3.4.2048 cpe:/a:cisco:secure_desktop:3.5

CVE-2010-0589

2010-04-15T13:30:00.523-04:00

2017-08-16T21:32:02.523-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1023881 CISCO 20100414 Cisco Secure Desktop ActiveX Control Code Execution Vulnerability BID 39478 MISC http://www.zerodayinitiative.com/advisories/ZDI-10-072/ XF cisco-csdwebinstaller-code-execution(57812) The Web Install ActiveX control (CSDWebInstaller) in Cisco Secure Desktop (CSD) before 3.5.841 does not properly verify the signatures of downloaded programs, which allows remote attackers to force the download and execution of arbitrary files via a crafted web page, aka Bug ID CSCta25876.

cpe:/a:cisco:unified_communications_manager:7.0 cpe:/a:cisco:unified_communications_manager:7.0%281%29 cpe:/a:cisco:unified_communications_manager:7.0%282%29 cpe:/a:cisco:unified_communications_manager:7.1 cpe:/a:cisco:unified_communications_manager:8.0

CVE-2010-0590

2010-03-05T11:30:00.800-05:00

2010-03-05T16:29:56.647-05:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2010-03-05T16:28:00.000-05:00

SECTRACK 1023670 CISCO 20100303 Cisco Unified Communications Manager Denial of Service Vulnerabilities BID 38495 The CMSIPUtility component in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7.x before 7.1(3a)su1 and 8.x before 8.0(1) allows remote attackers to cause a denial of service (process failure) via a malformed SIP Register message, aka Bug ID CSCtc37188.

cpe:/a:cisco:unified_communications_manager:6.0 cpe:/a:cisco:unified_communications_manager:6.0%281%29 cpe:/a:cisco:unified_communications_manager:6.0%281a%29 cpe:/a:cisco:unified_communications_manager:6.1 cpe:/a:cisco:unified_communications_manager:6.1%281%29 cpe:/a:cisco:unified_communications_manager:6.1%281a%29 cpe:/a:cisco:unified_communications_manager:6.1%281b%29 cpe:/a:cisco:unified_communications_manager:6.1%282%29 cpe:/a:cisco:unified_communications_manager:6.1%282%29su1 cpe:/a:cisco:unified_communications_manager:6.1%282%29su1a cpe:/a:cisco:unified_communications_manager:6.1%283%29 cpe:/a:cisco:unified_communications_manager:6.1%284%29 cpe:/a:cisco:unified_communications_manager:6.1.0 cpe:/a:cisco:unified_communications_manager:7.0 cpe:/a:cisco:unified_communications_manager:7.0%281%29 cpe:/a:cisco:unified_communications_manager:7.0%282%29 cpe:/a:cisco:unified_communications_manager:7.1 cpe:/a:cisco:unified_communications_manager:8.0

CVE-2010-0591

2010-03-05T11:30:00.833-05:00

2010-03-05T16:43:28.520-05:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2010-03-05T16:40:00.000-05:00

SECTRACK 1023670 CISCO 20100303 Cisco Unified Communications Manager Denial of Service Vulnerabilities BID 38498 Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5), 7.x before 7.1(3b)SU2, and 8.x before 8.0(1) allows remote attackers to cause a denial of service (process failure) via a malformed SIP REG message, related to an overflow of the Telephone-URL field, aka Bug ID CSCtc62362.

cpe:/a:cisco:unified_communications_manager:4.1 cpe:/a:cisco:unified_communications_manager:4.1:%283%29sr.5 cpe:/a:cisco:unified_communications_manager:4.1:%283%29sr4 cpe:/a:cisco:unified_communications_manager:4.1:%283%29sr5 cpe:/a:cisco:unified_communications_manager:4.1:%283%29sr5b cpe:/a:cisco:unified_communications_manager:4.1:%283%29sr5c cpe:/a:cisco:unified_communications_manager:4.1%283%29 cpe:/a:cisco:unified_communications_manager:4.1%283%29sr1 cpe:/a:cisco:unified_communications_manager:4.1%283%29sr2 cpe:/a:cisco:unified_communications_manager:4.1%283%29sr3 cpe:/a:cisco:unified_communications_manager:4.1%283%29sr4 cpe:/a:cisco:unified_communications_manager:4.1.1 cpe:/a:cisco:unified_communications_manager:4.1.2 cpe:/a:cisco:unified_communications_manager:4.1.3 cpe:/a:cisco:unified_communications_manager:4.2 cpe:/a:cisco:unified_communications_manager:4.2:4.2%283%29sr.2 cpe:/a:cisco:unified_communications_manager:4.2:4.2_%283%29sr2b cpe:/a:cisco:unified_communications_manager:4.2:4.2_%283%29sr3 cpe:/a:cisco:unified_communications_manager:4.2%283%29sr1 cpe:/a:cisco:unified_communications_manager:4.2%283%29sr2b cpe:/a:cisco:unified_communications_manager:4.2%283%29sr3 cpe:/a:cisco:unified_communications_manager:4.2%283%29sr4 cpe:/a:cisco:unified_communications_manager:4.2.1 cpe:/a:cisco:unified_communications_manager:4.2.2 cpe:/a:cisco:unified_communications_manager:4.2.3 cpe:/a:cisco:unified_communications_manager:4.2.3_sr3 cpe:/a:cisco:unified_communications_manager:4.2.3sr1 cpe:/a:cisco:unified_communications_manager:4.2.3sr2 cpe:/a:cisco:unified_communications_manager:4.2.3sr2b cpe:/a:cisco:unified_communications_manager:4.2_1 cpe:/a:cisco:unified_communications_manager:4.2_2 cpe:/a:cisco:unified_communications_manager:4.2_3 cpe:/a:cisco:unified_communications_manager:4.2_3sr1 cpe:/a:cisco:unified_communications_manager:4.3 cpe:/a:cisco:unified_communications_manager:4.3:4.3%281%29sr.1 cpe:/a:cisco:unified_communications_manager:4.3%281%29 cpe:/a:cisco:unified_communications_manager:4.3%281%29sr.1 cpe:/a:cisco:unified_communications_manager:4.3%282%29 cpe:/a:cisco:unified_communications_manager:4.3%282%29sr1 cpe:/a:cisco:unified_communications_manager:4.3.1 cpe:/a:cisco:unified_communications_manager:4.3_1 cpe:/a:cisco:unified_communications_manager:6.0 cpe:/a:cisco:unified_communications_manager:6.0%281%29 cpe:/a:cisco:unified_communications_manager:6.0%281a%29 cpe:/a:cisco:unified_communications_manager:6.1 cpe:/a:cisco:unified_communications_manager:6.1:%281a%29 cpe:/a:cisco:unified_communications_manager:6.1%281%29 cpe:/a:cisco:unified_communications_manager:6.1%281a%29 cpe:/a:cisco:unified_communications_manager:6.1%281b%29 cpe:/a:cisco:unified_communications_manager:6.1%282%29 cpe:/a:cisco:unified_communications_manager:6.1%282%29su1 cpe:/a:cisco:unified_communications_manager:6.1%282%29su1a cpe:/a:cisco:unified_communications_manager:6.1.0 cpe:/a:cisco:unified_communications_manager:7.0 cpe:/a:cisco:unified_communications_manager:7.0%281%29 cpe:/a:cisco:unified_communications_manager:7.0%282%29 cpe:/a:cisco:unified_communications_manager:7.1 cpe:/a:cisco:unified_communications_manager:8.0

CVE-2010-0592

2010-03-05T11:30:00.863-05:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2010-03-05T20:16:00.000-05:00

SECTRACK 1023670 CISCO 20100303 Cisco Unified Communications Manager Denial of Service Vulnerabilities BID 38497 The CTI Manager service in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x before 4.3(2)sr1a, 6.x before 6.1(3), 7.0x before 7.0(2), 7.1x before 7.1(2), and 8.x before 8.0(1) allows remote attackers to cause a denial of service (service failure) via a malformed message, aka Bug ID CSCsu31800.

cpe:/h:cisco:pvc2300:1.1.1.4 cpe:/h:cisco:rvs4000:1.3.0.5 cpe:/h:cisco:rvs4000:1.3.1.0 cpe:/h:cisco:wvc200:1.1.0.12 cpe:/h:cisco:wvc200:1.1.0.15 cpe:/h:cisco:wvc210:1.1.0.12 cpe:/h:cisco:wvc210:1.1.0.15 cpe:/h:cisco:wvc2300:1.1.1.4

CVE-2010-0593

2010-04-22T10:30:00.853-04:00

2017-08-16T21:32:02.587-04:00

9.0

NETWORK

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov CISCO 20100421 Cisco Small Business Video Surveillance Cameras and Cisco 4-Port Gigabit Security Routers Authentication Bypass Vulnerability BID 39612 SECTRACK 1023906 VUPEN ADV-2010-0965 XF cisco-small-business-unauth-access(58034) The Cisco RVS4000 4-port Gigabit Security Router before 1.3.2.0, PVC2300 Business Internet Video Camera before 1.1.2.6, WVC200 Wireless-G PTZ Internet Video Camera before 1.1.1.15, WVC210 Wireless-G PTZ Internet Video Camera before 1.1.1.15, and WVC2300 Wireless-G Business Internet Video Camera before 1.1.2.6 do not properly restrict read access to passwords, which allows context-dependent attackers to obtain sensitive information, related to (1) access by remote authenticated users to a PVC2300 or WVC2300 via a crafted URL, (2) leveraging setup privileges on a WVC200 or WVC210, and (3) leveraging administrative privileges on an RVS4000, aka Bug ID CSCte64726.

cpe:/a:cisco:router_and_security_device_manager cpe:/a:cisco:router_and_security_device_manager:2.5

CVE-2010-0594

2010-05-04T12:00:35.340-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-05-04T14:44:00.000-04:00

JVN JVN#14313132 JVNDB JVNDB-2010-000014 Cross-site scripting (XSS) vulnerability in Cisco Router and Security Device Manager (SDM) allows remote attackers to inject arbitrary web script or HTML via unknown vectors, aka Bug ID CSCtb38467.

cpe:/a:cisco:mediator_framework:1.5.1 cpe:/a:cisco:mediator_framework:2.2 cpe:/a:cisco:mediator_framework:3.0.8

CVE-2010-0595

2010-05-27T15:30:01.187-04:00

2017-08-16T21:32:02.647-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1024027 CISCO 20100526 Multiple Vulnerabilities in Cisco Network Building Mediator CERT-VN VU#757804 BID 40380 MISC http://www.us-cert.gov/control_systems/pdf/ICSA-10-147-01_Cisco_Network_Building_Mediator.pdf XF cisco-nbn-default-credentials(58893) Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 has a default password for the administrative user account and unspecified other accounts, which makes it easier for remote attackers to obtain privileged access, aka Bug ID CSCtb83495.

cpe:/a:cisco:mediator_framework:2.2 cpe:/a:cisco:mediator_framework:3.0.8

CVE-2010-0596

2010-05-27T15:30:01.313-04:00

2010-06-13T15:16:48.813-04:00

9.0

NETWORK

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov SECTRACK 1024027 CISCO 20100526 Multiple Vulnerabilities in Cisco Network Building Mediator CERT-VN VU#757804 MISC http://www.us-cert.gov/control_systems/pdf/ICSA-10-147-01_Cisco_Network_Building_Mediator.pdf Unspecified vulnerability in Cisco Mediator Framework 2.2 before 2.2.1.dev.1 and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 allows remote authenticated users to read or modify the device configuration, and gain privileges, via a (1) HTTP or (2) HTTPS request, aka Bug ID CSCtb83607.

cpe:/a:cisco:mediator_framework:1.5.1 cpe:/a:cisco:mediator_framework:2.2 cpe:/a:cisco:mediator_framework:3.0.8

CVE-2010-0597

2010-05-27T15:30:01.407-04:00

2010-06-13T15:16:48.953-04:00

9.0

NETWORK

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov SECTRACK 1024027 CISCO 20100526 Multiple Vulnerabilities in Cisco Network Building Mediator CERT-VN VU#757804 BID 40386 MISC http://www.us-cert.gov/control_systems/pdf/ICSA-10-147-01_Cisco_Network_Building_Mediator.pdf Unspecified vulnerability in Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 allows remote authenticated users to read or modify the device configuration, and gain privileges or cause a denial of service (device reload), via a (1) XML RPC or (2) XML RPC over HTTPS request, aka Bug ID CSCtb83618.

cpe:/a:cisco:mediator_framework:1.5.1 cpe:/a:cisco:mediator_framework:2.2 cpe:/a:cisco:mediator_framework:3.0.8

CVE-2010-0598

2010-05-27T15:30:01.437-04:00

2010-06-13T15:16:49.063-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1024027 CISCO 20100526 Multiple Vulnerabilities in Cisco Network Building Mediator CERT-VN VU#757804 MISC http://www.us-cert.gov/control_systems/pdf/ICSA-10-147-01_Cisco_Network_Building_Mediator.pdf Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not encrypt HTTP sessions from operator workstations, which allows remote attackers to discover Administrator credentials by sniffing the network, aka Bug ID CSCtb83631.

cpe:/a:cisco:mediator_framework:1.5.1 cpe:/a:cisco:mediator_framework:2.2 cpe:/a:cisco:mediator_framework:3.0.8

CVE-2010-0599

2010-05-27T15:30:01.563-04:00

2010-06-13T15:16:49.187-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1024027 CISCO 20100526 Multiple Vulnerabilities in Cisco Network Building Mediator CERT-VN VU#757804 MISC http://www.us-cert.gov/control_systems/pdf/ICSA-10-147-01_Cisco_Network_Building_Mediator.pdf Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not encrypt XML RPC sessions from operator workstations, which allows remote attackers to discover Administrator credentials by sniffing the network, aka Bug ID CSCtb83505.

cpe:/a:cisco:mediator_framework:1.5.1 cpe:/a:cisco:mediator_framework:2.2 cpe:/a:cisco:mediator_framework:3.0.8

CVE-2010-0600

2010-05-27T15:30:01.623-04:00

2010-06-13T15:16:49.343-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1024027 CISCO 20100526 Multiple Vulnerabilities in Cisco Network Building Mediator CERT-VN VU#757804 BID 40384 MISC http://www.us-cert.gov/control_systems/pdf/ICSA-10-147-01_Cisco_Network_Building_Mediator.pdf Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not properly restrict network access to an unspecified configuration file, which allows remote attackers to read passwords and unspecified other account details via a (1) XML RPC or (2) XML RPC over HTTPS session, aka Bug ID CSCtb83512.

cpe:/h:cisco:pgw_2200_softswitch:9.7%283%29s cpe:/h:cisco:pgw_2200_softswitch:9.7%283%29s9

CVE-2010-0601

2010-05-14T16:30:01.173-04:00

2010-05-21T01:57:14.453-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20100512 Multiple Vulnerabilities in Cisco PGW Softswitch BID 40117 The MGCP implementation on the Cisco PGW 2200 Softswitch with software before 9.7(3)S11 allows remote attackers to cause a denial of service (device crash) via a malformed packet, aka Bug ID CSCsl39126.

cpe:/h:cisco:pgw_2200_softswitch:9.7%283%29s cpe:/h:cisco:pgw_2200_softswitch:9.7%283%29s9

CVE-2010-0602

2010-05-14T16:30:01.203-04:00

2010-05-21T01:57:14.593-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20100512 Multiple Vulnerabilities in Cisco PGW Softswitch BID 40120 The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.7(3)S11 allows remote attackers to cause a denial of service (device crash) via a malformed packet, aka Bug ID CSCsk32606.

cpe:/h:cisco:pgw_2200_softswitch:9.7%283%29s cpe:/h:cisco:pgw_2200_softswitch:9.7%283%29s9

CVE-2010-0603

2010-05-14T16:30:01.233-04:00

2010-05-20T01:48:23.233-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20100512 Multiple Vulnerabilities in Cisco PGW Softswitch BID 40121 The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.7(3)S10 allows remote attackers to cause a denial of service (device crash) via a malformed session attribute, aka Bug ID CSCsk40030.

cpe:/h:cisco:pgw_2200_softswitch:9.7%283%29s cpe:/h:cisco:pgw_2200_softswitch:9.7%283%29s9

CVE-2010-0604

2010-05-14T16:30:01.267-04:00

2010-05-21T01:57:14.877-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20100512 Multiple Vulnerabilities in Cisco PGW Softswitch BID 40122 Unspecified vulnerability in the SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.7(3)S10 allows remote attackers to cause a denial of service (device crash) via unknown SIP traffic, as demonstrated by "SIP testing," aka Bug ID CSCsk38165.

cpe:/a:osticket:osticket:1 cpe:/a:osticket:osticket:1.2.7 cpe:/a:osticket:osticket:1.3.0 cpe:/a:osticket:osticket:1.6:rc1 cpe:/a:osticket:osticket:1.6:rc2 cpe:/a:osticket:osticket:1.6:rc3 cpe:/a:osticket:osticket:1.6:rc4 cpe:/a:osticket:osticket:1.6:rc5

CVE-2010-0605

2010-02-11T12:30:00.877-05:00

2010-02-12T00:00:00.000-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-02-12T09:02:00.000-05:00

CONFIRM http://osticket.com/forums/project.php?issueid=176 MISC http://packetstormsecurity.org/1002-exploits/osTicket-1.6-RC5-SQLi.pdf EXPLOIT-DB 11380 BID 38166 SQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users, with "Staff" permissions, to execute arbitrary SQL commands via the input parameter.

CVE-2010-0606

2010-02-11T12:30:00.907-05:00

2010-11-03T14:16:45.530-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-02-12T09:06:00.000-05:00

CONFIRM http://osticket.com/forums/project.php?issueid=176 MISC http://packetstormsecurity.org/1002-exploits/osTicket-1.6-RC5-ReflectedXSS.pdf BID 38166 Cross-site scripting (XSS) vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users to inject arbitrary web script or HTML via the f parameter, possibly related to an error message generated by scp/admin.php.

cpe:/h:sterlitetechnologies:sam300_ax_router

CVE-2010-0607

2010-02-11T12:30:00.957-05:00

2010-11-04T00:00:00.000-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-02-12T09:09:00.000-05:00

FULLDISC 20100204 Sterlite SAM300AX ADSL router - Cross Site MISC http://packetstormsecurity.org/1002-exploits/sterlite-xss.txt Cross-site scripting (XSS) vulnerability in Forms/status_statistics_1 in the Sterlite SAM300 AX Router allows remote attackers to inject arbitrary web script or HTML via the Stat_Radio parameter.

cpe:/a:novaboard:novaboard:1.1.2

CVE-2010-0608

2010-02-11T12:30:00.987-05:00

2010-02-12T00:00:00.000-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-02-12T09:31:00.000-05:00

MISC http://packetstormsecurity.org/1001-exploits/novaboard112-sql.txt EXPLOIT-DB 11278 BID 37988 SQL injection vulnerability in index.php in NovaBoard 1.1.2 allows remote attackers to execute arbitrary SQL commands via the forums[] parameter in a search action.

cpe:/a:novaboard:novaboard:1.1.2

CVE-2010-0609

2010-02-11T12:30:01.017-05:00

2010-11-03T13:46:39.857-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-02-12T09:33:00.000-05:00

SQL injection vulnerability in header.php in NovaBoard 1.1.2 allows remote attackers to execute arbitrary SQL commands via the nova_name cookie parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:webguerilla:com_photoblog

CVE-2010-0610

2010-02-11T12:30:01.050-05:00

2017-08-16T21:32:02.743-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://packetstormsecurity.org/1002-exploits/joomlaphotoblog-bsql.txt EXPLOIT-DB 11337 BID 38136 XF photoblog-blog-sql-injection(56135) Multiple SQL injection vulnerabilities in the Photoblog (com_photoblog) component for Joomla! allow remote attackers to execute arbitrary SQL commands via the blog parameter in an images action to index.php. NOTE: a separate vector for the id parameter to detail.php may also exist.

cpe:/a:baalsystems:baal_systems:3.6 cpe:/a:baalsystems:baal_systems:3.7 cpe:/a:baalsystems:baal_systems:3.8

CVE-2010-0611

2010-02-11T12:30:01.097-05:00

2017-08-16T21:32:02.790-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://packetstormsecurity.org/1002-exploits/baalsystems-sql.txt EXPLOIT-DB 11346 BID 38139 XF baalsystems-adminlogin-sql-injection(56147) Multiple SQL injection vulnerabilities in adminlogin.php in Baal Systems 3.8 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.

cpe:/a:dmanager:documentmanager:1.0 cpe:/a:dmanager:documentmanager:1.1 cpe:/a:dmanager:documentmanager:1.2 cpe:/a:dmanager:documentmanager:1.3 cpe:/a:dmanager:documentmanager:2.0 cpe:/a:dmanager:documentmanager:3.0:b

CVE-2010-0612

2010-02-11T12:30:01.127-05:00

2010-03-18T00:00:00.000-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-02-12T09:43:00.000-05:00

CONFIRM http://freshmeat.net/projects/dmanager/releases/311735 Unspecified vulnerability in DocumentManager before 4.0 has unknown impact and attack vectors, related to file rights.

cpe:/a:arwscripts:fonts_script

CVE-2010-0613

2010-02-11T12:30:01.157-05:00

2010-03-26T01:37:14.657-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 38709 Directory traversal vulnerability in viewfile.php in ARWScripts Fonts Script allows remote attackers to read arbitrary local files via directory traversal sequences in a base64-encoded f parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:myshell:evalsmsi:2.1.03

CVE-2010-0614

2010-02-11T12:30:01.190-05:00

2018-10-10T15:53:06.790-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://packetstormsecurity.org/1002-exploits/corelan-10-008-evalmsi.txt MISC http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-008-evalmsi-2-1-03-multiple-vulnerabilities/ BUGTRAQ 20100204 CORELAN-10-008 - Multiple vulnerabilities found in evalmsi 2.1.03 BID 38116 XF evalsmsi-ajax-sql-injection(56152) SQL injection vulnerability in ajax.php in evalSMSI 2.1.03 allows remote attackers to execute arbitrary SQL commands via the query parameter in the (1) question action, and possibly the (2) sub_par or (3) num_quest actions.

cpe:/a:myshell:evalsmsi:2.1.03

CVE-2010-0615

2010-02-11T12:30:01.220-05:00

2018-10-10T15:53:07.417-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://packetstormsecurity.org/1002-exploits/corelan-10-008-evalmsi.txt MISC http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-008-evalmsi-2-1-03-multiple-vulnerabilities/ BUGTRAQ 20100204 CORELAN-10-008 - Multiple vulnerabilities found in evalmsi 2.1.03 BID 38116 XF evalsmsi-comment-xss(56154) Cross-site scripting (XSS) vulnerability in assess.php in evalSMSI 2.1.03 allows remote attackers to inject arbitrary web script or HTML via the reports comment box in a continue_assess action. NOTE: some of these details are obtained from third party information.

cpe:/a:myshell:evalsmsi:2.1.03

CVE-2010-0616

2010-02-11T12:30:01.267-05:00

2018-10-10T15:53:08.103-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://packetstormsecurity.org/1002-exploits/corelan-10-008-evalmsi.txt MISC http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-008-evalmsi-2-1-03-multiple-vulnerabilities/ BUGTRAQ 20100204 CORELAN-10-008 - Multiple vulnerabilities found in evalmsi 2.1.03 BID 38116 evalSMSI 2.1.03 stores passwords in cleartext in the database, which allows attackers with database access to gain privileges. NOTE: remote attack vectors are possible by leveraging a separate SQL injection vulnerability.

cpe:/a:myshell:evalsmsi:2.1.03

CVE-2010-0617

2010-02-11T12:30:01.300-05:00

2017-08-16T21:32:02.993-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov XF evalsmsi-ajax-xss(56157) Cross-site scripting (XSS) vulnerability in ajax.php in evalSMSI 2.1.03 allows remote attackers to inject arbitrary web script or HTML via the return parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/h:lexmark:z2420

CVE-2010-0618

2010-03-24T18:45:15.937-04:00

2018-10-10T15:53:08.587-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://support.lexmark.com/index?page=content&id=TE85&locale=EN&userlocale=EN_US MISC http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=11&Itemid=11 BUGTRAQ 20100322 {PRL} Lexmark Multiple Laser printer FTP Remote Denial of Services BID 38906 The flood-protection feature in the base, IPDS DLE, Forms DLE, Barcode DLE, Prescribe DLE, and Printcryption DLE components on certain Lexmark laser and inkjet printers and MarkNet devices allows remote attackers to cause a denial of service (TCP outage) by making many passive FTP connections and then aborting these connections.

cpe:/h:lexmark:x94x

CVE-2010-0619

2010-03-24T18:45:15.997-04:00

2018-10-10T15:53:08.963-04:00

7.3

NETWORK

HIGH

NONE

COMPLETE

PARTIAL

COMPLETE

http://nvd.nist.gov CONFIRM http://support.lexmark.com/index?page=content&id=TE84&locale=EN&userlocale=EN_US BUGTRAQ 20100322 {PRL} Lexmark Multiple Laser Printer Remote Stack Overflow BID 38901 Stack-based buffer overflow in the base, IPDS DLE, Forms DLE, Barcode DLE, Prescribe DLE, and Printcryption DLE components on certain Lexmark laser printers and multi-function printers allows remote attackers to execute arbitrary code or cause a denial of service (device hang) via a long argument to a PJL INQUIRE command.

cpe:/a:emc:homebase_server:6.2 cpe:/a:emc:homebase_server:6.3

CVE-2010-0620

2010-02-24T19:30:00.563-05:00

2018-10-10T15:53:09.197-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SREASON 8230 BUGTRAQ 20100224 ESA-2010-003: EMC HomeBase Server Arbitrary File Upload Vulnerability BID 38380 VUPEN ADV-2010-0458 MISC http://www.zerodayinitiative.com/advisories/ZDI-10-020/ Directory traversal vulnerability in the SSL Service in EMC HomeBase Server 6.2.x before 6.2.3 and 6.3.x before 6.3.2 allows remote attackers to overwrite arbitrary files with any content, and consequently execute arbitrary code, via a .. (dot dot) in an unspecified parameter.

CVE-2010-0622

2010-02-15T13:30:00.800-05:00

2018-10-10T15:53:09.650-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=51246bfd189064079c54421507236fd2723b18f3 FEDORA FEDORA-2010-1804 SUSE SUSE-SA:2010:014 SUSE SUSE-SA:2010:018 DEBIAN DSA-2005 CONFIRM http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.33-rc7 MANDRIVA MDVSA-2010:088 MANDRIVA MDVSA-2010:198 MLIST [oss-security] 20100209 CVE request - kernel: futex: Handle user space corruption gracefully MLIST [oss-security] 20100211 Re: CVE request - kernel: futex: Handle user space corruption gracefully REDHAT RHSA-2010:0161 BUGTRAQ 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX UBUNTU USN-914-1 CONFIRM http://www.vmware.com/security/advisories/VMSA-2011-0003.html VUPEN ADV-2010-0638 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=563091 The wake_futex_pi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly handle certain unlock operations for a Priority Inheritance (PI) futex, which allows local users to cause a denial of service (OOPS) and possibly have unspecified other impact via vectors involving modification of the futex value from user space.

cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.8 cpe:/o:linux:linux_kernel:2.6.8.1 cpe:/o:linux:linux_kernel:2.6.9 cpe:/o:linux:linux_kernel:2.6.10 cpe:/o:linux:linux_kernel:2.6.11 cpe:/o:linux:linux_kernel:2.6.11.1 cpe:/o:linux:linux_kernel:2.6.11.2 cpe:/o:linux:linux_kernel:2.6.11.3 cpe:/o:linux:linux_kernel:2.6.11.4 cpe:/o:linux:linux_kernel:2.6.11.5 cpe:/o:linux:linux_kernel:2.6.11.6 cpe:/o:linux:linux_kernel:2.6.11.7 cpe:/o:linux:linux_kernel:2.6.11.8 cpe:/o:linux:linux_kernel:2.6.11.9 cpe:/o:linux:linux_kernel:2.6.11.10 cpe:/o:linux:linux_kernel:2.6.11.11 cpe:/o:linux:linux_kernel:2.6.11.12 cpe:/o:linux:linux_kernel:2.6.12 cpe:/o:linux:linux_kernel:2.6.12.1 cpe:/o:linux:linux_kernel:2.6.12.2 cpe:/o:linux:linux_kernel:2.6.12.3 cpe:/o:linux:linux_kernel:2.6.12.4 cpe:/o:linux:linux_kernel:2.6.12.5 cpe:/o:linux:linux_kernel:2.6.12.6 cpe:/o:linux:linux_kernel:2.6.13 cpe:/o:linux:linux_kernel:2.6.13.1 cpe:/o:linux:linux_kernel:2.6.13.2 cpe:/o:linux:linux_kernel:2.6.13.3 cpe:/o:linux:linux_kernel:2.6.13.4 cpe:/o:linux:linux_kernel:2.6.13.5 cpe:/o:linux:linux_kernel:2.6.14 cpe:/o:linux:linux_kernel:2.6.14.1 cpe:/o:linux:linux_kernel:2.6.14.2 cpe:/o:linux:linux_kernel:2.6.14.3 cpe:/o:linux:linux_kernel:2.6.14.4 cpe:/o:linux:linux_kernel:2.6.14.5 cpe:/o:linux:linux_kernel:2.6.14.6 cpe:/o:linux:linux_kernel:2.6.14.7 cpe:/o:linux:linux_kernel:2.6.15 cpe:/o:linux:linux_kernel:2.6.15.1 cpe:/o:linux:linux_kernel:2.6.15.2 cpe:/o:linux:linux_kernel:2.6.15.3 cpe:/o:linux:linux_kernel:2.6.15.4 cpe:/o:linux:linux_kernel:2.6.15.5 cpe:/o:linux:linux_kernel:2.6.15.6 cpe:/o:linux:linux_kernel:2.6.15.7 cpe:/o:linux:linux_kernel:2.6.16 cpe:/o:linux:linux_kernel:2.6.16.1 cpe:/o:linux:linux_kernel:2.6.16.2 cpe:/o:linux:linux_kernel:2.6.16.3 cpe:/o:linux:linux_kernel:2.6.16.4 cpe:/o:linux:linux_kernel:2.6.16.5 cpe:/o:linux:linux_kernel:2.6.16.6 cpe:/o:linux:linux_kernel:2.6.16.7 cpe:/o:linux:linux_kernel:2.6.16.8 cpe:/o:linux:linux_kernel:2.6.16.9 cpe:/o:linux:linux_kernel:2.6.16.10 cpe:/o:linux:linux_kernel:2.6.16.11 cpe:/o:linux:linux_kernel:2.6.16.12 cpe:/o:linux:linux_kernel:2.6.16.13 cpe:/o:linux:linux_kernel:2.6.16.14 cpe:/o:linux:linux_kernel:2.6.16.15 cpe:/o:linux:linux_kernel:2.6.16.16 cpe:/o:linux:linux_kernel:2.6.16.17 cpe:/o:linux:linux_kernel:2.6.16.18 cpe:/o:linux:linux_kernel:2.6.16.19 cpe:/o:linux:linux_kernel:2.6.16.20 cpe:/o:linux:linux_kernel:2.6.16.21 cpe:/o:linux:linux_kernel:2.6.16.22 cpe:/o:linux:linux_kernel:2.6.16.23 cpe:/o:linux:linux_kernel:2.6.16.24 cpe:/o:linux:linux_kernel:2.6.16.25 cpe:/o:linux:linux_kernel:2.6.16.26 cpe:/o:linux:linux_kernel:2.6.16.27 cpe:/o:linux:linux_kernel:2.6.16.28 cpe:/o:linux:linux_kernel:2.6.16.29 cpe:/o:linux:linux_kernel:2.6.16.30 cpe:/o:linux:linux_kernel:2.6.16.31 cpe:/o:linux:linux_kernel:2.6.16.31:-rc1 cpe:/o:linux:linux_kernel:2.6.16.31:-rc2 cpe:/o:linux:linux_kernel:2.6.16.31:-rc3 cpe:/o:linux:linux_kernel:2.6.16.31:-rc4 cpe:/o:linux:linux_kernel:2.6.16.31:-rc5 cpe:/o:linux:linux_kernel:2.6.16.32 cpe:/o:linux:linux_kernel:2.6.16.33 cpe:/o:linux:linux_kernel:2.6.16.34 cpe:/o:linux:linux_kernel:2.6.16.35 cpe:/o:linux:linux_kernel:2.6.16.36 cpe:/o:linux:linux_kernel:2.6.16.37 cpe:/o:linux:linux_kernel:2.6.16.38 cpe:/o:linux:linux_kernel:2.6.16.39 cpe:/o:linux:linux_kernel:2.6.16.40 cpe:/o:linux:linux_kernel:2.6.16.41 cpe:/o:linux:linux_kernel:2.6.16.42 cpe:/o:linux:linux_kernel:2.6.16.43 cpe:/o:linux:linux_kernel:2.6.16.44 cpe:/o:linux:linux_kernel:2.6.16.45 cpe:/o:linux:linux_kernel:2.6.16.46 cpe:/o:linux:linux_kernel:2.6.16.47 cpe:/o:linux:linux_kernel:2.6.16.48 cpe:/o:linux:linux_kernel:2.6.16.49 cpe:/o:linux:linux_kernel:2.6.16.50 cpe:/o:linux:linux_kernel:2.6.16.51 cpe:/o:linux:linux_kernel:2.6.16.52 cpe:/o:linux:linux_kernel:2.6.16.53 cpe:/o:linux:linux_kernel:2.6.16.54 cpe:/o:linux:linux_kernel:2.6.16.55 cpe:/o:linux:linux_kernel:2.6.16.56 cpe:/o:linux:linux_kernel:2.6.16.57 cpe:/o:linux:linux_kernel:2.6.16.58 cpe:/o:linux:linux_kernel:2.6.16.59 cpe:/o:linux:linux_kernel:2.6.16.60 cpe:/o:linux:linux_kernel:2.6.16.61 cpe:/o:linux:linux_kernel:2.6.16.62 cpe:/o:linux:linux_kernel:2.6.17 cpe:/o:linux:linux_kernel:2.6.17.1 cpe:/o:linux:linux_kernel:2.6.17.2 cpe:/o:linux:linux_kernel:2.6.17.3 cpe:/o:linux:linux_kernel:2.6.17.4 cpe:/o:linux:linux_kernel:2.6.17.5 cpe:/o:linux:linux_kernel:2.6.17.6 cpe:/o:linux:linux_kernel:2.6.17.7 cpe:/o:linux:linux_kernel:2.6.17.8 cpe:/o:linux:linux_kernel:2.6.17.9 cpe:/o:linux:linux_kernel:2.6.17.10 cpe:/o:linux:linux_kernel:2.6.17.11 cpe:/o:linux:linux_kernel:2.6.17.12 cpe:/o:linux:linux_kernel:2.6.17.13 cpe:/o:linux:linux_kernel:2.6.17.14 cpe:/o:linux:linux_kernel:2.6.18 cpe:/o:linux:linux_kernel:2.6.18:rc1 cpe:/o:linux:linux_kernel:2.6.18:rc2 cpe:/o:linux:linux_kernel:2.6.18:rc3 cpe:/o:linux:linux_kernel:2.6.18:rc4 cpe:/o:linux:linux_kernel:2.6.18:rc5 cpe:/o:linux:linux_kernel:2.6.18:rc6 cpe:/o:linux:linux_kernel:2.6.18:rc7 cpe:/o:linux:linux_kernel:2.6.18.1 cpe:/o:linux:linux_kernel:2.6.18.2 cpe:/o:linux:linux_kernel:2.6.18.3 cpe:/o:linux:linux_kernel:2.6.18.4 cpe:/o:linux:linux_kernel:2.6.18.5 cpe:/o:linux:linux_kernel:2.6.18.6 cpe:/o:linux:linux_kernel:2.6.18.7 cpe:/o:linux:linux_kernel:2.6.18.8 cpe:/o:linux:linux_kernel:2.6.19 cpe:/o:linux:linux_kernel:2.6.19.1 cpe:/o:linux:linux_kernel:2.6.19.2 cpe:/o:linux:linux_kernel:2.6.19.3 cpe:/o:linux:linux_kernel:2.6.19.4 cpe:/o:linux:linux_kernel:2.6.19.5 cpe:/o:linux:linux_kernel:2.6.19.6 cpe:/o:linux:linux_kernel:2.6.19.7 cpe:/o:linux:linux_kernel:2.6.20 cpe:/o:linux:linux_kernel:2.6.20.1 cpe:/o:linux:linux_kernel:2.6.20.2 cpe:/o:linux:linux_kernel:2.6.20.3 cpe:/o:linux:linux_kernel:2.6.20.4 cpe:/o:linux:linux_kernel:2.6.20.5 cpe:/o:linux:linux_kernel:2.6.20.6 cpe:/o:linux:linux_kernel:2.6.20.7 cpe:/o:linux:linux_kernel:2.6.20.8 cpe:/o:linux:linux_kernel:2.6.20.9 cpe:/o:linux:linux_kernel:2.6.20.10 cpe:/o:linux:linux_kernel:2.6.20.11 cpe:/o:linux:linux_kernel:2.6.20.12 cpe:/o:linux:linux_kernel:2.6.20.13 cpe:/o:linux:linux_kernel:2.6.20.14 cpe:/o:linux:linux_kernel:2.6.20.15 cpe:/o:linux:linux_kernel:2.6.20.16 cpe:/o:linux:linux_kernel:2.6.20.17 cpe:/o:linux:linux_kernel:2.6.20.18 cpe:/o:linux:linux_kernel:2.6.20.19 cpe:/o:linux:linux_kernel:2.6.20.20 cpe:/o:linux:linux_kernel:2.6.20.21 cpe:/o:linux:linux_kernel:2.6.21 cpe:/o:linux:linux_kernel:2.6.21.1 cpe:/o:linux:linux_kernel:2.6.21.2 cpe:/o:linux:linux_kernel:2.6.21.3 cpe:/o:linux:linux_kernel:2.6.21.4 cpe:/o:linux:linux_kernel:2.6.21.5 cpe:/o:linux:linux_kernel:2.6.21.6 cpe:/o:linux:linux_kernel:2.6.21.7 cpe:/o:linux:linux_kernel:2.6.22 cpe:/o:linux:linux_kernel:2.6.22.1 cpe:/o:linux:linux_kernel:2.6.22.2 cpe:/o:linux:linux_kernel:2.6.22.3 cpe:/o:linux:linux_kernel:2.6.22.4 cpe:/o:linux:linux_kernel:2.6.22.5 cpe:/o:linux:linux_kernel:2.6.22.6 cpe:/o:linux:linux_kernel:2.6.22.7 cpe:/o:linux:linux_kernel:2.6.22.8 cpe:/o:linux:linux_kernel:2.6.22.9 cpe:/o:linux:linux_kernel:2.6.22.10 cpe:/o:linux:linux_kernel:2.6.22.11 cpe:/o:linux:linux_kernel:2.6.22.12 cpe:/o:linux:linux_kernel:2.6.22.13 cpe:/o:linux:linux_kernel:2.6.22.14 cpe:/o:linux:linux_kernel:2.6.22.15 cpe:/o:linux:linux_kernel:2.6.22.16 cpe:/o:linux:linux_kernel:2.6.22.17 cpe:/o:linux:linux_kernel:2.6.22.18 cpe:/o:linux:linux_kernel:2.6.22.19 cpe:/o:linux:linux_kernel:2.6.22.20 cpe:/o:linux:linux_kernel:2.6.22.21 cpe:/o:linux:linux_kernel:2.6.22.22 cpe:/o:linux:linux_kernel:2.6.23 cpe:/o:linux:linux_kernel:2.6.23:rc1 cpe:/o:linux:linux_kernel:2.6.23:rc2 cpe:/o:linux:linux_kernel:2.6.23.1 cpe:/o:linux:linux_kernel:2.6.23.2 cpe:/o:linux:linux_kernel:2.6.23.3 cpe:/o:linux:linux_kernel:2.6.23.4 cpe:/o:linux:linux_kernel:2.6.23.5 cpe:/o:linux:linux_kernel:2.6.23.6 cpe:/o:linux:linux_kernel:2.6.23.7 cpe:/o:linux:linux_kernel:2.6.23.8 cpe:/o:linux:linux_kernel:2.6.23.9 cpe:/o:linux:linux_kernel:2.6.23.10 cpe:/o:linux:linux_kernel:2.6.23.11 cpe:/o:linux:linux_kernel:2.6.23.12 cpe:/o:linux:linux_kernel:2.6.23.13 cpe:/o:linux:linux_kernel:2.6.23.14 cpe:/o:linux:linux_kernel:2.6.23.15 cpe:/o:linux:linux_kernel:2.6.23.16 cpe:/o:linux:linux_kernel:2.6.23.17 cpe:/o:linux:linux_kernel:2.6.24 cpe:/o:linux:linux_kernel:2.6.24:rc1 cpe:/o:linux:linux_kernel:2.6.24:rc2 cpe:/o:linux:linux_kernel:2.6.24:rc3 cpe:/o:linux:linux_kernel:2.6.24:rc4 cpe:/o:linux:linux_kernel:2.6.24:rc5 cpe:/o:linux:linux_kernel:2.6.24.1 cpe:/o:linux:linux_kernel:2.6.24.2 cpe:/o:linux:linux_kernel:2.6.24.3 cpe:/o:linux:linux_kernel:2.6.24.4 cpe:/o:linux:linux_kernel:2.6.24.5 cpe:/o:linux:linux_kernel:2.6.24.6 cpe:/o:linux:linux_kernel:2.6.24.7 cpe:/o:linux:linux_kernel:2.6.25 cpe:/o:linux:linux_kernel:2.6.25.1 cpe:/o:linux:linux_kernel:2.6.25.2 cpe:/o:linux:linux_kernel:2.6.25.3 cpe:/o:linux:linux_kernel:2.6.25.4 cpe:/o:linux:linux_kernel:2.6.25.5 cpe:/o:linux:linux_kernel:2.6.25.6 cpe:/o:linux:linux_kernel:2.6.25.7 cpe:/o:linux:linux_kernel:2.6.25.8 cpe:/o:linux:linux_kernel:2.6.25.9 cpe:/o:linux:linux_kernel:2.6.25.10 cpe:/o:linux:linux_kernel:2.6.25.11 cpe:/o:linux:linux_kernel:2.6.25.12 cpe:/o:linux:linux_kernel:2.6.25.13 cpe:/o:linux:linux_kernel:2.6.25.14 cpe:/o:linux:linux_kernel:2.6.25.15 cpe:/o:linux:linux_kernel:2.6.25.16 cpe:/o:linux:linux_kernel:2.6.25.17 cpe:/o:linux:linux_kernel:2.6.25.18 cpe:/o:linux:linux_kernel:2.6.25.19 cpe:/o:linux:linux_kernel:2.6.25.20 cpe:/o:linux:linux_kernel:2.6.26 cpe:/o:linux:linux_kernel:2.6.26:rc4 cpe:/o:linux:linux_kernel:2.6.26.1 cpe:/o:linux:linux_kernel:2.6.26.2 cpe:/o:linux:linux_kernel:2.6.26.3 cpe:/o:linux:linux_kernel:2.6.26.4 cpe:/o:linux:linux_kernel:2.6.26.5 cpe:/o:linux:linux_kernel:2.6.26.6 cpe:/o:linux:linux_kernel:2.6.26.7 cpe:/o:linux:linux_kernel:2.6.26.8 cpe:/o:linux:linux_kernel:2.6.27 cpe:/o:linux:linux_kernel:2.6.27:rc1 cpe:/o:linux:linux_kernel:2.6.27:rc2 cpe:/o:linux:linux_kernel:2.6.27:rc3 cpe:/o:linux:linux_kernel:2.6.27:rc4 cpe:/o:linux:linux_kernel:2.6.27:rc5 cpe:/o:linux:linux_kernel:2.6.27:rc6 cpe:/o:linux:linux_kernel:2.6.27:rc7 cpe:/o:linux:linux_kernel:2.6.27:rc8 cpe:/o:linux:linux_kernel:2.6.27:rc9 cpe:/o:linux:linux_kernel:2.6.27.5 cpe:/o:linux:linux_kernel:2.6.27.6 cpe:/o:linux:linux_kernel:2.6.27.7 cpe:/o:linux:linux_kernel:2.6.27.8 cpe:/o:linux:linux_kernel:2.6.27.9 cpe:/o:linux:linux_kernel:2.6.27.10 cpe:/o:linux:linux_kernel:2.6.27.11 cpe:/o:linux:linux_kernel:2.6.27.12 cpe:/o:linux:linux_kernel:2.6.27.20 cpe:/o:linux:linux_kernel:2.6.27.22 cpe:/o:linux:linux_kernel:2.6.27.23 cpe:/o:linux:linux_kernel:2.6.27.24 cpe:/o:linux:linux_kernel:2.6.27.33 cpe:/o:linux:linux_kernel:2.6.27.34 cpe:/o:linux:linux_kernel:2.6.27.35 cpe:/o:linux:linux_kernel:2.6.27.36 cpe:/o:linux:linux_kernel:2.6.27.37 cpe:/o:linux:linux_kernel:2.6.28 cpe:/o:linux:linux_kernel:2.6.28:git7 cpe:/o:linux:linux_kernel:2.6.28:rc1 cpe:/o:linux:linux_kernel:2.6.28:rc2 cpe:/o:linux:linux_kernel:2.6.28:rc3 cpe:/o:linux:linux_kernel:2.6.28:rc4 cpe:/o:linux:linux_kernel:2.6.28:rc5 cpe:/o:linux:linux_kernel:2.6.28:rc6 cpe:/o:linux:linux_kernel:2.6.28:rc7 cpe:/o:linux:linux_kernel:2.6.28.1 cpe:/o:linux:linux_kernel:2.6.28.2 cpe:/o:linux:linux_kernel:2.6.28.3 cpe:/o:linux:linux_kernel:2.6.28.4 cpe:/o:linux:linux_kernel:2.6.28.5 cpe:/o:linux:linux_kernel:2.6.28.6 cpe:/o:linux:linux_kernel:2.6.28.7 cpe:/o:linux:linux_kernel:2.6.28.8 cpe:/o:linux:linux_kernel:2.6.28.9 cpe:/o:linux:linux_kernel:2.6.28.10 cpe:/o:linux:linux_kernel:2.6.29 cpe:/o:linux:linux_kernel:2.6.29:git1 cpe:/o:linux:linux_kernel:2.6.29:rc1 cpe:/o:linux:linux_kernel:2.6.29:rc2 cpe:/o:linux:linux_kernel:2.6.29.1 cpe:/o:linux:linux_kernel:2.6.29.2 cpe:/o:linux:linux_kernel:2.6.29.3 cpe:/o:linux:linux_kernel:2.6.29.4 cpe:/o:linux:linux_kernel:2.6.29.5 cpe:/o:linux:linux_kernel:2.6.29.6 cpe:/o:linux:linux_kernel:2.6.30 cpe:/o:linux:linux_kernel:2.6.30:rc1 cpe:/o:linux:linux_kernel:2.6.30:rc2 cpe:/o:linux:linux_kernel:2.6.30:rc3 cpe:/o:linux:linux_kernel:2.6.30:rc5 cpe:/o:linux:linux_kernel:2.6.30:rc6 cpe:/o:linux:linux_kernel:2.6.30:rc7-git6 cpe:/o:linux:linux_kernel:2.6.30.1 cpe:/o:linux:linux_kernel:2.6.30.2 cpe:/o:linux:linux_kernel:2.6.30.3 cpe:/o:linux:linux_kernel:2.6.30.4 cpe:/o:linux:linux_kernel:2.6.30.5 cpe:/o:linux:linux_kernel:2.6.30.6 cpe:/o:linux:linux_kernel:2.6.30.7 cpe:/o:linux:linux_kernel:2.6.30.8 cpe:/o:linux:linux_kernel:2.6.30.9 cpe:/o:linux:linux_kernel:2.6.30.10 cpe:/o:linux:linux_kernel:2.6.31 cpe:/o:linux:linux_kernel:2.6.31:rc1 cpe:/o:linux:linux_kernel:2.6.31:rc2 cpe:/o:linux:linux_kernel:2.6.31:rc3 cpe:/o:linux:linux_kernel:2.6.31:rc4 cpe:/o:linux:linux_kernel:2.6.31:rc5 cpe:/o:linux:linux_kernel:2.6.31:rc6 cpe:/o:linux:linux_kernel:2.6.31:rc7 cpe:/o:linux:linux_kernel:2.6.31:rc8 cpe:/o:linux:linux_kernel:2.6.31.1 cpe:/o:linux:linux_kernel:2.6.31.2 cpe:/o:linux:linux_kernel:2.6.31.3 cpe:/o:linux:linux_kernel:2.6.31.4 cpe:/o:linux:linux_kernel:2.6.31.5 cpe:/o:linux:linux_kernel:2.6.31.6 cpe:/o:linux:linux_kernel:2.6.31.7 cpe:/o:linux:linux_kernel:2.6.31.8 cpe:/o:linux:linux_kernel:2.6.31.9 cpe:/o:linux:linux_kernel:2.6.31.10 cpe:/o:linux:linux_kernel:2.6.31.11 cpe:/o:linux:linux_kernel:2.6.31.12 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:2.6.32:git-6 cpe:/o:linux:linux_kernel:2.6.32:rc1 cpe:/o:linux:linux_kernel:2.6.32:rc3 cpe:/o:linux:linux_kernel:2.6.32:rc4 cpe:/o:linux:linux_kernel:2.6.32:rc5 cpe:/o:linux:linux_kernel:2.6.32:rc6 cpe:/o:linux:linux_kernel:2.6.32:rc7 cpe:/o:linux:linux_kernel:2.6.32:rc8 cpe:/o:linux:linux_kernel:2.6.32.1 cpe:/o:linux:linux_kernel:2.6.32.2 cpe:/o:linux:linux_kernel:2.6.32.3 cpe:/o:linux:linux_kernel:2.6.32.4 cpe:/o:linux:linux_kernel:2.6.32.5 cpe:/o:linux:linux_kernel:2.6.32.6 cpe:/o:linux:linux_kernel:2.6.32.7 cpe:/o:linux:linux_kernel:2.6.32.8 cpe:/o:linux:linux_kernel:2.6.32.9 cpe:/o:linux:linux_kernel:2.6.32.10 cpe:/o:linux:linux_kernel:2.6.33:rc1 cpe:/o:linux:linux_kernel:2.6.33:rc2 cpe:/o:linux:linux_kernel:2.6.33:rc3 cpe:/o:linux:linux_kernel:2.6.33:rc4 cpe:/o:linux:linux_kernel:2.6.33:rc5 cpe:/o:linux:linux_kernel:2.6.33:rc6

CVE-2010-0623

2010-02-15T13:30:00.830-05:00

2012-03-19T00:00:00.000-04:00

4.9

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2010-02-16T11:37:00.000-05:00

CONFIRM http://bugzilla.kernel.org/show_bug.cgi?id=14256 CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=5ecb01cfdf96c5f465192bdb2a4fd4a61a24c6cc SUSE SUSE-SA:2010:018 CONFIRM http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.33-rc7 MANDRIVA MDVSA-2010:088 MLIST [oss-security] 20100211 Re: CVE request - kernel: futex: Handle user space corruption gracefully UBUNTU USN-914-1 VUPEN ADV-2010-0638 The futex_lock_pi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly manage a certain reference count, which allows local users to cause a denial of service (OOPS) via vectors involving an unmount of an ext3 filesystem.

cpe:/a:gnu:cpio:1.0 cpe:/a:gnu:cpio:1.1 cpe:/a:gnu:cpio:1.2 cpe:/a:gnu:cpio:1.3 cpe:/a:gnu:cpio:2.4-2 cpe:/a:gnu:cpio:2.5 cpe:/a:gnu:cpio:2.5.90 cpe:/a:gnu:cpio:2.6 cpe:/a:gnu:cpio:2.7 cpe:/a:gnu:cpio:2.8 cpe:/a:gnu:cpio:2.9 cpe:/a:gnu:cpio:2.10 cpe:/a:gnu:tar:1.13 cpe:/a:gnu:tar:1.13.5 cpe:/a:gnu:tar:1.13.11 cpe:/a:gnu:tar:1.13.14 cpe:/a:gnu:tar:1.13.16 cpe:/a:gnu:tar:1.13.17 cpe:/a:gnu:tar:1.13.18 cpe:/a:gnu:tar:1.13.19 cpe:/a:gnu:tar:1.13.25 cpe:/a:gnu:tar:1.14 cpe:/a:gnu:tar:1.14.1 cpe:/a:gnu:tar:1.14.90 cpe:/a:gnu:tar:1.15 cpe:/a:gnu:tar:1.15.1 cpe:/a:gnu:tar:1.15.90 cpe:/a:gnu:tar:1.15.91 cpe:/a:gnu:tar:1.16 cpe:/a:gnu:tar:1.16.1 cpe:/a:gnu:tar:1.17 cpe:/a:gnu:tar:1.18 cpe:/a:gnu:tar:1.19 cpe:/a:gnu:tar:1.20 cpe:/a:gnu:tar:1.21 cpe:/a:gnu:tar:1.22

CVE-2010-0624

2010-03-15T09:28:25.777-04:00

2018-10-10T15:53:12.977-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691 CONFIRM http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 FEDORA FEDORA-2010-2895 FEDORA FEDORA-2010-4309 FEDORA FEDORA-2010-4321 FEDORA FEDORA-2010-4302 FEDORA FEDORA-2010-4306 SUSE SUSE-SR:2010:011 GENTOO GLSA-201111-11 MISC http://www.agrs.tu-berlin.de/index.php?id=78327 MANDRIVA MDVSA-2010:065 REDHAT RHSA-2010:0141 REDHAT RHSA-2010:0142 REDHAT RHSA-2010:0144 REDHAT RHSA-2010:0145 BUGTRAQ 20101027 rPSA-2010-0070-1 cpio tar UBUNTU USN-2456-1 VUPEN ADV-2010-0628 VUPEN ADV-2010-0629 VUPEN ADV-2010-0639 VUPEN ADV-2010-0687 VUPEN ADV-2010-0728 VUPEN ADV-2010-0729 VUPEN ADV-2010-1107 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=564368 CONFIRM https://issues.rpath.com/browse/RPL-3219 Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service (memory corruption) or possibly execute arbitrary code by sending more data than was requested, related to archive filenames that contain a : (colon) character.

cpe:/a:novell:netware_ftp_server:5.01i cpe:/a:novell:netware_ftp_server:5.01o cpe:/a:novell:netware_ftp_server:5.01w cpe:/a:novell:netware_ftp_server:5.01y cpe:/a:novell:netware_ftp_server:5.02b cpe:/a:novell:netware_ftp_server:5.02i cpe:/a:novell:netware_ftp_server:5.02r cpe:/a:novell:netware_ftp_server:5.02y cpe:/a:novell:netware_ftp_server:5.03b cpe:/a:novell:netware_ftp_server:5.03l cpe:/a:novell:netware_ftp_server:5.04.5 cpe:/a:novell:netware_ftp_server:5.04.8 cpe:/a:novell:netware_ftp_server:5.04.20 cpe:/a:novell:netware_ftp_server:5.04.25 cpe:/a:novell:netware_ftp_server:5.05 cpe:/a:novell:netware_ftp_server:5.05.04 cpe:/a:novell:netware_ftp_server:5.06.04 cpe:/a:novell:netware_ftp_server:5.06.05 cpe:/a:novell:netware_ftp_server:5.07 cpe:/a:novell:netware_ftp_server:5.07.02 cpe:/o:novell:netware:5.1 cpe:/o:novell:netware:5.1:sp2a cpe:/o:novell:netware:5.1:sp3 cpe:/o:novell:netware:5.1:sp4 cpe:/o:novell:netware:5.1:sp6 cpe:/o:novell:netware:6.0 cpe:/o:novell:netware:6.0:sp1 cpe:/o:novell:netware:6.0:sp2 cpe:/o:novell:netware:6.0:sp3 cpe:/o:novell:netware:6.5 cpe:/o:novell:netware:6.5:sp1 cpe:/o:novell:netware:6.5:sp1.1a cpe:/o:novell:netware:6.5:sp1.1b cpe:/o:novell:netware:6.5:sp2 cpe:/o:novell:netware:6.5:sp3 cpe:/o:novell:netware:6.5:sp4 cpe:/o:novell:netware:6.5:sp5 cpe:/o:novell:netware:6.5:sp6 cpe:/o:novell:netware:6.5:sp7 cpe:/o:novell:netware:6.5:sp8

CVE-2010-0625

2010-04-05T12:30:00.577-04:00

2018-10-10T15:53:17.137-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov SECTRACK 1023768 CONFIRM http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1 MISC http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=12&Itemid=12 BUGTRAQ 20100329 {PRL} Novell Netware FTP Remote Stack Overflow BUGTRAQ 20100405 ZDI-10-062: Novell Netware NWFTPD RMD/RNFR/DELE Argument Parsing Remote Code Execution Vulnerabilities BID 39041 VUPEN ADV-2010-0742 MISC http://www.zerodayinitiative.com/advisories/ZDI-10-062 CONFIRM https://bugzilla.novell.com/show_bug.cgi?id=569496 Stack-based buffer overflow in NWFTPD.nlm before 5.10.01 in the FTP server in Novell NetWare 5.1 through 6.5 SP8 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long (1) MKD, (2) RMD, (3) RNFR, or (4) DELE command.

cpe:/a:mit:kerberos:5-1.7 cpe:/a:mit:kerberos:5-1.7.1 cpe:/a:mit:kerberos:5-1.8

CVE-2010-0628

2010-03-25T18:30:00.500-04:00

2018-10-10T15:53:18.247-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-002.txt BUGTRAQ 20100323 MITKRB5-SA-2010-002 denial of service in SPNEGO [CVE-2010-0628 VU#839413] BID 38904 UBUNTU USN-916-1 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=566258 The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in the SPNEGO GSS-API functionality in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.2 and 1.8 before 1.8.1 allows remote attackers to cause a denial of service (assertion failure and daemon crash) via an invalid packet that triggers incorrect preparation of an error token.

cpe:/a:mit:kerberos:5-1.5 cpe:/a:mit:kerberos:5-1.5.1 cpe:/a:mit:kerberos:5-1.5.2 cpe:/a:mit:kerberos:5-1.5.3 cpe:/a:mit:kerberos:5-1.6 cpe:/a:mit:kerberos:5-1.6.1 cpe:/a:mit:kerberos:5-1.6.2 cpe:/a:mit:kerberos:5-1.6.3

CVE-2010-0629

2010-04-07T11:30:00.390-04:00

2018-10-10T15:53:18.823-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567052 CONFIRM http://krbdev.mit.edu/rt/Ticket/Display.html?id=5998 FEDORA FEDORA-2010-6108 SUSE SUSE-SR:2010:009 SECTRACK 1023821 UBUNTU USN-924-1 CONFIRM http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-003.txt DEBIAN DSA-2031 MANDRIVA MDVSA-2010:071 REDHAT RHSA-2010:0343 BUGTRAQ 20100406 MITKRB5-SA-2010-003 [CVE-2010-0629] denial of service in kadmind in older krb5 releases BID 39247 VUPEN ADV-2010-0876 Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service (daemon crash) via a request from a kadmin client that sends an invalid API version number.

cpe:/a:evernewscripts:free_joke_script:1.2

CVE-2010-0630

2010-02-12T17:30:00.360-05:00

2017-08-16T21:32:03.057-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://packetstormsecurity.org/1002-exploits/evernewfjs-sql.txt EXPLOIT-DB 11306 BID 38020 XF freejokescript-viewjokes-sql-injection(56043) SQL injection vulnerability in viewjokes.php in Evernew Free Joke Script 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.

cpe:/a:eicrasoft:eicra_car_rental-script

CVE-2010-0631

2010-02-12T17:30:00.393-05:00

2010-02-15T00:00:00.000-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-02-15T11:13:00.000-05:00

EXPLOIT-DB 11323 Multiple SQL injection vulnerabilities in index.php in Eicra Car Rental-Script, when the plugin_id parameter is 4, allow remote attackers to execute arbitrary SQL commands via the (1) users (username) and (2) passwords parameters.

cpe:/a:parkviewconsultants:com_simplefaq

CVE-2010-0632

2010-02-12T17:30:00.423-05:00

2017-08-16T21:32:03.100-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://packetstormsecurity.org/1001-exploits/joomlasimplefaq-sql.txt EXPLOIT-DB 11294 BID 38015 XF simplefaq-catid-sql-injection(56028) SQL injection vulnerability in the Parkview Consultants SimpleFAQ (com_simplefaq) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a display action to index.php.

cpe:/a:citrix:xenserver:5.0:update_3 cpe:/a:citrix:xenserver:5.5

CVE-2010-0633

2010-02-12T17:30:00.457-05:00

2010-03-18T00:00:00.000-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-02-15T13:00:00.000-05:00

CONFIRM http://support.citrix.com/article/CTX123193 CONFIRM http://support.citrix.com/article/CTX123456 CONFIRM http://support.citrix.com/article/CTX123460 BID 38052 SECTRACK 1023530 VUPEN ADV-2010-0290 Unspecified vulnerability in Citrix XenServer 5.0 Update 3 and earlier, and 5.5, allows local users to bypass authentication and execute unspecified Xen API (XAPI) calls via unknown vectors.

cpe:/a:will_estes:flex:2.5.4a cpe:/a:will_estes:flex:2.5.27 cpe:/a:will_estes:flex:2.5.31 cpe:/a:will_estes:flex:2.5.33 cpe:/a:will_estes:flex:2.5.34

CVE-2010-0634

2010-02-12T17:30:00.517-05:00

2010-02-15T00:00:00.000-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-02-15T15:13:00.000-05:00

CONFIRM http://freshmeat.net/projects/flex/releases/311661 Unspecified vulnerability in Fast Lexical Analyzer Generator (flex) before 2.5.35 has unknown impact and attack vectors.

cpe:/a:jevents:jevents_search_plugin:1.5 cpe:/a:jevents:jevents_search_plugin:1.5.1 cpe:/a:jevents:jevents_search_plugin:1.5.2 cpe:/a:jevents:jevents_search_plugin:1.5.3

CVE-2010-0635

2010-02-12T17:30:00.550-05:00

2010-02-15T00:00:00.000-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-02-15T15:31:00.000-05:00

CONFIRM http://www.jevents.net/forum/viewtopic.php?f=17&t=3910#p15526 BID 38050 SQL injection vulnerability in the plgSearchEventsearch::onSearch method in eventsearch.php in the JEvents Search plugin 1.5 through 1.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: some of these details are obtained from third party information.

cpe:/a:k5n:webcalendar:1.2.0

CVE-2010-0636

2010-02-12T17:30:00.580-05:00

2012-10-12T22:58:02.830-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://holisticinfosec.org/content/view/133/45/ CONFIRM http://webcalendar.cvs.sourceforge.net/viewvc/webcalendar/webcalendar/ChangeLog?pathrev=REL_1_2 BID 38053 Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to inject arbitrary web script or HTML via the (1) tab parameter to users.php and the PATH_INFO to (2) day.php, (3) month.php, and (4) week.php. NOTE: some of these details are obtained from third party information.

cpe:/a:k5n:webcalendar:1.2.0

CVE-2010-0637

2010-02-12T17:30:00.610-05:00

2012-10-12T22:58:03.000-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov MISC http://holisticinfosec.org/content/view/133/45/ CONFIRM http://webcalendar.cvs.sourceforge.net/viewvc/webcalendar/webcalendar/ChangeLog?pathrev=REL_1_2 Multiple cross-site request forgery (CSRF) vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to hijack the authentication of administrators for requests that (1) delete an event or (2) ban an IP address from posting via unknown vectors. NOTE: some of these details are obtained from third party information.

cpe:/a:k5n:webcalendar:1.2.0

CVE-2010-0638

2010-02-15T13:30:00.860-05:00

2010-02-16T00:00:00.000-05:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2010-02-16T11:51:00.000-05:00

Cross-site request forgery (CSRF) vulnerability in WebCalendar 1.2.0 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:squid-cache:squid:2.0 cpe:/a:squid-cache:squid:2.1 cpe:/a:squid-cache:squid:2.2 cpe:/a:squid-cache:squid:2.3 cpe:/a:squid-cache:squid:2.4 cpe:/a:squid-cache:squid:2.5 cpe:/a:squid-cache:squid:2.6 cpe:/a:squid-cache:squid:2.7 cpe:/a:squid-cache:squid:2.7:stable3 cpe:/a:squid-cache:squid:2.7:stable4 cpe:/a:squid-cache:squid:3.0 cpe:/a:squid-cache:squid:3.0.stable1 cpe:/a:squid-cache:squid:3.0.stable2 cpe:/a:squid-cache:squid:3.0.stable3 cpe:/a:squid-cache:squid:3.0.stable4 cpe:/a:squid-cache:squid:3.0.stable5 cpe:/a:squid-cache:squid:3.0.stable6 cpe:/a:squid-cache:squid:3.0.stable7 cpe:/a:squid-cache:squid:3.0.stable8 cpe:/a:squid-cache:squid:3.0.stable9 cpe:/a:squid-cache:squid:3.0.stable11 cpe:/a:squid-cache:squid:3.0.stable12 cpe:/a:squid-cache:squid:3.0.stable13 cpe:/a:squid-cache:squid:3.0.stable14 cpe:/a:squid-cache:squid:3.0.stable15 cpe:/a:squid-cache:squid:3.0.stable16 cpe:/a:squid-cache:squid:3.0.stable17 cpe:/a:squid-cache:squid:3.0.stable18 cpe:/a:squid-cache:squid:3.0.stable19 cpe:/a:squid-cache:squid:3.0.stable20 cpe:/a:squid-cache:squid:3.0.stable21 cpe:/a:squid-cache:squid:3.0.stable22 cpe:/a:squid-cache:squid:3.0.stable23

CVE-2010-0639

2010-02-15T13:30:00.893-05:00

2010-08-02T00:00:00.000-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-02-16T12:03:00.000-05:00

MISC http://bugs.squid-cache.org/show_bug.cgi?id=2858 FEDORA FEDORA-2010-3064 FEDORA FEDORA-2010-2434 BID 38212 SECTRACK 1023587 CONFIRM http://www.squid-cache.org/Advisories/SQUID-2010_2.txt MISC http://www.squid-cache.org/Versions/v2/2.7/changesets/12600.patch MISC http://www.squid-cache.org/Versions/v3/3.0/changesets/3.0-ADV-2010_2.patch VUPEN ADV-2010-0371 VUPEN ADV-2010-0603 The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABLE24, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets to the HTCP port.

cpe:/a:ca:ehealth_performance_manager:6.0 cpe:/a:ca:ehealth_performance_manager:6.1 cpe:/a:ca:ehealth_performance_manager:6.2

CVE-2010-0640

2010-02-24T13:30:00.657-05:00

2018-10-10T15:53:20.590-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20100223 CA20100223-01: Security Notice for CA eHealth Performance Manager BUGTRAQ 20100223 CA20100223-01: Security Notice for CA eHealth Performance Manager BID 38376 Cross-site scripting (XSS) vulnerability in CA eHealth Performance Manager 6.0.x through 6.2.x, when malicious HTML detection is disabled, allows remote attackers to inject arbitrary web script or HTML via a crafted request.

cpe:/a:cisco:collaboration_server:5.0

CVE-2010-0641

2010-02-17T13:30:00.540-05:00

2017-08-16T21:32:03.163-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov EXPLOIT-DB 11403 BID 38201 XF ccs-loginpage-xss(56220) Cross-site scripting (XSS) vulnerability in webline/html/admin/wcs/LoginPage.jhtml in Cisco Collaboration Server (CCS) 5 allows remote attackers to inject arbitrary web script or HTML via the dest parameter.

cpe:/a:cisco:collaboration_server:5.0

CVE-2010-0642

2010-02-17T13:30:00.570-05:00

2017-08-16T21:32:03.210-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov EXPLOIT-DB 11403 BID 38202 XF ccs-files-information-disclosure(56221) Cisco Collaboration Server (CCS) 5 allows remote attackers to read the source code of JHTML files via URL encoded characters in the filename extension, as demonstrated by (1) changing .jhtml to %2Ejhtml, (2) changing .jhtml to .jhtm%6C, (3) appending %00 after .jhtml, and (4) appending %c0%80 after .jhtml, related to the (a) doc/docindex.jhtml, (b) browserId/wizardForm.jhtml, (c) webline/html/forms/callback.jhtml, (d) webline/html/forms/callbackICM.jhtml, (e) webline/html/agent/AgentFrame.jhtml, (f) webline/html/agent/default/badlogin.jhtml, (g) callme/callForm.jhtml, (h) webline/html/multichatui/nowDefunctWindow.jhtml, (i) browserId/wizard.jhtml, (j) admin/CiscoAdmin.jhtml, (k) msccallme/mscCallForm.jhtml, and (l) webline/html/admin/wcs/LoginPage.jhtml components.

CVE-2010-0643

2010-02-18T13:00:00.347-05:00

2017-09-18T21:30:27.127-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://code.google.com/p/chromium/issues/detail?id=12303 CONFIRM http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html SECTRACK 1023583 CONFIRM http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs BID 38177 VUPEN ADV-2010-0361 XF googlechrome-fallback-info-disc(56212) Google Chrome before 4.0.249.89 attempts to make direct connections to web sites when all configured proxy servers are unavailable, which allows remote HTTP servers to obtain potentially sensitive information about the identity of a client user via standard HTTP logging, as demonstrated by a proxy server that was configured for the purpose of anonymity.

CVE-2010-0644

2010-02-18T13:00:00.410-05:00

2017-09-18T21:30:27.190-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://code.google.com/p/chromium/issues/detail?id=29914 CONFIRM http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html SECTRACK 1023583 CONFIRM http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs BID 38177 VUPEN ADV-2010-0361 Google Chrome before 4.0.249.89, when a SOCKS 5 proxy server is configured, sends DNS queries directly, which allows remote DNS servers to obtain potentially sensitive information about the identity of a client user via request logging, as demonstrated by a proxy server that was configured for the purpose of anonymity.

CVE-2010-0645

2010-02-18T13:00:00.440-05:00

2017-09-18T21:30:27.267-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://code.google.com/p/chromium/issues/detail?id=31009 CONFIRM http://code.google.com/p/v8/source/detail?r=3560 CONFIRM http://codereview.chromium.org/525064 CONFIRM http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html SECTRACK 1023583 CONFIRM http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs BID 38177 VUPEN ADV-2010-0361 XF googlechrome-v8engine-code-exec(56213) Multiple integer overflows in factory.cc in Google V8 before r3560, as used in Google Chrome before 4.0.249.89, allow remote attackers to execute arbitrary code in the Chrome sandbox via crafted use of JavaScript arrays.

CVE-2010-0646

2010-02-18T13:00:00.487-05:00

2017-09-18T21:30:27.347-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://code.google.com/p/chromium/issues/detail?id=31009 CONFIRM http://code.google.com/p/v8/source/detail?r=3560 CONFIRM http://codereview.chromium.org/525064 CONFIRM http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html SECTRACK 1023583 CONFIRM http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs BID 38177 VUPEN ADV-2010-0361 XF googlechrome-v8engine-code-exec(56213) Multiple integer signedness errors in factory.cc in Google V8 before r3560, as used in Google Chrome before 4.0.249.89, allow remote attackers to execute arbitrary code in the Chrome sandbox via crafted use of JavaScript arrays.

cpe:/a:apple:webkit:r53475 cpe:/a:google:chrome:0.2.149.27 cpe:/a:google:chrome:0.2.149.29 cpe:/a:google:chrome:0.2.149.30 cpe:/a:google:chrome:0.2.152.1 cpe:/a:google:chrome:0.2.153.1 cpe:/a:google:chrome:0.3.154.0 cpe:/a:google:chrome:0.3.154.3 cpe:/a:google:chrome:0.4.154.18 cpe:/a:google:chrome:0.4.154.22 cpe:/a:google:chrome:0.4.154.31 cpe:/a:google:chrome:0.4.154.33 cpe:/a:google:chrome:1.0.154.36 cpe:/a:google:chrome:1.0.154.39 cpe:/a:google:chrome:1.0.154.42 cpe:/a:google:chrome:1.0.154.43 cpe:/a:google:chrome:1.0.154.46 cpe:/a:google:chrome:1.0.154.48 cpe:/a:google:chrome:1.0.154.52 cpe:/a:google:chrome:1.0.154.53 cpe:/a:google:chrome:1.0.154.59 cpe:/a:google:chrome:1.0.154.65 cpe:/a:google:chrome:2.0.156.1 cpe:/a:google:chrome:2.0.157.0 cpe:/a:google:chrome:2.0.157.2 cpe:/a:google:chrome:2.0.158.0 cpe:/a:google:chrome:2.0.159.0 cpe:/a:google:chrome:2.0.169.0 cpe:/a:google:chrome:2.0.169.1 cpe:/a:google:chrome:2.0.170.0 cpe:/a:google:chrome:2.0.172 cpe:/a:google:chrome:2.0.172.2 cpe:/a:google:chrome:2.0.172.8 cpe:/a:google:chrome:2.0.172.27 cpe:/a:google:chrome:2.0.172.28 cpe:/a:google:chrome:2.0.172.30 cpe:/a:google:chrome:2.0.172.31 cpe:/a:google:chrome:2.0.172.33 cpe:/a:google:chrome:2.0.172.37 cpe:/a:google:chrome:2.0.172.38 cpe:/a:google:chrome:3.0.182.2 cpe:/a:google:chrome:3.0.190.2 cpe:/a:google:chrome:3.0.193.2:beta cpe:/a:google:chrome:3.0.195.21 cpe:/a:google:chrome:3.0.195.24 cpe:/a:google:chrome:3.0.195.32 cpe:/a:google:chrome:3.0.195.33 cpe:/a:google:chrome:4.0.244.0 cpe:/a:google:chrome:4.0.249.78

CVE-2010-0647

2010-02-18T13:00:00.537-05:00

2017-09-18T21:30:27.423-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://code.google.com/p/chromium/issues/detail?id=31692 CONFIRM http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html SUSE SUSE-SR:2011:002 SECTRACK 1023583 CONFIRM http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs CONFIRM http://trac.webkit.org/changeset/53525 MANDRIVA MDVSA-2011:039 BID 38177 UBUNTU USN-1006-1 VUPEN ADV-2010-0361 VUPEN ADV-2010-2722 VUPEN ADV-2011-0212 VUPEN ADV-2011-0552 CONFIRM https://bugs.webkit.org/show_bug.cgi?id=33266 XF googlechrome-ruby-tags-code-exec(56214) WebKit before r53525, as used in Google Chrome before 4.0.249.89, allows remote attackers to execute arbitrary code in the Chrome sandbox via a malformed RUBY element, as demonstrated by a <ruby>><table><rt> sequence.

cpe:/a:mozilla:firefox:1.0 cpe:/a:mozilla:firefox:1.0:preview_release cpe:/a:mozilla:firefox:1.0.1 cpe:/a:mozilla:firefox:1.0.2 cpe:/a:mozilla:firefox:1.0.3 cpe:/a:mozilla:firefox:1.0.4 cpe:/a:mozilla:firefox:1.0.5 cpe:/a:mozilla:firefox:1.0.6 cpe:/a:mozilla:firefox:1.0.7 cpe:/a:mozilla:firefox:1.0.8 cpe:/a:mozilla:firefox:1.5 cpe:/a:mozilla:firefox:1.5:beta1 cpe:/a:mozilla:firefox:1.5:beta2 cpe:/a:mozilla:firefox:1.5.0.1 cpe:/a:mozilla:firefox:1.5.0.2 cpe:/a:mozilla:firefox:1.5.0.3 cpe:/a:mozilla:firefox:1.5.0.4 cpe:/a:mozilla:firefox:1.5.0.5 cpe:/a:mozilla:firefox:1.5.0.6 cpe:/a:mozilla:firefox:1.5.0.7 cpe:/a:mozilla:firefox:1.5.0.8 cpe:/a:mozilla:firefox:1.5.0.9 cpe:/a:mozilla:firefox:1.5.0.10 cpe:/a:mozilla:firefox:1.5.0.11 cpe:/a:mozilla:firefox:1.5.0.12 cpe:/a:mozilla:firefox:1.5.1 cpe:/a:mozilla:firefox:1.5.2 cpe:/a:mozilla:firefox:1.5.3 cpe:/a:mozilla:firefox:1.5.4 cpe:/a:mozilla:firefox:1.5.5 cpe:/a:mozilla:firefox:1.5.6 cpe:/a:mozilla:firefox:1.5.7 cpe:/a:mozilla:firefox:1.5.8 cpe:/a:mozilla:firefox:2.0 cpe:/a:mozilla:firefox:2.0.0.1 cpe:/a:mozilla:firefox:2.0.0.2 cpe:/a:mozilla:firefox:2.0.0.3 cpe:/a:mozilla:firefox:2.0.0.4 cpe:/a:mozilla:firefox:2.0.0.5 cpe:/a:mozilla:firefox:2.0.0.6 cpe:/a:mozilla:firefox:2.0.0.7 cpe:/a:mozilla:firefox:2.0.0.8 cpe:/a:mozilla:firefox:2.0.0.9 cpe:/a:mozilla:firefox:2.0.0.10 cpe:/a:mozilla:firefox:2.0.0.11 cpe:/a:mozilla:firefox:2.0.0.12 cpe:/a:mozilla:firefox:2.0.0.13 cpe:/a:mozilla:firefox:2.0.0.14 cpe:/a:mozilla:firefox:2.0.0.15 cpe:/a:mozilla:firefox:2.0.0.16 cpe:/a:mozilla:firefox:2.0.0.17 cpe:/a:mozilla:firefox:2.0.0.18 cpe:/a:mozilla:firefox:2.0.0.19 cpe:/a:mozilla:firefox:2.0.0.20 cpe:/a:mozilla:firefox:3.0 cpe:/a:mozilla:firefox:3.0.1 cpe:/a:mozilla:firefox:3.0.2 cpe:/a:mozilla:firefox:3.0.3 cpe:/a:mozilla:firefox:3.0.4 cpe:/a:mozilla:firefox:3.0.5 cpe:/a:mozilla:firefox:3.0.6 cpe:/a:mozilla:firefox:3.0.7 cpe:/a:mozilla:firefox:3.0.8 cpe:/a:mozilla:firefox:3.0.9 cpe:/a:mozilla:firefox:3.0.10 cpe:/a:mozilla:firefox:3.0.11 cpe:/a:mozilla:firefox:3.0.12 cpe:/a:mozilla:firefox:3.0.13 cpe:/a:mozilla:firefox:3.0.14 cpe:/a:mozilla:firefox:3.0.15 cpe:/a:mozilla:firefox:3.5 cpe:/a:mozilla:firefox:3.5.1 cpe:/a:mozilla:firefox:3.5.2 cpe:/a:mozilla:firefox:3.5.3 cpe:/a:mozilla:firefox:3.5.4 cpe:/a:mozilla:firefox:3.5.5 cpe:/a:mozilla:firefox:3.5.6 cpe:/a:mozilla:firefox:3.5.7

CVE-2010-0648

2010-02-18T13:00:00.567-05:00

2017-09-18T21:30:27.487-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://code.google.com/p/chromium/issues/detail?id=32309 FEDORA FEDORA-2010-8360 FEDORA FEDORA-2010-8379 FEDORA FEDORA-2010-8423 MISC http://nomoreroot.blogspot.com/2010/01/little-bug-in-safari-and-google-chrome.html Mozilla Firefox, possibly before 3.6, allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HREF attribute of a stylesheet LINK element, and then reading the document.styleSheets[0].href property value, related to an IFRAME element.

CVE-2010-0649

2010-02-18T13:00:00.613-05:00

2017-09-18T21:30:27.563-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://code.google.com/p/chromium/issues/detail?id=32915 CONFIRM http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html SECTRACK 1023583 CONFIRM http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs BID 38177 VUPEN ADV-2010-0361 XF googlechrome-sandbox-code-exec(56217) Integer overflow in the CrossCallParamsEx::CreateFromBuffer function in sandbox/src/crosscall_server.cc in Google Chrome before 4.0.249.89 allows attackers to leverage renderer access to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a malformed message, related to deserializing of sandbox messages.

cpe:/a:apple:safari:- cpe:/a:google:chrome:0.1.38.1 cpe:/a:google:chrome:0.1.38.2 cpe:/a:google:chrome:0.1.38.4 cpe:/a:google:chrome:0.1.40.1 cpe:/a:google:chrome:0.1.42.2 cpe:/a:google:chrome:0.1.42.3 cpe:/a:google:chrome:0.2.149.27 cpe:/a:google:chrome:0.2.149.29 cpe:/a:google:chrome:0.2.149.30 cpe:/a:google:chrome:0.2.152.1 cpe:/a:google:chrome:0.2.153.1 cpe:/a:google:chrome:0.3.154.0 cpe:/a:google:chrome:0.3.154.3 cpe:/a:google:chrome:0.4.154.18 cpe:/a:google:chrome:0.4.154.22 cpe:/a:google:chrome:0.4.154.31 cpe:/a:google:chrome:0.4.154.33 cpe:/a:google:chrome:1.0.154.36 cpe:/a:google:chrome:1.0.154.39 cpe:/a:google:chrome:1.0.154.42 cpe:/a:google:chrome:1.0.154.43 cpe:/a:google:chrome:1.0.154.46 cpe:/a:google:chrome:1.0.154.48 cpe:/a:google:chrome:1.0.154.52 cpe:/a:google:chrome:1.0.154.53 cpe:/a:google:chrome:1.0.154.59 cpe:/a:google:chrome:1.0.154.64 cpe:/a:google:chrome:1.0.154.65 cpe:/a:google:chrome:2.0.156.1 cpe:/a:google:chrome:2.0.157.0 cpe:/a:google:chrome:2.0.157.2 cpe:/a:google:chrome:2.0.158.0 cpe:/a:google:chrome:2.0.159.0 cpe:/a:google:chrome:2.0.169.0 cpe:/a:google:chrome:2.0.169.1 cpe:/a:google:chrome:2.0.170.0 cpe:/a:google:chrome:2.0.172 cpe:/a:google:chrome:2.0.172.2 cpe:/a:google:chrome:2.0.172.8 cpe:/a:google:chrome:2.0.172.27 cpe:/a:google:chrome:2.0.172.28 cpe:/a:google:chrome:2.0.172.30 cpe:/a:google:chrome:2.0.172.31 cpe:/a:google:chrome:2.0.172.33 cpe:/a:google:chrome:2.0.172.37 cpe:/a:google:chrome:2.0.172.38 cpe:/a:google:chrome:3.0.182.2 cpe:/a:google:chrome:3.0.190.2 cpe:/a:google:chrome:3.0.193.2:beta cpe:/a:google:chrome:3.0.195.2 cpe:/a:google:chrome:3.0.195.21 cpe:/a:google:chrome:3.0.195.24 cpe:/a:google:chrome:3.0.195.25 cpe:/a:google:chrome:3.0.195.27 cpe:/a:google:chrome:3.0.195.32 cpe:/a:google:chrome:3.0.195.33 cpe:/a:google:chrome:3.0.195.36 cpe:/a:google:chrome:3.0.195.37 cpe:/a:google:chrome:3.0.195.38 cpe:/a:google:chrome:4.0.212.0 cpe:/a:google:chrome:4.0.212.1 cpe:/a:google:chrome:4.0.221.8 cpe:/a:google:chrome:4.0.222.0 cpe:/a:google:chrome:4.0.222.1 cpe:/a:google:chrome:4.0.222.5 cpe:/a:google:chrome:4.0.222.12 cpe:/a:google:chrome:4.0.223.0 cpe:/a:google:chrome:4.0.223.1 cpe:/a:google:chrome:4.0.223.2 cpe:/a:google:chrome:4.0.223.4 cpe:/a:google:chrome:4.0.223.5 cpe:/a:google:chrome:4.0.223.7 cpe:/a:google:chrome:4.0.223.8 cpe:/a:google:chrome:4.0.223.9 cpe:/a:google:chrome:4.0.224.0 cpe:/a:google:chrome:4.0.229.1 cpe:/a:google:chrome:4.0.235.0 cpe:/a:google:chrome:4.0.236.0 cpe:/a:google:chrome:4.0.237.0 cpe:/a:google:chrome:4.0.237.1 cpe:/a:google:chrome:4.0.239.0 cpe:/a:google:chrome:4.0.240.0 cpe:/a:google:chrome:4.0.241.0 cpe:/a:google:chrome:4.0.242.0 cpe:/a:google:chrome:4.0.243.0 cpe:/a:google:chrome:4.0.244.0 cpe:/a:google:chrome:4.0.245.0 cpe:/a:google:chrome:4.0.245.1 cpe:/a:google:chrome:4.0.246.0 cpe:/a:google:chrome:4.0.247.0 cpe:/a:google:chrome:4.0.248.0 cpe:/a:google:chrome:4.0.249.0 cpe:/a:google:chrome:4.0.249.1 cpe:/a:google:chrome:4.0.249.2 cpe:/a:google:chrome:4.0.249.3 cpe:/a:google:chrome:4.0.249.4 cpe:/a:google:chrome:4.0.249.5 cpe:/a:google:chrome:4.0.249.6 cpe:/a:google:chrome:4.0.249.7 cpe:/a:google:chrome:4.0.249.8 cpe:/a:google:chrome:4.0.249.9 cpe:/a:google:chrome:4.0.249.10 cpe:/a:google:chrome:4.0.249.11 cpe:/a:google:chrome:4.0.249.12 cpe:/a:google:chrome:4.0.249.14 cpe:/a:google:chrome:4.0.249.16 cpe:/a:google:chrome:4.0.249.17 cpe:/a:google:chrome:4.0.249.18 cpe:/a:google:chrome:4.0.249.19 cpe:/a:google:chrome:4.0.249.20 cpe:/a:google:chrome:4.0.249.21 cpe:/a:google:chrome:4.0.249.22 cpe:/a:google:chrome:4.0.249.23 cpe:/a:google:chrome:4.0.249.24 cpe:/a:google:chrome:4.0.249.25 cpe:/a:google:chrome:4.0.249.26 cpe:/a:google:chrome:4.0.249.27 cpe:/a:google:chrome:4.0.249.28 cpe:/a:google:chrome:4.0.249.29 cpe:/a:google:chrome:4.0.249.30 cpe:/a:google:chrome:4.0.249.31 cpe:/a:google:chrome:4.0.249.32 cpe:/a:google:chrome:4.0.249.33 cpe:/a:google:chrome:4.0.249.34 cpe:/a:google:chrome:4.0.249.35 cpe:/a:google:chrome:4.0.249.36 cpe:/a:google:chrome:4.0.249.37 cpe:/a:google:chrome:4.0.249.38 cpe:/a:google:chrome:4.0.249.39 cpe:/a:google:chrome:4.0.249.40 cpe:/a:google:chrome:4.0.249.41 cpe:/a:google:chrome:4.0.249.42 cpe:/a:google:chrome:4.0.249.43 cpe:/a:google:chrome:4.0.249.44 cpe:/a:google:chrome:4.0.249.45 cpe:/a:google:chrome:4.0.249.46 cpe:/a:google:chrome:4.0.249.47 cpe:/a:google:chrome:4.0.249.48 cpe:/a:google:chrome:4.0.249.49 cpe:/a:google:chrome:4.0.249.50 cpe:/a:google:chrome:4.0.249.51 cpe:/a:google:chrome:4.0.249.52 cpe:/a:google:chrome:4.0.249.53 cpe:/a:google:chrome:4.0.249.54 cpe:/a:google:chrome:4.0.249.55 cpe:/a:google:chrome:4.0.249.56 cpe:/a:google:chrome:4.0.249.57 cpe:/a:google:chrome:4.0.249.58 cpe:/a:google:chrome:4.0.249.59 cpe:/a:google:chrome:4.0.249.60 cpe:/a:google:chrome:4.0.249.61 cpe:/a:google:chrome:4.0.249.62 cpe:/a:google:chrome:4.0.249.63 cpe:/a:google:chrome:4.0.249.64 cpe:/a:google:chrome:4.0.249.65 cpe:/a:google:chrome:4.0.249.66 cpe:/a:google:chrome:4.0.249.67 cpe:/a:google:chrome:4.0.249.68 cpe:/a:google:chrome:4.0.249.69 cpe:/a:google:chrome:4.0.249.70 cpe:/a:google:chrome:4.0.249.71 cpe:/a:google:chrome:4.0.249.72 cpe:/a:google:chrome:4.0.249.73 cpe:/a:google:chrome:4.0.249.74 cpe:/a:google:chrome:4.0.249.75 cpe:/a:google:chrome:4.0.249.76 cpe:/a:google:chrome:4.0.249.77 cpe:/o:canonical:ubuntu_linux:9.10 cpe:/o:canonical:ubuntu_linux:10.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:10.10

CVE-2010-0650

2010-02-18T13:00:00.647-05:00

2018-11-16T11:13:56.377-05:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov

2018-11-14T11:27:52.010-05:00

CONFIRM http://code.google.com/p/chromium/issues/detail?id=3275 CONFIRM http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html SUSE SUSE-SR:2011:002 SECTRACK 1023506 CONFIRM http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs MANDRIVA MDVSA-2011:039 BID 38373 UBUNTU USN-1006-1 VUPEN ADV-2010-2722 VUPEN ADV-2011-0212 VUPEN ADV-2011-0552 CONFIRM https://bugs.webkit.org/show_bug.cgi?id=21501 WebKit, as used in Google Chrome before 4.0.249.78 and Apple Safari, allows remote attackers to bypass intended restrictions on popup windows via crafted use of a mouse click event.

cpe:/a:apple:safari:4.0.4 cpe:/a:apple:webkit:r53524 cpe:/a:google:chrome:4.0.249.78

CVE-2010-0651

2010-02-18T13:00:00.677-05:00

2017-09-18T21:30:27.703-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://code.google.com/p/chromium/issues/detail?id=9877 CONFIRM http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html SUSE SUSE-SR:2011:002 MISC http://scarybeastsecurity.blogspot.com/2009/12/generic-cross-browser-cross-domain.html SECTRACK 1023506 CONFIRM http://trac.webkit.org/changeset/52784 MISC http://websec.sv.cmu.edu/css/css.pdf MANDRIVA MDVSA-2011:039 UBUNTU USN-1006-1 VUPEN ADV-2010-2722 VUPEN ADV-2011-0212 VUPEN ADV-2011-0552 CONFIRM https://bugs.webkit.org/show_bug.cgi?id=29820 WebKit before r52784, as used in Google Chrome before 4.0.249.78 and Apple Safari before 4.0.5, permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote attackers to obtain sensitive information via a crafted document.

cpe:/a:microsoft:ie

CVE-2010-0652

2010-02-18T13:00:00.707-05:00

2010-02-19T00:00:00.000-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-02-19T11:39:00.000-05:00

MISC http://code.google.com/p/chromium/issues/detail?id=9877 Microsoft Internet Explorer permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote HTTP servers to obtain sensitive information via a crafted document.

cpe:/a:opera:opera_browser

CVE-2010-0653

2010-02-18T13:00:00.753-05:00

2010-09-21T01:46:40.917-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://code.google.com/p/chromium/issues/detail?id=9877 SUSE SUSE-SR:2010:014 MISC http://scarybeastsecurity.blogspot.com/2009/12/generic-cross-browser-cross-domain.html MISC http://websec.sv.cmu.edu/css/css.pdf Opera before 10.10 permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote attackers to obtain sensitive information via a crafted document.

cpe:/a:mozilla:firefox:3.5.1 cpe:/a:mozilla:firefox:3.5.2 cpe:/a:mozilla:firefox:3.5.3 cpe:/a:mozilla:firefox:3.5.4 cpe:/a:mozilla:firefox:3.5.5 cpe:/a:mozilla:firefox:3.5.6 cpe:/a:mozilla:firefox:3.5.7 cpe:/a:mozilla:firefox:3.5.9 cpe:/a:mozilla:firefox:3.5.10 cpe:/a:mozilla:firefox:3.6.1 cpe:/a:mozilla:firefox:3.6.2 cpe:/a:mozilla:firefox:3.6.3 cpe:/a:mozilla:firefox:3.6.4 cpe:/a:mozilla:firefox:3.6.6 cpe:/a:mozilla:seamonkey:1.0 cpe:/a:mozilla:seamonkey:1.0:alpha cpe:/a:mozilla:seamonkey:1.0:beta cpe:/a:mozilla:seamonkey:1.0.1 cpe:/a:mozilla:seamonkey:1.0.2 cpe:/a:mozilla:seamonkey:1.0.3 cpe:/a:mozilla:seamonkey:1.0.4 cpe:/a:mozilla:seamonkey:1.0.5 cpe:/a:mozilla:seamonkey:1.0.6 cpe:/a:mozilla:seamonkey:1.0.7 cpe:/a:mozilla:seamonkey:1.0.8 cpe:/a:mozilla:seamonkey:1.0.9 cpe:/a:mozilla:seamonkey:1.1 cpe:/a:mozilla:seamonkey:1.1:alpha cpe:/a:mozilla:seamonkey:1.1:beta cpe:/a:mozilla:seamonkey:1.1.1 cpe:/a:mozilla:seamonkey:1.1.2 cpe:/a:mozilla:seamonkey:1.1.3 cpe:/a:mozilla:seamonkey:1.1.4 cpe:/a:mozilla:seamonkey:1.1.5 cpe:/a:mozilla:seamonkey:1.1.6 cpe:/a:mozilla:seamonkey:1.1.7 cpe:/a:mozilla:seamonkey:1.1.8 cpe:/a:mozilla:seamonkey:1.1.9 cpe:/a:mozilla:seamonkey:1.1.10 cpe:/a:mozilla:seamonkey:1.1.11 cpe:/a:mozilla:seamonkey:1.1.12 cpe:/a:mozilla:seamonkey:1.1.13 cpe:/a:mozilla:seamonkey:1.1.14 cpe:/a:mozilla:seamonkey:1.1.15 cpe:/a:mozilla:seamonkey:1.1.16 cpe:/a:mozilla:seamonkey:1.1.17 cpe:/a:mozilla:seamonkey:1.1.18 cpe:/a:mozilla:seamonkey:1.1.19 cpe:/a:mozilla:seamonkey:1.5.0.8 cpe:/a:mozilla:seamonkey:1.5.0.9 cpe:/a:mozilla:seamonkey:1.5.0.10 cpe:/a:mozilla:seamonkey:2.0 cpe:/a:mozilla:seamonkey:2.0:alpha_1 cpe:/a:mozilla:seamonkey:2.0:alpha_2 cpe:/a:mozilla:seamonkey:2.0:alpha_3 cpe:/a:mozilla:seamonkey:2.0:beta_1 cpe:/a:mozilla:seamonkey:2.0:beta_2 cpe:/a:mozilla:seamonkey:2.0:rc1 cpe:/a:mozilla:seamonkey:2.0:rc2 cpe:/a:mozilla:seamonkey:2.0.1 cpe:/a:mozilla:seamonkey:2.0.2 cpe:/a:mozilla:seamonkey:2.0.3 cpe:/a:mozilla:seamonkey:2.0.4 cpe:/a:mozilla:seamonkey:2.0.5 cpe:/a:mozilla:seamonkey:2.0a1pre cpe:/a:mozilla:thunderbird:3.0.1 cpe:/a:mozilla:thunderbird:3.0.2 cpe:/a:mozilla:thunderbird:3.0.3 cpe:/a:mozilla:thunderbird:3.0.4 cpe:/a:mozilla:thunderbird:3.0.5 cpe:/a:mozilla:thunderbird:3.1

CVE-2010-0654

2010-02-18T13:00:00.787-05:00

2017-09-18T21:30:27.767-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://code.google.com/p/chromium/issues/detail?id=9877 MISC http://scarybeastsecurity.blogspot.com/2009/12/generic-cross-browser-cross-domain.html MISC http://websec.sv.cmu.edu/css/css.pdf CONFIRM http://www.mozilla.org/security/announce/2010/mfsa2010-46.html CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=524223 Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 permit cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote attackers to obtain sensitive information via a crafted document.

CVE-2010-0655

2010-02-18T13:00:00.817-05:00

2017-09-18T21:30:27.830-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://code.google.com/p/chromium/issues/detail?id=12523 CONFIRM http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html SECTRACK 1023506 CONFIRM http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs Use-after-free vulnerability in Google Chrome before 4.0.249.78 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving the display of a blocked popup window during navigation to a different web site.

cpe:/a:apple:webkit:r51280 cpe:/a:google:chrome:0.2.149.27 cpe:/a:google:chrome:0.2.149.29 cpe:/a:google:chrome:0.2.149.30 cpe:/a:google:chrome:0.2.152.1 cpe:/a:google:chrome:0.2.153.1 cpe:/a:google:chrome:0.3.154.0 cpe:/a:google:chrome:0.3.154.3 cpe:/a:google:chrome:0.4.154.18 cpe:/a:google:chrome:0.4.154.22 cpe:/a:google:chrome:0.4.154.31 cpe:/a:google:chrome:0.4.154.33 cpe:/a:google:chrome:1.0.154.36 cpe:/a:google:chrome:1.0.154.39 cpe:/a:google:chrome:1.0.154.42 cpe:/a:google:chrome:1.0.154.43 cpe:/a:google:chrome:1.0.154.46 cpe:/a:google:chrome:1.0.154.48 cpe:/a:google:chrome:1.0.154.52 cpe:/a:google:chrome:1.0.154.53 cpe:/a:google:chrome:1.0.154.59 cpe:/a:google:chrome:1.0.154.65 cpe:/a:google:chrome:2.0.156.1 cpe:/a:google:chrome:2.0.157.0 cpe:/a:google:chrome:2.0.157.2 cpe:/a:google:chrome:2.0.158.0 cpe:/a:google:chrome:2.0.159.0 cpe:/a:google:chrome:2.0.169.0 cpe:/a:google:chrome:2.0.169.1 cpe:/a:google:chrome:2.0.170.0 cpe:/a:google:chrome:2.0.172 cpe:/a:google:chrome:2.0.172.2 cpe:/a:google:chrome:2.0.172.8 cpe:/a:google:chrome:2.0.172.27 cpe:/a:google:chrome:2.0.172.28 cpe:/a:google:chrome:2.0.172.30 cpe:/a:google:chrome:2.0.172.31 cpe:/a:google:chrome:2.0.172.33 cpe:/a:google:chrome:2.0.172.37 cpe:/a:google:chrome:2.0.172.38 cpe:/a:google:chrome:3.0.182.2 cpe:/a:google:chrome:3.0.190.2 cpe:/a:google:chrome:3.0.193.2:beta cpe:/a:google:chrome:3.0.195.21 cpe:/a:google:chrome:3.0.195.24 cpe:/a:google:chrome:3.0.195.32 cpe:/a:google:chrome:3.0.195.33 cpe:/a:google:chrome:4.0.244.0 cpe:/a:google:chrome:4.0.249.78:beta

CVE-2010-0656

2010-02-18T13:00:00.847-05:00

2017-09-18T21:30:27.907-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://code.google.com/p/chromium/issues/detail?id=20450 CONFIRM http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html FEDORA FEDORA-2010-8360 FEDORA FEDORA-2010-8379 FEDORA FEDORA-2010-8423 SUSE SUSE-SR:2011:002 SECTRACK 1023506 CONFIRM http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs CONFIRM http://trac.webkit.org/changeset/51295 MANDRIVA MDVSA-2011:039 BID 38372 UBUNTU USN-1006-1 VUPEN ADV-2010-2722 VUPEN ADV-2011-0212 VUPEN ADV-2011-0552 CONFIRM https://bugs.webkit.org/show_bug.cgi?id=31329 WebKit before r51295, as used in Google Chrome before 4.0.249.78, presents a directory-listing page in response to an XMLHttpRequest for a file:/// URL that corresponds to a directory, which allows attackers to obtain sensitive information or possibly have unspecified other impact via a crafted local HTML document.

CVE-2010-0657

2010-02-18T13:00:00.880-05:00

2017-09-18T21:30:27.987-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://code.google.com/p/chromium/issues/detail?id=23693 CONFIRM http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html SECTRACK 1023506 CONFIRM http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs Google Chrome before 4.0.249.78 on Windows does not perform the expected encoding, escaping, and quoting for the URL in the --app argument in a desktop shortcut, which allows user-assisted remote attackers to execute arbitrary programs or obtain sensitive information by tricking a user into creating a crafted shortcut.

CVE-2010-0658

2010-02-18T13:00:00.927-05:00

2017-09-18T21:30:28.063-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://code.google.com/p/chromium/issues/detail?id=24071 CONFIRM http://code.google.com/p/chromium/issues/detail?id=24646 CONFIRM http://code.google.com/p/chromium/issues/detail?id=8864 CONFIRM http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html SECTRACK 1023506 CONFIRM http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs Multiple integer overflows in Skia, as used in Google Chrome before 4.0.249.78, allow remote attackers to execute arbitrary code in the Chrome sandbox or cause a denial of service (memory corruption and application crash) via vectors involving CANVAS elements.

cpe:/a:apple:webkit:r53524 cpe:/a:google:chrome:0.2.149.27 cpe:/a:google:chrome:0.2.149.29 cpe:/a:google:chrome:0.2.149.30 cpe:/a:google:chrome:0.2.152.1 cpe:/a:google:chrome:0.2.153.1 cpe:/a:google:chrome:0.3.154.0 cpe:/a:google:chrome:0.3.154.3 cpe:/a:google:chrome:0.4.154.18 cpe:/a:google:chrome:0.4.154.22 cpe:/a:google:chrome:0.4.154.31 cpe:/a:google:chrome:0.4.154.33 cpe:/a:google:chrome:1.0.154.36 cpe:/a:google:chrome:1.0.154.39 cpe:/a:google:chrome:1.0.154.42 cpe:/a:google:chrome:1.0.154.43 cpe:/a:google:chrome:1.0.154.46 cpe:/a:google:chrome:1.0.154.48 cpe:/a:google:chrome:1.0.154.52 cpe:/a:google:chrome:1.0.154.53 cpe:/a:google:chrome:1.0.154.59 cpe:/a:google:chrome:1.0.154.65 cpe:/a:google:chrome:2.0.156.1 cpe:/a:google:chrome:2.0.157.0 cpe:/a:google:chrome:2.0.157.2 cpe:/a:google:chrome:2.0.158.0 cpe:/a:google:chrome:2.0.159.0 cpe:/a:google:chrome:2.0.169.0 cpe:/a:google:chrome:2.0.169.1 cpe:/a:google:chrome:2.0.170.0 cpe:/a:google:chrome:2.0.172 cpe:/a:google:chrome:2.0.172.2 cpe:/a:google:chrome:2.0.172.8 cpe:/a:google:chrome:2.0.172.27 cpe:/a:google:chrome:2.0.172.28 cpe:/a:google:chrome:2.0.172.30 cpe:/a:google:chrome:2.0.172.31 cpe:/a:google:chrome:2.0.172.33 cpe:/a:google:chrome:2.0.172.37 cpe:/a:google:chrome:2.0.172.38 cpe:/a:google:chrome:3.0.182.2 cpe:/a:google:chrome:3.0.190.2 cpe:/a:google:chrome:3.0.193.2:beta cpe:/a:google:chrome:3.0.195.21 cpe:/a:google:chrome:3.0.195.24 cpe:/a:google:chrome:3.0.195.32 cpe:/a:google:chrome:3.0.195.33 cpe:/a:google:chrome:4.0.244.0 cpe:/a:google:chrome:4.0.249.78

CVE-2010-0659

2010-02-18T13:00:00.957-05:00

2017-09-18T21:30:28.127-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://code.google.com/p/chromium/issues/detail?id=28566 CONFIRM http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html SUSE SUSE-SR:2011:002 SECTRACK 1023506 CONFIRM http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs CONFIRM http://trac.webkit.org/changeset/52833 VUPEN ADV-2011-0212 CONFIRM https://bugs.webkit.org/show_bug.cgi?id=33231 The image decoder in WebKit before r52833, as used in Google Chrome before 4.0.249.78, does not properly handle a failure of memory allocation, which allows remote attackers to execute arbitrary code in the Chrome sandbox via a malformed GIF file that specifies a large size.

CVE-2010-0660

2010-02-18T13:00:00.987-05:00

2017-09-18T21:30:28.190-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://code.google.com/p/chromium/issues/detail?id=29920 CONFIRM http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html SECTRACK 1023506 CONFIRM http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs Google Chrome before 4.0.249.78 sends an https URL in the Referer header of an http request in certain circumstances involving https to http redirection, which allows remote HTTP servers to obtain potentially sensitive information via standard HTTP logging.

cpe:/a:apple:webkit:52400 cpe:/a:google:chrome:0.2.149.27 cpe:/a:google:chrome:0.2.149.29 cpe:/a:google:chrome:0.2.149.30 cpe:/a:google:chrome:0.2.152.1 cpe:/a:google:chrome:0.2.153.1 cpe:/a:google:chrome:0.3.154.0 cpe:/a:google:chrome:0.3.154.3 cpe:/a:google:chrome:0.4.154.18 cpe:/a:google:chrome:0.4.154.22 cpe:/a:google:chrome:0.4.154.31 cpe:/a:google:chrome:0.4.154.33 cpe:/a:google:chrome:1.0.154.36 cpe:/a:google:chrome:1.0.154.39 cpe:/a:google:chrome:1.0.154.42 cpe:/a:google:chrome:1.0.154.43 cpe:/a:google:chrome:1.0.154.46 cpe:/a:google:chrome:1.0.154.48 cpe:/a:google:chrome:1.0.154.52 cpe:/a:google:chrome:1.0.154.53 cpe:/a:google:chrome:1.0.154.59 cpe:/a:google:chrome:1.0.154.65 cpe:/a:google:chrome:2.0.156.1 cpe:/a:google:chrome:2.0.157.0 cpe:/a:google:chrome:2.0.157.2 cpe:/a:google:chrome:2.0.158.0 cpe:/a:google:chrome:2.0.159.0 cpe:/a:google:chrome:2.0.169.0 cpe:/a:google:chrome:2.0.169.1 cpe:/a:google:chrome:2.0.170.0 cpe:/a:google:chrome:2.0.172 cpe:/a:google:chrome:2.0.172.2 cpe:/a:google:chrome:2.0.172.8 cpe:/a:google:chrome:2.0.172.27 cpe:/a:google:chrome:2.0.172.28 cpe:/a:google:chrome:2.0.172.30 cpe:/a:google:chrome:2.0.172.31 cpe:/a:google:chrome:2.0.172.33 cpe:/a:google:chrome:2.0.172.37 cpe:/a:google:chrome:2.0.172.38 cpe:/a:google:chrome:3.0.182.2 cpe:/a:google:chrome:3.0.190.2 cpe:/a:google:chrome:3.0.193.2:beta cpe:/a:google:chrome:3.0.195.21 cpe:/a:google:chrome:3.0.195.24 cpe:/a:google:chrome:3.0.195.32 cpe:/a:google:chrome:3.0.195.33 cpe:/a:google:chrome:4.0.244.0 cpe:/a:google:chrome:4.0.249.0

CVE-2010-0661

2010-02-18T13:00:01.020-05:00

2017-09-18T21:30:28.267-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://code.google.com/p/chromium/issues/detail?id=30660 CONFIRM http://flock.com/security/ CONFIRM http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html SUSE SUSE-SR:2011:002 SECTRACK 1023506 CONFIRM http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs CONFIRM http://trac.webkit.org/changeset/52401 VUPEN ADV-2011-0212 CONFIRM https://bugs.webkit.org/show_bug.cgi?id=32647 WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google Chrome before 4.0.249.78, allows remote attackers to bypass the Same Origin Policy via vectors involving the window.open method.

CVE-2010-0662

2010-02-18T13:00:01.067-05:00

2017-09-18T21:30:28.347-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://code.google.com/p/chromium/issues/detail?id=31307 CONFIRM http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html SECTRACK 1023506 CONFIRM http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs XF googlechrome-paramtraits-dos(56627) The ParamTraits<SkBitmap>::Read function in common/common_param_traits.cc in Google Chrome before 4.0.249.78 does not use the correct variables in calculations designed to prevent integer overflows, which allows attackers to leverage renderer access to cause a denial of service or possibly have unspecified other impact via bitmap data, related to deserialization.

CVE-2010-0663

2010-02-18T13:00:01.097-05:00

2017-09-18T21:30:28.407-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://code.google.com/p/chromium/issues/detail?id=31307 CONFIRM http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html SECTRACK 1023506 CONFIRM http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs The ParamTraits<SkBitmap>::Read function in common/common_param_traits.cc in Google Chrome before 4.0.249.78 does not initialize the memory locations that will hold bitmap data, which might allow remote attackers to obtain potentially sensitive information from process memory by providing insufficient data, related to use of a (1) thumbnail database or (2) HTML canvas.

CVE-2010-0664

2010-02-18T13:00:01.130-05:00

2017-09-18T21:30:28.470-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://code.google.com/p/chromium/issues/detail?id=31517 MISC http://exchange.kg/other/chrome3_0day-denial_of_service_crash.html CONFIRM http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html SECTRACK 1023506 CONFIRM http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs MISC http://twitter.com/akirsanov/statuses/7370288490 Stack consumption vulnerability in the ChildProcessSecurityPolicy::CanRequestURL function in browser/child_process_security_policy.cc in Google Chrome before 4.0.249.78 allows remote attackers to cause a denial of service (memory consumption and application crash) via a URL that specifies multiple protocols, as demonstrated by a URL that begins with many repetitions of the view-source: substring.

cpe:/a:xs4all:jag:1.14

CVE-2010-0665

2010-02-19T12:30:01.020-05:00

2017-08-16T21:32:03.680-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov EXPLOIT-DB 11406 XF jag-database-info-disclosure(56228) JAG (Just Another Guestbook) 1.14 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request for jag/database.sql.

cpe:/a:novell:edirectory:8.5 cpe:/a:novell:edirectory:8.5.12a cpe:/a:novell:edirectory:8.5.27 cpe:/a:novell:edirectory:8.6.2 cpe:/a:novell:edirectory:8.7 cpe:/a:novell:edirectory:8.7.1 cpe:/a:novell:edirectory:8.7.1:sp1 cpe:/a:novell:edirectory:8.7.3 cpe:/a:novell:edirectory:8.7.3.8 cpe:/a:novell:edirectory:8.7.3.8_presp9 cpe:/a:novell:edirectory:8.7.3.9 cpe:/a:novell:edirectory:8.7.3.10 cpe:/a:novell:edirectory:8.8 cpe:/a:novell:edirectory:8.8:sp1 cpe:/a:novell:edirectory:8.8:sp2 cpe:/a:novell:edirectory:8.8:sp3 cpe:/a:novell:edirectory:8.8:sp4 cpe:/a:novell:edirectory:8.8:sp5 cpe:/a:novell:edirectory:8.8:sp5:patch1

CVE-2010-0666

2010-02-19T12:30:01.050-05:00

2010-02-22T00:00:00.000-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-02-22T11:52:00.000-05:00

CONFIRM http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5067743&sliceId=&docTypeID=DT_SUSESDB_PSDB_1_1&dialogID=122457794&stateId=0%200%20122459671 CONFIRM http://www.novell.com/support/viewContent.do?externalId=3426981 SECTRACK 1023558 VUPEN ADV-2010-0334 Unspecified vulnerability in eMBox in Novell eDirectory 8.8 SP5 Patch 2 and earlier allows remote attackers to cause a denial of service (crash) via unknown a crafted SOAP request, a different issue than CVE-2008-0926.

cpe:/a:moinmo:moinmoin:1.9.0

CVE-2010-0667

2010-02-26T14:30:00.463-05:00

2010-03-01T00:00:00.000-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-03-01T15:03:00.000-05:00

CONFIRM http://hg.moinmo.in/moin/1.9/raw-file/1.9.1/docs/CHANGES CONFIRM http://hg.moinmo.in/moin/1.9/rev/04afdde50094 CONFIRM http://hg.moinmo.in/moin/1.9/rev/9d8e7ce3c3a2 MLIST [oss-security] 20100215 Re: CVE Request -- MoinMoin -- 1.8.7 MLIST [oss-security] 20100221 Re: CVE Request -- MoinMoin -- 1.8.7 CONFIRM http://moinmo.in/MoinMoinChat/Logs/moin-dev/2010-01-18 CONFIRM http://moinmo.in/SecurityFixes MLIST [oss-security] 20100121 CVE request: MoinMoin information disclosure MLIST [oss-security] 20100215 CVE Request -- MoinMoin -- 1.8.7 MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the GATEWAY_INTERFACE environment variable is set, which allows remote attackers to obtain sensitive information via unspecified vectors.

cpe:/a:moinmo:moinmoin:1.5.0 cpe:/a:moinmo:moinmoin:1.5.0:beta1 cpe:/a:moinmo:moinmoin:1.5.0:beta2 cpe:/a:moinmo:moinmoin:1.5.0:beta3 cpe:/a:moinmo:moinmoin:1.5.0:beta4 cpe:/a:moinmo:moinmoin:1.5.0:beta5 cpe:/a:moinmo:moinmoin:1.5.0:beta6 cpe:/a:moinmo:moinmoin:1.5.0:rc1 cpe:/a:moinmo:moinmoin:1.5.1 cpe:/a:moinmo:moinmoin:1.5.2 cpe:/a:moinmo:moinmoin:1.5.3 cpe:/a:moinmo:moinmoin:1.5.3:rc1 cpe:/a:moinmo:moinmoin:1.5.3:rc2 cpe:/a:moinmo:moinmoin:1.5.4 cpe:/a:moinmo:moinmoin:1.5.5 cpe:/a:moinmo:moinmoin:1.5.5:rc1 cpe:/a:moinmo:moinmoin:1.5.5a cpe:/a:moinmo:moinmoin:1.5.6 cpe:/a:moinmo:moinmoin:1.5.7 cpe:/a:moinmo:moinmoin:1.5.8 cpe:/a:moinmo:moinmoin:1.6.0 cpe:/a:moinmo:moinmoin:1.6.0:beta1 cpe:/a:moinmo:moinmoin:1.6.0:beta2 cpe:/a:moinmo:moinmoin:1.6.0:rc1 cpe:/a:moinmo:moinmoin:1.6.0:rc2 cpe:/a:moinmo:moinmoin:1.6.1 cpe:/a:moinmo:moinmoin:1.6.2 cpe:/a:moinmo:moinmoin:1.6.3 cpe:/a:moinmo:moinmoin:1.6.4 cpe:/a:moinmo:moinmoin:1.7.0 cpe:/a:moinmo:moinmoin:1.7.0:beta1 cpe:/a:moinmo:moinmoin:1.7.0:beta2 cpe:/a:moinmo:moinmoin:1.7.0:rc1 cpe:/a:moinmo:moinmoin:1.7.0:rc2 cpe:/a:moinmo:moinmoin:1.7.0:rc3 cpe:/a:moinmo:moinmoin:1.7.1 cpe:/a:moinmo:moinmoin:1.7.2 cpe:/a:moinmo:moinmoin:1.7.3 cpe:/a:moinmo:moinmoin:1.8.0 cpe:/a:moinmo:moinmoin:1.8.1 cpe:/a:moinmo:moinmoin:1.8.2 cpe:/a:moinmo:moinmoin:1.8.3 cpe:/a:moinmo:moinmoin:1.8.4 cpe:/a:moinmo:moinmoin:1.8.6 cpe:/a:moinmo:moinmoin:1.9.0 cpe:/a:moinmo:moinmoin:1.9.1

CVE-2010-0668

2010-02-26T14:30:00.603-05:00

2017-08-16T21:32:03.743-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=569975 CONFIRM http://hg.moinmo.in/moin/1.8/raw-file/1.8.7/docs/CHANGES FEDORA FEDORA-2010-1743 FEDORA FEDORA-2010-1712 MLIST [oss-security] 20100215 Re: CVE Request -- MoinMoin -- 1.8.7 MLIST [oss-security] 20100221 Re: CVE Request -- MoinMoin -- 1.8.7 CONFIRM http://moinmo.in/MoinMoinRelease1.8 CONFIRM http://moinmo.in/SecurityFixes DEBIAN DSA-2014 MLIST [oss-security] 20100215 CVE Request -- MoinMoin -- 1.8.7 BID 38023 VUPEN ADV-2010-0266 VUPEN ADV-2010-0600 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=565604 XF moinmoin-superuser-unspecified(56002) Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, related to configurations that have a non-empty superuser list, the xmlrpc action enabled, the SyncPages action enabled, or OpenID configured.

CVE-2010-0669

2010-02-26T14:30:00.667-05:00

2010-03-31T01:41:50.937-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://hg.moinmo.in/moin/1.8/raw-file/1.8.7/docs/CHANGES CONFIRM http://moinmo.in/MoinMoinRelease1.8 CONFIRM http://moinmo.in/SecurityFixes DEBIAN DSA-2014 MLIST [oss-security] 20100215 CVE Request -- MoinMoin -- 1.8.7 MLIST [oss-security] 20100215 Re: CVE Request -- MoinMoin -- 1.8.7 MLIST [oss-security] 20100221 Re: CVE Request -- MoinMoin -- 1.8.7 BID 38023 VUPEN ADV-2010-0600 MoinMoin before 1.8.7 and 1.9.x before 1.9.2 does not properly sanitize user profiles, which has unspecified impact and attack vectors.

cpe:/a:iptechinside:com_jquarks:0.2.2 cpe:/a:iptechinside:com_jquarks:0.2.3

CVE-2010-0670

2010-02-22T14:30:00.313-05:00

2017-08-16T21:32:03.803-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.iptechinside.com/labs/news/show/6 XF jquarks-unspecified-path-disclosure(56523) Unspecified vulnerability in the IP-Tech JQuarks (com_jquarks) Component before 0.2.4 for Joomla! allows attackers to obtain the installation path for Joomla! via unknown vectors.

cpe:/a:michalin:kr_media_pogodny_cms

CVE-2010-0671

2010-02-22T15:30:00.377-05:00

2018-10-10T15:53:20.853-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://ariko-security.com/feb2010/ad439.html MISC http://packetstormsecurity.org/1002-exploits/pogodnycms-sql.txt EXPLOIT-DB 11473 BUGTRAQ 20100216 Pogodny CMS SQL vulnerabilities BID 38253 SQL injection vulnerability in index.php in KR MEDIA Pogodny CMS allows remote attackers to execute arbitrary SQL commands via the id parameter in a niusy action.

cpe:/a:webmastersite:wsn_guest:1.02

CVE-2010-0672

2010-02-22T15:30:00.437-05:00

2017-08-16T21:32:03.867-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://packetstormsecurity.org/1002-exploits/wsnguest102-sql.txt EXPLOIT-DB 11436 BID 38236 XF wsnguest-orderlinks-sql-injection(56256) SQL injection vulnerability in index.php in WSN Guest 1.02 allows remote attackers to execute arbitrary SQL commands via the orderlinks parameter.

cpe:/a:copperleaf:photolog:0.16

CVE-2010-0673

2010-02-22T15:30:00.467-05:00

2010-02-23T00:00:00.000-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-02-23T10:54:00.000-05:00

MISC http://packetstormsecurity.org/1002-exploits/wpcopperleaf-sql.txt EXPLOIT-DB 11458 BID 38239 SQL injection vulnerability in cplphoto.php in the Copperleaf Photolog plugin 0.16, and possibly earlier, for WordPress allows remote attackers to execute arbitrary SQL commands via the postid parameter.

cpe:/a:2enetworx:statcountex:3.1

CVE-2010-0674

2010-02-22T15:30:00.517-05:00

2017-08-16T21:32:03.913-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://packetstormsecurity.org/1002-exploits/statcountex-disclose.txt EXPLOIT-DB 11434 XF statcountex-stats-info-disclosure(56264) StatCounteX 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for path/stats.mdb.

cpe:/a:bgsvetionik:bgs_cms:2.2.1

CVE-2010-0675

2010-02-22T15:30:00.547-05:00

2010-02-23T00:00:00.000-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-02-23T11:03:00.000-05:00

MISC http://packetstormsecurity.org/1002-exploits/bgscms-xss.txt BID 38264 Cross-site scripting (XSS) vulnerability in index.php in BGSvetionik BGS CMS 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action. NOTE: some of these details are obtained from third party information.

cpe:/a:weberr:com_rwcards:3.0.18

CVE-2010-0676

2010-02-22T15:30:00.577-05:00

2010-02-23T11:18:10.063-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-02-23T11:10:00.000-05:00

MISC http://packetstormsecurity.org/1002-exploits/joomlarwcards-lfi.txt BID 38267 Directory traversal vulnerability in index.php in the RWCards (com_rwcards) component 3.0.18 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter.

cpe:/a:katalog.hurricane:katalog_stron_hurricane:1.3.5

CVE-2010-0677

2010-02-22T16:30:00.420-05:00

2010-02-23T00:00:00.000-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-02-23T11:38:00.000-05:00

MISC http://packetstormsecurity.org/1002-exploits/katalog-rfisql.txt EXPLOIT-DB 11452 SQL injection vulnerability in index.php in Katalog Stron Hurricane 1.3.5, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the get parameter.

cpe:/a:katalog.hurricane:katalog_stron_hurricane:1.3.5

CVE-2010-0678

2010-02-22T16:30:00.453-05:00

2010-02-23T00:00:00.000-05:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2010-02-23T11:43:00.000-05:00

MISC http://packetstormsecurity.org/1002-exploits/katalog-rfisql.txt EXPLOIT-DB 11452 PHP remote file inclusion vulnerability in includes/moderation.php in Katalog Stron Hurricane 1.3.5, and possibly earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the includes_directory parameter.

cpe:/a:hyleos:chemview:1.9.5.1

CVE-2010-0679

2010-02-22T16:30:00.483-05:00

2010-02-23T00:00:00.000-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2010-02-23T11:55:00.000-05:00

MISC http://packetstormsecurity.org/1002-advisories/chemviewx-overflow.txt MISC http://packetstormsecurity.org/1002-exploits/hyleoschemview-heap.rb.txt EXPLOIT-DB 11422 MISC http://www.security-assessment.com/files/advisories/2010-02-11_ChemviewX_Activex.pdf BID 38225 Multiple stack-based buffer overflows in the HyleosChemView.HLChemView ActiveX control (HyleosChemView.ocx) in Hyleos ChemView 1.9.5.1 allow remote attackers to execute arbitrary code via a large number of white space characters in the filename argument to the (1) SaveasMolFile and (2) ReadMolFile methods.

cpe:/a:zeuscms:zeuscms:0.2

CVE-2010-0680

2010-02-22T16:30:00.517-05:00

2010-02-23T12:14:02.500-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-02-23T12:07:00.000-05:00

EXPLOIT-DB 11437 BID 38237 Directory traversal vulnerability in index.php in ZeusCMS 0.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter.

cpe:/a:zeuscms:zeuscms:0.2

CVE-2010-0681

2010-02-22T16:30:00.547-05:00

2010-02-23T12:14:49.093-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-02-23T12:08:00.000-05:00

EXPLOIT-DB 11437 ZeusCMS 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request for admin/backup.sql.

cpe:/a:wordpress:wordpress:2.9 cpe:/a:wordpress:wordpress:2.9.1 cpe:/a:wordpress:wordpress:2.9.1:beta1 cpe:/a:wordpress:wordpress:2.9.1:rc1

CVE-2010-0682

2010-02-23T15:30:00.733-05:00

2011-01-19T01:55:00.603-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov MISC http://hakre.wordpress.com/2010/02/16/the-short-memory-of-wordpress-org-security/ FEDORA FEDORA-2010-19330 FEDORA FEDORA-2010-19329 MISC http://tmacuk.co.uk/?p=180 CONFIRM http://wordpress.org/development/2010/02/wordpress-2-9-2/ CONFIRM https://core.trac.wordpress.org/ticket/11236 WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct request with a modified p parameter.

cpe:/a:tibco:administrator:5.4.0 cpe:/a:tibco:administrator:5.6.0

CVE-2010-0683

2010-02-25T14:30:00.547-05:00

2010-02-26T00:00:00.000-05:00

6.0

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

2010-02-26T13:04:00.000-05:00

BID 38396 CONFIRM http://www.tibco.com/multimedia/security_advisory_administrator_tcm8-10685.txt CONFIRM http://www.tibco.com/services/support/advisories/adminstrator-advisory_20100223.jsp VUPEN ADV-2010-0463 Unspecified vulnerability in TIBRepoServer5.jar in TIBCO Administrator 5.4.0 through 5.6.0, when JMS transport is used, allows remote authenticated users to execute arbitrary code on all domain nodes via vectors related to leveraging administrative credentials.

cpe:/a:apache:activemq:1.1 cpe:/a:apache:activemq:1.2 cpe:/a:apache:activemq:1.3 cpe:/a:apache:activemq:1.4 cpe:/a:apache:activemq:1.5 cpe:/a:apache:activemq:2.0 cpe:/a:apache:activemq:2.1 cpe:/a:apache:activemq:3.0 cpe:/a:apache:activemq:3.1 cpe:/a:apache:activemq:3.2 cpe:/a:apache:activemq:3.2.1 cpe:/a:apache:activemq:3.2.2 cpe:/a:apache:activemq:4.0 cpe:/a:apache:activemq:4.0:m4 cpe:/a:apache:activemq:4.0:rc2 cpe:/a:apache:activemq:4.0.1 cpe:/a:apache:activemq:4.0.2 cpe:/a:apache:activemq:4.1.0 cpe:/a:apache:activemq:4.1.1 cpe:/a:apache:activemq:5.0.0 cpe:/a:apache:activemq:5.1.0 cpe:/a:apache:activemq:5.2.0 cpe:/a:apache:activemq:5.3.0

CVE-2010-0684

2010-04-05T12:30:00.610-04:00

2018-10-10T15:53:21.417-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://activemq.apache.org/activemq-531-release.html SECTRACK 1023778 MISC http://www.rajatswarup.com/CVE-2010-0684.txt BUGTRAQ 20100330 CVE-2010-0684: Apache ActiveMQ Persistent Cross-Site Scripting (XSS) Vulnerability BID 39119 XF activemq-createdestination-xss(57397) CONFIRM https://issues.apache.org/activemq/browse/AMQ-2613 CONFIRM https://issues.apache.org/activemq/browse/AMQ-2625 Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script or HTML via the JMSDestination parameter in a queue action.

cpe:/a:digium:asterisk:1.2.0 cpe:/a:digium:asterisk:1.2.0:beta1 cpe:/a:digium:asterisk:1.2.0:beta2 cpe:/a:digium:asterisk:1.2.0:rc1 cpe:/a:digium:asterisk:1.2.0:rc2 cpe:/a:digium:asterisk:1.2.1 cpe:/a:digium:asterisk:1.2.2 cpe:/a:digium:asterisk:1.2.2:netsec cpe:/a:digium:asterisk:1.2.3 cpe:/a:digium:asterisk:1.2.3:netsec cpe:/a:digium:asterisk:1.2.6 cpe:/a:digium:asterisk:1.2.7 cpe:/a:digium:asterisk:1.2.8 cpe:/a:digium:asterisk:1.2.9 cpe:/a:digium:asterisk:1.2.10 cpe:/a:digium:asterisk:1.2.10:netsec cpe:/a:digium:asterisk:1.2.11 cpe:/a:digium:asterisk:1.2.11:netsec cpe:/a:digium:asterisk:1.2.12 cpe:/a:digium:asterisk:1.2.12:netsec cpe:/a:digium:asterisk:1.2.12.1 cpe:/a:digium:asterisk:1.2.12.1:netsec cpe:/a:digium:asterisk:1.2.13 cpe:/a:digium:asterisk:1.2.13:netsec cpe:/a:digium:asterisk:1.2.14 cpe:/a:digium:asterisk:1.2.15 cpe:/a:digium:asterisk:1.2.15:netsec cpe:/a:digium:asterisk:1.2.16 cpe:/a:digium:asterisk:1.2.16:netsec cpe:/a:digium:asterisk:1.2.17 cpe:/a:digium:asterisk:1.2.17:netsec cpe:/a:digium:asterisk:1.2.18 cpe:/a:digium:asterisk:1.2.18:netsec cpe:/a:digium:asterisk:1.2.19 cpe:/a:digium:asterisk:1.2.19:netsec cpe:/a:digium:asterisk:1.2.20 cpe:/a:digium:asterisk:1.2.20:netsec cpe:/a:digium:asterisk:1.2.21 cpe:/a:digium:asterisk:1.2.21:netsec cpe:/a:digium:asterisk:1.2.21.1 cpe:/a:digium:asterisk:1.2.21.1:netsec cpe:/a:digium:asterisk:1.2.22 cpe:/a:digium:asterisk:1.2.22:netsec cpe:/a:digium:asterisk:1.2.23 cpe:/a:digium:asterisk:1.2.23:netsec cpe:/a:digium:asterisk:1.2.24 cpe:/a:digium:asterisk:1.2.24:netsec cpe:/a:digium:asterisk:1.2.25 cpe:/a:digium:asterisk:1.2.25:netsec cpe:/a:digium:asterisk:1.2.26 cpe:/a:digium:asterisk:1.2.26:netsec cpe:/a:digium:asterisk:1.2.26.1 cpe:/a:digium:asterisk:1.2.26.1:netsec cpe:/a:digium:asterisk:1.2.26.2 cpe:/a:digium:asterisk:1.2.26.2:netsec cpe:/a:digium:asterisk:1.2.27 cpe:/a:digium:asterisk:1.2.28 cpe:/a:digium:asterisk:1.2.28.1 cpe:/a:digium:asterisk:1.2.29 cpe:/a:digium:asterisk:1.2.30 cpe:/a:digium:asterisk:1.2.30.1 cpe:/a:digium:asterisk:1.2.30.2 cpe:/a:digium:asterisk:1.2.30.3 cpe:/a:digium:asterisk:1.2.30.4 cpe:/a:digium:asterisk:1.2.31 cpe:/a:digium:asterisk:1.2.31.1 cpe:/a:digium:asterisk:1.2.32 cpe:/a:digium:asterisk:1.2.33 cpe:/a:digium:asterisk:1.2.34 cpe:/a:digium:asterisk:1.2.35 cpe:/a:digium:asterisk:1.2.36 cpe:/a:digium:asterisk:1.4.0 cpe:/a:digium:asterisk:1.4.1 cpe:/a:digium:asterisk:1.4.2 cpe:/a:digium:asterisk:1.4.3 cpe:/a:digium:asterisk:1.4.4 cpe:/a:digium:asterisk:1.4.5 cpe:/a:digium:asterisk:1.4.6 cpe:/a:digium:asterisk:1.4.7 cpe:/a:digium:asterisk:1.4.8 cpe:/a:digium:asterisk:1.4.9 cpe:/a:digium:asterisk:1.4.10 cpe:/a:digium:asterisk:1.4.11 cpe:/a:digium:asterisk:1.4.12 cpe:/a:digium:asterisk:1.4.13 cpe:/a:digium:asterisk:1.4.14 cpe:/a:digium:asterisk:1.4.15 cpe:/a:digium:asterisk:1.4.16 cpe:/a:digium:asterisk:1.4.17 cpe:/a:digium:asterisk:1.4.18 cpe:/a:digium:asterisk:1.4.19 cpe:/a:digium:asterisk:1.4.20 cpe:/a:digium:asterisk:1.4.21 cpe:/a:digium:asterisk:1.4.22 cpe:/a:digium:asterisk:1.4.23 cpe:/a:digium:asterisk:1.4.24 cpe:/a:digium:asterisk:1.4.25 cpe:/a:digium:asterisk:1.4.26 cpe:/a:digium:asterisk:1.4.27 cpe:/a:digium:asterisk:1.6.0 cpe:/a:digium:asterisk:1.6.1 cpe:/a:digium:asterisk:b.1.3.2:-:business cpe:/a:digium:asterisk:b.1.3.3:-:business cpe:/a:digium:asterisk:b.2.2.0:-:business cpe:/a:digium:asterisk:b.2.2.1:-:business cpe:/a:digium:asterisk:b.2.3.1:-:business cpe:/a:digium:asterisk:b.2.3.2:-:business cpe:/a:digium:asterisk:b.2.3.3:-:business cpe:/a:digium:asterisk:b.2.3.4:-:business cpe:/a:digium:asterisk:b.2.3.5:-:business cpe:/a:digium:asterisk:b.2.3.6:-:business cpe:/a:digium:asterisk:b.2.5.0:-:business cpe:/a:digium:asterisk:b.2.5.1:-:business cpe:/a:digium:asterisk:b.2.5.2:-:business cpe:/a:digium:asterisk:b.2.5.3:-:business cpe:/a:digium:asterisk:c.1.0:beta7:business cpe:/a:digium:asterisk:c.1.0:beta8:business cpe:/a:digium:asterisk:c.1.6:-:business cpe:/a:digium:asterisk:c.1.6.1:-:business cpe:/a:digium:asterisk:c.1.6.2:-:business cpe:/a:digium:asterisk:c.1.8.0:-:business cpe:/a:digium:asterisk:c.1.8.1:-:business cpe:/a:digium:asterisk:c.2.3:-:business cpe:/a:digium:asterisk:c.3.0:-:business

CVE-2010-0685

2010-02-23T15:30:00.780-05:00

2018-10-10T15:53:22.307-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://downloads.digium.com/pub/security/AST-2010-002.html FEDORA FEDORA-2010-3724 MISC http://svn.asterisk.org/svn/asterisk/branches/1.2/README-SERIOUSLY.bestpractices.txt BUGTRAQ 20100218 AST-2010-002: Dialplan injection vulnerability SECTRACK 1023637 VUPEN ADV-2010-0439 XF asterisk-dial-weak-security(56397) The design of the dialplan functionality in Asterisk Open Source 1.2.x, 1.4.x, and 1.6.x; and Asterisk Business Edition B.x.x and C.x.x, when using the ${EXTEN} channel variable and wildcard pattern matches, allows context-dependent attackers to inject strings into the dialplan using metacharacters that are injected when the variable is expanded, as demonstrated using the Dial application to process a crafted SIP INVITE message that adds an unintended outgoing channel leg. NOTE: it could be argued that this is not a vulnerability in Asterisk, but a class of vulnerabilities that can occur in any program that uses this feature without the associated filtering functionality that is already available.

cpe:/a:vmware:esx_server:3.0.3 cpe:/a:vmware:esx_server:3.5 cpe:/a:vmware:server:2.0.0 cpe:/a:vmware:virtualcenter:2.0.2 cpe:/a:vmware:virtualcenter:2.5

CVE-2010-0686

2010-04-01T15:30:00.407-04:00

2010-04-28T01:45:56.670-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MLIST [security-announce] 20100329 VMSA-2010-0005 VMware products address vulnerabilities in WebAccess BID 39037 SECTRACK 1023769 CONFIRM http://www.vmware.com/security/advisories/VMSA-2010-0005.html WebAccess in VMware VirtualCenter 2.0.2 and 2.5, VMware Server 2.0, and VMware ESX 3.0.3 and 3.5 allows remote attackers to leverage proxy-server functionality to spoof the origin of requests via unspecified vectors, related to a "URL forwarding vulnerability."

cpe:/a:orbitals:orbital_viewer:1.04

CVE-2010-0688

2010-03-19T16:30:00.453-04:00

2017-08-16T21:32:04.133-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov MISC http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-011-orbital-viewer-orb-buffer-overflow/ EXPLOIT-DB 13940 BID 38436 BID 40985 VUPEN ADV-2010-0478 XF orbitalviewer-ov-bo(59560) Stack-based buffer overflow in Orbital Viewer 1.04 allows user-assisted remote attackers to execute arbitrary code via a crafted (1) .orb or (2) .ov file.

cpe:/a:datev:base_system

CVE-2010-0689

2010-02-26T14:30:00.713-05:00

2018-10-10T15:53:23.510-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov MISC http://sotiriu.de/adv/NSOADV-2010-003.txt MISC http://sotiriu.de/demos/videos/nso-2010-003.html CONFIRM http://www.datev.de/info-db/1080162 BUGTRAQ 20100225 NSOADV-2010-003: DATEV ActiveX Control remote command execution BID 38415 VUPEN ADV-2010-0474 XF datev-dvbsexecall-command-execution(56530) The ExecuteExe method in the DVBSExeCall Control ActiveX control 1.0.0.1 in DVBSExeCall.ocx in DATEV Base System (aka Grundpaket Basis) allows remote attackers to execute arbitrary commands via unspecified vectors.

cpe:/a:commodityrentals:video_games_rentals

CVE-2010-0690

2010-02-23T13:30:00.437-05:00

2017-08-16T21:32:04.273-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://packetstormsecurity.org/1002-exploits/videogamesrental-sql.txt EXPLOIT-DB 11409 XF videogames-index-sql-injection(56226) SQL injection vulnerability in index.php in CommodityRentals Video Games Rentals allows remote attackers to execute arbitrary SQL commands via the pfid parameter in a catalog action.

cpe:/a:jtl-software:jtl-shop:2

CVE-2010-0691

2010-02-23T13:30:00.517-05:00

2010-03-03T00:00:00.000-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-02-24T09:04:00.000-05:00

EXPLOIT-DB 11445 SQL injection vulnerability in druckansicht.php in JTL-Shop 2 allows remote attackers to execute arbitrary SQL commands via the s parameter.

cpe:/a:iptechinside:com_jquarks:0.2.2 cpe:/a:iptechinside:com_jquarks:0.2.3

CVE-2010-0692

2010-02-23T13:30:00.577-05:00

2010-03-03T00:00:00.000-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-02-24T09:09:00.000-05:00

CONFIRM http://www.iptechinside.com/labs/news/show/6 BID 38203 SQL injection vulnerability in the IP-Tech JQuarks (com_jquarks) Component 0.2.3, and possibly earlier, for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. NOTE: some of these details are obtained from third party information.

cpe:/a:commodityrentals:trade_manager_script

CVE-2010-0693

2010-02-23T13:30:00.610-05:00

2017-08-16T21:32:04.337-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://packetstormsecurity.org/1002-exploits/trademanager-sql.txt EXPLOIT-DB 11412 XF trade-manager-products-sql-injection(56223) SQL injection vulnerability in products.php in CommodityRentals Trade Manager Script allows remote attackers to execute arbitrary SQL commands via the cid parameter.

cpe:/a:percha:com_perchagallery:1.4

CVE-2010-0694

2010-02-23T13:30:00.640-05:00

2017-08-16T21:32:04.397-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://docs.joomla.org/Vulnerable_Extensions_List#New_format_Feed_Starts_Here MISC http://packetstormsecurity.org/1001-exploits/joomlaperchagallery-sql.txt EXPLOIT-DB 11024 BID 37642 XF perchagallery-index-sql-injection(55447) SQL injection vulnerability in the PerchaGallery (com_perchagallery) component before 1.5b for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an editunidad action to index.php.

cpe:/a:basic-cms:basic-cms

CVE-2010-0695

2010-02-23T13:30:00.687-05:00

2010-03-02T00:00:00.000-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-02-24T09:32:00.000-05:00

MISC http://packetstormsecurity.org/1002-exploits/basiccms-sqlxss.txt BID 38235 Cross-site scripting (XSS) vulnerability in pages/index.php in BASIC-CMS allows remote attackers to inject arbitrary web script or HTML via the nav_id parameter.

cpe:/a:joomlaworks:jw_allvideos:3.0 cpe:/a:joomlaworks:jw_allvideos:3.1 cpe:/a:joomlaworks:jw_allvideos:3.2

CVE-2010-0696

2010-02-23T13:30:00.717-05:00

2013-08-21T02:18:15.453-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov EXPLOIT-DB 11447 CONFIRM http://www.joomlaworks.gr/content/view/77/34/ BID 38238 Directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos (Jw_allVideos) plugin 3.0 through 3.2 for Joomla! allows remote attackers to read arbitrary files via a ./../.../ (modified dot dot) in the file parameter.

cpe:/a:ilya_ivanchenko:itweak_upload:6.x-1.0 cpe:/a:ilya_ivanchenko:itweak_upload:6.x-1.1 cpe:/a:ilya_ivanchenko:itweak_upload:6.x-1.x-dev cpe:/a:ilya_ivanchenko:itweak_upload:6.x-2.0:rc1 cpe:/a:ilya_ivanchenko:itweak_upload:6.x-2.1 cpe:/a:ilya_ivanchenko:itweak_upload:6.x-2.1:rc2 cpe:/a:ilya_ivanchenko:itweak_upload:6.x-2.2 cpe:/a:ilya_ivanchenko:itweak_upload:6.x-2.x-dev

CVE-2010-0697

2010-02-23T15:30:00.813-05:00

2017-08-16T21:32:04.477-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://drupal.org/node/711072 CONFIRM http://drupal.org/node/711074 CONFIRM http://drupal.org/node/717214 BID 38292 XF itweakupload-filenames-xss(56351) Cross-site scripting (XSS) vulnerability in the iTweak Upload module 6.x-1.x before 6.x-1.2 and 6.x-2.x before 6.x-2.3 for Drupal allows remote authenticated users, with create content and upload file permissions, to inject arbitrary web script or HTML via the file name of an uploaded file.

cpe:/a:dynamicsoft:wsc_cms:2.2

CVE-2010-0698

2010-02-23T15:30:00.860-05:00

2017-08-16T21:32:04.553-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://packetstormsecurity.org/1002-exploits/wsccms-sql.txt EXPLOIT-DB 11507 BID 38335 XF wsccms-login-sql-injection(56406) SQL injection vulnerability in backoffice/login.asp in Dynamicsoft WSC CMS 2.2 allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: some of these details are obtained from third party information.

cpe:/a:videosearchscript:videosearchscript_pro:3.5

CVE-2010-0699

2010-02-23T15:30:00.890-05:00

2010-02-24T00:00:00.000-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-02-24T13:13:00.000-05:00

MISC http://packetstormsecurity.org/1002-exploits/vss-xss.txt Cross-site scripting (XSS) vulnerability in index.php in VideoSearchScript Pro 3.5 allows remote attackers to inject arbitrary web script or HTML via the q parameter.

cpe:/a:wampserver:wampserver:2.0i

CVE-2010-0700

2010-02-23T15:30:00.937-05:00

2017-08-16T21:32:04.600-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 38357 MISC http://zeroscience.mk/codes/wamp_xss.txt MISC http://zeroscience.mk/en/vulnerabilities/ZSL-2010-4926.php XF wampserver-index-xss(56417) Cross-site scripting (XSS) vulnerability in index.php in WampServer 2.0i allows remote attackers to inject arbitrary web script or HTML via the lang parameter.

cpe:/a:newgensoft:omnidocs

CVE-2010-0701

2010-02-23T15:30:00.967-05:00

2017-08-16T21:32:04.663-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://packetstormsecurity.org/1002-exploits/omnidocs-sql.txt EXPLOIT-DB 11393 BID 38304 XF omnidocs-forcechangepassword-sql-injection(56237) SQL injection vulnerability in ForceChangePassword.jsp in Newgen Software OmniDocs allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

cpe:/a:fonality:trixbox:2.2.4

CVE-2010-0702

2010-02-23T15:30:01.017-05:00

2017-08-16T21:32:04.710-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://packetstormsecurity.org/1002-exploits/tribox-sql.txt EXPLOIT-DB 11508 BID 38323 XF trixbox-phonedirectory-sql-injection(56407) SQL injection vulnerability in cisco/services/PhonecDirectory.php in Fonality Trixbox 2.2.4 allows remote attackers to execute arbitrary SQL commands via the ID parameter.

cpe:/a:portwise:ssl_vpn:4.6

CVE-2010-0703

2010-02-23T15:30:01.047-05:00

2018-10-10T15:53:24.323-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://packetstormsecurity.org/1002-exploits/PR09-04.txt MISC http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-04 BUGTRAQ 20100217 Cross-Site Scriting on Portwise SSL VPN v4.6 BID 38308 XF portwise-reloadframe-xss(56420) Cross-site scripting (XSS) vulnerability in wa/auth in PortWise SSL VPN 4.6 allows remote attackers to inject arbitrary web script or HTML via the reloadFrame parameter.

cpe:/a:ibm:websphere_portal:6.0.1.5:wp6015_008_01

CVE-2010-0704

2010-02-24T19:30:00.593-05:00

2010-03-02T00:00:00.000-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-02-25T11:40:00.000-05:00

AIXAPAR PM05829 Cross-site scripting (XSS) vulnerability in the Portlet Palette in IBM WebSphere Portal 6.0.1.5 wp6015_008_01 allows remote attackers to inject arbitrary web script or HTML via the search field.

cpe:/a:avast:avast_antivirus_home:4.8.1169::windows cpe:/a:avast:avast_antivirus_home:4.8.1195::windows cpe:/a:avast:avast_antivirus_home:4.8.1201::windows cpe:/a:avast:avast_antivirus_home:4.8.1227::windows cpe:/a:avast:avast_antivirus_home:4.8.1229::windows cpe:/a:avast:avast_antivirus_home:4.8.1282::windows cpe:/a:avast:avast_antivirus_home:4.8.1290::windows cpe:/a:avast:avast_antivirus_home:4.8.1296::windows cpe:/a:avast:avast_antivirus_home:4.8.1335::windows cpe:/a:avast:avast_antivirus_home:4.8.1351::windows cpe:/a:avast:avast_antivirus_home:4.8.1368.0::windows cpe:/a:avast:avast_antivirus_home:5.0.396.0::windows cpe:/a:avast:avast_antivirus_professional:4.8.1169::windows cpe:/a:avast:avast_antivirus_professional:4.8.1195::windows cpe:/a:avast:avast_antivirus_professional:4.8.1201::windows cpe:/a:avast:avast_antivirus_professional:4.8.1227::windows cpe:/a:avast:avast_antivirus_professional:4.8.1229::windows cpe:/a:avast:avast_antivirus_professional:4.8.1282::windows cpe:/a:avast:avast_antivirus_professional:4.8.1290::windows cpe:/a:avast:avast_antivirus_professional:4.8.1296::windows cpe:/a:avast:avast_antivirus_professional:4.8.1335::windows cpe:/a:avast:avast_antivirus_professional:4.8.1351::windows cpe:/a:avast:avast_antivirus_professional:4.8.1356.0 cpe:/a:avast:avast_antivirus_professional:4.8.1368.0::windows cpe:/a:avast:avast_antivirus_professional:5.0.396.0::windows

CVE-2010-0705

2010-02-25T13:30:00.377-05:00

2018-10-10T15:53:24.980-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://forum.avast.com/index.php?topic=55484.0 BUGTRAQ 20100223 [TKADV2010-003] avast! 4.8 and 5.0 aavmker4.sys Kernel Memory Corruption BID 38363 SECTRACK 1023644 MISC http://www.trapkit.de/advisories/TKADV2010-003.txt VUPEN ADV-2010-0449 Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly validate input to IOCTL 0xb2d60030, which allows local users to cause a denial of service (system crash) or execute arbitrary code to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption.

cpe:/a:subexworld:nikira_fraud_management_system

CVE-2010-0706

2010-02-25T13:30:00.483-05:00

2017-08-16T21:32:04.837-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://www.packetstormsecurity.org/1002-exploits/nikara-xss.txt BID 38311 XF nfms-message-xss(56393) Cross-site scripting (XSS) vulnerability in the login/prompt component in Subex Nikira Fraud Management System allows remote attackers to inject arbitrary web script or HTML via the message parameter.

cpe:/a:timeclock-software:employee_timeclock_software:0.99

CVE-2010-0707

2010-02-25T13:30:00.517-05:00

2017-08-16T21:32:04.883-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

EXPLOIT-DB 11516 XF timeclock-adduser-csrf(56410) Cross-site request forgery (CSRF) vulnerability in add_user.php in Employee Timeclock Software 0.99 allows remote attackers to hijack the authentication of an administrator for requests that create new administrative users. NOTE: some of these details are obtained from third party information.

cpe:/a:sun:java_system_directory_server:5.2 cpe:/a:sun:java_system_directory_server:6.0:-:enterprise cpe:/a:sun:java_system_directory_server:6.1:-:enterprise cpe:/a:sun:java_system_directory_server:6.2:-:enterprise cpe:/a:sun:java_system_directory_server:6.3:-:enterprise cpe:/a:sun:java_system_directory_server:6.3.1:-:enterprise cpe:/a:sun:java_system_directory_server:7.0:-:enterprise

CVE-2010-0708

2010-02-25T14:30:00.593-05:00

2017-08-16T21:32:04.947-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://sunsolve.sun.com/search/document.do?assetkey=1-21-143884-01-1 SUNALERT 275711 SUNALERT 1021788 XF jsds-nsslapd-slapd-dos(56603) Multiple unspecified vulnerabilities in (1) ns-slapd and (2) slapd.exe in Sun Directory Server Enterprise Edition 7.0, Sun Java System Directory Server 5.2, and Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 allow remote attackers to cause a denial of service (daemon crash) via a crafted LDAP search request.

cpe:/a:limny:limny:2.0

CVE-2010-0709

2010-02-25T15:30:00.563-05:00

2017-08-16T21:32:04.993-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov EXPLOIT-DB 11477 EXPLOIT-DB 11478 CONFIRM http://www.limny.org/ XF limny-admin-csrf(56318) Multiple cross-site request forgery (CSRF) vulnerabilities in Limny 2.0 allow remote attackers to (1) hijack the authentication of users or administrators for requests that change the email address or password via the user action to index.php, and (2) hijack the authentication of the administrator for requests that create a new user via the admin/modules/user/new action to limny/index.php.

cpe:/a:aspcodecms:aspcode_cms:1.5.8 cpe:/a:aspcodecms:aspcode_cms:2.0.0

CVE-2010-0710

2010-02-25T15:30:00.610-05:00

2010-02-26T00:00:00.000-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2010-02-26T15:11:00.000-05:00

SQL injection vulnerability in default.asp in ASPCode CMS 1.5.8, 2.0.0 Build 103, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the newsid parameter when the sec parameter is 26. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

cpe:/a:aspcodecms:aspcode_cms:1.5.8 cpe:/a:aspcodecms:aspcode_cms:2.0.0

CVE-2010-0711

2010-02-25T15:30:00.640-05:00

2013-07-20T02:53:02.600-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov MISC http://packetstormsecurity.org/1002-exploits/aspcodecms-xssxsrf.txt Cross-site request forgery (CSRF) vulnerability in default.asp in ASPCode CMS 1.5.8, 2.0.0 Build 103, and possibly other versions, allows remote attackers to hijack the authentication of an administrator for requests that (1) delete users via the delete action in the ma2 parameter or (2) create administrators via the update action in the ma2 parameter.

cpe:/a:zenoss:zenoss:2.3.0 cpe:/a:zenoss:zenoss:2.3.3 cpe:/a:zenoss:zenoss:2.4.0 cpe:/a:zenoss:zenoss:2.4.2 cpe:/a:zenoss:zenoss:2.4.5

CVE-2010-0712

2010-02-26T12:30:01.437-05:00

2017-08-16T21:32:05.057-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov MISC http://dev.zenoss.org/trac/changeset/15257 MISC http://www.ngenuity.org/wordpress/2010/01/14/ngenuity-2010-001-zenoss-getjsoneventsinfo-sql-injection/ BID 37802 CONFIRM http://www.zenoss.com/news/SQL-Injection-and-Cross-Site-Forgery-in-Zenoss-Core-Corrected.html XF zenoss-getjsoneventsinfo-sql-injection(55670) Multiple SQL injection vulnerabilities in zport/dmd/Events/getJSONEventsInfo in Zenoss 2.3.3, and other versions before 2.5, allow remote authenticated users to execute arbitrary SQL commands via the (1) severity, (2) state, (3) filter, (4) offset, and (5) count parameters.

cpe:/a:zenoss:zenoss:2.3.0 cpe:/a:zenoss:zenoss:2.3.3 cpe:/a:zenoss:zenoss:2.4.0 cpe:/a:zenoss:zenoss:2.4.2 cpe:/a:zenoss:zenoss:2.4.5

CVE-2010-0713

2010-02-26T12:30:01.563-05:00

2018-10-10T15:53:25.857-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov MISC http://www.ngenuity.org/wordpress/2010/01/14/ngenuity-2010-002-zenoss-multiple-admin-csrf/ BUGTRAQ 20100116 Zenoss Multiple Admin CSRF BID 37843 CONFIRM http://www.zenoss.com/news/SQL-Injection-and-Cross-Site-Forgery-in-Zenoss-Core-Corrected.html Multiple cross-site request forgery (CSRF) vulnerabilities in Zenoss 2.3.3, and other versions before 2.5, allow remote attackers to hijack the authentication of an administrator for (1) requests that reset user passwords via zport/dmd/ZenUsers/admin, and (2) requests that change user commands, which allows for remote execution of system commands via zport/dmd/userCommands/.

cpe:/a:ibm:lotus_quickr:8.0 cpe:/a:ibm:lotus_quickr:8.0.0.2 cpe:/a:ibm:lotus_quickr:8.1 cpe:/a:ibm:lotus_quickr:8.1.1 cpe:/a:ibm:lotus_quickr:8.1.1.1 cpe:/a:ibm:lotus_web_content_management:5.1.0.0 cpe:/a:ibm:lotus_web_content_management:5.1.0.1 cpe:/a:ibm:lotus_web_content_management:5.1.0.2 cpe:/a:ibm:lotus_web_content_management:5.1.0.3 cpe:/a:ibm:lotus_web_content_management:5.1.0.4 cpe:/a:ibm:lotus_web_content_management:5.1.0.5 cpe:/a:ibm:lotus_web_content_management:6.0.0.0 cpe:/a:ibm:lotus_web_content_management:6.0.0.1 cpe:/a:ibm:lotus_web_content_management:6.0.0.2 cpe:/a:ibm:lotus_web_content_management:6.0.0.3 cpe:/a:ibm:lotus_web_content_management:6.0.0.4 cpe:/a:ibm:lotus_web_content_management:6.0.1.0 cpe:/a:ibm:lotus_web_content_management:6.0.1.1 cpe:/a:ibm:lotus_web_content_management:6.0.1.2 cpe:/a:ibm:lotus_web_content_management:6.0.1.3 cpe:/a:ibm:lotus_web_content_management:6.0.1.4 cpe:/a:ibm:lotus_web_content_management:6.0.1.5 cpe:/a:ibm:lotus_web_content_management:6.0.1.6 cpe:/a:ibm:lotus_web_content_management:6.0.1.7 cpe:/a:ibm:lotus_web_content_management:6.1.0.0 cpe:/a:ibm:lotus_web_content_management:6.1.0.1 cpe:/a:ibm:lotus_web_content_management:6.1.0.2 cpe:/a:ibm:lotus_web_content_management:6.1.0.3 cpe:/a:ibm:lotus_web_content_management:6.1.5.0 cpe:/a:ibm:lotus_workplace_web_content_management:5.1.0.0 cpe:/a:ibm:lotus_workplace_web_content_management:5.1.0.1 cpe:/a:ibm:lotus_workplace_web_content_management:5.1.0.2 cpe:/a:ibm:lotus_workplace_web_content_management:5.1.0.3 cpe:/a:ibm:lotus_workplace_web_content_management:5.1.0.4 cpe:/a:ibm:lotus_workplace_web_content_management:5.1.0.5 cpe:/a:ibm:lotus_workplace_web_content_management:6.0.0.0 cpe:/a:ibm:lotus_workplace_web_content_management:6.0.0.1 cpe:/a:ibm:lotus_workplace_web_content_management:6.0.0.2 cpe:/a:ibm:lotus_workplace_web_content_management:6.0.0.3 cpe:/a:ibm:lotus_workplace_web_content_management:6.0.0.4 cpe:/a:ibm:lotus_workplace_web_content_management:6.0.1.0 cpe:/a:ibm:lotus_workplace_web_content_management:6.0.1.1 cpe:/a:ibm:lotus_workplace_web_content_management:6.0.1.2 cpe:/a:ibm:lotus_workplace_web_content_management:6.0.1.3 cpe:/a:ibm:lotus_workplace_web_content_management:6.0.1.4 cpe:/a:ibm:lotus_workplace_web_content_management:6.0.1.5 cpe:/a:ibm:lotus_workplace_web_content_management:6.0.1.6 cpe:/a:ibm:lotus_workplace_web_content_management:6.0.1.7 cpe:/a:ibm:lotus_workplace_web_content_management:6.1.0.0 cpe:/a:ibm:lotus_workplace_web_content_management:6.1.0.1 cpe:/a:ibm:lotus_workplace_web_content_management:6.1.0.2 cpe:/a:ibm:lotus_workplace_web_content_management:6.1.0.3 cpe:/a:ibm:lotus_workplace_web_content_management:6.1.5.0 cpe:/a:ibm:websphere_portal:5.1.0.0 cpe:/a:ibm:websphere_portal:5.1.0.1 cpe:/a:ibm:websphere_portal:5.1.0.2 cpe:/a:ibm:websphere_portal:5.1.0.3 cpe:/a:ibm:websphere_portal:5.1.0.4 cpe:/a:ibm:websphere_portal:5.1.0.5 cpe:/a:ibm:websphere_portal:6.0.0.0 cpe:/a:ibm:websphere_portal:6.0.0.1 cpe:/a:ibm:websphere_portal:6.0.0.2 cpe:/a:ibm:websphere_portal:6.0.0.3 cpe:/a:ibm:websphere_portal:6.0.0.4 cpe:/a:ibm:websphere_portal:6.0.1.0 cpe:/a:ibm:websphere_portal:6.0.1.1 cpe:/a:ibm:websphere_portal:6.0.1.2 cpe:/a:ibm:websphere_portal:6.0.1.3 cpe:/a:ibm:websphere_portal:6.0.1.4 cpe:/a:ibm:websphere_portal:6.0.1.5 cpe:/a:ibm:websphere_portal:6.0.1.6 cpe:/a:ibm:websphere_portal:6.0.1.7 cpe:/a:ibm:websphere_portal:6.1.0.0 cpe:/a:ibm:websphere_portal:6.1.0.1 cpe:/a:ibm:websphere_portal:6.1.0.2 cpe:/a:ibm:websphere_portal:6.1.0.3 cpe:/a:ibm:websphere_portal:6.1.5.0

CVE-2010-0714

2010-02-26T14:30:00.743-05:00

2018-10-10T15:53:26.387-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://www.hacktics.com/content/advisories/AdvIBM20100224.html BUGTRAQ 20100225 Hacktics Advisory Feb10: XSS in IBM WebSphere Portal & Lotus WCM BID 38412 SECTRACK 1023660 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21421469 XF ibm-login-xss(56508) Cross-site scripting (XSS) vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0 through 5.1.0.5, 6.0.0.0 through 6.0.0.4, 6.0.1.0 through 6.0.1.7, 6.1.0.0 through 6.1.0.3, and 6.1.5.0; and IBM Lotus Quickr services 8.0, 8.0.0.2, 8.1, 8.1.1, and 8.1.1.1 for WebSphere Portal; allows remote attackers to inject arbitrary web script or HTML via the query string.

CVE-2010-0715

2010-02-26T14:30:00.773-05:00

2018-10-10T15:53:27.293-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov MISC http://www.hacktics.com/content/advisories/AdvIBM20100224.html BUGTRAQ 20100225 Hacktics Advisory Feb10: XSS in IBM WebSphere Portal & Lotus WCM MISC http://www-01.ibm.com/support/docview.wss?uid=swg21421469 XF ibm-login-phishing(56602) Open redirect vulnerability in login.jsp in IBM WebSphere Portal, IBM Lotus Web Content Management (WCM), and IBM Lotus Workplace Web Content Management 5.1.0.0 through 5.1.0.5, 6.0.0.0 through 6.0.0.4, 6.0.1.0 through 6.0.1.7, 6.1.0.0 through 6.1.0.3, and 6.1.5.0; and IBM Lotus Quickr services 8.0, 8.0.0.2, 8.1, 8.1.1, and 8.1.1.1 for WebSphere Portal; allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the query string.

cpe:/a:microsoft:sharepoint_server:2007 cpe:/a:microsoft:sharepoint_server:2007:sp1 cpe:/a:microsoft:sharepoint_server:2007:sp2

CVE-2010-0716

2010-02-26T14:30:00.807-05:00

2018-10-10T15:53:27.857-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://www.hacktics.com/content/advisories/AdvMS20100222.html BUGTRAQ 20100222 Hacktics Advisory Feb10: Persistent XSS in Microsoft SharePoint Portal XF sharepoint-aspx-xss(56597) _layouts/Upload.aspx in the Documents module in Microsoft SharePoint before 2010 uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files (aka attachments), which allows remote authenticated users to leverage same-origin relationships and conduct cross-site scripting (XSS) attacks by uploading TXT files, a related issue to CVE-2008-5026. NOTE: the vendor disputes the significance of this issue, because cross-domain isolation can be implemented when needed.

CVE-2010-0717

2010-02-26T14:30:00.837-05:00

2017-08-16T21:32:05.367-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://hg.moinmo.in/moin/1.8/raw-file/1.8.7/docs/CHANGES CONFIRM http://moinmo.in/MoinMoinRelease1.8 DEBIAN DSA-2014 MLIST [oss-security] 20100215 CVE Request -- MoinMoin -- 1.8.7 VUPEN ADV-2010-0600 XF moinmoin-cfgpackagepages-unspecified(56595) The default configuration of cfg.packagepages_actions_excluded in MoinMoin before 1.8.7 does not prevent unsafe package actions, which has unspecified impact and attack vectors.

cpe:/a:microsoft:windows_media_player:9 cpe:/a:microsoft:windows_media_player:11.0.5721.5145

CVE-2010-0718

2010-02-26T14:30:00.867-05:00

2017-08-16T21:32:05.430-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov EXPLOIT-DB 11531 XF win-mediaplayer-mpg-bo(56435) Buffer overflow in Microsoft Windows Media Player 9 and 11.0.5721.5145 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted .mpg file.

cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2003_server cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_server_2008:- cpe:/o:microsoft:windows_server_2008:-:gold cpe:/o:microsoft:windows_vista cpe:/o:microsoft:windows_xp

CVE-2010-0719

2010-02-26T14:30:00.900-05:00

2017-08-16T21:32:05.507-04:00

4.7

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1023656 MISC http://www.scmagazineus.com/malta-researchers-find-windows-bug-that-crashes-pcs/article/164439/ XF ms-win-api-dos(56591) An unspecified API in Microsoft Windows 2000, Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 does not validate arguments, which allows local users to cause a denial of service (system crash) via a crafted application.

cpe:/a:systemsoftware:erotik_auktionshaus

CVE-2010-0720

2010-02-26T15:30:00.400-05:00

2017-08-16T21:32:05.587-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://4004securityproject.wordpress.com/2009/10/21/erotik-auktionshaus-sql-injection-news-php/ MISC http://packetstormsecurity.org/1002-exploits/erotik-sql.txt EXPLOIT-DB 11489 XF erotikauktionshaus-news-sql-injection(56330) SQL injection vulnerability in news.php in Erotik Auktionshaus allows remote attackers to execute arbitrary SQL commands via the id parameter.

cpe:/a:systemsoftware:auktionshaus_gelb:3.0

CVE-2010-0721

2010-02-26T15:30:00.447-05:00

2017-08-16T21:32:05.633-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://packetstormsecurity.org/1002-exploits/auktionshausgelb-sql.txt EXPLOIT-DB 11488 XF auktionshausgelb-news-sql-injection(56332) SQL injection vulnerability in news.php in Auktionshaus Gelb 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

cpe:/a:mhproducts:php_auktion_pro

CVE-2010-0722

2010-02-26T15:30:00.477-05:00

2017-08-16T21:32:05.680-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://4004securityproject.wordpress.com/2010/02/22/php-auktion-pro-sql-injection-news-php/ EXPLOIT-DB 11547 BID 38371 XF phpauktionpro-news-sql-injection(56478) SQL injection vulnerability in news.php in Php Auktion Pro allows remote attackers to execute arbitrary SQL commands via the id parameter.

cpe:/a:mhproducts:ero_auktion:2.0 cpe:/a:mhproducts:ero_auktion:2010

CVE-2010-0723

2010-02-26T15:30:00.510-05:00

2017-08-16T21:32:05.727-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://4004securityproject.wordpress.com/2010/02/21/ero-auktion-2010-sql-injection-news-php/ MISC http://4004securityproject.wordpress.com/2010/02/21/ero-auktion-v-2-0-sql-injection-news-php/ MISC http://packetstormsecurity.org/1002-exploits/eroauktion2010-sql.txt MISC http://packetstormsecurity.org/1002-exploits/eroauktion20-sql.txt EXPLOIT-DB 11521 EXPLOIT-DB 11522 XF eroauktion-news-sql-injection(56446) SQL injection vulnerability in news.php in Ero Auktion 2.0 and 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter.

cpe:/a:mhd_zaher_ghaibeh:arab_cart:1.0.2.0

CVE-2010-0724

2010-02-26T15:30:00.540-05:00

2010-04-15T01:41:36.140-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://packetstormsecurity.org/1002-exploits/arabcart-sqlxss.txt EXPLOIT-DB 11524 BID 38426 VUPEN ADV-2010-0443 SQL injection vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

cpe:/a:mhd_zaher_ghaibeh:arab_cart:1.0.2.0

CVE-2010-0725

2010-02-26T15:30:00.587-05:00

2010-04-15T01:41:36.267-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://packetstormsecurity.org/1002-exploits/arabcart-sqlxss.txt EXPLOIT-DB 11524 BID 38426 VUPEN ADV-2010-0443 Cross-site scripting (XSS) vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

cpe:/a:tdiary:tdiary:2.0.1 cpe:/a:tdiary:tdiary:2.0.2 cpe:/a:tdiary:tdiary:2.0.3 cpe:/a:tdiary:tdiary:2.1.1 cpe:/a:tdiary:tdiary:2.1.4.2006-11-15 cpe:/a:tdiary:tdiary:2.2.2

CVE-2010-0726

2010-03-02T14:30:00.290-05:00

2010-03-03T00:00:00.000-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2010-03-03T13:28:00.000-05:00

JVN JVN#73331060 JVNDB JVNDB-2010-000005 MISC http://tdiary.svn.sourceforge.net/viewvc/tdiary/branches/Stable-2_2/plugin/tb-send.rb?r1=3238&r2=3573 BID 38413 CONFIRM http://www.tdiary.org/20100225.html Cross-site scripting (XSS) vulnerability in the tb-send.rb (TrackBack transmission) plugin in tDiary 2.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors, possibly related to the (1) plugin_tb_url and (2) plugin_tb_excerpt parameters.