Provide references for further information: Can you share references or external links related to CVE-2011-1518?

{'name': 'SUSE-SR:2011:009', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html'}, {'name': '44029', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44029'}, {'name': '47323', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47323'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://otrs.org/advisory/OSA-2011-01-en/'}, {'name': 'ADV-2011-1186', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/1186'}, {'name': '71790', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/71790'}, {'name': 'DSA-2231', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2231'}, {'name': 'otrs-multiple-unspecified-xss(66698)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66698'}, {'name': '44479', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44479'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1518?


Explain the CVE ID: What does the identifier CVE-2011-1519 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1519.

The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials against a file located at a UNC share pathname specified by the client, which allows remote attackers to bypass authentication, and consequently execute arbitrary code, by placing this pathname in the COOKIEFILE field.  NOTE: this might overlap CVE-2011-0920.


Provide references for further information: Can you share references or external links related to CVE-2011-1519?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-11-110'}, {'name': 'ADV-2011-0758', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0758'}, {'name': '1025241', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025241'}, {'name': '20110322 ZDI-11-110: (0day) IBM Lotus Domino Server Controller Authentication Bypass Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517119/100/0/threaded'}, {'name': '43860', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43860'}, {'name': '46985', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46985'}, {'name': '8164', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8164'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1519?


Explain the CVE ID: What does the identifier CVE-2011-1520 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1520.

The default configuration of the server console in IBM Lotus Domino does not require a password (aka Server_Console_Password), which allows physically proximate attackers to perform administrative changes or obtain sensitive information via a (1) Load, (2) Tell, or (3) Set Configuration command.


Provide references for further information: Can you share references or external links related to CVE-2011-1520?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-11-110'}, {'tags': ['x_refsource_MISC'], 'url': 'http://publib.boulder.ibm.com/infocenter/domhelp/v8r0/index.jsp?topic=/com.ibm.help.domino.admin.doc/DOC/H_THE_DOMINO_CONTROLLER_AND_CONSOLE_OVER.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.lotus.com/ldd/doc/domino_notes/rnext/help6_admin.nsf/2e73cbb2141acefa85256b8700688cea/0c50e423038555d085256c1d003a31f0?OpenDocument'}, {'name': '20110322 ZDI-11-110: (0day) IBM Lotus Domino Server Controller Authentication Bypass Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517119/100/0/threaded'}, {'name': '8164', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8164'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.lotus.com/ldd/dominowiki.nsf/dx/server_console_password'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1520?


Explain the CVE ID: What does the identifier CVE-2011-1521 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1521.

The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service (resource consumption) via a crafted URL, as demonstrated by the file:///etc/passwd and file:///dev/zero URLs.


Provide references for further information: Can you share references or external links related to CVE-2011-1521?

{'name': '[oss-security] 20110916 Re: CVE Request -- Django: v1.3.1, v1.2.7 multiple security flaws', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/09/15/5'}, {'name': 'MDVSA-2011:096', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:096'}, {'name': 'SUSE-SR:2011:009', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://hg.python.org/cpython/rev/b2934d98dac1/'}, {'name': 'USN-1592-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1592-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://hg.python.org/cpython/rev/96a6c128822b/'}, {'name': '51040', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51040'}, {'name': '50858', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/50858'}, {'name': 'APPLE-SA-2011-10-12-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.python.org/issue11662'}, {'name': '[oss-security] 20110324 CVE Request -- Python (urllib, urllib2): Improper management of ftp:// and file:// URL schemes', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/24/5'}, {'name': '[oss-security] 20110328 Re: CVE Request -- Python (urllib, urllib2): Improper management of ftp:// and file:// URL schemes', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/28/2'}, {'name': '1025488', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025488'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://hg.python.org/cpython/file/96a6c128822b/Misc/NEWS'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=690560'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=737366'}, {'name': 'USN-1596-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1596-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://hg.python.org/cpython/file/b2934d98dac1/Misc/NEWS'}, {'name': '[oss-security] 20110911 CVE Request -- Django: v1.3.1, v1.2.7 multiple security flaws', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/09/11/1'}, {'name': 'USN-1613-2', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1613-2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT5002'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.djangoproject.com/weblog/2011/sep/10/127/'}, {'name': '51024', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51024'}, {'name': 'USN-1613-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1613-1'}, {'name': '[oss-security] 20110913 Re: CVE Request -- Django: v1.3.1, v1.2.7 multiple security flaws', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/09/13/2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.djangoproject.com/weblog/2011/sep/09/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1521?


Explain the CVE ID: What does the identifier CVE-2011-1522 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1522.

Multiple SQL injection vulnerabilities in the Doctrine\DBAL\Platforms\AbstractPlatform::modifyLimitQuery function in Doctrine 1.x before 1.2.4 and 2.x before 2.0.3 allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset field.


Provide references for further information: Can you share references or external links related to CVE-2011-1522?

{'name': '[oss-security] 20110328 Re: CVE Request -- php-doctrine-Doctrine -- SQL injection flaw', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/28/3'}, {'name': '47034', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47034'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622674'}, {'name': 'DSA-2223', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2223'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=689396'}, {'name': '[oss-security] 20110325 CVE Request -- php-doctrine-Doctrine -- SQL injection flaw', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/25/2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.doctrine-project.org/blog/doctrine-security-fix'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1522?


Explain the CVE ID: What does the identifier CVE-2011-1523 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1523.

Cross-site scripting (XSS) vulnerability in statusmap.c in statusmap.cgi in Nagios 3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the layer parameter.


Provide references for further information: Can you share references or external links related to CVE-2011-1523?

{'name': '8241', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8241'}, {'name': '43287', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43287'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=690877'}, {'tags': ['x_refsource_MISC'], 'url': 'http://tracker.nagios.org/view.php?id=207'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.rul3z.de/advisories/SSCHADV2011-002.txt'}, {'name': '44974', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44974'}, {'name': '[oss-security] 20110325 CVE Request -- Nagios -- XSS in the network status map CGI script', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/25/3'}, {'name': 'USN-1151-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1151-1'}, {'name': '[oss-security] 20110328 Re: CVE Request -- Nagios -- XSS in the network status map CGI script', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/28/4'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1523?


Explain the CVE ID: What does the identifier CVE-2011-1524 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1524.

Cross-site scripting (XSS) vulnerability in the management login GUI page in Symantec LiveUpdate Administrator (LUA) before 2.3 allows remote attackers to inject arbitrary web script or HTML via the username field, as demonstrated by injecting an IFRAME element into the event log, a different vulnerability than CVE-2011-0545.


Provide references for further information: Can you share references or external links related to CVE-2011-1524?

{'name': 'symantec-lua-gui-csrf(66213)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66213'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sotiriu.de/adv/NSOADV-2011-001.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110321_00'}, {'name': '46856', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46856'}, {'name': '8166', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8166'}, {'name': '17026', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/17026'}, {'name': 'ADV-2011-0727', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0727'}, {'name': '1025242', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025242'}, {'name': '20110322 NSOADV-2011-001: Symantec LiveUpdate Administrator CSRF vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517109/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1524?


Explain the CVE ID: What does the identifier CVE-2011-1525 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1525.

Heap-based buffer overflow in rvrender.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted frame in an Internet Video Recording (IVR) file.


Provide references for further information: Can you share references or external links related to CVE-2011-1525?

{'name': '43847', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43847'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://service.real.com/realplayer/security/04122011_player/en/'}, {'name': '71260', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/71260'}, {'name': 'realplayer-ivr-bo(66209)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66209'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.org/adv/real_5-adv.txt'}, {'name': '46946', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46946'}, {'name': '1025245', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025245'}, {'name': '20110321 Heap overflow in RealPlayer 14.0.1.633', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517083/100/0/threaded'}, {'name': '8181', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8181'}, {'name': '17019', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/17019'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1525?


Explain the CVE ID: What does the identifier CVE-2011-1526 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1526.

ftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.1 and earlier does not check the krb5_setegid return value, which allows remote authenticated users to bypass intended group access restrictions, and create, overwrite, delete, or read files, via standard FTP commands, related to missing autoconf tests in a configure script.


Provide references for further information: Can you share references or external links related to CVE-2011-1526?

{'name': 'SUSE-SU-2012:0042', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00010.html'}, {'name': 'SUSE-SU-2012:0018', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00004.html'}, {'name': 'RHSA-2011:0920', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0920.html'}, {'name': '48101', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48101'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-005.txt'}, {'name': 'openSUSE-SU-2011:1169', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00009.html'}, {'name': 'openSUSE-SU-2012:0019', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00005.html'}, {'name': 'kerberos-krb5appl-priv-esc(68398)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/68398'}, {'name': 'SUSE-SU-2012:0050', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00011.html'}, {'name': '45145', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/45145'}, {'name': 'openSUSE-SU-2012:0051', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00014.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=711419'}, {'name': 'SUSE-SU-2012:0010', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00002.html'}, {'name': '45157', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/45157'}, {'name': '8301', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8301'}, {'name': 'MDVSA-2011:117', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:117'}, {'name': 'FEDORA-2011-9109', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062699.html'}, {'name': '48571', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48571'}, {'name': '73617', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/73617'}, {'name': 'DSA-2283', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2283'}, {'name': '20110705 MITKRB5-SA-2011-005 FTP daemon fails to set effective group ID [CVE-2011-1526]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/518733/100/0/threaded'}, {'name': 'FEDORA-2011-9080', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062681.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1526?


Explain the CVE ID: What does the identifier CVE-2011-1527 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1527.

The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a kinit operation with incorrect string case for the realm, related to the is_principal_in_realm, krb5_set_error_message, krb5_ldap_get_principal, and process_as_req functions.


Provide references for further information: Can you share references or external links related to CVE-2011-1527?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629558'}, {'name': 'MDVSA-2011:159', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:159'}, {'name': 'VU#659251', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/659251'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-006.txt'}, {'name': 'RHSA-2011:1379', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-1379.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1527?


Explain the CVE ID: What does the identifier CVE-2011-1528 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1528.

The krb5_ldap_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via unspecified vectors, related to the locked_check_p function.  NOTE: the Berkeley DB vector is covered by CVE-2011-4151.


Provide references for further information: Can you share references or external links related to CVE-2011-1528?

{'name': 'MDVSA-2011:159', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:159'}, {'name': 'MDVSA-2011:160', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:160'}, {'name': 'openSUSE-SU-2011:1169', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00009.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/715579'}, {'name': 'VU#659251', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/659251'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-006.txt'}, {'name': 'RHSA-2011:1379', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-1379.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1528?


Explain the CVE ID: What does the identifier CVE-2011-1529 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1529.

The lookup_lockout_policy function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1, when the db2 (aka Berkeley DB) or LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger certain process_as_req errors.


Provide references for further information: Can you share references or external links related to CVE-2011-1529?

{'name': 'MDVSA-2011:159', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:159'}, {'name': 'MDVSA-2011:160', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:160'}, {'name': 'openSUSE-SU-2011:1169', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-10/msg00009.html'}, {'name': 'VU#659251', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/659251'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-006.txt'}, {'name': 'RHSA-2011:1379', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-1379.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1529?


Explain the CVE ID: What does the identifier CVE-2011-1530 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1530.

The process_tgs_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.2 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted TGS request that triggers an error other than the KRB5_KDB_NOENTRY error.


Provide references for further information: Can you share references or external links related to CVE-2011-1530?

{'name': '47124', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47124'}, {'name': 'kerberos-processtgsreq-dos(71655)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/71655'}, {'name': '50929', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/50929'}, {'name': 'RHSA-2011:1790', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-1790.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-007.txt'}, {'name': 'MDVSA-2011:184', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:184'}, {'name': '1026374', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1026374'}, {'name': '20111206 MITKRB5-SA-2011-007 KDC null pointer dereference in TGS handling [CVE-2011-1530]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/520756/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1530?


Explain the CVE ID: What does the identifier CVE-2011-1531 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1531.

The webscan component in the Embedded Web Server (EWS) on the HP Photosmart D110 and B110; Photosmart Plus B210; Photosmart Premium C310, Fax All-in-One, and C510; and ENVY 100 D410 printers allows remote attackers to read documents on the scan surface via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1531?

{'name': '8203', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8203'}, {'name': 'ADV-2011-0931', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0931'}, {'name': '44143', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44143'}, {'name': '1025315', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025315'}, {'name': 'HPSBPI02656', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130262523515904&w=2'}, {'name': 'photosmart-webscan-info-disclosure(66684)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66684'}, {'name': 'SSRT090262', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130262523515904&w=2'}, {'name': '47319', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47319'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1531?


Explain the CVE ID: What does the identifier CVE-2011-1532 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1532.

Unspecified vulnerability in the SNMP component on the HP Photosmart D110 and B110; Photosmart Plus B210; Photosmart Premium C310, Fax All-in-One, and C510; and ENVY 100 D410 printers allows remote attackers to obtain sensitive information or modify data via vectors related to the Embedded Web Server (EWS).


Provide references for further information: Can you share references or external links related to CVE-2011-1532?

{'name': '8203', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8203'}, {'name': 'ADV-2011-0931', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0931'}, {'name': '44143', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44143'}, {'name': 'photosmart-snmp-data-manipulation(66685)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66685'}, {'name': '1025315', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025315'}, {'name': 'HPSBPI02656', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130262523515904&w=2'}, {'name': 'SSRT090262', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130262523515904&w=2'}, {'name': '47319', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47319'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1532?


Explain the CVE ID: What does the identifier CVE-2011-1533 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1533.

Cross-site scripting (XSS) vulnerability on the HP Photosmart D110 and B110; Photosmart Plus B210; Photosmart Premium C310, Fax All-in-One, and C510; and ENVY 100 D410 printers allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1533?

{'name': '8203', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8203'}, {'name': 'ADV-2011-0931', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0931'}, {'name': '44143', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44143'}, {'name': '1025315', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025315'}, {'name': 'photosmart-unspec-xss(66683)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66683'}, {'name': 'HPSBPI02656', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130262523515904&w=2'}, {'name': 'SSRT090262', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130262523515904&w=2'}, {'name': '47319', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47319'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1533?


Explain the CVE ID: What does the identifier CVE-2011-1534 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1534.

Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x allows remote authenticated users to obtain access to processes via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1534?

{'name': '1025386', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025386'}, {'name': 'ADV-2011-1024', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/1024'}, {'name': 'SSRT100633', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=132094759631216&w=2'}, {'name': '44230', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44230'}, {'name': 'HPSBMU02708', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=132094759631216&w=2'}, {'name': 'HPSBMA02659', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'https://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02788734'}, {'name': 'SSRT100440', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'https://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02788734'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1534?


Explain the CVE ID: What does the identifier CVE-2011-1535 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1535.

Unspecified vulnerability in HP Insight Control for Linux (aka IC-Linux) before 6.3 allows remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1535?

{'name': '47716', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47716'}, {'name': 'hp-insight-unspec-priv-esc(66867)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66867'}, {'name': '1025413', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025413'}, {'name': 'HPSBMA02658', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777'}, {'name': 'SSRT100413', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777'}, {'name': '44269', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44269'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1535?


Explain the CVE ID: What does the identifier CVE-2011-1536 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1536.

Unspecified vulnerability in HP Performance Insight 5.0, 5.1x. 5.2x, 5.3x, 5.4, 5.41, and 5.41.002 allows remote attackers to obtain sensitive information via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1536?

{'name': '1025416', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025416'}, {'name': '8232', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8232'}, {'name': 'HPSBMA02660', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130331776800952&w=2'}, {'name': '44258', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44258'}, {'name': 'SSRT100433', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130331776800952&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1536?


Explain the CVE ID: What does the identifier CVE-2011-1537 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1537.

Cross-site scripting (XSS) vulnerability in HP Proliant Support Pack (PSP) before 8.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1537?

{'name': 'SSRT100408', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130331221326039&w=2'}, {'name': '1025419', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025419'}, {'name': 'HPSBMA02661', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130331221326039&w=2'}, {'name': '8236', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8236'}, {'name': '44234', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44234'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1537?


Explain the CVE ID: What does the identifier CVE-2011-1538 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1538.

Open redirect vulnerability in HP Proliant Support Pack (PSP) before 8.7 allows remote authenticated users to redirect other users to arbitrary web sites and conduct phishing attacks via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1538?


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1538?


Explain the CVE ID: What does the identifier CVE-2011-1539 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1539.

Unspecified vulnerability in HP Proliant Support Pack (PSP) before 8.7 allows remote attackers to obtain sensitive information via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1539?


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1539?


Explain the CVE ID: What does the identifier CVE-2011-1540 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1540.

Unspecified vulnerability in HP System Management Homepage (SMH) before 6.3 allows remote authenticated users to execute arbitrary code via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1540?

{'name': '1025414', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025414'}, {'name': '47507', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47507'}, {'name': 'HPSBMA02662', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130331363227777&w=2'}, {'name': '8233', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8233'}, {'name': 'SSRT100409', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130331363227777&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1540?


Explain the CVE ID: What does the identifier CVE-2011-1541 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1541.

Unspecified vulnerability in HP System Management Homepage (SMH) before 6.3 allows remote attackers to bypass intended access restrictions, and consequently execute arbitrary code, via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1541?

{'name': '1025414', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025414'}, {'name': 'HPSBMA02662', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130331363227777&w=2'}, {'name': '47512', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47512'}, {'name': '8233', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8233'}, {'name': 'SSRT100409', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130331363227777&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1541?


Explain the CVE ID: What does the identifier CVE-2011-1542 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1542.

Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1542?

{'name': '1025415', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025415'}, {'name': 'SSRT100428', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130331642631603&w=2'}, {'name': 'HPSBMA02663', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130331642631603&w=2'}, {'name': '47511', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47511'}, {'name': '8234', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8234'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1542?


Explain the CVE ID: What does the identifier CVE-2011-1543 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1543.

Cross-site request forgery (CSRF) vulnerability in HP Systems Insight Manager (SIM) before 6.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1543?

{'name': '47513', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47513'}, {'name': '1025415', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025415'}, {'name': 'SSRT100428', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130331642631603&w=2'}, {'name': 'HPSBMA02663', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130331642631603&w=2'}, {'name': '8234', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8234'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1543?


Explain the CVE ID: What does the identifier CVE-2011-1544 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1544.

Unspecified vulnerability in HP Insight Control Performance Management before 6.3 allows remote authenticated users to gain privileges via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1544?

{'name': '44216', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44216'}, {'name': '1025431', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025431'}, {'name': '8237', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8237'}, {'name': 'HPSBMA02664', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130339248106264&w=2'}, {'name': 'SSRT100417', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130339248106264&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1544?


Explain the CVE ID: What does the identifier CVE-2011-1545 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1545.

Cross-site request forgery (CSRF) vulnerability in HP Insight Control Performance Management before 6.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1545?


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1545?


Explain the CVE ID: What does the identifier CVE-2011-1546 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1546.

Multiple SQL injection vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.3 allow remote attackers to execute arbitrary SQL commands via the s parameter to (1) a_viewusers.php or (2) keysearch.php; and allow remote authenticated administrators to execute arbitrary SQL commands via the (3) id or (4) start parameter to pending.php, or the (5) aid parameter to a_authordetails.php.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2011-1546?

{'name': '17084', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/17084/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://aphpkb.blogspot.com/2011/03/this-release-includes-security-fixes.html'}, {'name': 'ADV-2011-0802', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0802'}, {'name': '8168', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8168'}, {'name': '34476', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34476'}, {'name': 'aphpkb-aviewusers-sql-injection(66500)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66500'}, {'name': '8172', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8172'}, {'name': '47097', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47097'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.uncompiled.com/2011/03/cve-2011-1546/'}, {'name': "20110330 'Andy's PHP Knowledgebase' SQL Injection Vulnerability (CVE-2011-1546)", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517261/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1546?


Explain the CVE ID: What does the identifier CVE-2011-1547 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1547.

Multiple stack consumption vulnerabilities in the kernel in NetBSD 4.0, 5.0 before 5.0.3, and 5.1 before 5.1.1, when IPsec is enabled, allow remote attackers to cause a denial of service (memory corruption and panic) or possibly have unspecified other impact via a crafted (1) IPv4 or (2) IPv6 packet with nested IPComp headers.


Provide references for further information: Can you share references or external links related to CVE-2011-1547?

{'name': 'VU#668220', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/668220'}, {'name': 'NetBSD-SA2011-004', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2011-004.txt.asc'}, {'name': '20110401 BSD derived RFC3173 IPComp encapsulation will expand arbitrarily nested payload', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2011-April/080031.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1547?


Explain the CVE ID: What does the identifier CVE-2011-1548 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1548.

The default configuration of logrotate on Debian GNU/Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as demonstrated by /var/log/postgresql/.


Provide references for further information: Can you share references or external links related to CVE-2011-1548?

{'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/19'}, {'name': '[oss-security] 20110304 CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/16'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/25'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/30'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/26'}, {'name': '[oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/10/3'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/28'}, {'name': '[oss-security] 20110308 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/08/5'}, {'name': '[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/07/5'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/31'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/17'}, {'name': '[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/10/6'}, {'name': '[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/06/3'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/29'}, {'name': '[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/07/6'}, {'name': '[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/05/6'}, {'name': '[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/05/4'}, {'name': '[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/07/11'}, {'name': '[oss-security] 20110323 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/23/11'}, {'name': '[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/06/5'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/18'}, {'name': '[oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/10/2'}, {'name': '47167', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47167'}, {'name': '[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/11/3'}, {'name': '[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/10/7'}, {'name': '[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/05/8'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/22'}, {'name': '[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/11/5'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/27'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/32'}, {'name': '[oss-security] 20110314 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/14/26'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/24'}, {'name': '[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/06/4'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=606544'}, {'name': '[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/06/6'}, {'name': '[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/33'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1548?


Explain the CVE ID: What does the identifier CVE-2011-1549 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1549.

The default configuration of logrotate on Gentoo Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as demonstrated by directories under /var/log/ for packages.


Provide references for further information: Can you share references or external links related to CVE-2011-1549?

{'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/19'}, {'name': '[oss-security] 20110304 CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/16'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/25'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/30'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/26'}, {'name': '[oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/10/3'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/28'}, {'name': '[oss-security] 20110308 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/08/5'}, {'name': '[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/07/5'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/31'}, {'name': '47170', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47170'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/17'}, {'name': '[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/10/6'}, {'name': '[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/06/3'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/29'}, {'name': '[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/07/6'}, {'name': '[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/05/6'}, {'name': '[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/05/4'}, {'name': '[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/07/11'}, {'name': '[oss-security] 20110323 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/23/11'}, {'name': '[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/06/5'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/18'}, {'name': '[oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/10/2'}, {'name': '[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/11/3'}, {'name': '[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/10/7'}, {'name': '[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/05/8'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/22'}, {'name': '[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/11/5'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/27'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/32'}, {'name': '[oss-security] 20110314 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/14/26'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/24'}, {'name': '[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/06/4'}, {'name': '[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/06/6'}, {'name': '[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/33'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1549?


Explain the CVE ID: What does the identifier CVE-2011-1550 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1550.

The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as demonstrated by directories for the (1) cobbler, (2) inn, (3) safte-monitor, and (4) uucp packages.


Provide references for further information: Can you share references or external links related to CVE-2011-1550?

{'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/19'}, {'name': '[oss-security] 20110304 CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/16'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/25'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/30'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/26'}, {'name': '[oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/10/3'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/28'}, {'name': '[oss-security] 20110308 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/08/5'}, {'name': '[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/07/5'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/31'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/17'}, {'name': '[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/10/6'}, {'name': '[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/06/3'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/29'}, {'name': '[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/07/6'}, {'name': '[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/05/6'}, {'name': '[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/05/4'}, {'name': '[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/07/11'}, {'name': '[oss-security] 20110323 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/23/11'}, {'name': '[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/06/5'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/18'}, {'name': '[oss-security] 20110310 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/10/2'}, {'name': '[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/11/3'}, {'name': '[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/10/7'}, {'name': '[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/05/8'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/22'}, {'name': '[oss-security] 20110311 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/11/5'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/27'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/32'}, {'name': '[oss-security] 20110314 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/14/26'}, {'name': '[oss-security] 20110304 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/24'}, {'name': '[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/06/4'}, {'name': '[oss-security] 20110306 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/06/6'}, {'name': '[oss-security] 20110305 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/04/33'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1550?


Explain the CVE ID: What does the identifier CVE-2011-1551 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1551.

SUSE openSUSE Factory assigns ownership of the /var/log/cobbler/ directory tree to the web-service user account, which might allow local users to gain privileges by leveraging access to this account during root filesystem operations by the Cobbler daemon.


Provide references for further information: Can you share references or external links related to CVE-2011-1551?

{'name': '[oss-security] 20110323 Re: CVE Request -- logrotate -- nine issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/23/11'}, {'name': 'opensuse-cobbler-priv-escalation(66487)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66487'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1551?


Explain the CVE ID: What does the identifier CVE-2011-1552 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1552.

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a different vulnerability than CVE-2011-0764.


Provide references for further information: Can you share references or external links related to CVE-2011-1552?

{'name': '43823', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43823'}, {'name': '48985', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48985'}, {'name': '8171', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8171'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kb.cert.org/vuls/id/MAPG-8ECL8X'}, {'name': 'ADV-2011-0728', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0728'}, {'name': 'RHSA-2012:1201', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-1201.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.foolabs.com/xpdf/download.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.toucan-system.com/advisories/tssa-2011-01.txt'}, {'name': 'VU#376500', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/376500'}, {'name': 'MDVSA-2012:144', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2012:144'}, {'name': 'GLSA-201701-57', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201701-57'}, {'name': '1025266', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025266'}, {'name': '20110327 TSSA-2011-01 xpdf : multiple vulnerabilities allow remote code execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517205/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1552?


Explain the CVE ID: What does the identifier CVE-2011-1553 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1553.

Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory write, a different vulnerability than CVE-2011-0764.


Provide references for further information: Can you share references or external links related to CVE-2011-1553?


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1553?


Explain the CVE ID: What does the identifier CVE-2011-1554 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1554.

Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory read, integer overflow, and invalid pointer dereference, a different vulnerability than CVE-2011-0764.


Provide references for further information: Can you share references or external links related to CVE-2011-1554?


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1554?


Explain the CVE ID: What does the identifier CVE-2011-1555 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1555.

SQL injection vulnerability in saa.php in Andy's PHP Knowledgebase (Aphpkb) 0.95.3 and earlier allows remote attackers to execute arbitrary SQL commands via the aid parameter, a different vulnerability than CVE-2011-1546.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2011-1555?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://aphpkb.blogspot.com/2011/03/this-release-includes-security-fixes.html'}, {'name': 'ADV-2011-0802', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0802'}, {'name': '34476', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34476'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1555?


Explain the CVE ID: What does the identifier CVE-2011-1556 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1556.

SQL injection vulnerability in plugins/pdfClasses/pdfgen.php in Andy's PHP Knowledgebase (Aphpkb) 0.95.4 allows remote attackers to execute arbitrary SQL commands via the pdfa parameter.


Provide references for further information: Can you share references or external links related to CVE-2011-1556?

{'name': '71287', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/71287'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.autosectools.com/Advisories/Andy%27s.PHP.Knowledgebase.Project.0.95.4_SQL.Injection_161.html'}, {'name': 'ADV-2011-0823', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0823'}, {'name': '43879', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43879'}, {'name': 'phpknowledgebase-pdfgen-sql-injection(66386)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66386'}, {'name': '17061', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/17061/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1556?


Explain the CVE ID: What does the identifier CVE-2011-1557 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1557.

SQL injection vulnerability in ICloudCenter ICJobSite 1.1 allows remote attackers to execute arbitrary SQL commands via the pid parameter to an unspecified component, a different vulnerability than CVE-2011-1546.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2011-1557?

{'name': '47100', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47100'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1557?


Explain the CVE ID: What does the identifier CVE-2011-1558 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1558.

Multiple cross-site scripting (XSS) vulnerabilities in the IBM Web Interface for Content Management (aka WEBi) 1.0.4 before FP3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-1242.


Provide references for further information: Can you share references or external links related to CVE-2011-1558?

{'name': 'ADV-2011-0834', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0834'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg24029060'}, {'name': 'IO13663', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1IO13663'}, {'name': '43993', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43993'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1558?


Explain the CVE ID: What does the identifier CVE-2011-1559 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1559.

Unspecified vulnerability in the IBM Web Interface for Content Management (aka WEBi) 1.0.4 before FP3 has unknown impact and attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1559?

{'name': 'IO13806', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1IO13806'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg24029060'}, {'name': '43993', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43993'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1559?


Explain the CVE ID: What does the identifier CVE-2011-1560 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1560.

solid.exe in IBM solidDB before 4.5.181, 6.0.x before 6.0.1067, 6.1.x and 6.3.x before 6.3.47, and 6.5.x before 6.5.0.3 uses a password-hash length specified by the client, which allows remote attackers to bypass authentication via a short length value.


Provide references for further information: Can you share references or external links related to CVE-2011-1560?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg21474552'}, {'name': '71494', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/71494'}, {'name': '44030', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44030'}, {'name': 'soliddb-auth-bypass(66455)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66455'}, {'name': 'ADV-2011-0854', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0854'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-11-115/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1560?


Explain the CVE ID: What does the identifier CVE-2011-1561 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1561.

The LDAP login feature in bos.rte.security 6.1.6.4 in IBM AIX 6.1, when ldap_auth is enabled in ldap.cfg, allows remote attackers to bypass authentication via a login attempt with an arbitrary password.


Provide references for further information: Can you share references or external links related to CVE-2011-1561?

{'name': '1025273', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025273'}, {'name': 'ADV-2011-0836', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0836'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://aix.software.ibm.com/aix/efixes/security/ldapauth_advisory.asc'}, {'name': 'IZ97416', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=isg1IZ97416'}, {'name': '43968', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43968'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1561?


Explain the CVE ID: What does the identifier CVE-2011-1562 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1562.

Ecava IntegraXor HMI before n 3.60 (Build 4032) allows remote attackers to bypass authentication and execute arbitrary SQL statements via unspecified vectors related to a crafted POST request. NOTE: some sources have reported this issue as SQL injection, but this might not be accurate.


Provide references for further information: Can you share references or external links related to CVE-2011-1562?

{'name': '44105', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44105'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.us-cert.gov/control_systems/pdf/ICSA-11-082-01.pdf'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.integraxor.com/blog/security-issue-20101222-0700-vulnerability-note'}, {'name': '47019', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47019'}, {'name': 'ADV-2011-0761', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0761'}, {'tags': ['x_refsource_MISC'], 'url': 'http://twitter.com/#%21/djrbliss/status/50685527749431296'}, {'name': 'integraxor-unspecified-sql-injection(66306)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66306'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.integraxor.com/blog/security-issue-sql-unauthenticated-vulnerability-note'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1562?


Explain the CVE ID: What does the identifier CVE-2011-1563 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1563.

Multiple stack-based buffer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow remote attackers to execute arbitrary code via (1) a long username in an On_FC_CONNECT_FCS_LOGIN packet, and crafted (2) On_FC_CTAGLIST_FCS_CADDTAG, (3) On_FC_CTAGLIST_FCS_CDELTAG, (4) On_FC_CTAGLIST_FCS_ADDTAGMS, (5) On_FC_RFUSER_FCS_LOGIN, (6) unspecified "On_FC_BINFILE_FCS_*FILE", (7) On_FC_CGETTAG_FCS_GETTELEMETRY, (8) On_FC_CGETTAG_FCS_GETCHANNELTELEMETRY, (9) On_FC_CGETTAG_FCS_SETTELEMETRY, (10) On_FC_CGETTAG_FCS_SETCHANNELTELEMETRY, and (11) On_FC_SCRIPT_FCS_STARTPROG packets to port 910.


Provide references for further information: Can you share references or external links related to CVE-2011-1563?

{'name': '46937', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46937'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.org/adv/realwin_2-adv.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.org/adv/realwin_7-adv.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-04.pdf'}, {'name': '17025', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/17025'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.org/adv/realwin_4-adv.txt'}, {'name': '43848', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43848'}, {'name': 'ADV-2011-0742', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0742'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.org/adv/realwin_8-adv.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.org/adv/realwin_5-adv.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.org/adv/realwin_3-adv.txt'}, {'name': '8176', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8176'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1563?


Explain the CVE ID: What does the identifier CVE-2011-1564 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1564.

Multiple integer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow remote attackers to execute arbitrary code via crafted (1) On_FC_MISC_FCS_MSGBROADCAST and (2) On_FC_MISC_FCS_MSGSEND packets, which trigger a heap-based buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2011-1564?

{'name': '46937', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46937'}, {'name': '8177', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8177'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.org/adv/realwin_6-adv.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-04.pdf'}, {'name': '17025', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/17025'}, {'name': '43848', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43848'}, {'name': 'ADV-2011-0742', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0742'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1564?


Explain the CVE ID: What does the identifier CVE-2011-1565 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1565.

Directory traversal vulnerability in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to (1) read (opcode 0x3) or (2) create or write (opcode 0x2) arbitrary files via ..\ (dot dot backslash) sequences to TCP port 12401.


Provide references for further information: Can you share references or external links related to CVE-2011-1565?

{'name': '46936', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46936'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-03.pdf'}, {'name': '8178', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8178'}, {'name': '43849', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43849'}, {'name': 'ADV-2011-0741', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0741'}, {'name': '17024', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/17024'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.org/adv/igss_1-adv.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1565?


Explain the CVE ID: What does the identifier CVE-2011-1566 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1566.

Directory traversal vulnerability in dc.exe 9.00.00.11059 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to execute arbitrary programs via ..\ (dot dot backslash) sequences in opcodes (1) 0xa and (2) 0x17 to TCP port 12397.


Provide references for further information: Can you share references or external links related to CVE-2011-1566?

{'name': '46936', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46936'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-03.pdf'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.org/adv/igss_8-adv.txt'}, {'name': '43849', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43849'}, {'name': 'ADV-2011-0741', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0741'}, {'name': '17024', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/17024'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1566?


Explain the CVE ID: What does the identifier CVE-2011-1567 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1567.

Multiple stack-based buffer overflows in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted (1) ListAll, (2) Write File, (3) ReadFile, (4) Delete, (5) RenameFile, and (6) FileInfo commands in an 0xd opcode; (7) the Add, (8) ReadFile, (9) Write File, (10) Rename, (11) Delete, and (12) Add commands in an RMS report templates (0x7) opcode; and (13) 0x4 command in an STDREP request (0x8) opcode to TCP port 12401.


Provide references for further information: Can you share references or external links related to CVE-2011-1567?

{'name': '46936', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46936'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-03.pdf'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.org/adv/igss_2-adv.txt'}, {'name': '43849', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43849'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.org/adv/igss_4-adv.txt'}, {'name': 'ADV-2011-0741', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0741'}, {'name': '17024', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/17024'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.org/adv/igss_5-adv.txt'}, {'name': '8179', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8179'}, {'name': '8251', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8251'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.org/adv/igss_3-adv.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.org/adv/igss_7-adv.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1567?


Explain the CVE ID: What does the identifier CVE-2011-1568 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1568.

Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated using the RMS Reports Delete command, related to the logging of messages to GSST.LOG.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2011-1568?

{'name': '46936', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46936'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-03.pdf'}, {'name': '43849', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43849'}, {'name': 'ADV-2011-0741', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0741'}, {'name': '17024', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/17024'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.org/adv/igss_6-adv.txt'}, {'name': '8182', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8182'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1568?


Explain the CVE ID: What does the identifier CVE-2011-1569 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1569.

download.aspx in Douran Portal 3.9.7.8 allows remote attackers to obtain source code of arbitrary files under the web root via (1) a trailing ".", (2) a trailing space, or (3) mixed case in the FileNameAttach parameter.


Provide references for further information: Can you share references or external links related to CVE-2011-1569?

{'name': '46927', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46927'}, {'name': '17011', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/17011'}, {'name': '20110320 Douran Portal File Download/Source Code Disclosure Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517085/100/0/threaded'}, {'name': '8180', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8180'}, {'tags': ['x_refsource_MISC'], 'url': 'http://soroush.secproject.com/blog/2011/01/unrestricted_file_download_v1_0/'}, {'name': '71250', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/71250'}, {'name': '43792', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43792'}, {'name': 'douranportal-download-file-download(66177)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66177'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1569?


Explain the CVE ID: What does the identifier CVE-2011-1570 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1570.

Cross-site scripting (XSS) vulnerability in Liferay Portal Community Edition (CE) 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote authenticated users to inject arbitrary web script or HTML via a message title, a different vulnerability than CVE-2004-2030.


Provide references for further information: Can you share references or external links related to CVE-2011-1570?

{'name': '[oss-security] 20110408 Re: CVE requests : Liferay 6.0.6', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/04/08/5'}, {'name': '[oss-security] 20110411 Re: CVE requests : Liferay 6.0.6', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/04/11/9'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://issues.liferay.com/browse/LPS-12628'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://issues.liferay.com/browse/LPS-13250'}, {'name': '[oss-security] 20110329 CVE requests : Liferay 6.0.6', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/29/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://issues.liferay.com/secure/ReleaseNote.jspa?version=10656&styleName=Html&projectId=10952'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1570?


Explain the CVE ID: What does the identifier CVE-2011-1571 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1571.

Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors.