Provide references for further information: Can you share references or external links related to CVE-2011-1114?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4981'}, {'name': 'APPLE-SA-2011-10-12-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html'}, {'name': 'APPLE-SA-2011-10-11-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html'}, {'name': 'google-chrome-table-dos(65732)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65732'}, {'name': 'oval:org.mitre.oval:def:14404', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14404'}, {'name': '46614', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46614'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4999'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4808'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/02/stable-channel-update_28.html'}, {'name': 'APPLE-SA-2011-07-20-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=71114'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1114?


Explain the CVE ID: What does the identifier CVE-2011-1115 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1115.

Google Chrome before 9.0.597.107 does not properly render tables, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."


Provide references for further information: Can you share references or external links related to CVE-2011-1115?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4981'}, {'name': 'google-chrome-table-rendering-dos(65733)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65733'}, {'name': 'APPLE-SA-2011-10-12-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html'}, {'name': 'APPLE-SA-2011-10-11-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=71115'}, {'name': '46614', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46614'}, {'name': 'oval:org.mitre.oval:def:13641', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13641'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4999'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4808'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/02/stable-channel-update_28.html'}, {'name': 'APPLE-SA-2011-07-20-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1115?


Explain the CVE ID: What does the identifier CVE-2011-1116 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1116.

Google Chrome before 9.0.597.107 does not properly handle SVG animations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."


Provide references for further information: Can you share references or external links related to CVE-2011-1116?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=71296'}, {'name': 'oval:org.mitre.oval:def:14205', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14205'}, {'name': '46614', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46614'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/02/stable-channel-update_28.html'}, {'name': 'google-chrome-svg-animations-dos(65734)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65734'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1116?


Explain the CVE ID: What does the identifier CVE-2011-1117 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1117.

Google Chrome before 9.0.597.107 does not properly handle XHTML documents, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale nodes."


Provide references for further information: Can you share references or external links related to CVE-2011-1117?

{'name': 'oval:org.mitre.oval:def:14487', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14487'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4981'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=71386'}, {'name': 'APPLE-SA-2011-10-12-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html'}, {'name': 'APPLE-SA-2011-10-11-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html'}, {'name': '46614', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46614'}, {'name': 'google-chrome-xhtml-dos(65735)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65735'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4999'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4808'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/02/stable-channel-update_28.html'}, {'name': 'APPLE-SA-2011-07-20-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1117?


Explain the CVE ID: What does the identifier CVE-2011-1118 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1118.

Google Chrome before 9.0.597.107 does not properly handle TEXTAREA elements, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted HTML document.


Provide references for further information: Can you share references or external links related to CVE-2011-1118?

{'name': 'oval:org.mitre.oval:def:14341', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14341'}, {'name': 'google-chrome-textarea-unspecified(65736)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65736'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=71388'}, {'name': '46614', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46614'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/02/stable-channel-update_28.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1118?


Explain the CVE ID: What does the identifier CVE-2011-1119 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1119.

Google Chrome before 9.0.597.107 does not properly determine device orientation, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."


Provide references for further information: Can you share references or external links related to CVE-2011-1119?

{'name': 'google-chrome-orientation-dos(65737)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65737'}, {'name': '46614', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46614'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=71595'}, {'name': 'oval:org.mitre.oval:def:14542', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14542'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/02/stable-channel-update_28.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1119?


Explain the CVE ID: What does the identifier CVE-2011-1120 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1120.

The WebGL implementation in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors, aka Issue 71717.


Provide references for further information: Can you share references or external links related to CVE-2011-1120?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=71717'}, {'name': '46614', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46614'}, {'name': 'google-webgl-dos(65738)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65738'}, {'name': 'oval:org.mitre.oval:def:14459', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14459'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/02/stable-channel-update_28.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1120?


Explain the CVE ID: What does the identifier CVE-2011-1121 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1121.

Integer overflow in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a TEXTAREA element.


Provide references for further information: Can you share references or external links related to CVE-2011-1121?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=71855'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4981'}, {'name': 'APPLE-SA-2011-10-12-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html'}, {'name': 'APPLE-SA-2011-10-11-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html'}, {'name': 'oval:org.mitre.oval:def:14685', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14685'}, {'name': '46614', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46614'}, {'name': 'google-chrome-textarea-code-execution(65739)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65739'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4999'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4808'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/02/stable-channel-update_28.html'}, {'name': 'APPLE-SA-2011-07-20-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1121?


Explain the CVE ID: What does the identifier CVE-2011-1122 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1122.

The WebGL implementation in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors, aka Issue 71960.


Provide references for further information: Can you share references or external links related to CVE-2011-1122?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=71960'}, {'name': 'google-chrome-webgl-dos(65740)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65740'}, {'name': '46614', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46614'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/02/stable-channel-update_28.html'}, {'name': 'oval:org.mitre.oval:def:14559', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14559'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1122?


Explain the CVE ID: What does the identifier CVE-2011-1123 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1123.

Google Chrome before 9.0.597.107 does not properly restrict access to internal extension functions, which has unspecified impact and remote attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1123?

{'name': 'oval:org.mitre.oval:def:13978', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13978'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=72214'}, {'name': '46614', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46614'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/02/stable-channel-update_28.html'}, {'name': 'google-chrome-extension-weak-security(65741)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65741'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1123?


Explain the CVE ID: What does the identifier CVE-2011-1124 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1124.

Use-after-free vulnerability in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to blocked plug-ins.


Provide references for further information: Can you share references or external links related to CVE-2011-1124?

{'name': '46614', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46614'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=72437'}, {'name': 'google-chrome-plugins-code-execution(65742)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65742'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/02/stable-channel-update_28.html'}, {'name': 'oval:org.mitre.oval:def:14563', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14563'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1124?


Explain the CVE ID: What does the identifier CVE-2011-1125 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1125.

Google Chrome before 9.0.597.107 does not properly perform layout, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."


Provide references for further information: Can you share references or external links related to CVE-2011-1125?

{'name': 'oval:org.mitre.oval:def:14368', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14368'}, {'name': 'google-chrome-layouts-dos(65743)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65743'}, {'name': '46614', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46614'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.google.com/p/chromium/issues/detail?id=73235'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2011/02/stable-channel-update_28.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1125?


Explain the CVE ID: What does the identifier CVE-2011-1126 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1126.

VMware vmrun, as used in VIX API 1.x before 1.10.3 and VMware Workstation 6.5.x and 7.x before 7.1.4 build 385536 on Linux, might allow local users to gain privileges via a Trojan horse shared library in an unspecified directory.


Provide references for further information: Can you share references or external links related to CVE-2011-1126?

{'name': '1025270', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025270'}, {'name': '43885', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43885'}, {'name': 'ADV-2011-0816', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0816'}, {'name': 'vmware-vmrun-privilege-escalation(66472)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66472'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2011-0006.html'}, {'name': '[security-announce] 20110330 UPDATED VMSA-2011-0006.1 VMware vmrun utility local privilege escalation', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.vmware.com/pipermail/security-announce/2011/000131.html'}, {'name': '20110330 VMSA-2011-0006 VMware vmrun utility local privilege escalation', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517240/100/0/threaded'}, {'name': '43943', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43943'}, {'name': '47094', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47094'}, {'name': '8173', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8173'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1126?


Explain the CVE ID: What does the identifier CVE-2011-1127 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1127.

SSI.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly restrict guest access, which allows remote attackers to have an unspecified impact via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1127?

{'name': '[oss-security] 20110222 CVE request: simple machines forum before 1.1.13', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/02/22/17'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.simplemachines.org/community/index.php?topic=421547.0'}, {'name': '[oss-security] 20110302 Re: CVE request: simple machines forum before 1.1.13', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/03/02/4'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://custom.simplemachines.org/mods/downloads/smf_patch_2.0-RC4_security.zip'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1127?


Explain the CVE ID: What does the identifier CVE-2011-1128 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1128.

The loadUserSettings function in Load.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly handle invalid login attempts, which might make it easier for remote attackers to obtain access or cause a denial of service via a brute-force attack.


Provide references for further information: Can you share references or external links related to CVE-2011-1128?


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1128?


Explain the CVE ID: What does the identifier CVE-2011-1129 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1129.

Cross-site scripting (XSS) vulnerability in the EditNews function in ManageNews.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, might allow remote authenticated users to inject arbitrary web script or HTML via a save_items action.


Provide references for further information: Can you share references or external links related to CVE-2011-1129?


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1129?


Explain the CVE ID: What does the identifier CVE-2011-1130 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1130.

Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly validate the start parameter, which might allow remote attackers to conduct SQL injection attacks, obtain sensitive information, or cause a denial of service via a crafted value, related to the cleanRequest function in QueryString.php and the constructPageIndex function in Subs.php.


Provide references for further information: Can you share references or external links related to CVE-2011-1130?


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1130?


Explain the CVE ID: What does the identifier CVE-2011-1131 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1131.

The PlushSearch2 function in Search.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, uses certain cached data in a situation where a temporary table has been created, even though this cached data is intended only for situations where a temporary table has not been created, which might allow remote attackers to obtain sensitive information via a search.


Provide references for further information: Can you share references or external links related to CVE-2011-1131?


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1131?


Explain the CVE ID: What does the identifier CVE-2011-1132 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1132.

The IPv6 implementation in the kernel in Apple Mac OS X before 10.6.8 allows local users to cause a denial of service (NULL pointer dereference and reboot) via vectors involving socket options.


Provide references for further information: Can you share references or external links related to CVE-2011-1132?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4723'}, {'name': 'APPLE-SA-2011-10-12-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html'}, {'name': 'APPLE-SA-2011-06-23-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html'}, {'name': '48422', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48422'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4999'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1132?


Explain the CVE ID: What does the identifier CVE-2011-1133 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1133.

Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code via plugins/ExtendedFileManager/backend.php.


Provide references for further information: Can you share references or external links related to CVE-2011-1133?

{'name': 'CVE-2011-1133', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2011-1133'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://blog.s9y.org/archives/224-Important-Security-Update-Serendipity-1.5.5-released.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.openwall.com/lists/oss-security/2011/03/02/5'}, {'name': '611661', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=611661'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1133?


Explain the CVE ID: What does the identifier CVE-2011-1134 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1134.

Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in the image manager.


Provide references for further information: Can you share references or external links related to CVE-2011-1134?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://blog.s9y.org/archives/224-Important-Security-Update-Serendipity-1.5.5-released.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.openwall.com/lists/oss-security/2011/03/02/5'}, {'name': '611661', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=611661'}, {'name': 'CVE-2011-1134', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2011-1134'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1134?


Explain the CVE ID: What does the identifier CVE-2011-1135 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1135.

Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in plugins/ExtendedFileManager/manager.php and plugins/ImageManager/manager.php.


Provide references for further information: Can you share references or external links related to CVE-2011-1135?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://blog.s9y.org/archives/224-Important-Security-Update-Serendipity-1.5.5-released.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.openwall.com/lists/oss-security/2011/03/02/5'}, {'name': '611661', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=611661'}, {'name': 'CVE-2011-1135', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2011-1135'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1135?


Explain the CVE ID: What does the identifier CVE-2011-1136 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1136.

In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID and creating a link to the user's file.


Provide references for further information: Can you share references or external links related to CVE-2011-1136?

{'tags': ['x_refsource_MISC'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2011-1136'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=612032'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.launchpad.net/ubuntu/+source/tesseract/+bug/607297'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1136?


Explain the CVE ID: What does the identifier CVE-2011-1137 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1137.

Integer overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service (memory consumption leading to OOM kill) via a malformed SSH message.


Provide references for further information: Can you share references or external links related to CVE-2011-1137?

{'name': 'SSA:2011-095-01', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.485806'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://proftp.cvs.sourceforge.net/viewvc/proftp/proftpd/contrib/mod_sftp/packet.h?r1=1.3&r2=1.3.2.1'}, {'name': '16129', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/16129/'}, {'name': '43978', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43978'}, {'name': 'ADV-2011-0857', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0857'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=681718'}, {'name': '46183', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46183'}, {'name': 'DSA-2185', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2185'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.proftpd.org/show_bug.cgi?id=3586'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.proftpd.org/show_bug.cgi?id=3587'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://proftp.cvs.sourceforge.net/viewvc/proftp/proftpd/contrib/mod_sftp/packet.c?r1=1.14.2.2&r2=1.14.2.3'}, {'name': 'ADV-2011-0617', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0617'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://proftp.cvs.sourceforge.net/viewvc/proftp/proftpd/contrib/mod_sftp/mod_sftp.c?r1=1.29.2.1&r2=1.29.2.2'}, {'name': 'FEDORA-2011-5040', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058344.html'}, {'name': '43234', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43234'}, {'name': 'FEDORA-2011-5033', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058356.html'}, {'name': '43635', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43635'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1137?


Explain the CVE ID: What does the identifier CVE-2011-1138 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1138.

Off-by-one error in the dissect_6lowpan_iphc function in packet-6lowpan.c in Wireshark 1.4.0 through 1.4.3 on 32-bit platforms allows remote attackers to cause a denial of service (application crash) via a malformed 6LoWPAN IPv6 packet.


Provide references for further information: Can you share references or external links related to CVE-2011-1138?

{'name': 'openSUSE-SU-2011:0347', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'https://hermes.opensuse.org/messages/8086844'}, {'name': '43759', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43759'}, {'name': 'FEDORA-2011-2648', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055364.html'}, {'name': 'oval:org.mitre.oval:def:16299', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16299'}, {'name': 'FEDORA-2011-2620', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055664.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc?view=rev&revision=36036'}, {'name': '44169', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44169'}, {'name': 'ADV-2011-0626', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0626'}, {'name': 'VU#215900', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/215900'}, {'name': '46636', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46636'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/docs/relnotes/wireshark-1.4.4.html'}, {'name': 'FEDORA-2011-2632', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055650.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2011-04.html'}, {'name': 'wireshark6lowpan-bo(65783)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65783'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5722'}, {'name': '1025148', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025148'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1138?


Explain the CVE ID: What does the identifier CVE-2011-1139 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1139.

wiretap/pcapng.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service (application crash) via a pcap-ng file that contains a large packet-length field.


Provide references for further information: Can you share references or external links related to CVE-2011-1139?

{'name': 'oval:org.mitre.oval:def:14997', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14997'}, {'name': 'openSUSE-SU-2011:0347', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'https://hermes.opensuse.org/messages/8086844'}, {'name': '43759', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43759'}, {'name': 'FEDORA-2011-2648', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055364.html'}, {'name': 'FEDORA-2011-2620', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055664.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/docs/relnotes/wireshark-1.2.15.html'}, {'name': 'ADV-2011-0747', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0747'}, {'name': '44169', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44169'}, {'name': 'ADV-2011-0626', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0626'}, {'name': '43795', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43795'}, {'name': 'VU#215900', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/215900'}, {'name': 'RHSA-2011:0370', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0370.html'}, {'name': 'ADV-2011-0719', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0719'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5661'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/docs/relnotes/wireshark-1.4.4.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc?view=rev&revision=35855'}, {'name': 'FEDORA-2011-2632', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055650.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2011-04.html'}, {'name': 'ADV-2011-0622', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0622'}, {'name': 'wireshark-pcapng-dos(65779)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65779'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2011-03.html'}, {'name': 'RHSA-2011:0369', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0369.html'}, {'name': 'MDVSA-2011:044', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:044'}, {'name': '1025148', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025148'}, {'name': 'DSA-2201', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2201'}, {'name': '43821', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43821'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1139?


Explain the CVE ID: What does the identifier CVE-2011-1140 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1140.

Multiple stack consumption vulnerabilities in the dissect_ms_compressed_string and dissect_mscldap_string functions in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.0 through 1.4.3 allow remote attackers to cause a denial of service (infinite recursion) via a crafted (1) SMB or (2) Connection-less LDAP (CLDAP) packet.


Provide references for further information: Can you share references or external links related to CVE-2011-1140?

{'name': 'openSUSE-SU-2011:0347', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'https://hermes.opensuse.org/messages/8086844'}, {'name': '43759', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43759'}, {'name': 'FEDORA-2011-2648', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055364.html'}, {'name': 'FEDORA-2011-2620', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055664.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/docs/relnotes/wireshark-1.2.15.html'}, {'name': 'ADV-2011-0747', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0747'}, {'name': '44169', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44169'}, {'name': 'ADV-2011-0626', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0626'}, {'name': '43795', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43795'}, {'name': 'VU#215900', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/215900'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc?view=rev&revision=36029'}, {'name': 'oval:org.mitre.oval:def:14715', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14715'}, {'name': 'RHSA-2011:0370', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0370.html'}, {'name': 'ADV-2011-0719', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0719'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/docs/relnotes/wireshark-1.4.4.html'}, {'name': 'FEDORA-2011-2632', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055650.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2011-04.html'}, {'name': 'ADV-2011-0622', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0622'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2011-03.html'}, {'name': 'RHSA-2011:0369', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0369.html'}, {'name': 'MDVSA-2011:044', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:044'}, {'name': '1025148', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025148'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5717'}, {'name': 'DSA-2201', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2201'}, {'name': '43821', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43821'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1140?


Explain the CVE ID: What does the identifier CVE-2011-1141 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1141.

epan/dissectors/packet-ldap.c in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service (memory consumption) via (1) a long LDAP filter string or (2) an LDAP filter string containing many elements.


Provide references for further information: Can you share references or external links related to CVE-2011-1141?

{'name': '43759', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43759'}, {'name': 'FEDORA-2011-2620', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055664.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/docs/relnotes/wireshark-1.2.15.html'}, {'name': 'ADV-2011-0747', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0747'}, {'name': '43795', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43795'}, {'name': 'VU#215900', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/215900'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc?view=rev&revision=36101'}, {'name': 'RHSA-2011:0370', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0370.html'}, {'name': 'ADV-2011-0719', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0719'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/docs/relnotes/wireshark-1.4.4.html'}, {'name': 'FEDORA-2011-2632', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055650.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2011-04.html'}, {'name': 'ADV-2011-0622', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0622'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2011-03.html'}, {'name': 'RHSA-2011:0369', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0369.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5732'}, {'name': 'MDVSA-2011:044', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:044'}, {'name': '1025148', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025148'}, {'name': 'DSA-2201', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2201'}, {'name': 'oval:org.mitre.oval:def:14974', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14974'}, {'name': '43821', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43821'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1141?


Explain the CVE ID: What does the identifier CVE-2011-1142 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1142.

Stack consumption vulnerability in the dissect_ber_choice function in the BER dissector in Wireshark 1.2.x through 1.2.15 and 1.4.x through 1.4.4 might allow remote attackers to cause a denial of service (infinite loop) via vectors involving self-referential ASN.1 CHOICE values.


Provide references for further information: Can you share references or external links related to CVE-2011-1142?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/docs/relnotes/wireshark-1.2.15.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/docs/relnotes/wireshark-1.4.4.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1516'}, {'name': 'ADV-2011-0622', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0622'}, {'name': 'MDVSA-2011:044', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:044'}, {'name': '1025148', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025148'}, {'name': 'oval:org.mitre.oval:def:14724', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14724'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1142?


Explain the CVE ID: What does the identifier CVE-2011-1143 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1143.

epan/dissectors/packet-ntlmssp.c in the NTLMSSP dissector in Wireshark before 1.4.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted .pcap file.


Provide references for further information: Can you share references or external links related to CVE-2011-1143?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5157'}, {'name': 'openSUSE-SU-2011:0347', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'https://hermes.opensuse.org/messages/8086844'}, {'name': '43759', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43759'}, {'name': 'FEDORA-2011-2648', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055364.html'}, {'name': 'FEDORA-2011-2620', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055664.html'}, {'name': '44169', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44169'}, {'name': 'ADV-2011-0626', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0626'}, {'name': '48947', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48947'}, {'name': 'VU#215900', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/215900'}, {'name': 'RHSA-2011:0370', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0370.html'}, {'name': 'ADV-2011-0719', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0719'}, {'name': 'oval:org.mitre.oval:def:16209', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16209'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/docs/relnotes/wireshark-1.4.4.html'}, {'name': 'FEDORA-2011-2632', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055650.html'}, {'name': '46796', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46796'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc?view=rev&revision=34018'}, {'name': '1025148', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025148'}, {'name': '43821', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43821'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1143?


Explain the CVE ID: What does the identifier CVE-2011-1144 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1144.

The installer in PEAR 1.9.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the (1) download_dir, (2) cache_dir, (3) tmp_dir, and (4) pear-build-download directories.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1072.


Provide references for further information: Can you share references or external links related to CVE-2011-1144?

{'name': '[oss-security] 20110228 Re: CVE Request: PEAR Installer 1.9.1 <= - Symlink Attack', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/02/28/5'}, {'name': '[oss-security] 20110301 Re: CVE Request: PEAR Installer 1.9.1 <= - Symlink Attack', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/01/7'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pear.php.net/bugs/bug.php?id=18056'}, {'name': '[oss-security] 20110301 Re: CVE Request: PEAR Installer 1.9.1 <= - Symlink Attack', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/01/8'}, {'name': 'pear-package-symlink(65911)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65911'}, {'name': '[oss-security] 20110301 Re: CVE Request: PEAR Installer 1.9.1 <= - Symlink Attack', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/01/5'}, {'name': '[oss-security] 20110301 Re: CVE Request: PEAR Installer 1.9.1 <= - Symlink Attack', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/01/4'}, {'name': '[oss-security] 20110301 Re: CVE Request: PEAR Installer 1.9.1 <= - Symlink Attack', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/01/9'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1144?


Explain the CVE ID: What does the identifier CVE-2011-1145 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1145.

The SQLDriverConnect() function in unixODBC before 2.2.14p2 have a possible buffer overflow condition when specifying a large value for SAVEFILE parameter in the connection string.


Provide references for further information: Can you share references or external links related to CVE-2011-1145?

{'tags': ['x_refsource_MISC'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2011-1145'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1145'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.suse.com/show_bug.cgi?id=CVE-2011-1145'}, {'tags': ['x_refsource_MISC'], 'url': 'https://access.redhat.com/security/cve/cve-2011-1145'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1145?


Explain the CVE ID: What does the identifier CVE-2011-1146 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1146.

libvirt.c in the API in Red Hat libvirt 0.8.8 does not properly restrict operations in a read-only connection, which allows remote attackers to cause a denial of service (host OS crash) or possibly execute arbitrary code via a (1) virNodeDeviceDettach, (2) virNodeDeviceReset, (3) virDomainRevertToSnapshot, (4) virDomainSnapshotDelete, (5) virNodeDeviceReAttach, or (6) virConnectDomainXMLToNative call, a different vulnerability than CVE-2008-5086.


Provide references for further information: Can you share references or external links related to CVE-2011-1146?

{'name': '43897', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43897'}, {'name': 'RHSA-2011:0391', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0391.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.novell.com/show_bug.cgi?id=678406'}, {'name': 'FEDORA-2011-3286', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056209.html'}, {'name': 'USN-1094-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1094-1'}, {'name': '43670', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43670'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=71753cb7f7a16ff800381c0b5ee4e99eea92fed3'}, {'name': '44069', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44069'}, {'name': '46820', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46820'}, {'name': '[oss-security] 20110309 CVE request: libvirt: several API calls do not honour read-only connection', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/09/3'}, {'name': 'openSUSE-SU-2011:0311', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2011-04/msg00022.html'}, {'name': 'ADV-2011-0794', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0794'}, {'name': 'DSA-2194', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2194'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=683650'}, {'name': '1025262', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025262'}, {'name': '43917', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43917'}, {'name': 'ADV-2011-0700', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0700'}, {'name': 'ADV-2011-0694', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0694'}, {'name': '[oss-security] 20110310 Re: CVE request: libvirt: several API calls do not honour read-only connection', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/10/5'}, {'name': '43780', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43780'}, {'name': 'libvirt-apicalls-dos(66012)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66012'}, {'name': 'ADV-2011-0805', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0805'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=617773'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1146?


Explain the CVE ID: What does the identifier CVE-2011-1147 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1147.

Multiple stack-based and heap-based buffer overflows in the (1) decode_open_type and (2) udptl_rx_packet functions in main/udptl.c in Asterisk Open Source 1.4.x before 1.4.39.2, 1.6.1.x before 1.6.1.22, 1.6.2.x before 1.6.2.16.2, and 1.8 before 1.8.2.4; Business Edition C.x.x before C.3.6.3; AsteriskNOW 1.5; and s800i (Asterisk Appliance), when T.38 support is enabled, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UDPTL packet.


Provide references for further information: Can you share references or external links related to CVE-2011-1147?

{'name': '43702', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43702'}, {'name': '46474', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46474'}, {'name': 'DSA-2225', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2225'}, {'name': '43429', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43429'}, {'name': 'FEDORA-2011-2438', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055421.html'}, {'name': 'ADV-2011-0635', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0635'}, {'name': '[oss-security] 20110311 CVE Request -- Asterisk AST-2011-002 / Multiple array overflow and crash vulnerabilities in UDPTL code', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/03/11/2'}, {'name': 'FEDORA-2011-2360', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055030.html'}, {'name': 'FEDORA-2011-2558', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055634.html'}, {'name': '1025101', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025101'}, {'name': '[oss-security] 20110311 Re: CVE Request -- Asterisk AST-2011-002 / Multiple array overflow and crash vulnerabilities in UDPTL code', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/03/11/8'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://downloads.asterisk.org/pub/security/AST-2011-002.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1147?


Explain the CVE ID: What does the identifier CVE-2011-1148 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1148.

Use-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by using the same variable for multiple arguments.


Provide references for further information: Can you share references or external links related to CVE-2011-1148?

{'name': 'HPSBOV02763', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=133469208622507&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT5130'}, {'name': '49241', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/49241'}, {'name': '[oss-security] 20110313 CVE request: PHP substr_replace() use-after-free', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/13/2'}, {'name': 'MDVSA-2011:165', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:165'}, {'name': '[oss-security] 20110313 Re: CVE request: PHP substr_replace() use-after-free', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/13/9'}, {'name': 'APPLE-SA-2012-02-01-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html'}, {'name': '[oss-security] 20110313 Re: CVE request: PHP substr_replace() use-after-free', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/13/3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.php.net/bug.php?id=54238'}, {'name': 'SSRT100826', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=133469208622507&w=2'}, {'name': 'RHSA-2011:1423', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-1423.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.php.net/ChangeLog-5.php#5.3.7'}, {'name': 'php-substrreplace-code-exec(66080)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66080'}, {'name': '46843', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46843'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.php.net/archive/2011.php#id2011-08-18-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1148?


Explain the CVE ID: What does the identifier CVE-2011-1149 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1149.

Android before 2.3 does not properly restrict access to the system property space, which allows local applications to bypass the application sandbox and gain privileges, as demonstrated by psneuter and KillingInTheNameOf, related to the use of Android shared memory (ashmem) and ASHMEM_SET_PROT_MASK.


Provide references for further information: Can you share references or external links related to CVE-2011-1149?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://android.git.kernel.org/?p=platform/system/core.git%3Ba=commit%3Bh=25b15be9120bcdaa0aba622c67ad2c835d9e91ca'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://groups.google.com/group/android-security-discuss/browse_thread/thread/15f97658c88d6827/e86db04652651971?show_docid=e86db04652651971'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://android.git.kernel.org/?p=kernel/common.git%3Ba=commit%3Bh=c98a285075f26e2b17a5baa2cb3eb6356a75597e'}, {'tags': ['x_refsource_MISC'], 'url': 'http://c-skills.blogspot.com/2011/01/adb-trickery-again.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/tmzt/g2root-kmod/tree/scotty2/scotty2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://forum.xda-developers.com/wiki/index.php?title=HTC_Vision#Rooting_the_G2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1149?


Explain the CVE ID: What does the identifier CVE-2011-1150 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1150.

bbPress through 1.0.2 has XSS in /bb-login.php url via the re parameter.


Provide references for further information: Can you share references or external links related to CVE-2011-1150?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.openwall.com/lists/oss-security/2011/03/14/20'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1150?


Explain the CVE ID: What does the identifier CVE-2011-1151 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1151.

Joomla! 1.6.0 is vulnerable to SQL Injection via the filter_order and filer_order_Dir parameters.


Provide references for further information: Can you share references or external links related to CVE-2011-1151?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.openwall.com/lists/oss-security/2011/03/14/21'}, {'tags': ['x_refsource_MISC'], 'url': 'https://packetstormsecurity.com/files/101835/Joomla-1.6.0-SQL-Injection.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1151?


Explain the CVE ID: What does the identifier CVE-2011-1152 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1152.


Provide references for further information: Can you share references or external links related to CVE-2011-1152?


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1152?


Explain the CVE ID: What does the identifier CVE-2011-1153 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1153.

Multiple format string vulnerabilities in phar_object.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to obtain sensitive information from process memory, cause a denial of service (memory corruption), or possibly execute arbitrary code via format string specifiers in an argument to a class method, leading to an incorrect zend_throw_exception_ex call.


Provide references for further information: Can you share references or external links related to CVE-2011-1153?

{'name': '46854', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46854'}, {'name': 'php-pharobject-format-string(66079)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66079'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=688378'}, {'name': '43744', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43744'}, {'name': 'FEDORA-2011-3636', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057709.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.php.net/viewvc?view=revision&revision=309221'}, {'name': 'ADV-2011-0764', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0764'}, {'name': 'FEDORA-2011-3614', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056642.html'}, {'name': '[oss-security] 20110314 CVE request: format-string vulnerability in PHP Phar extension', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/14/13'}, {'name': '[oss-security] 20110314 Re: CVE request: format-string vulnerability in PHP Phar extension', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/14/14'}, {'name': 'MDVSA-2011:053', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:053'}, {'name': 'DSA-2266', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2266'}, {'name': 'ADV-2011-0890', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0890'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.php.net/releases/5_3_6.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.php.net/bug.php?id=54247'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.php.net/ChangeLog-5.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.php.net/archive/2011.php'}, {'name': 'APPLE-SA-2011-10-12-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html'}, {'name': 'FEDORA-2011-3666', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057710.html'}, {'name': 'MDVSA-2011:052', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:052'}, {'name': '[oss-security] 20110314 Re: CVE request: format-string vulnerability in PHP Phar extension', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/14/24'}, {'name': 'ADV-2011-0744', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0744'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT5002'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1153?


Explain the CVE ID: What does the identifier CVE-2011-1154 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1154.

The shred_file function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.


Provide references for further information: Can you share references or external links related to CVE-2011-1154?

{'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/19'}, {'name': '[oss-security] 20110304 CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/16'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/25'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/30'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/26'}, {'name': '[oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/10/3'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/28'}, {'name': '[oss-security] 20110308 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/08/5'}, {'name': '43955', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43955'}, {'name': '[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/07/5'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/31'}, {'name': 'ADV-2011-0961', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0961'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/17'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=680796'}, {'name': '[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/10/6'}, {'name': '[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/06/3'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/29'}, {'name': '[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/07/6'}, {'name': '[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/05/6'}, {'name': 'FEDORA-2011-3739', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057845.html'}, {'name': '[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/05/4'}, {'name': 'ADV-2011-0791', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0791'}, {'name': 'MDVSA-2011:065', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:065'}, {'name': '[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/07/11'}, {'name': '[oss-security] 20110323 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/23/11'}, {'name': '[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/06/5'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/18'}, {'name': 'FEDORA-2011-3758', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056992.html'}, {'name': '[oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/10/2'}, {'name': 'RHSA-2011:0407', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0407.html'}, {'name': '[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/11/3'}, {'name': '[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/10/7'}, {'name': '[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/05/8'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/22'}, {'name': '[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/11/5'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/27'}, {'name': 'ADV-2011-0872', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0872'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/32'}, {'name': '[oss-security] 20110314 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/14/26'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/24'}, {'name': '[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/06/4'}, {'name': '[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/06/6'}, {'name': '[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/33'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1154?


Explain the CVE ID: What does the identifier CVE-2011-1155 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1155.

The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \n (newline) or (2) \ (backslash) character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.


Provide references for further information: Can you share references or external links related to CVE-2011-1155?

{'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/19'}, {'name': '[oss-security] 20110304 CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/16'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/25'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/30'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/26'}, {'name': '[oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/10/3'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/28'}, {'name': '[oss-security] 20110308 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/08/5'}, {'name': '43955', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43955'}, {'name': '[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/07/5'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/31'}, {'name': 'ADV-2011-0961', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0961'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/17'}, {'name': '[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/10/6'}, {'name': '[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/06/3'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/29'}, {'name': '[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/07/6'}, {'name': '[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/05/6'}, {'name': 'FEDORA-2011-3739', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057845.html'}, {'name': '[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/05/4'}, {'name': 'ADV-2011-0791', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0791'}, {'name': 'MDVSA-2011:065', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:065'}, {'name': '[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/07/11'}, {'name': '[oss-security] 20110323 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/23/11'}, {'name': '[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/06/5'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/18'}, {'name': 'FEDORA-2011-3758', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056992.html'}, {'name': '[oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/10/2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=680797'}, {'name': 'RHSA-2011:0407', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0407.html'}, {'name': '[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/11/3'}, {'name': '[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/10/7'}, {'name': '[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/05/8'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/22'}, {'name': '[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/11/5'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/27'}, {'name': 'ADV-2011-0872', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0872'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/32'}, {'name': '[oss-security] 20110314 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/14/26'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/24'}, {'name': '[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/06/4'}, {'name': '[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/06/6'}, {'name': '[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/33'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1155?


Explain the CVE ID: What does the identifier CVE-2011-1156 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1156.

feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0.1 allows remote attackers to cause a denial of service (application crash) via a malformed DOCTYPE declaration.


Provide references for further information: Can you share references or external links related to CVE-2011-1156?

{'name': '[oss-security] 20110314 CVE request for python-feedparser', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/14/18'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/security/cve/CVE-2011-1156.html'}, {'name': '43730', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43730'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/feedparser/issues/detail?id=91'}, {'name': '46867', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46867'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=684877'}, {'name': '44074', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44074'}, {'name': '[oss-security] 20110315 Re: CVE request for python-feedparser', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/15/11'}, {'name': '[opensuse-updates] 20110408 openSUSE-SU-2011:0314-1 (moderate): python-feedparser security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.opensuse.org/opensuse-updates/2011-04/msg00026.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.novell.com/show_bug.cgi?id=680074'}, {'name': 'MDVSA-2011:082', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:082'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1156?


Explain the CVE ID: What does the identifier CVE-2011-1157 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1157.

Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via malformed XML comments.


Provide references for further information: Can you share references or external links related to CVE-2011-1157?

{'name': '[oss-security] 20110314 CVE request for python-feedparser', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/14/18'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/feedparser/issues/detail?id=254'}, {'name': '43730', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43730'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/security/cve/CVE-2011-1157.html'}, {'name': '46867', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46867'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=684877'}, {'name': '44074', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44074'}, {'name': '[oss-security] 20110315 Re: CVE request for python-feedparser', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/15/11'}, {'name': '[opensuse-updates] 20110408 openSUSE-SU-2011:0314-1 (moderate): python-feedparser security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.opensuse.org/opensuse-updates/2011-04/msg00026.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.novell.com/show_bug.cgi?id=680074'}, {'name': 'MDVSA-2011:082', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:082'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1157?


Explain the CVE ID: What does the identifier CVE-2011-1158 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1158.

Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via an unexpected URI scheme, as demonstrated by a javascript: URI.


Provide references for further information: Can you share references or external links related to CVE-2011-1158?

{'name': '[oss-security] 20110314 CVE request for python-feedparser', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/14/18'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/security/cve/CVE-2011-1158.html'}, {'name': '43730', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43730'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/feedparser/issues/detail?id=255'}, {'name': '46867', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46867'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=684877'}, {'name': '44074', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44074'}, {'name': '[oss-security] 20110315 Re: CVE request for python-feedparser', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/15/11'}, {'name': '[opensuse-updates] 20110408 openSUSE-SU-2011:0314-1 (moderate): python-feedparser security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.opensuse.org/opensuse-updates/2011-04/msg00026.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.novell.com/show_bug.cgi?id=680074'}, {'name': 'MDVSA-2011:082', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:082'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1158?


Explain the CVE ID: What does the identifier CVE-2011-1159 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1159.

acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but is not reading any data, which allows local users to cause a denial of service (daemon hang) via a crafted application that performs a connect system call but no read system calls.


Provide references for further information: Can you share references or external links related to CVE-2011-1159?

{'name': '45915', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45915'}, {'name': 'FEDORA-2011-6681', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059880.html'}, {'name': '44621', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44621'}, {'name': '42947', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42947'}, {'name': '[oss-security] 20110315 Re: 2 acpid flaws', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/03/15/7'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=688698'}, {'name': '[oss-security] 20110119 2 acpid flaws', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/01/19/4'}, {'name': '[oss-security] 20110315 Re: 2 acpid flaws', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/03/15/12'}, {'name': 'FEDORA-2011-6460', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060053.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1159?


Explain the CVE ID: What does the identifier CVE-2011-1160 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1160.

The tpm_open function in drivers/char/tpm/tpm.c in the Linux kernel before 2.6.39 does not initialize a certain buffer, which allows local users to obtain potentially sensitive information from kernel memory via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1160?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1309d7afbed112f0e8e90be9af975550caa0076b'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=684671'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/1309d7afbed112f0e8e90be9af975550caa0076b'}, {'name': '[oss-security] 20110315 Re: CVE requests - kernel: tpm infoleaks', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/03/15/13'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1160?


Explain the CVE ID: What does the identifier CVE-2011-1161 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1161.


Provide references for further information: Can you share references or external links related to CVE-2011-1161?


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1161?


Explain the CVE ID: What does the identifier CVE-2011-1162 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1162.

The tpm_read function in the Linux kernel 2.6 does not properly clear memory, which might allow local users to read the results of the previous TPM command.


Provide references for further information: Can you share references or external links related to CVE-2011-1162?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=732629'}, {'name': '50764', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/50764'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1162?


Explain the CVE ID: What does the identifier CVE-2011-1163 mean in the context of cybersecurity?