Provide references for further information: Can you share references or external links related to CVE-2011-0709?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.35/ChangeLog-2.6.35-rc5'}, {'name': '[oss-security] 20110216 Re: CVE request - kernel: bridge br_multicast NULL pointer dereference', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/02/16/14'}, {'name': '41432', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/41432'}, {'name': '[netdev] 20100706 Re: bridge br_multicast: BUG: unable to handle kernel NULL pointer dereference', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.spinics.net/lists/netdev/msg134444.html'}, {'name': '[oss-security] 20110216 CVE request - kernel: bridge br_multicast NULL pointer dereference', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/02/16/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7f285fa78d4b81b8458f05e77fb6b46245121b4e'}, {'name': '[oss-security] 20110216 Re: CVE request - kernel: bridge br_multicast NULL pointer dereference', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/02/16/8'}, {'name': '[netdev] 20100705 bridge br_multicast: BUG: unable to handle kernel NULL pointer dereference', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.spinics.net/lists/netdev/msg134414.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0709?


Explain the CVE ID: What does the identifier CVE-2011-0710 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0710.

The task_show_regs function in arch/s390/kernel/traps.c in the Linux kernel before 2.6.38-rc4-next-20110216 on the s390 platform allows local users to obtain the values of the registers of an arbitrary process by reading a status file under /proc/.


Provide references for further information: Can you share references or external links related to CVE-2011-0710?

{'name': '20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/520102/100/0/threaded'}, {'name': '46397', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/46397'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.38-rc4-next-20110216.bz2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=677850'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2011-0012.html'}, {'name': '[oss-security] 20110216 CVE request - kernel: s390 task_show_regs infoleak', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/02/16/3'}, {'name': '[oss-security] 20110216 Re: CVE request - kernel: s390 task_show_regs infoleak', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/02/16/9'}, {'name': '46421', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46421'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=261cd298a8c363d7985e3482946edb4bfedacf98'}, {'name': 'kernel-taskshowregs-info-disclosure(65464)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65464'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0710?


Explain the CVE ID: What does the identifier CVE-2011-0711 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0711.

The xfs_fs_geometry function in fs/xfs/xfs_fsops.c in the Linux kernel before 2.6.38-rc6-git3 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FSGEOMETRY_V1 ioctl call.


Provide references for further information: Can you share references or external links related to CVE-2011-0711?

{'name': '46417', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46417'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://patchwork.kernel.org/patch/555461/'}, {'name': 'RHSA-2011:0927', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2011-0927.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=677260'}, {'name': '[oss-security] 20110216 Re: CVE request - kernel: xfs infoleak', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/02/16/10'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3a3675b7f23f83ca8c67c9c2b6edf707fd28d1ba'}, {'name': '[oss-security] 20110216 CVE request - kernel: xfs infoleak', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/02/16/4'}, {'name': '70950', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70950'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.38-rc6-git3.log'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0711?


Explain the CVE ID: What does the identifier CVE-2011-0712 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0712.

Multiple buffer overflows in the caiaq Native Instruments USB audio functionality in the Linux kernel before 2.6.38-rc4-next-20110215 might allow attackers to cause a denial of service or possibly have unspecified other impact via a long USB device name, related to (1) the snd_usb_caiaq_audio_init function in sound/usb/caiaq/audio.c and (2) the snd_usb_caiaq_midi_init function in sound/usb/caiaq/midi.c.


Provide references for further information: Can you share references or external links related to CVE-2011-0712?

{'name': 'USN-1146-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1146-1'}, {'name': '[oss-security] 20110216 Re: kernel: ALSA: caiaq - Fix possible string-buffer overflow', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/02/16/11'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=677881'}, {'name': 'kernel-usbdevice-bo(65461)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65461'}, {'name': '46419', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46419'}, {'name': '[oss-security] 20110216 kernel: ALSA: caiaq - Fix possible string-buffer overflow', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/02/16/5'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/tiwai/sound-2.6.git%3Ba=commit%3Bh=eaae55dac6b64c0616046436b294e69fc5311581'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.38-rc4-next-20110215.bz2'}, {'name': '[oss-security] 20110216 Re: kernel: ALSA: caiaq - Fix possible string-buffer overflow', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/02/16/12'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0712?


Explain the CVE ID: What does the identifier CVE-2011-0713 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0713.

Heap-based buffer overflow in wiretap/dct3trace.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long record in a Nokia DCT3 trace file.


Provide references for further information: Can you share references or external links related to CVE-2011-0713?

{'name': '43759', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43759'}, {'name': 'FEDORA-2011-2648', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055364.html'}, {'name': 'FEDORA-2011-2620', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055664.html'}, {'name': '46416', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46416'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/docs/relnotes/wireshark-1.2.15.html'}, {'name': '[oss-security] 20110216 wireshark dct3trace buffer overflow', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/02/16/13'}, {'name': 'ADV-2011-0747', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0747'}, {'name': 'wireshark-nokiadct3-bo(65780)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65780'}, {'name': 'ADV-2011-0626', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0626'}, {'name': '43795', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43795'}, {'name': 'VU#215900', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/215900'}, {'name': 'ADV-2011-0719', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0719'}, {'name': 'oval:org.mitre.oval:def:14766', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14766'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/docs/relnotes/wireshark-1.4.4.html'}, {'name': 'FEDORA-2011-2632', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055650.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2011-04.html'}, {'name': 'wireshark-visualc-bo(65460)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65460'}, {'name': 'ADV-2011-0622', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0622'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=678198'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.wireshark.org/security/wnpa-sec-2011-03.html'}, {'name': 'RHSA-2011:0369', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0369.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://anonsvn.wireshark.org/viewvc?view=rev&revision=35953'}, {'name': 'MDVSA-2011:044', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:044'}, {'name': '1025148', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025148'}, {'name': 'DSA-2201', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2201'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0713?


Explain the CVE ID: What does the identifier CVE-2011-0714 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0714.

Use-after-free vulnerability in a certain Red Hat patch for the RPC server sockets functionality in the Linux kernel 2.6.32 on Red Hat Enterprise Linux (RHEL) 6 might allow remote attackers to cause a denial of service (crash) via malformed data in a packet, related to lockd and the svc_xprt_received function.


Provide references for further information: Can you share references or external links related to CVE-2011-0714?

{'name': '[oss-security] 20110308 CVE-2011-0714 kernel: deficiency in handling of invalid data packets in lockd', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/08/17'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=678144'}, {'name': '[oss-security] 20110309 Re: CVE-2011-0714 kernel: deficiency in handling of invalid data packets in lockd', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/03/09/1'}, {'name': 'RHSA-2011:0329', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://rhn.redhat.com/errata/RHSA-2011-0329.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0714?


Explain the CVE ID: What does the identifier CVE-2011-0715 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0715.

The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.16, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request that contains a lock token.


Provide references for further information: Can you share references or external links related to CVE-2011-0715?

{'name': '1025161', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025161'}, {'name': 'MDVSA-2011:067', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:067'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4723'}, {'name': 'USN-1096-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1096-1'}, {'name': 'ADV-2011-0567', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0567'}, {'name': '43583', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43583'}, {'name': '46734', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46734'}, {'name': 'FEDORA-2011-2657', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056071.html'}, {'name': 'oval:org.mitre.oval:def:18967', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18967'}, {'name': 'ADV-2011-0568', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0568'}, {'name': 'APPLE-SA-2011-06-23-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html'}, {'name': 'SSA:2011-070-01', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.479953'}, {'name': 'DSA-2181', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2181'}, {'name': 'RHSA-2011:0327', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://rhn.redhat.com/errata/RHSA-2011-0327.html'}, {'name': 'SUSE-SR:2011:005', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html'}, {'name': 'ADV-2011-0776', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0776'}, {'name': 'ADV-2011-0660', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0660'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/repos/asf/subversion/tags/1.6.16/CHANGES'}, {'name': 'FEDORA-2011-2698', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056072.html'}, {'name': 'FEDORA-2011-3775', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056736.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://subversion.apache.org/security/CVE-2011-0715-advisory.txt'}, {'name': 'RHSA-2011:0328', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://rhn.redhat.com/errata/RHSA-2011-0328.html'}, {'name': 'ADV-2011-0684', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0684'}, {'name': 'subversion-moddavsvn-dos(65876)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65876'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=680755'}, {'name': '[dev] 20110303 Subversion 1.6.16 Released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://svn.haxx.se/dev/archive-2011-03/0122.shtml'}, {'name': '43794', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43794'}, {'name': 'ADV-2011-0885', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0885'}, {'name': 'ADV-2011-0624', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0624'}, {'name': '43603', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43603'}, {'name': '43672', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43672'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/viewvc?view=revision&revision=1071239'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/viewvc?view=revision&revision=1071307'}, {'name': '70964', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/70964'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0715?


Explain the CVE ID: What does the identifier CVE-2011-0716 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0716.

The br_multicast_add_group function in net/bridge/br_multicast.c in the Linux kernel before 2.6.38, when a certain Ethernet bridge configuration is used, allows local users to cause a denial of service (memory corruption and system crash) by sending IGMP packets to a local interface.


Provide references for further information: Can you share references or external links related to CVE-2011-0716?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6b0d6a9b4296fa16a28d10d416db7a770fc03287'}, {'name': '[oss-security] 20110217 Re: CVE request -- kernel: deficiency in processing igmp host membership reports in br_multicast', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/02/17/2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=678169'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/6b0d6a9b4296fa16a28d10d416db7a770fc03287'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0716?


Explain the CVE ID: What does the identifier CVE-2011-0717 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0717.

Session fixation vulnerability in Red Hat Network (RHN) Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified vectors related to Spacewalk.


Provide references for further information: Can you share references or external links related to CVE-2011-0717?

{'name': '46528', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46528'}, {'name': 'ADV-2011-0491', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0491'}, {'name': 'RHSA-2011:0300', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0300.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=672159'}, {'name': '1025116', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025116'}, {'name': 'rhnss-session-hijacking(65658)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65658'}, {'name': '43487', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43487'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0717?


Explain the CVE ID: What does the identifier CVE-2011-0718 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0718.

Red Hat Network (RHN) Satellite Server 5.4 does not use a time delay after a failed login attempt, which makes it easier for remote attackers to conduct brute force password guessing attacks.


Provide references for further information: Can you share references or external links related to CVE-2011-0718?

{'name': '46528', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46528'}, {'name': 'ADV-2011-0491', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0491'}, {'name': 'RHSA-2011:0300', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0300.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=672159'}, {'name': '1025116', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025116'}, {'name': 'rhnss-weak-security(65657)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65657'}, {'name': '43487', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43487'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0718?


Explain the CVE ID: What does the identifier CVE-2011-0719 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0719.

Samba 3.x before 3.3.15, 3.4.x before 3.4.12, and 3.5.x before 3.5.7 does not perform range checks for file descriptors before use of the FD_SET macro, which allows remote attackers to cause a denial of service (stack memory corruption, and infinite loop or daemon crash) by opening a large number of files, related to (1) Winbind or (2) smbd.


Provide references for further information: Can you share references or external links related to CVE-2011-0719?

{'name': 'HPSBUX02657', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130835366526620&w=2'}, {'name': 'ADV-2011-0522', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0522'}, {'name': 'SSA:2011-059-01', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.593629'}, {'name': '1025132', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025132'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT4723'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=678328'}, {'name': 'RHSA-2011:0306', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0306.html'}, {'name': 'DSA-2175', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2175'}, {'name': '46597', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46597'}, {'name': 'ADV-2011-0541', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0541'}, {'name': 'ADV-2011-0517', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0517'}, {'name': 'ADV-2011-0702', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0702'}, {'name': 'APPLE-SA-2011-06-23-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.samba.org/samba/history/samba-3.4.12.html'}, {'name': 'SSRT100460', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130835366526620&w=2'}, {'name': 'ADV-2011-0518', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0518'}, {'name': 'FEDORA-2011-3118', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056241.html'}, {'name': '43517', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43517'}, {'name': '43557', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43557'}, {'name': '43556', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43556'}, {'name': '43512', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43512'}, {'name': 'USN-1075-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1075-1'}, {'name': 'ADV-2011-0519', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0519'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://samba.org/samba/security/CVE-2011-0719.html'}, {'name': 'ADV-2011-0520', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0520'}, {'name': 'FEDORA-2011-3120', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056229.html'}, {'name': '43503', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43503'}, {'name': 'samba-fdset-dos(65724)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65724'}, {'name': 'RHSA-2011:0305', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0305.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.samba.org/samba/history/samba-3.5.7.html'}, {'name': '43482', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43482'}, {'name': '43843', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43843'}, {'name': 'MDVSA-2011:038', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:038'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.samba.org/samba/history/samba-3.3.15.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0719?


Explain the CVE ID: What does the identifier CVE-2011-0720 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0720.

Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative access, read or create arbitrary content, and change the site skin via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-0720?

{'name': '70753', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70753'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://plone.org/products/plone/security/advisories/cve-2011-0720'}, {'name': '46102', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46102'}, {'name': '43146', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43146'}, {'name': 'RHSA-2011:0393', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0393.html'}, {'name': 'plone-unspec-priv-escalation(65099)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65099'}, {'name': 'ADV-2011-0796', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0796'}, {'name': '43914', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43914'}, {'name': '1025258', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025258'}, {'name': 'RHSA-2011:0394', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0394.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0720?


Explain the CVE ID: What does the identifier CVE-2011-0721 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0721.

Multiple CRLF injection vulnerabilities in (1) chfn and (2) chsh in shadow 1:4.1.4 allow local users to add new users or groups to /etc/passwd via the GECOS field.


Provide references for further information: Can you share references or external links related to CVE-2011-0721?

{'name': 'ADV-2011-0398', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0398'}, {'name': 'ADV-2011-0773', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0773'}, {'name': '43345', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43345'}, {'name': 'DSA-2164', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2164'}, {'name': 'USN-1065-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1065-1'}, {'name': 'ADV-2011-0396', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0396'}, {'name': 'shadow-chfnchsh-crlf-injection(65564)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65564'}, {'name': '70895', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70895'}, {'name': '46426', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46426'}, {'name': 'SSA:2011-086-03', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.380014'}, {'name': '42505', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42505'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0721?


Explain the CVE ID: What does the identifier CVE-2011-0722 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0722.

FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a malformed RealMedia file.


Provide references for further information: Can you share references or external links related to CVE-2011-0722?

{'name': 'DSA-2306', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2306'}, {'name': 'MDVSA-2011:061', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:061'}, {'name': 'MDVSA-2011:062', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:062'}, {'name': 'MDVSA-2011:114', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:114'}, {'name': 'USN-1104-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-1104-1/'}, {'name': 'MDVSA-2011:089', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:089'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://ffmpeg.mplayerhq.hu/'}, {'name': 'ADV-2011-1241', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/1241'}, {'name': '47149', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47149'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0722?


Explain the CVE ID: What does the identifier CVE-2011-0723 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0723.

FFmpeg 0.5.x, as used in MPlayer and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed VC-1 file.


Provide references for further information: Can you share references or external links related to CVE-2011-0723?

{'name': 'DSA-2306', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2306'}, {'name': 'MDVSA-2011:061', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:061'}, {'name': 'MDVSA-2011:062', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:062'}, {'name': 'MDVSA-2011:112', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:112'}, {'name': 'MDVSA-2011:114', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:114'}, {'name': 'USN-1104-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-1104-1/'}, {'name': 'MDVSA-2011:089', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:089'}, {'name': '47151', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47151'}, {'name': 'ADV-2011-1241', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/1241'}, {'tags': ['x_refsource_MISC'], 'url': 'http://ffmpeg.mplayerhq.hu/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0723?


Explain the CVE ID: What does the identifier CVE-2011-0724 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0724.

The Live DVD for Edubuntu 9.10, 10.04 LTS, and 10.10 does not correctly regenerate iTALC private keys after installation, which causes each installation to have the same fixed key, which allows remote attackers to gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2011-0724?

{'name': 'USN-1061-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1061-1'}, {'name': 'italc-keys-security-bypass(65389)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65389'}, {'name': '46346', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46346'}, {'name': 'ADV-2011-0378', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0378'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0724?


Explain the CVE ID: What does the identifier CVE-2011-0725 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0725.

Absolute path traversal vulnerability in the org.debian.apt.UpdateCachePartially method in worker.py in Aptdaemon 0.40 in Ubuntu 10.10 and 11.04 allows local users to read arbitrary files via a full pathname in the sources_list argument, related to the D-Bus interface.


Provide references for further information: Can you share references or external links related to CVE-2011-0725?

{'name': '46490', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46490'}, {'name': 'ADV-2011-0459', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0459'}, {'name': 'aptdaemon-updatecache-info-disc(65652)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65652'}, {'name': 'USN-1068-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1068-1'}, {'name': '1025107', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025107'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/bugs/722228'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0725?


Explain the CVE ID: What does the identifier CVE-2011-0726 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0726.

The do_task_stat function in fs/proc/array.c in the Linux kernel before 2.6.39-rc1 does not perform an expected uid check, which makes it easier for local users to defeat the ASLR protection mechanism by reading the start_code and end_code fields in the /proc/#####/stat file for a process executing a PIE binary.


Provide references for further information: Can you share references or external links related to CVE-2011-0726?

{'name': '[mm-commits] 20110314 + proc-protect-mm-start_code-end_code-in-proc-pid-stat.patch added to -mm tree', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.spinics.net/lists/mm-commits/msg82726.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=684569'}, {'name': '47791', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47791'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5883f57ca0008ffc93e09cbb9847a1928e50c6f3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v2.6/testing/v2.6.39/ChangeLog-2.6.39-rc1'}, {'name': 'RHSA-2011:0833', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2011-0833.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://downloads.avaya.com/css/P8/documents/100145416'}, {'name': '[linux-kernel] 20110311 [PATCH] proc: protect mm start_code/end_code in /proc/pid/stat', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lkml.org/lkml/2011/3/11/380'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0726?


Explain the CVE ID: What does the identifier CVE-2011-0727 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0727.

GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.


Provide references for further information: Can you share references or external links related to CVE-2011-0727?

{'name': 'USN-1099-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1099-1'}, {'name': '43714', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43714'}, {'name': '1025264', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025264'}, {'name': 'FEDORA-2011-4351', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057931.html'}, {'name': '43854', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43854'}, {'name': 'ADV-2011-0847', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0847'}, {'name': 'ADV-2011-0787', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0787'}, {'name': 'display-manager-priv-escalation(66377)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66377'}, {'name': 'ADV-2011-0911', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0911'}, {'name': 'MDVSA-2011:070', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:070'}, {'name': 'DSA-2205', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2205'}, {'name': 'RHSA-2011:0395', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0395.html'}, {'name': '47063', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47063'}, {'name': 'ADV-2011-0786', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0786'}, {'name': '[gdm-list] 20110328 GDM 2.32.1 released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://mail.gnome.org/archives/gdm-list/2011-March/msg00020.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=688323'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://ftp.gnome.org/pub/GNOME/sources/gdm/2.32/gdm-2.32.1.news'}, {'name': '44021', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44021'}, {'name': 'FEDORA-2011-4335', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057333.html'}, {'name': 'ADV-2011-0797', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0797'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0727?


Explain the CVE ID: What does the identifier CVE-2011-0728 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0728.

Cross-site scripting (XSS) vulnerability in templatefunctions.py in Loggerhead before 1.18.1 allows remote authenticated users to inject arbitrary web script or HTML via a filename, which is not properly handled in a revision view.


Provide references for further information: Can you share references or external links related to CVE-2011-0728?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://launchpad.net/loggerhead/1.18/1.18.1'}, {'name': 'FEDORA-2011-4107', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057502.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/loggerhead/+bug/740142'}, {'name': 'ADV-2011-0849', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0849'}, {'name': '47032', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47032'}, {'name': 'FEDORA-2011-4050', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057413.html'}, {'name': '43822', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43822'}, {'name': 'ADV-2011-0848', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0848'}, {'name': '71279', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/71279'}, {'name': 'FEDORA-2011-4085', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057479.html'}, {'name': '44017', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44017'}, {'name': 'loggerhead-filename-xss(66305)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66305'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0728?


Explain the CVE ID: What does the identifier CVE-2011-0729 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0729.

dbus_backend/ls-dbus-backend in the D-Bus backend in language-selector before 0.6.7 does not restrict access on the basis of a PolicyKit check result, which allows local users to modify the /etc/default/locale and /etc/environment files via a (1) SetSystemDefaultLangEnv or (2) SetSystemDefaultLanguageEnv call.


Provide references for further information: Can you share references or external links related to CVE-2011-0729?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://launchpad.net/bugs/764397'}, {'name': '44214', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44214'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ubuntuupdates.org/packages/show/307975'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://launchpad.net/ubuntu/+source/language-selector/0.6.7'}, {'name': 'ADV-2011-1032', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/1032'}, {'name': '47502', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47502'}, {'name': 'USN-1115-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1115-1/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0729?


Explain the CVE ID: What does the identifier CVE-2011-0730 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0730.

Eucalyptus before 2.0.3 and Eucalyptus EE before 2.0.2, as used in Ubuntu Enterprise Cloud (UEC) and other products, do not properly interpret signed elements in SOAP requests, which allows man-in-the-middle attackers to execute arbitrary commands by modifying a request, related to an "XML Signature Element Wrapping" or a "SOAP signature replay" issue.


Provide references for further information: Can you share references or external links related to CVE-2011-0730?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://open.eucalyptus.com/wiki/esa-02'}, {'name': '44705', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44705'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://launchpadlibrarian.net/72472626/eucalyptus_2.0.1%2Bbzr1256-0ubuntu5_2.0.1%2Bbzr1256-0ubuntu6.diff.gz'}, {'name': 'eucalyptus-soap-command-execution(67670)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67670'}, {'name': 'USN-1137-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1137-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/bugs/746101'}, {'name': '48000', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48000'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://launchpad.net/ubuntu/+source/eucalyptus/+changelog'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0730?


Explain the CVE ID: What does the identifier CVE-2011-0731 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0731.

Buffer overflow in the DB2 Administration Server (DAS) component in IBM DB2 9.1 before FP10, 9.5 before FP7, and 9.7 before FP3 on Linux, UNIX, and Windows allows remote attackers to execute arbitrary code via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-0731?

{'name': 'IC71203', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1IC71203'}, {'name': '46052', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46052'}, {'name': '70683', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/70683'}, {'name': 'oval:org.mitre.oval:def:14699', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14699'}, {'name': 'IC72028', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1IC72028'}, {'name': '43059', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43059'}, {'name': 'IC72029', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg1IC72029'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0731?


Explain the CVE ID: What does the identifier CVE-2011-0732 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0732.

Multiple unspecified vulnerabilities in IBM Tivoli Integrated Portal (TIP) 1.1.1.1, as used in IBM Tivoli Common Reporting (TCR) 1.2.0 before Interim Fix 9, have unknown impact and attack vectors, related to "security vulnerabilities of Websphere Application Server bundled within" and "many internal defects and APARs."


Provide references for further information: Can you share references or external links related to CVE-2011-0732?

{'name': '43030', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43030'}, {'name': 'IY99978', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg1IY99978'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0732?


Explain the CVE ID: What does the identifier CVE-2011-0733 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0733.

Cross-site scripting (XSS) vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header in an id=- query to a .cfm file.


Provide references for further information: Can you share references or external links related to CVE-2011-0733?

{'name': '70777', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70777'}, {'tags': ['x_refsource_MISC'], 'url': 'http://websecurity.com.ua/4879/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://kb2.adobe.com/cps/890/cpsid_89094.html'}, {'name': '1025012', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025012'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb11-04.html'}, {'name': '20110128 Vulnerabilities in Adobe ColdFusion', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2011-01/0537.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0733?


Explain the CVE ID: What does the identifier CVE-2011-0734 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0734.

Cross-site scripting (XSS) vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote attackers to inject arbitrary web script or HTML via an id parameter containing a JavaScript onLoad event handler for a BODY element, related to a "tag body" attack.  NOTE: this was originally reported as affecting 9.0.1 CHF1 and earlier.


Provide references for further information: Can you share references or external links related to CVE-2011-0734?

{'name': '70778', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70778'}, {'tags': ['x_refsource_MISC'], 'url': 'http://websecurity.com.ua/4879/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://kb2.adobe.com/cps/890/cpsid_89094.html'}, {'name': '1025012', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025012'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb11-04.html'}, {'name': '20110128 Vulnerabilities in Adobe ColdFusion', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2011-01/0537.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0734?


Explain the CVE ID: What does the identifier CVE-2011-0735 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0735.

Cross-site scripting (XSS) vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote attackers to inject arbitrary web script or HTML via vectors involving a "tag script."


Provide references for further information: Can you share references or external links related to CVE-2011-0735?

{'name': '70779', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70779'}, {'tags': ['x_refsource_MISC'], 'url': 'http://websecurity.com.ua/4879/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://kb2.adobe.com/cps/890/cpsid_89094.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb11-04.html'}, {'name': '20110128 Vulnerabilities in Adobe ColdFusion', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2011-01/0537.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0735?


Explain the CVE ID: What does the identifier CVE-2011-0736 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0736.

Adobe ColdFusion 9.0.1 CHF1 and earlier, when a web application is configured to use a DBMS, allows remote attackers to obtain potentially sensitive information about the database structure via an id=- query to a .cfm file.  NOTE: the vendor disputes the significance of this issue because the Site-wide Error Handler and Debug Output Settings sections of the ColdFusion Lockdown guide explain the requirement for settings that prevent this information disclosure


Provide references for further information: Can you share references or external links related to CVE-2011-0736?

{'name': '70780', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70780'}, {'tags': ['x_refsource_MISC'], 'url': 'http://websecurity.com.ua/4879/'}, {'name': '20110128 Vulnerabilities in Adobe ColdFusion', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2011-01/0537.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0736?


Explain the CVE ID: What does the identifier CVE-2011-0737 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0737.

Adobe ColdFusion 9.0.1 CHF1 and earlier allows remote attackers to obtain sensitive information via an id=- query to a .cfm file, which reveals the installation path in an error message.  NOTE: the vendor disputes the significance of this issue because the Site-wide Error Handler and Debug Output Settings sections of the ColdFusion Lockdown guide explain the requirement for settings that prevent this information disclosure


Provide references for further information: Can you share references or external links related to CVE-2011-0737?

{'name': '70781', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70781'}, {'tags': ['x_refsource_MISC'], 'url': 'http://websecurity.com.ua/4879/'}, {'name': '20110128 Vulnerabilities in Adobe ColdFusion', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2011-01/0537.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0737?


Explain the CVE ID: What does the identifier CVE-2011-0738 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0738.

MyProxy 5.0 through 5.2, as used in Globus Toolkit 5.0.0 through 5.0.2, does not properly verify the (1) hostname or (2) identity in the X.509 certificate for the myproxy-server, which allows remote attackers to spoof the server and conduct man-in-the-middle (MITM) attacks via a crafted certificate when executing (a) myproxy-logon or (b) myproxy-get-delegation.


Provide references for further information: Can you share references or external links related to CVE-2011-0738?

{'name': 'FEDORA-2011-0514', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053461.html'}, {'name': 'ADV-2011-0227', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0227'}, {'name': '[security-announce] 20110118 Globus Security Advisory 2011-01: myproxy-logon identity checking of server', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.globus.org/pipermail/security-announce/2011-January/000018.html'}, {'name': '43103', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43103'}, {'name': 'myproxy-ssl-spoofing(64830)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64830'}, {'name': 'FEDORA-2011-0512', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053473.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://grid.ncsa.illinois.edu/myproxy/security/myproxy-adv-2011-01.txt'}, {'name': '45916', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45916'}, {'name': '70494', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70494'}, {'name': '42972', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42972'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0738?


Explain the CVE ID: What does the identifier CVE-2011-0739 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0739.

The deliver function in the sendmail delivery agent (lib/mail/network/delivery_methods/sendmail.rb) in Ruby Mail gem 2.2.14 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail address.


Provide references for further information: Can you share references or external links related to CVE-2011-0739?

{'name': 'ADV-2011-0233', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0233'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://groups.google.com/group/mail-ruby/browse_thread/thread/e93bbd05706478dd?pli=1'}, {'name': 'ruby-mail-deliver-command-execution(65010)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65010'}, {'name': '46021', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46021'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/mikel/mail/raw/master/patches/20110126_sendmail.patch'}, {'name': '43077', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43077'}, {'name': '70667', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70667'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0739?


Explain the CVE ID: What does the identifier CVE-2011-0740 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0740.

Cross-site scripting (XSS) vulnerability in magpie/scripts/magpie_slashbox.php in RSS Feed Reader 0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the rss_url parameter.


Provide references for further information: Can you share references or external links related to CVE-2011-0740?

{'name': 'rssfeedreader-slashbox-xss(64949)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64949'}, {'name': '45997', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45997'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.autosectools.com/Advisories/WordPress.RSS.Feed.Reader.for.WordPress.0.1_Reflected.Cross-site.Scripting_82.html'}, {'name': '70644', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70644'}, {'name': '43071', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43071'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0740?


Explain the CVE ID: What does the identifier CVE-2011-0741 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0741.

Multiple cross-site scripting (XSS) vulnerabilities in ModX Evolution before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) installer or (2) image editor.


Provide references for further information: Can you share references or external links related to CVE-2011-0741?

{'name': 'evolution-multiple-xss(65164)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65164'}, {'name': '46154', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46154'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://modxcms.com/forums/index.php/topic%2C60045.0.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0741?


Explain the CVE ID: What does the identifier CVE-2011-0742 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0742.

Buffer overflow in ZfHIPCND.exe in Novell ZENworks Handheld Management 7.0 allows remote attackers to execute arbitrary code via a crafted IP Conduit packet to TCP port 2400.


Provide references for further information: Can you share references or external links related to CVE-2011-0742?

{'name': 'zhm-zfhipcnd-bo(64930)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64930'}, {'name': '20110128 TELUS Security Labs VR - Novell ZENworks Handheld Management ZfHIPCND.exe Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/516045/100/0/threaded'}, {'name': 'ADV-2011-0221', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0221'}, {'name': '70694', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70694'}, {'name': '43094', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43094'}, {'name': '46024', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46024'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.novell.com/support/viewContent.do?externalId=7007663'}, {'name': '1024993', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1024993'}, {'tags': ['x_refsource_MISC'], 'url': 'http://telussecuritylabs.com/threats/show/FSC20110125-06'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-11-026/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0742?


Explain the CVE ID: What does the identifier CVE-2011-0745 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0745.

SugarCRM before 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain duplicate check, which allows remote authenticated users to discover (1) the names of customers via a ShowDuplicates action to the Accounts module, reachable through index.php; or (2) the names of contact persons via a ShowDuplicates action to the Contacts module, reachable through index.php.


Provide references for further information: Can you share references or external links related to CVE-2011-0745?

{'name': '46885', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46885'}, {'name': 'sugarcrm-list-info-disclosure(66110)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66110'}, {'name': 'ADV-2011-0675', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0675'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.redteam-pentesting.de/advisories/rt-sa-2011-002'}, {'name': '1025222', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025222'}, {'name': '8141', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8141'}, {'name': '20110315 [RT-SA-2011-002] SugarCRM list privilege restriction bypass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517027/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0745?


Explain the CVE ID: What does the identifier CVE-2011-0746 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0746.

Cross-site request forgery (CSRF) vulnerability in Forms/PortForwarding_Edit_1 on the ZyXEL O2 DSL Router Classic allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences via the PortRule_Name parameter.


Provide references for further information: Can you share references or external links related to CVE-2011-0746?

{'name': '8198', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8198'}, {'name': '20110407 O2 classic router: persistent cross site scripting (XSS) and cross site request forgery (CSRF)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517399/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://int21.de/cve/CVE-2011-0746-o2-router.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0746?


Explain the CVE ID: What does the identifier CVE-2011-0748 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0748.

Multiple cross-site request forgery (CSRF) vulnerabilities in phpList before 2.10.13 allow remote attackers to hijack the authentication of administrators for requests that (1) add or (2) edit administrator accounts.


Provide references for further information: Can you share references or external links related to CVE-2011-0748?

{'name': '20110407 phplist: cross site request forgery (CSRF), CVE-2011-0748', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517400/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://int21.de/cve/CVE-2011-0748-phplist.html'}, {'name': '44041', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44041'}, {'name': '78549', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/78549'}, {'name': '18419', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/18419'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.phplist.com/?lid=516'}, {'name': 'phplist-admin-csrf(72746)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/72746'}, {'name': '8199', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8199'}, {'name': '51681', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/51681'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0748?


Explain the CVE ID: What does the identifier CVE-2011-0751 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0751.

Directory traversal vulnerability in nhttpd (aka Nostromo webserver) before 1.9.4 allows remote attackers to execute arbitrary programs or read arbitrary files via a ..%2f (encoded dot dot slash) in a URI.


Provide references for further information: Can you share references or external links related to CVE-2011-0751?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.redteam-pentesting.de/advisories/rt-sa-2011-001'}, {'name': 'nostromo-http-command-execution(66103)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66103'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.nazgul.ch/dev_nostromo.html'}, {'name': '46880', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46880'}, {'name': '20110315 [RT-SA-2011-001] nostromo nhttpd directory traversal leading to arbitrary command execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517026/100/0/threaded'}, {'name': 'ADV-2011-0674', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0674'}, {'name': '71235', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/71235'}, {'name': '43775', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43775'}, {'name': '8140', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8140'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0751?


Explain the CVE ID: What does the identifier CVE-2011-0752 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0752.

The extract function in PHP before 5.2.15 does not prevent use of the EXTR_OVERWRITE parameter to overwrite (1) the GLOBALS superglobal array and (2) the this variable, which allows context-dependent attackers to bypass intended access restrictions by modifying data structures that were not intended to depend on external input, a related issue to CVE-2005-2691 and CVE-2006-3758.


Provide references for further information: Can you share references or external links related to CVE-2011-0752?

{'name': 'HPSBOV02763', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=133469208622507&w=2'}, {'name': 'php-extract-security-bypass(65432)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65432'}, {'name': 'oval:org.mitre.oval:def:12016', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12016'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.php.net/ChangeLog-5.php'}, {'name': 'SSRT100826', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=133469208622507&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.php.net/archive/2010.php#id2010-12-10-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.php.net/releases/5_2_15.php'}, {'name': '[oss-security] 20101213 Re: Issues without CVE names in PHP 5.3.4/5.2.15 release', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2010/12/13/4'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0752?


Explain the CVE ID: What does the identifier CVE-2011-0753 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0753.

Race condition in the PCNTL extension in PHP before 5.3.4, when a user-defined signal handler exists, might allow context-dependent attackers to cause a denial of service (memory corruption) via a large number of concurrent signals.


Provide references for further information: Can you share references or external links related to CVE-2011-0753?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.php.net/52784'}, {'name': 'php-pcntl-dos(65431)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65431'}, {'name': 'oval:org.mitre.oval:def:12271', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12271'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.php.net/ChangeLog-5.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0753?


Explain the CVE ID: What does the identifier CVE-2011-0754 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0754.

The SplFileInfo::getType function in the Standard PHP Library (SPL) extension in PHP before 5.3.4 on Windows does not properly detect symbolic links, which might make it easier for local users to conduct symlink attacks by leveraging cross-platform differences in the stat structure, related to lack of a FILE_ATTRIBUTE_REPARSE_POINT check.


Provide references for further information: Can you share references or external links related to CVE-2011-0754?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.php.net/51763'}, {'name': 'php-splfileinfogettype-symlink(65429)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65429'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.php.net/ChangeLog-5.php'}, {'name': 'oval:org.mitre.oval:def:12334', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12334'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0754?


Explain the CVE ID: What does the identifier CVE-2011-0755 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0755.

Integer overflow in the mt_rand function in PHP before 5.3.4 might make it easier for context-dependent attackers to predict the return values by leveraging a script's use of a large max parameter, as demonstrated by a value that exceeds mt_getrandmax.


Provide references for further information: Can you share references or external links related to CVE-2011-0755?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.php.net/46587'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.php.net/ChangeLog-5.php'}, {'name': 'php-mtrand-weak-security(65426)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65426'}, {'name': 'oval:org.mitre.oval:def:12589', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12589'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0755?


Explain the CVE ID: What does the identifier CVE-2011-0756 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0756.

The application server in Trustwave WebDefend Enterprise before 5.0 uses hardcoded console credentials, which makes it easier for remote attackers to read security-event data by using the remote console GUI to connect to the management port.


Provide references for further information: Can you share references or external links related to CVE-2011-0756?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.trustwave.com/spiderlabs/advisories/TWSL2011-001.txt'}, {'name': '1025447', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025447'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0756?


Explain the CVE ID: What does the identifier CVE-2011-0757 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0757.

IBM DB2 9.1 before FP10, 9.5 before FP6a, and 9.7 before FP2 on Linux, UNIX, and Windows does not properly revoke the DBADM authority, which allows remote authenticated users to execute non-DDL statements by leveraging previous possession of this authority.


Provide references for further information: Can you share references or external links related to CVE-2011-0757?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1IC66815'}, {'name': 'IC66814', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg1IC66814'}, {'name': '43148', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43148'}, {'name': 'IC66815', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg1IC66815'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg21426108'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1IC66814'}, {'name': '70773', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70773'}, {'name': 'oval:org.mitre.oval:def:14295', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14295'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1IC66811'}, {'name': 'ibm-db2-dbadm-priv-esc(65008)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65008'}, {'name': '46064', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46064'}, {'name': 'IC66811', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www.ibm.com/support/docview.wss?uid=swg1IC66811'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0757?


Explain the CVE ID: What does the identifier CVE-2011-0758 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0758.

The eCS component (ECSQdmn.exe) in CA ETrust Secure Content Manager 8.0 and CA Gateway Security 8.1 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted request to port 1882, involving an incorrect integer calculation and a heap-based buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2011-0758?

{'name': '46253', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46253'}, {'tags': ['x_refsource_MISC'], 'url': 'http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-ca'}, {'name': '43200', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43200'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BEE6F16E1-6E05-4890-A739-2B9F745C721F%7D'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-11-059'}, {'name': '1025052', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025052'}, {'name': '8075', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8075'}, {'name': '70840', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70840'}, {'name': '20110207 ZDI-11-059: CA ETrust Secure Content Manager Common Services Transport Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/516277/100/0/threaded'}, {'name': 'ADV-2011-0306', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0306'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0758?


Explain the CVE ID: What does the identifier CVE-2011-0759 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0759.

Multiple cross-site request forgery (CSRF) vulnerabilities in the configuration page in the Recaptcha (aka WP-reCAPTCHA) plugin 2.9.8.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that disable the CAPTCHA requirement or insert cross-site scripting (XSS) sequences via the (1) recaptcha_opt_pubkey, (2) recaptcha_opt_privkey, (3) re_tabindex, (4) error_blank, (5) error_incorrect, (6) mailhide_pub, (7) mailhide_priv, (8) mh_replace_link, or (9) mh_replace_title parameter.


Provide references for further information: Can you share references or external links related to CVE-2011-0759?

{'name': 'recaptcha-wordpress-csrf(66167)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66167'}, {'name': '46909', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46909'}, {'name': '43771', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43771'}, {'name': '20110317 Recaptcha Word Press Plugin Cross Site Scripting Vulnerability - CVE-2011-0759', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2011-03/0206.html'}, {'name': 'recaptcha-wordpress-multiple-xss(66169)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66169'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0759?


Explain the CVE ID: What does the identifier CVE-2011-0760 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0760.

Multiple cross-site request forgery (CSRF) vulnerabilities in the configuration screen in wp-relatedposts.php in the WP Related Posts plugin 1.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences via the (1) wp_relatedposts_title, (2) wp_relatedposts_num, or (3) wp_relatedposts_type parameter.


Provide references for further information: Can you share references or external links related to CVE-2011-0760?

{'name': '46908', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46908'}, {'name': '20110317 Related Posts Word Press Plugin Cross Site Scripting Vulnerability - CVE-2011-0760', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2011-03/0205.html'}, {'name': 'relatedposts-configuration-csrf(66168)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66168'}, {'name': '43777', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43777'}, {'name': 'relatedposts-configuration-xss(66166)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66166'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0760?


Explain the CVE ID: What does the identifier CVE-2011-0761 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0761.

Perl 5.10.x allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an ability to inject arguments into a (1) getpeername, (2) readdir, (3) closedir, (4) getsockname, (5) rewinddir, (6) tell, or (7) telldir function call.


Provide references for further information: Can you share references or external links related to CVE-2011-0761?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.toucan-system.com/advisories/tssa-2011-03.txt'}, {'name': '8248', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8248'}, {'name': '1025507', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025507'}, {'name': 'perl-functions-dos(67355)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67355'}, {'name': '47766', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47766'}, {'name': '20110509 TSSA-2011-03 - Perl : multiple functions null pointer dereference uppon parameters injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517916/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0761?


Explain the CVE ID: What does the identifier CVE-2011-0762 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0762.

The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability than CVE-2010-2632.


Provide references for further information: Can you share references or external links related to CVE-2011-0762?

{'name': 'FEDORA-2011-2590', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055882.html'}, {'name': 'HPSBMU02752', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=133226187115472&w=2'}, {'name': 'SSRT100802', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=133226187115472&w=2'}, {'name': 'SUSE-SR:2011:009', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622741'}, {'name': 'FEDORA-2011-2615', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055881.html'}, {'name': 'ADV-2011-0639', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0639'}, {'name': 'ADV-2011-0668', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0668'}, {'name': 'DSA-2305', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2305'}, {'name': '20110301 vsftpd 2.3.2 remote denial-of-service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/516748/100/0/threaded'}, {'name': '8109', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8109'}, {'name': 'ADV-2011-0547', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0547'}, {'name': '16270', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/16270'}, {'name': 'vsftpd-vsffilenamepassesfilter-dos(65873)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65873'}, {'tags': ['x_refsource_MISC'], 'url': 'http://cxib.net/stuff/vspoc232.c'}, {'name': 'MDVSA-2011:049', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:049'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://vsftpd.beasts.org/users/cevans/untar/vsftpd-2.3.4/Changelog'}, {'name': 'ADV-2011-0713', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0713'}, {'name': 'FEDORA-2011-2567', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055957.html'}, {'name': 'USN-1098-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1098-1'}, {'name': 'VU#590604', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/590604'}, {'name': '1025186', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025186'}, {'name': '46617', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46617'}, {'name': '20110301 vsftpd 2.3.2 remote denial-of-service', 'tags': ['third-party-advisory', 'x_refsource_SREASONRES'], 'url': 'http://securityreason.com/achievement_securityalert/95'}, {'name': 'RHSA-2011:0337', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0337.html'}, {'name': 'JVN#37417423', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN37417423/index.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0762?


Explain the CVE ID: What does the identifier CVE-2011-0764 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0764.

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf.


Provide references for further information: Can you share references or external links related to CVE-2011-0764?

{'name': 'MDVSA-2012:002', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2012:002'}, {'name': '43823', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43823'}, {'name': '47347', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/47347'}, {'name': '48985', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48985'}, {'name': '8171', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8171'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kb.cert.org/vuls/id/MAPG-8ECL8X'}, {'name': 'ADV-2011-0728', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0728'}, {'name': 'xpdf-t1lib-code-execution(66208)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66208'}, {'name': 'RHSA-2012:1201', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-1201.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.foolabs.com/xpdf/download.html'}, {'name': '46941', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46941'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.toucan-system.com/advisories/tssa-2011-01.txt'}, {'name': 'USN-1316-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1316-1'}, {'name': 'VU#376500', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/376500'}, {'name': 'MDVSA-2012:144', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2012:144'}, {'name': 'GLSA-201701-57', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201701-57'}, {'name': '1025266', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025266'}, {'name': '20110327 TSSA-2011-01 xpdf : multiple vulnerabilities allow remote code execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517205/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0764?


Explain the CVE ID: What does the identifier CVE-2011-0765 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0765.

Unspecified vulnerability in lft in pWhois Layer Four Traceroute (LFT) 3.x before 3.3 allows local users to gain privileges via a crafted command line.


Provide references for further information: Can you share references or external links related to CVE-2011-0765?

{'name': '46477', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46477'}, {'name': 'VU#946652', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/946652'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pwhois.org/lft/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0765?


Explain the CVE ID: What does the identifier CVE-2011-0766 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0766.

The random number generator in the Crypto application before 2.0.2.2, and SSH before 2.0.5, as used in the Erlang/OTP ssh library before R14B03, uses predictable seeds based on the current time, which makes it easier for remote attackers to guess DSA host and SSH session keys.


Provide references for further information: Can you share references or external links related to CVE-2011-0766?

{'name': '44709', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44709'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/erlang/otp/commit/f228601de45c5b53241b103af6616453c50885a5'}, {'name': '47980', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47980'}, {'name': 'VU#178990', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/178990'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0766?


Explain the CVE ID: What does the identifier CVE-2011-0767 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0767.

Cross-site scripting (XSS) vulnerability in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall 6.2, 7.x, and 8.x allows remote attackers to inject arbitrary web script or HTML via an HTTP request to a firewalled server, aka Bug ID 31759.


Provide references for further information: Can you share references or external links related to CVE-2011-0767?

{'name': '44772', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44772'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.secureworks.com/research/advisories/SWRX-2011-001/'}, {'name': 'securesphere-web-server-xss(67779)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67779'}, {'name': 'VU#567774', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/567774'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.imperva.com/resources/adc/adc_advisories_response_secureworks.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0767?


Explain the CVE ID: What does the identifier CVE-2011-0770 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0770.

Cross-site scripting (XSS) vulnerability in Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 allows remote attackers to inject arbitrary web script or HTML via the Windows XP variable in a file.


Provide references for further information: Can you share references or external links related to CVE-2011-0770?

{'name': 'arcsight-connector-xss(68569)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/68569'}, {'name': '48694', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48694'}, {'name': 'VU#122054', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/122054'}, {'name': '1025791', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025791'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0770?


Explain the CVE ID: What does the identifier CVE-2011-0771 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0771.

The Janrain Engage (formerly RPX) module 6.x-1.3 for Drupal does not validate the file for a profile image, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks and possibly execute arbitrary PHP code by causing a crafted avatar to be downloaded from an external login provider site.