Provide references for further information: Can you share references or external links related to CVE-2011-1711?

{'name': 'novell-mobility-pack-unauth-access(67840)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67840'}, {'name': '48117', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48117'}, {'name': '1025608', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025608'}, {'name': '72759', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/72759'}, {'name': '44864', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44864'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.novell.com/support/viewContent.do?externalId=7008690'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1711?


Explain the CVE ID: What does the identifier CVE-2011-1712 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1712.

The txXPathNodeUtils::getXSLTId function in txMozillaXPathTreeWalker.cpp and txStandaloneXPathTreeWalker.cpp in Mozilla Firefox before 3.5.19, 3.6.x before 3.6.17, and 4.x before 4.0.1, and SeaMonkey before 2.0.14, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function.


Provide references for further information: Can you share references or external links related to CVE-2011-1712?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2011/mfsa2011-18.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=640339'}, {'name': 'firefox-txxpathnodeutils-info-disclosure(66836)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66836'}, {'tags': ['x_refsource_MISC'], 'url': 'http://scarybeastsecurity.blogspot.com/2011/03/multi-browser-heap-address-leak-in-xslt.html'}, {'name': 'oval:org.mitre.oval:def:14467', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14467'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1712?


Explain the CVE ID: What does the identifier CVE-2011-1713 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1713.

Microsoft msxml.dll, as used in Internet Explorer 8 on Windows 7, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function.  NOTE: this might overlap CVE-2011-1202.


Provide references for further information: Can you share references or external links related to CVE-2011-1713?

{'name': 'oval:org.mitre.oval:def:12693', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12693'}, {'tags': ['x_refsource_MISC'], 'url': 'http://scarybeastsecurity.blogspot.com/2011/03/multi-browser-heap-address-leak-in-xslt.html'}, {'name': 'ms-msxml-info-disclosure(66835)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66835'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1713?


Explain the CVE ID: What does the identifier CVE-2011-1714 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1714.

Cross-site scripting (XSS) vulnerability in framework/source/resource/qx/test/jsonp_primitive.php in QooxDoo 1.3 and possibly other versions, as used in eyeOS 2.2 and 2.3, and possibly other products allows remote attackers to inject arbitrary web script or HTML via the callback parameter.


Provide references for further information: Can you share references or external links related to CVE-2011-1714?

{'name': '17127', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/17127'}, {'name': '71720', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/71720'}, {'name': '71718', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/71718'}, {'name': '47184', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47184'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blog.eyeos.org/en/2011/04/07/about-some-eyeos-security-issues/'}, {'name': 'eyeos-jsonpprimitive-xss(66574)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66574'}, {'name': '43997', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43997'}, {'name': '43818', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43818'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.autosectools.com/Advisories/eyeOS.2.3_Reflected.Cross-site.Scripting_172.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1714?


Explain the CVE ID: What does the identifier CVE-2011-1715 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1715.

Directory traversal vulnerability in framework/source/resource/qx/test/part/delay.php in QooxDoo 1.3 and possibly other versions, as used in eyeOS 2.2 and 2.3, and possibly other products allows remote attackers to read arbitrary files via ..%2f (encoded dot dot) sequences in the file parameter.


Provide references for further information: Can you share references or external links related to CVE-2011-1715?

{'name': 'eyeos-delay-file-include(66575)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66575'}, {'name': '17127', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/17127'}, {'name': '71721', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/71721'}, {'name': '71719', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/71719'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.autosectools.com/Advisories/eyeOS.2.3_Local.File.Inclusion_173.html'}, {'name': '47184', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47184'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blog.eyeos.org/en/2011/04/07/about-some-eyeos-security-issues/'}, {'name': 'eyeos-jsonpprimitive-xss(66574)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66574'}, {'name': '43997', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43997'}, {'name': '43818', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43818'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1715?


Explain the CVE ID: What does the identifier CVE-2011-1716 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1716.

Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1716?

{'name': '20110404 Re: Xymon monitor cross-site scripting vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517325/100/0/threaded'}, {'name': '47156', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47156'}, {'name': 'xymonmonitor-multiple-xss(66542)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66542'}, {'name': '71489', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/71489'}, {'name': '20110403 Xymon monitor cross-site scripting vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517316/100/0/threaded'}, {'name': '8209', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8209'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://xymon.svn.sourceforge.net/viewvc/xymon/branches/4.3.2/Changes?revision=6673&view=markup'}, {'name': '44036', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44036'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1716?


Explain the CVE ID: What does the identifier CVE-2011-1717 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1717.

Skype for Android stores sensitive user data without encryption in sqlite3 databases that have weak permissions, which allows local applications to read user IDs, contacts, phone numbers, date of birth, instant message logs, and other private information.


Provide references for further information: Can you share references or external links related to CVE-2011-1717?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.androidpolice.com/2011/04/14/exclusive-vulnerability-in-skype-for-android-is-exposing-your-name-phone-number-chat-logs-and-a-lot-more/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blogs.skype.com/security/2011/04/privacy_vulnerability_in_skype.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.theregister.co.uk/2011/04/15/skype_for_android_vulnerable/'}, {'name': '1025387', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025387'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1717?


Explain the CVE ID: What does the identifier CVE-2011-1718 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1718.

The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct impersonation attacks and gain privileges via crafted data.


Provide references for further information: Can you share references or external links related to CVE-2011-1718?

{'name': '20110421 CA20110420-01: Security Notice for CA SiteMinder', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517626/100/0/threaded'}, {'name': '8227', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8227'}, {'name': '47520', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47520'}, {'name': 'ADV-2011-1067', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/1067'}, {'name': 'siteminder-headers-spoofing(66906)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66906'}, {'name': '1025423', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025423'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B1BF29B14-C5FB-4BD3-9113-68E2426E4381%7D'}, {'name': '44218', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44218'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1718?


Explain the CVE ID: What does the identifier CVE-2011-1719 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1719.

Multiple stack-based buffer overflows in the Web Viewer ActiveX controls in CA Output Management Web Viewer 11.0 and 11.5 allow remote attackers to execute arbitrary code via (1) a long SRC property value to the PPSViewer ActiveX control in PPSView.ocx before 1.0.0.7 or (2) a long Title property value to the UOMWV_Helper ActiveX control in UOMWV_HelperActiveX.ocx before 11.5.0.1.


Provide references for further information: Can you share references or external links related to CVE-2011-1719?

{'name': 'ca-output-ppsviewer-bo(66904)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66904'}, {'name': '43681', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43681'}, {'name': '20110421 CA20110420-02: Security Notice for CA Output Management Web Viewer', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517625/100/0/threaded'}, {'name': 'ADV-2011-1066', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/1066'}, {'name': '1025424', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025424'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BDED5B724-B500-46DA-A855-B2AF457B5364%7D'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2011-35/'}, {'name': '47521', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47521'}, {'name': 'ca-output-uomwvhelper-bo(66903)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66903'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2011-34/'}, {'name': '8226', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8226'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1719?


Explain the CVE ID: What does the identifier CVE-2011-1720 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1720.

The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentication methods are enabled, does not create a new server handle after client authentication fails, which allows remote attackers to cause a denial of service (heap memory corruption and daemon crash) or possibly execute arbitrary code via an invalid AUTH command with one method followed by an AUTH command with a different method.


Provide references for further information: Can you share references or external links related to CVE-2011-1720?

{'name': '20110509 Memory corruption in Postfix SMTP server Cyrus SASL support (CVE-2011-1720)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517917/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.postfix.org/CVE-2011-1720.html'}, {'name': '44500', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44500'}, {'name': '47778', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47778'}, {'name': 'GLSA-201206-33', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201206-33.xml'}, {'name': '72259', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/72259'}, {'name': 'VU#727230', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/727230'}, {'name': '1025521', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025521'}, {'name': '[postfix-announce] 20110509 Memory corruption in Postfix SMTP server Cyrus SASL support (CVE-2011-1720)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.mail-archive.com/postfix-announce%40postfix.org/msg00007.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.postfix.org/announcements/postfix-2.8.3.html'}, {'name': '8247', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8247'}, {'name': 'SUSE-SA:2011:023', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=699035'}, {'name': 'MDVSA-2011:090', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:090'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705'}, {'name': 'DSA-2233', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2233'}, {'name': 'USN-1131-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-1131-1'}, {'name': 'postfix-cyrus-sasl-code-exec(67359)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67359'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1720?


Explain the CVE ID: What does the identifier CVE-2011-1721 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1721.

Cross-site request forgery (CSRF) vulnerability in php/partie_administrateur/administration.php in WebJaxe 1.02 allows remote attackers to hijack the authentication of administrators for requests that (1) modify passwords or (2) add new projects.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2011-1721?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.htbridge.ch/advisory/csrf_cross_site_request_forgery_in_webjaxe.html'}, {'name': '20110412 HTB22927: CSRF (Cross-Site Request Forgery) in Webjaxe', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517434/100/0/threaded'}, {'name': '71844', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/71844'}, {'name': '44118', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44118'}, {'name': 'webjaxe-administration-csrf(66757)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66757'}, {'name': '8212', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8212'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1721?


Explain the CVE ID: What does the identifier CVE-2011-1722 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1722.

Multiple SQL injection vulnerabilities in WEC Discussion Forum (wec_discussion) extension 2.1.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild in April 2011.


Provide references for further information: Can you share references or external links related to CVE-2011-1722?

{'name': '71674', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/71674'}, {'name': 'ADV-2011-0896', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0896'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://typo3.org/teams/security/security-bulletins/typo3-sa-2011-003/'}, {'name': '44055', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44055'}, {'name': 'wecdiscussionforum-multiple-sql-injection(66619)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66619'}, {'name': '47257', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47257'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://typo3.org/extensions/repository/view/wec_discussion/2.1.1/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1722?


Explain the CVE ID: What does the identifier CVE-2011-1723 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1723.

Cross-site scripting (XSS) vulnerability in app/views/layouts/base.rhtml in Redmine 1.0.1 through 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to projects/hg-helloworld/news/.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2011-1723?

{'name': '47193', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47193'}, {'name': '43999', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43999'}, {'name': '20110406 XSS Vulnerability in Redmine 1.0.1 to 1.1.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517355/100/0/threaded'}, {'name': 'ADV-2011-0895', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0895'}, {'name': '8211', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8211'}, {'name': '71564', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/71564'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.redmine.org/news/53'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.mavitunasecurity.com/XSS-vulnerability-in-Redmine/'}, {'name': 'redmine-base-xss(66612)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66612'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1723?


Explain the CVE ID: What does the identifier CVE-2011-1724 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1724.

Unspecified vulnerability in HP Virtual Server Environment before 6.3 allows remote authenticated users to gain privileges via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1724?

{'name': 'HPSBMA02665', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130339296506866&w=2'}, {'name': '44227', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44227'}, {'name': '1025429', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025429'}, {'name': '8239', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8239'}, {'name': 'ADV-2011-1065', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/1065'}, {'name': 'SSRT100185', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130339296506866&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1724?


Explain the CVE ID: What does the identifier CVE-2011-1725 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1725.

Unspecified vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to obtain sensitive information via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1725?

{'name': '44319', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44319'}, {'name': 'hp-network-unspec-info-disclosure(67021)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67021'}, {'name': 'HPSBMA02666', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02789514'}, {'name': '47550', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47550'}, {'name': '44304', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44304'}, {'name': '1025435', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025435'}, {'name': '72049', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/72049'}, {'name': 'ADV-2011-1090', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/1090'}, {'name': 'SSRT100434', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02789514'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1725?


Explain the CVE ID: What does the identifier CVE-2011-1726 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1726.

Cross-site scripting (XSS) vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1726?

{'name': '8235', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8235'}, {'name': '1025436', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025436'}, {'name': '44354', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44354'}, {'name': 'HPSBMA02667', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130374351406700&w=2'}, {'name': '72060', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/72060'}, {'name': 'ADV-2011-1091', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/1091'}, {'name': 'SSRT100464', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130374351406700&w=2'}, {'name': 'sitescope-unspec-xss(67018)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67018'}, {'name': '44322', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44322'}, {'name': '47554', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47554'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1726?


Explain the CVE ID: What does the identifier CVE-2011-1727 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1727.

Cross-site scripting (XSS) vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an "HTML injection" issue.


Provide references for further information: Can you share references or external links related to CVE-2011-1727?

{'name': '8235', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8235'}, {'name': '1025436', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025436'}, {'name': '44354', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44354'}, {'name': 'HPSBMA02667', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130374351406700&w=2'}, {'name': 'hp-sitescope-unspec-xss(67020)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67020'}, {'name': 'ADV-2011-1091', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/1091'}, {'name': 'SSRT100464', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130374351406700&w=2'}, {'name': '72061', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/72061'}, {'name': '44322', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44322'}, {'name': '47554', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47554'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1727?


Explain the CVE ID: What does the identifier CVE-2011-1728 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1728.

Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed EXEC_BAR message.


Provide references for further information: Can you share references or external links related to CVE-2011-1728?

{'name': '20110429 ZDI-11-144: HP Data Protector Backup Client Service EXEC_BAR Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517764/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://zerodayinitiative.com/advisories/ZDI-11-144/'}, {'name': '47638', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47638'}, {'name': 'hp-openview-data-code-exec(67201)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67201'}, {'name': 'HPSBMA02668', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240'}, {'name': 'SSRT100474', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240'}, {'name': '44402', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44402'}, {'name': '72187', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/72187'}, {'name': '1025454', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025454'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1728?


Explain the CVE ID: What does the identifier CVE-2011-1729 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1729.

Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed GET_FILE message.


Provide references for further information: Can you share references or external links related to CVE-2011-1729?

{'tags': ['x_refsource_MISC'], 'url': 'http://zerodayinitiative.com/advisories/ZDI-11-145/'}, {'name': 'hp-storage-code-exec(67202)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67202'}, {'name': '47638', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47638'}, {'name': 'HPSBMA02668', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240'}, {'name': 'SSRT100474', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240'}, {'name': '44402', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44402'}, {'name': '1025454', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025454'}, {'name': '72188', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/72188'}, {'name': '20110429 ZDI-11-145: HP Data Protector Backup Client Service GET_FILE Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517765/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1729?


Explain the CVE ID: What does the identifier CVE-2011-1730 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1730.

Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed EXEC_SCRIPT message.


Provide references for further information: Can you share references or external links related to CVE-2011-1730?

{'name': '47638', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47638'}, {'name': 'hp-storage-data-code-exec(67203)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67203'}, {'tags': ['x_refsource_MISC'], 'url': 'http://zerodayinitiative.com/advisories/ZDI-11-146/'}, {'name': 'HPSBMA02668', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240'}, {'name': 'SSRT100474', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240'}, {'name': '44402', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44402'}, {'name': '1025454', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025454'}, {'name': '72189', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/72189'}, {'name': '20110429 ZDI-11-146: HP Data Protector Backup Client Service EXEC_SCRIPT Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517767/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1730?


Explain the CVE ID: What does the identifier CVE-2011-1731 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1731.

Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed EXEC_INTEGUTIL message.


Provide references for further information: Can you share references or external links related to CVE-2011-1731?

{'tags': ['x_refsource_MISC'], 'url': 'http://zerodayinitiative.com/advisories/ZDI-11-147/'}, {'name': '47638', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47638'}, {'name': 'HPSBMA02668', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240'}, {'name': 'SSRT100474', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240'}, {'name': '44402', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44402'}, {'name': '1025454', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025454'}, {'name': '20110429 ZDI-11-147: HP Data Protector Backup Client Service EXEC_INTEGUTIL Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517768/100/0/threaded'}, {'name': '72190', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/72190'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1731?


Explain the CVE ID: What does the identifier CVE-2011-1732 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1732.

Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed stutil message.


Provide references for further information: Can you share references or external links related to CVE-2011-1732?

{'name': '72191', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/72191'}, {'name': 'openview-storage-code-exec(67205)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67205'}, {'name': '20110429 ZDI-11-148: HP Data Protector Backup Client Service stutil Message Processing Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517766/100/0/threaded'}, {'name': '47638', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47638'}, {'tags': ['x_refsource_MISC'], 'url': 'http://zerodayinitiative.com/advisories/ZDI-11-148/'}, {'name': 'HPSBMA02668', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240'}, {'name': 'SSRT100474', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240'}, {'name': '44402', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44402'}, {'name': '1025454', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025454'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1732?


Explain the CVE ID: What does the identifier CVE-2011-1733 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1733.

Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed HPFGConfig message.


Provide references for further information: Can you share references or external links related to CVE-2011-1733?

{'name': 'openview-storage-code-execution(67206)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67206'}, {'name': '72192', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/72192'}, {'name': '47638', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47638'}, {'name': 'HPSBMA02668', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240'}, {'name': 'SSRT100474', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240'}, {'name': '20110429 ZDI-11-149: HP Data Protector Backup Client Service HPFGConfig Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517769/100/0/threaded'}, {'name': '44402', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44402'}, {'name': '1025454', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025454'}, {'tags': ['x_refsource_MISC'], 'url': 'http://zerodayinitiative.com/advisories/ZDI-11-149/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1733?


Explain the CVE ID: What does the identifier CVE-2011-1734 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1734.

Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed omniiaputil message.


Provide references for further information: Can you share references or external links related to CVE-2011-1734?

{'name': '20110429 ZDI-11-150: HP Data Protector Backup Client Service omniiaputil Message Processing Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517770/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://zerodayinitiative.com/advisories/ZDI-11-150/'}, {'name': '47638', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47638'}, {'name': 'HPSBMA02668', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240'}, {'name': 'SSRT100474', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240'}, {'name': '44402', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44402'}, {'name': '1025454', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025454'}, {'name': '72193', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/72193'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1734?


Explain the CVE ID: What does the identifier CVE-2011-1735 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1735.

Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed bm message.


Provide references for further information: Can you share references or external links related to CVE-2011-1735?

{'tags': ['x_refsource_MISC'], 'url': 'http://zerodayinitiative.com/advisories/ZDI-11-151/'}, {'name': 'openview-code-execution(67208)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67208'}, {'name': '20110429 ZDI-11-151: HP Data Protector Backup Client Service bm Message Processing Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517771/100/0/threaded'}, {'name': '47638', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47638'}, {'name': '72194', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/72194'}, {'name': 'HPSBMA02668', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240'}, {'name': 'SSRT100474', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240'}, {'name': '44402', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44402'}, {'name': '1025454', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025454'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1735?


Explain the CVE ID: What does the identifier CVE-2011-1736 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1736.

Directory traversal vulnerability in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to read arbitrary files via directory traversal sequences in a filename in a GET_FILE message.


Provide references for further information: Can you share references or external links related to CVE-2011-1736?

{'name': '20110429 ZDI-11-152: HP Data Protector Backup Client Service GET_FILE Directory Traversal Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/517772/100/0/threaded'}, {'name': '72195', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/72195'}, {'name': '47638', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47638'}, {'name': 'HPSBMA02668', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240'}, {'name': 'SSRT100474', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240'}, {'name': 'openview-data-code-exec(67209)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67209'}, {'name': '44402', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44402'}, {'name': '1025454', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025454'}, {'tags': ['x_refsource_MISC'], 'url': 'http://zerodayinitiative.com/advisories/ZDI-11-152/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1736?


Explain the CVE ID: What does the identifier CVE-2011-1737 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1737.

Multiple cross-site scripting (XSS) vulnerabilities in the Email application in HP Palm webOS 1.4.5 and 1.4.5.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1737?

{'name': '1025514', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025514'}, {'name': 'SSRT100379', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'https://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02822174'}, {'name': 'HPSBMI02632', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'https://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02822174'}, {'name': '47787', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47787'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1737?


Explain the CVE ID: What does the identifier CVE-2011-1738 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1738.

HP Palm webOS 1.4.5 and 1.4.5.1 does not properly restrict Plug-in Development Kit (PDK) applications, which allows local users to gain privileges by leveraging unintended filesystem write access.


Provide references for further information: Can you share references or external links related to CVE-2011-1738?

{'name': '47788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47788'}, {'name': '1025514', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025514'}, {'name': 'SSRT100379', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'https://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02822174'}, {'name': 'HPSBMI02632', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'https://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02822174'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1738?


Explain the CVE ID: What does the identifier CVE-2011-1739 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1739.

The makemask function in mountd.c in mountd in FreeBSD 7.4 through 8.2 does not properly handle a -network field specifying a CIDR block with a prefix length that is not an integer multiple of 8, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances via an NFS mount request.


Provide references for further information: Can you share references or external links related to CVE-2011-1739?

{'name': 'ADV-2011-1076', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/1076'}, {'name': 'FreeBSD-SA-11:01', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'http://security.FreeBSD.org/advisories/FreeBSD-SA-11:01.mountd.asc'}, {'name': '47517', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47517'}, {'name': 'freebsd-mountd-security-bypass(66981)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66981'}, {'name': '1025425', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025425'}, {'name': '44307', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44307'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1739?


Explain the CVE ID: What does the identifier CVE-2011-1740 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1740.

EMC Avamar 4.x, 5.0.x, and 6.0.x before 6.0.0-592 allows remote authenticated users to modify client data or obtain sensitive information about product activities by leveraging privileged access to a different domain.


Provide references for further information: Can you share references or external links related to CVE-2011-1740?

{'name': '20110912 ESA-2011-018: Domain administration privilege enforcement bypass in EMC Avamar', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2011-09/0076.html'}, {'name': 'avamar-client-data-sec-bypass(69760)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/69760'}, {'name': '46002', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/46002'}, {'name': '1026035', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1026035'}, {'name': '45988', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/45988'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1740?


Explain the CVE ID: What does the identifier CVE-2011-1741 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1741.

Stack-based buffer overflow in ftserver.exe in the OpenText Hummingbird Client Connector, as used in the Indexing Server in EMC Documentum eRoom 7.x before 7.4.3.f and other products, allows remote attackers to execute arbitrary code by sending a crafted message over TCP.


Provide references for further information: Can you share references or external links related to CVE-2011-1741?

{'name': '48712', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48712'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-11-236'}, {'name': '8311', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8311'}, {'name': '20110715 ESA-2011-022: EMC Documentum eRoom Indexing Server HummingBird Client Connector Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/518897/100/0/threaded'}, {'name': '20110718 ZDI-11-236: EMC Documentum eRoom Indexing Server OpenText HummingBird Connector Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/518913/100/0/threaded'}, {'name': '1025790', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025790'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1741?


Explain the CVE ID: What does the identifier CVE-2011-1742 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1742.

EMC Data Protection Advisor before 5.8.1 places cleartext account credentials in the DPA configuration file in unspecified circumstances, which might allow local users to obtain sensitive information by reading this file.


Provide references for further information: Can you share references or external links related to CVE-2011-1742?

{'name': '20110726 ESA-2011-021: EMC Data Protection Advisor sensitive information disclosure vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/519012/100/0/threaded'}, {'name': '8318', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8318'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1742?


Explain the CVE ID: What does the identifier CVE-2011-1743 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1743.

Cross-site scripting (XSS) vulnerability in EMC Captiva eInput 2.1.1 before 2.1.1.37 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2011-1743?

{'name': '20110726 ESA-2011-024: EMC Captiva eInput multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/519010/100/0/threaded'}, {'name': '8319', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8319'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1743?


Explain the CVE ID: What does the identifier CVE-2011-1744 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1744.

EMC Captiva eInput 2.1.1 before 2.1.1.37 does not restrict the origin of calls to ActiveX functions, which allows remote attackers to read arbitrary files or cause a denial of service via a crafted web site.


Provide references for further information: Can you share references or external links related to CVE-2011-1744?


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1744?


Explain the CVE ID: What does the identifier CVE-2011-1745 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1745.

Integer overflow in the agp_generic_insert_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 allows local users to gain privileges or cause a denial of service (system crash) via a crafted AGPIOC_BIND agp_ioctl ioctl call.


Provide references for further information: Can you share references or external links related to CVE-2011-1745?

{'name': 'RHSA-2011:0927', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2011-0927.html'}, {'name': '[oss-security] 20110421 CVE request: kernel: buffer overflow and DoS issues in agp', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/04/21/4'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=698996'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=194b3da873fd334ef183806db751473512af29ce'}, {'name': '[linux-kernel] 20110414 [PATCH] char: agp: fix arbitrary kernel memory writes', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lkml.org/lkml/2011/4/14/293'}, {'name': '[oss-security] 20110422 Re: CVE request: kernel: buffer overflow and DoS issues in agp', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/04/22/7'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38.5'}, {'name': '47534', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47534'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1745?


Explain the CVE ID: What does the identifier CVE-2011-1746 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1746.

Multiple integer overflows in the (1) agp_allocate_memory and (2) agp_create_user_memory functions in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 allow local users to trigger buffer overflows, and consequently cause a denial of service (system crash) or possibly have unspecified other impact, via vectors related to calls that specify a large number of memory pages.


Provide references for further information: Can you share references or external links related to CVE-2011-1746?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b522f02184b413955f3bc952e3776ce41edc6355'}, {'name': 'RHSA-2011:0927', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2011-0927.html'}, {'name': '[oss-security] 20110421 CVE request: kernel: buffer overflow and DoS issues in agp', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/04/21/4'}, {'name': '47535', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47535'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=698998'}, {'name': '[oss-security] 20110422 Re: CVE request: kernel: buffer overflow and DoS issues in agp', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/04/22/7'}, {'name': '[linux-kernel] 20110419 Re: [PATCH] char: agp: fix OOM and buffer overflow', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lkml.org/lkml/2011/4/19/400'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38.5'}, {'name': '[linux-kernel] 20110414 [PATCH] char: agp: fix OOM and buffer overflow', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lkml.org/lkml/2011/4/14/294'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1746?


Explain the CVE ID: What does the identifier CVE-2011-1747 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1747.

The agp subsystem in the Linux kernel 2.6.38.5 and earlier does not properly restrict memory allocation by the (1) AGPIOC_RESERVE and (2) AGPIOC_ALLOCATE ioctls, which allows local users to cause a denial of service (memory consumption) by making many calls to these ioctls.


Provide references for further information: Can you share references or external links related to CVE-2011-1747?

{'name': '[oss-security] 20110422 Re: CVE request: kernel: buffer overflow and DoS issues in agp', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/04/22/8'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b522f02184b413955f3bc952e3776ce41edc6355'}, {'name': '1025441', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025441'}, {'name': '[oss-security] 20110422 Re: CVE request: kernel: buffer overflow and DoS issues in agp', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/04/22/11'}, {'name': '[oss-security] 20110421 CVE request: kernel: buffer overflow and DoS issues in agp', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/04/21/4'}, {'name': '47832', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47832'}, {'name': '[oss-security] 20110422 Re: CVE request: kernel: buffer overflow and DoS issues in agp', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/04/22/7'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=698999'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38.5'}, {'name': '[oss-security] 20110422 Re: CVE request: kernel: buffer overflow and DoS issues in agp', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/04/22/9'}, {'name': '[linux-kernel] 20110414 [PATCH] char: agp: fix OOM and buffer overflow', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lkml.org/lkml/2011/4/14/294'}, {'name': '[oss-security] 20110422 Re: CVE request: kernel: buffer overflow and DoS issues in agp', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/04/22/10'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1747?


Explain the CVE ID: What does the identifier CVE-2011-1748 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1748.

The raw_release function in net/can/raw.c in the Linux kernel before 2.6.39-rc6 does not properly validate a socket data structure, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted release operation.


Provide references for further information: Can you share references or external links related to CVE-2011-1748?

{'name': '[oss-security] 20110421 Re: CVE request: kernel: missing socket check in can/bcm release', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/04/21/1'}, {'name': '[oss-security] 20110421 Re: CVE request: kernel: missing socket check in can/bcm release', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/04/20/7'}, {'name': '47835', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47835'}, {'name': '[oss-security] 20110425 Re: CVE request: kernel: missing socket check in can/bcm release', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/04/25/4'}, {'name': '[oss-security] 20110421 Re: CVE request: kernel: missing socket check in can/bcm release', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/04/21/7'}, {'name': '[netdev] 20110420 [PATCH v2] can: add missing socket check in can/raw release', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://permalink.gmane.org/gmane.linux.network/192974'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.39-rc6'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=10022a6c66e199d8f61d9044543f38785713cbbd'}, {'name': '[oss-security] 20110422 Re: CVE request: kernel: missing socket check in can/bcm release', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/04/22/2'}, {'name': '[oss-security] 20110421 Re: CVE request: kernel: missing socket check in can/bcm release', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/04/21/2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=698057'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1748?


Explain the CVE ID: What does the identifier CVE-2011-1749 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1749.

The nfs_addmntent function in support/nfs/nfs_mntent.c in the mount.nsf tool in nfs-utils before 1.2.4 attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to corrupt this file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.


Provide references for further information: Can you share references or external links related to CVE-2011-1749?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=697975'}, {'name': 'RHSA-2012:0310', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2012-0310.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/projects/nfs/files/nfs-utils/1.2.4/Changelog-nfs-utils-1.2.4/download'}, {'name': '[oss-security] 20140425 Re: CVE request: CVE-2011-1089-like flaw in  mount.nfs', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/04/25/5'}, {'name': 'RHSA-2011:1534', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2011-1534.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1749?


Explain the CVE ID: What does the identifier CVE-2011-1750 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1750.

Multiple heap-based buffer overflows in the virtio-blk driver (hw/virtio-blk.c) in qemu-kvm 0.14.0 allow local guest users to cause a denial of service (guest crash) and possibly gain privileges via a (1) write request to the virtio_blk_handle_write function or (2) read request to the virtio_blk_handle_read function that is not properly aligned.


Provide references for further information: Can you share references or external links related to CVE-2011-1750?

{'name': 'DSA-2230', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2011/dsa-2230'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=virt/kvm/qemu-kvm.git%3Ba=commitdiff%3Bh=52c050236eaa4f0b5e1d160cd66dc18106445c4d'}, {'name': 'RHSA-2011:0534', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2011-0534.html'}, {'name': '[Qemu-devel] 20110330 virtio-blk.c handling of i/o which is not a 512 multiple', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.gnu.org/archive/html/qemu-devel/2011-03/msg03015.html'}, {'name': '44393', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44393'}, {'name': '44658', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44658'}, {'name': 'SUSE-SU-2011:0533', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'https://hermes.opensuse.org/messages/8572547'}, {'name': 'kvm-virtioblk-priv-escalation(67062)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67062'}, {'name': '44660', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44660'}, {'name': '[Qemu-devel] 20110330 Re: virtio-blk.c handling of i/o which is not a 512 multiple', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.gnu.org/archive/html/qemu-devel/2011-03/msg03019.html'}, {'name': '73756', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/73756'}, {'name': 'USN-1145-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://www.ubuntu.com/usn/USN-1145-1/'}, {'name': '44900', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44900'}, {'name': 'openSUSE-SU-2011:0510', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2011-05/msg00043.html'}, {'name': '44132', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44132'}, {'name': 'FEDORA-2012-8604', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1750?


Explain the CVE ID: What does the identifier CVE-2011-1751 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1751.

The pciej_write function in hw/acpi_piix4.c in the PIIX4 Power Management emulation in qemu-kvm does not check if a device is hotpluggable before unplugging the PCI-ISA bridge, which allows privileged guest users to cause a denial of service (guest crash) and possibly execute arbitrary code by sending a crafted value to the 0xae08 (PCI_EJ_BASE) I/O port, which leads to a use-after-free related to "active qemu timers."


Provide references for further information: Can you share references or external links related to CVE-2011-1751?

{'name': '[oss-security] 20110519 CVE-2011-1751 qemu: acpi_piix4: missing hotplug check during device  removal', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/05/19/2'}, {'name': 'RHSA-2011:0534', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2011-0534.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=virt/kvm/qemu-kvm.git%3Ba=commit%3Bh=505597e4476a6bc219d0ec1362b760d71cb4fdca'}, {'name': '44648', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44648'}, {'name': '73395', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/73395'}, {'name': '44393', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44393'}, {'name': '44658', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44658'}, {'name': 'SUSE-SU-2011:0533', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'https://hermes.opensuse.org/messages/8572547'}, {'name': '[Qemu-devel] 20110519 [PATCH] Ignore pci unplug requests for unpluggable devices', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.nongnu.org/archive/html/qemu-devel/2011-05/msg01810.html'}, {'name': '47927', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47927'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/nelhage/virtunoid'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=699773'}, {'name': '44458', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44458'}, {'name': '44660', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44660'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.nelhage.com/2011/08/breaking-out-of-kvm/'}, {'name': 'USN-1145-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://www.ubuntu.com/usn/USN-1145-1/'}, {'name': '44900', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44900'}, {'name': 'openSUSE-SU-2011:0510', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2011-05/msg00043.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1751?


Explain the CVE ID: What does the identifier CVE-2011-1752 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1752.

The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request for a baselined WebDAV resource, as exploited in the wild in May 2011.


Provide references for further information: Can you share references or external links related to CVE-2011-1752?

{'name': 'DSA-2251', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2251'}, {'name': 'USN-1144-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1144-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT5130'}, {'name': 'MDVSA-2011:106', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:106'}, {'name': '44849', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44849'}, {'name': 'RHSA-2011:0862', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0862.html'}, {'name': 'FEDORA-2011-8341', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062211.html'}, {'name': '44888', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44888'}, {'name': 'APPLE-SA-2012-02-01-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html'}, {'name': '45162', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/45162'}, {'name': '44681', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44681'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://subversion.apache.org/security/CVE-2011-1752-advisory.txt'}, {'name': '44879', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44879'}, {'name': '48091', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48091'}, {'name': 'FEDORA-2011-8352', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061913.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=709111'}, {'name': '44633', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44633'}, {'name': 'oval:org.mitre.oval:def:18922', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18922'}, {'name': '1025617', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025617'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/repos/asf/subversion/tags/1.6.17/CHANGES'}, {'name': 'RHSA-2011:0861', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0861.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1752?


Explain the CVE ID: What does the identifier CVE-2011-1753 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1753.

expat_erl.c in ejabberd before 2.1.7 and 3.x before 3.0.0-alpha-3, and exmpp before 0.9.7, does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.


Provide references for further information: Can you share references or external links related to CVE-2011-1753?

{'name': 'ejabberd-xml-dos(67769)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67769'}, {'name': 'DSA-2248', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2248'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.process-one.net/en/ejabberd/release_notes/release_note_ejabberd_2.1.7/'}, {'name': '44765', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44765'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.process-one.net/ejabberd/mainline/commit/bd1df027c622e1f96f9eeaac612a6a956c1ff0b6'}, {'name': 'FEDORA-2011-8415', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062099.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ejabberd.im/ejabberd-2.1.7'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=700454'}, {'name': '44807', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44807'}, {'name': '48072', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48072'}, {'name': 'FEDORA-2011-8437', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062145.html'}, {'name': '45120', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/45120'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1753?


Explain the CVE ID: What does the identifier CVE-2011-1754 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1754.

jabberd14 1.6.1.1 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.


Provide references for further information: Can you share references or external links related to CVE-2011-1754?

{'name': 'DSA-2249', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2249'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://packages.debian.org/changelogs/pool/main/j/jabberd14/jabberd14_1.6.1.1-5+squeeze1/changelog'}, {'name': '44795', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44795'}, {'name': 'jabberd14-xml-dos(67771)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67771'}, {'name': '48070', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48070'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1754?


Explain the CVE ID: What does the identifier CVE-2011-1755 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1755.

jabberd2 before 2.2.14 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.


Provide references for further information: Can you share references or external links related to CVE-2011-1755?

{'name': 'jabberd-xml-entity-dos(67770)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67770'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://codex.xiaoka.com/svn/jabberd2/tags/jabberd-2.2.14/ChangeLog'}, {'name': '44957', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44957'}, {'name': '44787', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44787'}, {'name': 'APPLE-SA-2011-10-12-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html'}, {'name': 'FEDORA-2011-7801', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061341.html'}, {'name': 'RHSA-2011:0881', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0881.html'}, {'name': 'SUSE-SU-2011:0741', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'https://hermes.opensuse.org/messages/9197650'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=700390'}, {'name': 'FEDORA-2011-7805', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061458.html'}, {'name': 'RHSA-2011:0882', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0882.html'}, {'name': '48250', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48250'}, {'name': 'FEDORA-2011-7818', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061482.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT5002'}, {'name': '45112', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/45112'}, {'name': '[jabberd2] 20110531 jabberd-2.2.14 release', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.mail-archive.com/jabberd2%40lists.xiaoka.com/msg01655.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1755?


Explain the CVE ID: What does the identifier CVE-2011-1756 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1756.

modules/xmpp/serv_xmpp.c in Citadel 7.86 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.


Provide references for further information: Can you share references or external links related to CVE-2011-1756?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.citadel.org/cgit.cgi/git.citadel.org/commit/?id=27c991cc2059f5530d3d4e9689dc976b745f5b0c'}, {'name': '48071', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/48071'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://packages.debian.org/changelogs/pool/main/c/citadel/citadel_7.37-8+lenny1/changelog'}, {'name': 'DSA-2250', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2250'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://security.debian.org/debian-security/pool/updates/main/c/citadel/citadel_7.83-2squeeze2.diff.gz'}, {'name': '44788', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44788'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://packages.debian.org/changelogs/pool/main/c/citadel/citadel_7.83-2squeeze2/changelog'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://code.citadel.org/cgit.cgi/git.citadel.org/commit/?id=95040add546a705cc2d1d8f16293141f9f9845a6'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1756?


Explain the CVE ID: What does the identifier CVE-2011-1757 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1757.

DJabberd 0.84 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.


Provide references for further information: Can you share references or external links related to CVE-2011-1757?

{'name': '[djabberd] 20110604 CVE-2011-1757: djabberd billion laughs vulnerability', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://groups.google.com/group/djabberd/msg/e3b250f3c1877ede?dmode=source'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1757?


Explain the CVE ID: What does the identifier CVE-2011-1758 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1758.

The krb5_save_ccname_done function in providers/krb5/krb5_auth.c in System Security Services Daemon (SSSD) 1.5.x before 1.5.7, when automatic ticket renewal and offline authentication are configured, uses a pathname string as a password, which allows local users to bypass Kerberos authentication by listing the /tmp directory to obtain the pathname.


Provide references for further information: Can you share references or external links related to CVE-2011-1758?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=700867'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://fedorahosted.org/sssd/ticket/856'}, {'name': '[oss-security] 20110429 vulnerability in sssd 1.5.0+ (CVE-2011-1758)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/04/29/4'}, {'name': 'FEDORA-2011-5815', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059619.html'}, {'name': 'FEDORA-2011-6279', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059532.html'}, {'name': '[sssd-devel] 20110429 SSSD Security Release 1.5.7', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://fedorahosted.org/pipermail/sssd-devel/2011-April/006138.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.7'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.fedorahosted.org/git/?p=sssd.git%3Ba=commit%3Bh=fffdae81651b460f3d2c119c56d5caa09b4de42a'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=700891'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1758?


Explain the CVE ID: What does the identifier CVE-2011-1759 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1759.

Integer overflow in the sys_oabi_semtimedop function in arch/arm/kernel/sys_oabi-compat.c in the Linux kernel before 2.6.39 on the ARM platform, when CONFIG_OABI_COMPAT is enabled, allows local users to gain privileges or cause a denial of service (heap memory corruption) by providing a crafted argument and leveraging a race condition.


Provide references for further information: Can you share references or external links related to CVE-2011-1759?

{'name': '[oss-security] 20110502 Re: CVE request: kernel (ARM): heap corruption in OABI semtimedop', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/05/02/16'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0f22072ab50cac7983f9660d33974b45184da4f9'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/0f22072ab50cac7983f9660d33974b45184da4f9'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1759?


Explain the CVE ID: What does the identifier CVE-2011-1760 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1760.

utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to conduct eval injection attacks and gain privileges via shell metacharacters in the -e argument.


Provide references for further information: Can you share references or external links related to CVE-2011-1760?

{'name': '[oss-security] 20110429 CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/04/29/3'}, {'name': '[oss-security] 20110430 Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/05/01/1'}, {'name': '[oss-security] 20110510 Re: Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/05/10/7'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=700883'}, {'name': '[oss-security] 20110511 Re: Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/05/11/1'}, {'name': '45205', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/45205'}, {'name': '[oss-security] 20110502 Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/05/02/17'}, {'name': '47652', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47652'}, {'name': '44790', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44790'}, {'name': '[oss-security] 20110503 Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/05/03/2'}, {'name': '[oss-security] 20110510 Re: Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/05/10/6'}, {'name': 'USN-1166-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1166-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624212'}, {'name': '[oss-security] 20110430 Re: CVE Request -- oprofile -- Local privilege escalation via crafted opcontrol event parameter when authorized by sudo', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2011/05/01/2'}, {'name': 'DSA-2254', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2254'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1760?


Explain the CVE ID: What does the identifier CVE-2011-1761 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1761.

Multiple stack-based buffer overflows in the (1) abc_new_macro and (2) abc_new_umacro functions in src/load_abc.cpp in libmodplug before 0.8.8.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ABC file.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2011-1761?

{'name': 'DSA-2415', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2012/dsa-2415'}, {'name': '44870', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44870'}, {'name': '72157', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/72157'}, {'name': 'USN-1148-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://ubuntu.com/usn/usn-1148-1'}, {'name': '44695', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44695'}, {'name': '48058', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/48058'}, {'name': '17222', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/17222'}, {'name': '45742', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/45742'}, {'name': 'openSUSE-SU-2011:0943', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00019.html'}, {'name': '[oss-security] 20120502 Re: CVE request: libmodplugin stack-buffer overflow', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/05/02/19'}, {'name': '[oss-security] 20120502 CVE request: libmodplugin stack-buffer overflow', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2011/05/02/1'}, {'name': '44388', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44388'}, {'name': 'openSUSE-SU-2011:0551', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060520.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1761?


Explain the CVE ID: What does the identifier CVE-2011-1762 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1762.

A flaw exists in Wordpress related to the 'wp-admin/press-this.php 'script improperly checking user permissions when publishing posts. This may allow a user with 'Contributor-level' privileges to post as if they had 'publish_posts' permission.


Provide references for further information: Can you share references or external links related to CVE-2011-1762?

{'tags': ['x_refsource_MISC'], 'url': 'https://wordpress.org/support/wordpress-version/version-3-1-2/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1762?


Explain the CVE ID: What does the identifier CVE-2011-1763 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1763.

The get_free_port function in Xen allows local authenticated DomU users to cause a denial of service or possibly gain privileges via unspecified vectors involving a new event channel port.


Provide references for further information: Can you share references or external links related to CVE-2011-1763?

{'name': 'RHSA-2011:0833', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2011-0833.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=701240'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://downloads.avaya.com/css/P8/documents/100145416'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1763?


Explain the CVE ID: What does the identifier CVE-2011-1764 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1764.

Format string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in data used in DKIM logging, as demonstrated by an identity field containing a % (percent) character.


Provide references for further information: Can you share references or external links related to CVE-2011-1764?

{'name': '51155', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/51155'}, {'name': 'SUSE-SR:2011:009', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html'}, {'name': 'DSA-2232', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2232'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.exim.org/exim.git/commit/337e3505b0e6cd4309db6bf6062b33fa56e06cf8'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=702474'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.exim.org/show_bug.cgi?id=1106'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624670'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-1764?


Explain the CVE ID: What does the identifier CVE-2011-1765 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-1765.

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.5, when Internet Explorer 6 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an uploaded file accessed with a dangerous extension such as .shtml at the end of the query string, in conjunction with a modified URI path that has a %2E sequence in place of the . (dot) character.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1578 and CVE-2011-1587.