Explain the CVE ID: What does the identifier CVE-2011-0331 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0331.

Use-after-free vulnerability in the addOSPLext method in the Honeywell ScanServer ActiveX control 780.0.20.5 allows remote attackers to execute arbitrary code via a crafted HTML document.


Provide references for further information: Can you share references or external links related to CVE-2011-0331?

{'name': '46930', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46930'}, {'name': '71249', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/71249'}, {'name': 'ADV-2011-0725', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0725'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2011-22/'}, {'name': '43360', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43360'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0331?


Explain the CVE ID: What does the identifier CVE-2011-0332 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0332.

Integer overflow in Foxit Reader before 4.3.1.0218 and Foxit Phantom before 2.3.3.1112 allows remote attackers to execute arbitrary code via crafted ICC chunks in a PDF file, which triggers a heap-based buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2011-0332?

{'name': '43440', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43440'}, {'name': 'ADV-2011-0508', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0508'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2011-14/'}, {'name': '43329', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43329'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.foxitsoftware.com/pdf/reader/security_bulletins.php#memory'}, {'name': '1025129', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025129'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0332?


Explain the CVE ID: What does the identifier CVE-2011-0333 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0333.

Heap-based buffer overflow in the NgwiCalVTimeZoneBody::ParseSelf function in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a crafted TZNAME variable in a VCALENDAR attachment in an e-mail message, related to an "integer truncation error."


Provide references for further information: Can you share references or external links related to CVE-2011-0333?

{'name': '20110926 Novell GroupWise iCal TZNAME Heap Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'https://labs.idefense.com/verisign/intelligence/2009/vulnerabilities/display.php?id=943'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2011-66/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.novell.com/show_bug.cgi?id=678715'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.novell.com/support/viewContent.do?externalId=7009208'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0333?


Explain the CVE ID: What does the identifier CVE-2011-0334 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0334.

Stack-based buffer overflow in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a long HTTP request for a .css file.


Provide references for further information: Can you share references or external links related to CVE-2011-0334?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.novell.com/show_bug.cgi?id=678939'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.novell.com/support/viewContent.do?externalId=7009210'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2011-67/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0334?


Explain the CVE ID: What does the identifier CVE-2011-0335 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0335.

Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0317, CVE-2011-0318, CVE-2011-0319, CVE-2011-0320, CVE-2011-2119, and CVE-2011-2122.


Provide references for further information: Can you share references or external links related to CVE-2011-0335?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb11-17.html'}, {'name': 'TA11-166A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA11-166A.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0335?


Explain the CVE ID: What does the identifier CVE-2011-0340 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0340.

Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol virtual machine, as distributed in Advantech Studio 6.1 SP6 61.6.01.05, InduSoft Web Studio before 7.0+SP1, and InduSoft Thin Client 7.0, allow remote attackers to execute arbitrary code via a long (1) InternationalOrder, (2) InternationalSeparator, or (3) LogFileName property value; or (4) a long bstrFileName argument to the OpenScreen method.


Provide references for further information: Can you share references or external links related to CVE-2011-0340?

{'name': '43116', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43116'}, {'name': '47596', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47596'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2011-37/'}, {'name': 'ADV-2011-1116', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/1116'}, {'tags': ['x_refsource_MISC'], 'url': 'http://ics-cert.us-cert.gov/advisories/ICSA-12-249-03'}, {'name': '42928', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42928'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.us-cert.gov/control_systems/pdf/ICSA-12-137-02.pdf'}, {'name': 'ADV-2011-1115', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/1115'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.indusoft.com/hotfixes/hotfixes.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2011-36/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.advantechdirect.com/eMarketingPrograms/AStudio_Patch/AStudio7.0_Patch_Final.htm'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0340?


Explain the CVE ID: What does the identifier CVE-2011-0341 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0341.

Stack-based buffer overflow in the pdfmoz_onmouse function in apps/mozilla/moz_main.c in the MuPDF plug-in 2008.09.02 for Firefox allows remote attackers to execute arbitrary code via a crafted web site.


Provide references for further information: Can you share references or external links related to CVE-2011-0341?

{'name': '72177', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/72177'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2011-38/'}, {'name': '43739', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43739'}, {'name': 'ADV-2011-1191', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/1191'}, {'name': 'mupdf-pdfmozonmouse-bo(67298)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/67298'}, {'name': '47739', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47739'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0341?


Explain the CVE ID: What does the identifier CVE-2011-0342 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0342.

Multiple buffer overflows in the InduSoft ISSymbol ActiveX control in ISSymbol.ocx 301.1104.601.0 in InduSoft Web Studio 7.0B2 hotfix 7.0.01.04 allow remote attackers to execute arbitrary code via a long parameter to the (1) Open, (2) Close, or (3) SetCurrentLanguage method.


Provide references for further information: Can you share references or external links related to CVE-2011-0342?

{'name': '44875', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44875'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2011-61/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://ics-cert.us-cert.gov/advisories/ICSA-11-273-02'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.indusoft.com/hotfixes/hotfixes.php'}, {'name': '49403', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/49403'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0342?


Explain the CVE ID: What does the identifier CVE-2011-0343 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0343.

Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to use a default value of -1 to create log files with insecure permissions (07777), which allows local users to read and write to these log files.


Provide references for further information: Can you share references or external links related to CVE-2011-0343?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=608491'}, {'name': '20110125 syslog-ng wrong file permission vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/515955/100/0/threaded'}, {'name': '[syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.0.6a has been released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html'}, {'name': '[syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.2.1a has been released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html'}, {'name': '45988', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45988'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0343?


Explain the CVE ID: What does the identifier CVE-2011-0344 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0344.

Multiple stack-based buffer overflows in unspecified CGI programs in the Unified Maintenance Tool web interface in the embedded web server in the Communication Server (CS) in Alcatel-Lucent OmniPCX Enterprise before R9.0 H1.301.50 allow remote attackers to execute arbitrary code via crafted HTTP headers.


Provide references for further information: Can you share references or external links related to CVE-2011-0344?

{'name': '43588', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43588'}, {'name': '46640', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46640'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.alcatel-lucent.com/wps/DocumentStreamerServlet?LMSG_CABINET=Corporate&LMSG_CONTENT_FILE=Support/Security/2011001.pdf'}, {'name': 'omnipcx-unified-maintenance-bo(65849)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65849'}, {'name': '20110301 Alcatel-Lucent OmniPCX Enterprise CS CGI Cookie Buffer Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=896'}, {'name': 'ADV-2011-0549', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0549'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0344?


Explain the CVE ID: What does the identifier CVE-2011-0345 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0345.

Directory traversal vulnerability in the NMS server in Alcatel-Lucent OmniVista 4760 R5.1.06.03 and earlier allows remote attackers to read arbitrary files via directory traversal sequences in HTTP GET requests, related to the lang variable.


Provide references for further information: Can you share references or external links related to CVE-2011-0345?

{'name': '43507', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43507'}, {'name': '8122', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8122'}, {'name': "20110301 DDIVRT-2010-30 Alcatel-Lucent OmniVista 4760 NMS 'lang' Directory Traversal Vulnerability [ CVE-2011-0345 ]", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/516768/100/0/threaded'}, {'name': 'ADV-2011-0548', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0548'}, {'name': "20110301 DDIVRT-2010-30 Alcatel-Lucent OmniVista 4760 NMS 'lang' Directory Traversal Vulnerability [ CVE-2011-0345 ]", 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2011/Mar/8'}, {'name': '46624', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46624'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.alcatel-lucent.com/wps/DocumentStreamerServlet?LMSG_CABINET=Corporate&LMSG_CONTENT_FILE=Support/Security/2011002.pdf'}, {'name': 'omnivista-lang-file-include(65848)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65848'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0345?


Explain the CVE ID: What does the identifier CVE-2011-0346 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0346.

Use-after-free vulnerability in the ReleaseInterface function in MSHTML.DLL in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to the DOM implementation and the BreakAASpecial and BreakCircularMemoryReferences functions, as demonstrated by cross_fuzz, aka "MSHTML Memory Corruption Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2011-0346?

{'name': 'ADV-2011-0026', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0026'}, {'name': 'TA11-102A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA11-102A.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lcamtuf.blogspot.com/2011/01/announcing-crossfuzz-potential-0-day-in.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx'}, {'name': 'oval:org.mitre.oval:def:11882', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11882'}, {'name': 'ms-ie-releaseinterface-code-execution(64482)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64482'}, {'name': '45639', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45639'}, {'name': 'MS11-018', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-018'}, {'name': '20110101 Announcing cross_fuzz, a potential 0-day in circulation, and more', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2010-12/0698.html'}, {'name': '20110101 Announcing cross_fuzz, a potential 0-day in circulation, and more', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/515506/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lcamtuf.coredump.cx/cross_fuzz/known_vuln.txt'}, {'name': '1024940', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1024940'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lcamtuf.coredump.cx/cross_fuzz/msie_crash.txt'}, {'name': 'VU#427980', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/427980'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lcamtuf.coredump.cx/cross_fuzz/fuzzer_timeline.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0346?


Explain the CVE ID: What does the identifier CVE-2011-0347 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0347.

Microsoft Internet Explorer on Windows XP allows remote attackers to trigger an incorrect GUI display and have unspecified other impact via vectors related to the DOM implementation, as demonstrated by cross_fuzz.


Provide references for further information: Can you share references or external links related to CVE-2011-0347?

{'tags': ['x_refsource_MISC'], 'url': 'http://lcamtuf.blogspot.com/2011/01/announcing-crossfuzz-potential-0-day-in.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx'}, {'name': 'ms-ie-gui-weak-security(64571)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64571'}, {'name': '20110101 Announcing cross_fuzz, a potential 0-day in circulation, and more', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2010-12/0698.html'}, {'name': '20110101 Announcing cross_fuzz, a potential 0-day in circulation, and more', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/515506/100/0/threaded'}, {'name': 'oval:org.mitre.oval:def:12514', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12514'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.microsoft.com/technet/security/advisory/2490606.mspx'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lcamtuf.coredump.cx/cross_fuzz/fuzzer_timeline.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lcamtuf.coredump.cx/cross_fuzz/msie_display.jpg'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0347?


Explain the CVE ID: What does the identifier CVE-2011-0348 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0348.

Cisco IOS 12.4(11)MD, 12.4(15)MD, 12.4(22)MD, 12.4(24)MD before 12.4(24)MD3, 12.4(22)MDA before 12.4(22)MDA5, and 12.4(24)MDA before 12.4(24)MDA3 on the Cisco Content Services Gateway Second Generation (aka CSG2) allows remote attackers to bypass intended access restrictions and intended billing restrictions by sending HTTP traffic to a restricted destination after sending HTTP traffic to an unrestricted destination, aka Bug ID CSCtk35917.


Provide references for further information: Can you share references or external links related to CVE-2011-0348?

{'name': '46022', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46022'}, {'name': 'ADV-2011-0229', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0229'}, {'name': '20110126 Cisco Content Services Gateway Vulnerabilities', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6791d.shtml'}, {'name': '70720', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70720'}, {'name': '43052', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43052'}, {'name': '1024992', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1024992'}, {'name': 'cisco-csg2-policy-security-bypass(64936)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64936'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0348?


Explain the CVE ID: What does the identifier CVE-2011-0349 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0349.

Unspecified vulnerability in Cisco IOS 12.4(24)MD before 12.4(24)MD2 on the Cisco Content Services Gateway Second Generation (aka CSG2) allows remote attackers to cause a denial of service (device hang or reload) via crafted TCP packets, aka Bug ID CSCth17178, a different vulnerability than CVE-2011-0350.


Provide references for further information: Can you share references or external links related to CVE-2011-0349?

{'name': '46026', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46026'}, {'name': 'ADV-2011-0229', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0229'}, {'name': '20110126 Cisco Content Services Gateway Vulnerabilities', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6791d.shtml'}, {'name': '43052', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43052'}, {'name': '1024992', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1024992'}, {'name': 'cisco-csg2-tcp-dos(64937)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64937'}, {'name': '70721', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70721'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0349?


Explain the CVE ID: What does the identifier CVE-2011-0350 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0350.

Unspecified vulnerability in Cisco IOS 12.4(24)MD before 12.4(24)MD2 on the Cisco Content Services Gateway Second Generation (aka CSG2) allows remote attackers to cause a denial of service (device hang or reload) via crafted TCP packets, aka Bug ID CSCth41891, a different vulnerability than CVE-2011-0349.


Provide references for further information: Can you share references or external links related to CVE-2011-0350?

{'name': 'ADV-2011-0229', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0229'}, {'name': '20110126 Cisco Content Services Gateway Vulnerabilities', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6791d.shtml'}, {'name': '70722', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70722'}, {'name': '43052', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43052'}, {'name': '46028', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46028'}, {'name': 'cisco-csg2-tcp-packets-dos(64938)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64938'}, {'name': '1024992', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1024992'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0350?


Explain the CVE ID: What does the identifier CVE-2011-0352 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0352.

Buffer overflow in the web-based management interface on the Cisco Linksys WRT54GC router with firmware before 1.06.1 allows remote attackers to cause a denial of service (device crash) via a long string in a POST request.


Provide references for further information: Can you share references or external links related to CVE-2011-0352?

{'name': 'JVNDB-2011-000007', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000007.html'}, {'name': 'wrt54gc-interface-bo(64850)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64850'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://tools.cisco.com/security/center/viewAlert.x?alertId=22228'}, {'name': 'ADV-2011-0205', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0205'}, {'name': 'JVN#26605630', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN26605630/index.html'}, {'name': '43017', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43017'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0352?


Explain the CVE ID: What does the identifier CVE-2011-0354 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0354.

The default configuration of Cisco Tandberg C Series Endpoints, and Tandberg E and EX Personal Video units, with software before TC4.0.0 has a blank password for the root account, which makes it easier for remote attackers to obtain access via an unspecified login method.


Provide references for further information: Can you share references or external links related to CVE-2011-0354?

{'name': '1025017', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025017'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://tools.cisco.com/security/center/viewAlert.x?alertId=22314'}, {'name': '8060', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8060'}, {'name': '46107', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46107'}, {'name': 'VU#436854', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/436854'}, {'name': '20110202 Default Credentials for Root Account on Tandberg E, EX and C Series Endpoints', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/ps11422/products_security_advisory09186a0080b69541.shtml'}, {'name': '16100', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/16100'}, {'name': '43158', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43158'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0354?


Explain the CVE ID: What does the identifier CVE-2011-0355 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0355.

Cisco Nexus 1000V Virtual Ethernet Module (VEM) 4.0(4) SV1(1) through SV1(3b), as used in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, does not properly handle dropped packets, which allows guest OS users to cause a denial of service (ESX or ESXi host OS crash) by sending an 802.1Q tagged packet over an access vEthernet port, aka Cisco Bug ID CSCtj17451.


Provide references for further information: Can you share references or external links related to CVE-2011-0355?

{'name': '43084', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43084'}, {'name': '20110208 VMSA-2011-0002 Cisco Nexus 1000V VEM updates address denial of service in VMware ESX/ESXi', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/516259/100/0/threaded'}, {'name': 'cisco-nexus-packets-dos(65217)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65217'}, {'name': '1025030', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025030'}, {'name': 'ADV-2011-0314', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0314'}, {'name': '46247', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46247'}, {'name': '[security-announce] 20110207 VMSA-2011-0002 Cisco Nexus 1000V VEM updates address denial of service in VMware ESX/ESXi', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.vmware.com/pipermail/security-announce/2011/000118.html'}, {'name': '8090', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8090'}, {'name': '70837', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/70837'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2011-0002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.cisco.com/en/US/docs/switches/datacenter/nexus1000/sw/4_0_4_s_v_1_3_c/release/notes/n1000v_rn.html'}, {'name': 'ADV-2011-0315', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0315'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0355?


Explain the CVE ID: What does the identifier CVE-2011-0364 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0364.

The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted st_upload request.


Provide references for further information: Can you share references or external links related to CVE-2011-0364?

{'name': '8197', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8197'}, {'name': '20110216 Management Center for Cisco Security Agent Remote Code Execution Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6cee6.shtml'}, {'name': '1025088', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025088'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-11-088'}, {'name': '20110217 ZDI-11-088: Cisco Security Agent Management st_upload Remote Code Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/516505/100/0/threaded'}, {'name': '8205', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8205'}, {'name': '43383', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43383'}, {'name': '8095', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8095'}, {'name': '46420', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46420'}, {'name': 'ADV-2011-0424', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0424'}, {'name': '43393', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43393'}, {'name': 'cisco-security-webagent-file-upload(65436)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65436'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0364?


Explain the CVE ID: What does the identifier CVE-2011-0372 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0372.

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31640.


Provide references for further information: Can you share references or external links related to CVE-2011-0372?

{'name': '1025112', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025112'}, {'name': '20110223 Multiple Vulnerabilities in Cisco TelePresence Endpoint Devices', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0372?


Explain the CVE ID: What does the identifier CVE-2011-0373 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0373.

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31685.


Provide references for further information: Can you share references or external links related to CVE-2011-0373?


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0373?


Explain the CVE ID: What does the identifier CVE-2011-0374 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0374.

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31659.


Provide references for further information: Can you share references or external links related to CVE-2011-0374?


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0374?


Explain the CVE ID: What does the identifier CVE-2011-0375 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0375.

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCth24671.


Provide references for further information: Can you share references or external links related to CVE-2011-0375?


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0375?


Explain the CVE ID: What does the identifier CVE-2011-0376 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0376.

The TFTP implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x, 1.6.0, and 1.6.1 allows remote attackers to obtain sensitive information via a GET request, aka Bug ID CSCte43876.


Provide references for further information: Can you share references or external links related to CVE-2011-0376?


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0376?


Explain the CVE ID: What does the identifier CVE-2011-0377 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0377.

Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allow remote attackers to cause a denial of service (service crash) via a malformed SOAP request in conjunction with a spoofed TelePresence Manager that supplies an invalid IP address, aka Bug ID CSCth03605.


Provide references for further information: Can you share references or external links related to CVE-2011-0377?

{'name': 'cisco-endpoint-ipaddress-dos(65616)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65616'}, {'name': '1025112', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025112'}, {'name': '20110223 Multiple Vulnerabilities in Cisco TelePresence Endpoint Devices', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0377?


Explain the CVE ID: What does the identifier CVE-2011-0378 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0378.

The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request, related to a "command injection vulnerability," aka Bug ID CSCtb52587.


Provide references for further information: Can you share references or external links related to CVE-2011-0378?


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0378?


Explain the CVE ID: What does the identifier CVE-2011-0379 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0379.

Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 1.6.x; Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x; Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x; and Cisco TelePresence Manager 1.2.x, 1.3.x, 1.4.x, 1.5.x, and 1.6.2 allows remote attackers to execute arbitrary code via a crafted Cisco Discovery Protocol packet, aka Bug IDs CSCtd75769, CSCtd75766, CSCtd75754, and CSCtd75761.


Provide references for further information: Can you share references or external links related to CVE-2011-0379?

{'name': '1025111', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025111'}, {'name': '20110223 Multiple Vulnerabilities in Cisco TelePresence Recording Server', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml'}, {'name': '20110223 Multiple Vulnerabilities in Cisco TelePresence Manager', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14f.shtml'}, {'name': '1025114', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025114'}, {'name': '20110223 Multiple Vulnerabilities in Cisco TelePresence Multipoint Switch', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml'}, {'name': '1025112', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025112'}, {'name': '20110223 Multiple Vulnerabilities in Cisco TelePresence Endpoint Devices', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml'}, {'name': '1025113', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025113'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0379?


Explain the CVE ID: What does the identifier CVE-2011-0380 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0380.

Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to bypass authentication and invoke arbitrary methods via a malformed SOAP request, aka Bug ID CSCtc59562.


Provide references for further information: Can you share references or external links related to CVE-2011-0380?

{'name': 'telepresence-soap-security-bypass(65618)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65618'}, {'name': '46526', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46526'}, {'name': '1025111', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025111'}, {'name': '20110223 Multiple Vulnerabilities in Cisco TelePresence Manager', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14f.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0380?


Explain the CVE ID: What does the identifier CVE-2011-0381 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0381.

Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to perform unspecified actions and consequently execute arbitrary code via a crafted request to the Java RMI interface, related to a "command injection vulnerability," aka Bug ID CSCtf97085.


Provide references for further information: Can you share references or external links related to CVE-2011-0381?

{'name': '46526', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46526'}, {'name': '1025111', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025111'}, {'name': 'telepresence-manager-rmi-command-exec(65619)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65619'}, {'name': '20110223 Multiple Vulnerabilities in Cisco TelePresence Manager', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14f.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0381?


Explain the CVE ID: What does the identifier CVE-2011-0382 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0382.

The CGI subsystem on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 allows remote attackers to execute arbitrary commands via a request to TCP port 443, related to a "command injection vulnerability," aka Bug ID CSCtf97221.


Provide references for further information: Can you share references or external links related to CVE-2011-0382?

{'name': '20110223 Multiple Vulnerabilities in Cisco TelePresence Recording Server', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml'}, {'name': '1025114', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025114'}, {'name': '46522', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46522'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0382?


Explain the CVE ID: What does the identifier CVE-2011-0383 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0383.

The Java Servlet framework on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions, which allows remote attackers to execute arbitrary code via a crafted request, aka Bug IDs CSCtf42005 and CSCtf42008.


Provide references for further information: Can you share references or external links related to CVE-2011-0383?

{'name': '46519', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46519'}, {'name': '20110223 Multiple Vulnerabilities in Cisco TelePresence Recording Server', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml'}, {'name': '1025114', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025114'}, {'name': '20110223 Multiple Vulnerabilities in Cisco TelePresence Multipoint Switch', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml'}, {'name': 'telepresence-java-unauth-access(65602)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65602'}, {'name': '1025113', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025113'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0383?


Explain the CVE ID: What does the identifier CVE-2011-0384 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0384.

The Java Servlet framework on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions, which allows remote attackers to execute arbitrary code via a crafted request, aka Bug ID CSCtf01253.


Provide references for further information: Can you share references or external links related to CVE-2011-0384?

{'name': '46520', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46520'}, {'name': 'cisco-switch-java-unauth-access(65620)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65620'}, {'name': '20110223 Multiple Vulnerabilities in Cisco TelePresence Multipoint Switch', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml'}, {'name': '1025113', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025113'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0384?


Explain the CVE ID: What does the identifier CVE-2011-0385 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0385.

The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allows remote attackers to create or overwrite arbitrary files, and possibly execute arbitrary code, via a crafted request, aka Bug IDs CSCth85786 and CSCth61065.


Provide references for further information: Can you share references or external links related to CVE-2011-0385?

{'name': '20110223 Multiple Vulnerabilities in Cisco TelePresence Recording Server', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml'}, {'name': 'telepresence-interface-file-upload(65604)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65604'}, {'name': '1025114', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025114'}, {'name': '20110223 Multiple Vulnerabilities in Cisco TelePresence Multipoint Switch', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml'}, {'name': '1025113', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025113'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0385?


Explain the CVE ID: What does the identifier CVE-2011-0386 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0386.

The XML-RPC implementation on Cisco TelePresence Recording Server devices with software 1.6.x and 1.7.x before 1.7.1 allows remote attackers to overwrite files and consequently execute arbitrary code via a malformed request, aka Bug ID CSCti50739.


Provide references for further information: Can you share references or external links related to CVE-2011-0386?

{'name': '20110223 Multiple Vulnerabilities in Cisco TelePresence Recording Server', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml'}, {'name': 'telepresence-xmlrpc-file-overwrite(65605)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65605'}, {'name': '1025114', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025114'}, {'name': '46522', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46522'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0386?


Explain the CVE ID: What does the identifier CVE-2011-0387 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0387.

The administrative web interface on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allows remote authenticated users to cause a denial of service or have unspecified other impact via vectors involving access to a servlet, aka Bug ID CSCtf97164.


Provide references for further information: Can you share references or external links related to CVE-2011-0387?

{'name': 'cisco-multipoint-interface-dos(65621)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65621'}, {'name': '46520', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46520'}, {'name': '20110223 Multiple Vulnerabilities in Cisco TelePresence Multipoint Switch', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml'}, {'name': '1025113', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025113'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0387?


Explain the CVE ID: What does the identifier CVE-2011-0388 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0388.

Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x do not properly restrict remote access to the Java servlet RMI interface, which allows remote attackers to cause a denial of service (memory consumption and web outage) via multiple crafted requests, aka Bug IDs CSCtg35830 and CSCtg35825.


Provide references for further information: Can you share references or external links related to CVE-2011-0388?

{'name': '20110223 Multiple Vulnerabilities in Cisco TelePresence Recording Server', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml'}, {'name': '1025114', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025114'}, {'name': '20110223 Multiple Vulnerabilities in Cisco TelePresence Multipoint Switch', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml'}, {'name': '46523', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46523'}, {'name': '1025113', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025113'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0388?


Explain the CVE ID: What does the identifier CVE-2011-0389 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0389.

Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allow remote attackers to cause a denial of service (process crash) via a crafted Real-Time Transport Control Protocol (RTCP) UDP packet, aka Bug ID CSCth60993.


Provide references for further information: Can you share references or external links related to CVE-2011-0389?

{'name': 'cisco-multipoint-rtpc-dos(65622)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65622'}, {'name': '46520', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46520'}, {'name': '20110223 Multiple Vulnerabilities in Cisco TelePresence Multipoint Switch', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml'}, {'name': '1025113', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025113'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0389?


Explain the CVE ID: What does the identifier CVE-2011-0390 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0390.

The XML-RPC implementation on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, 1.6.x, and 1.7.0 allows remote attackers to cause a denial of service (process crash) via a crafted request, aka Bug ID CSCtj44534.


Provide references for further information: Can you share references or external links related to CVE-2011-0390?

{'name': '46520', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46520'}, {'name': '20110223 Multiple Vulnerabilities in Cisco TelePresence Multipoint Switch', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml'}, {'name': 'telepresence-multipoint-xmlrpc-dos(65623)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65623'}, {'name': '1025113', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025113'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0390?


Explain the CVE ID: What does the identifier CVE-2011-0391 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0391.

Cisco TelePresence Recording Server devices with software 1.6.x allow remote attackers to cause a denial of service (thread consumption and device outage) via a malformed request, related to an "ad hoc recording" issue, aka Bug ID CSCtf97205.


Provide references for further information: Can you share references or external links related to CVE-2011-0391?

{'name': 'telepresence-adhoc-dos(65607)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65607'}, {'name': '20110223 Multiple Vulnerabilities in Cisco TelePresence Recording Server', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml'}, {'name': '1025114', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025114'}, {'name': '46522', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46522'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0391?


Explain the CVE ID: What does the identifier CVE-2011-0392 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0392.

Cisco TelePresence Recording Server devices with software 1.6.x do not require authentication for an XML-RPC interface, which allows remote attackers to perform unspecified actions via a session on TCP port 8080, aka Bug ID CSCtg35833.


Provide references for further information: Can you share references or external links related to CVE-2011-0392?

{'name': 'telepresence-xmlrpc-security-bypass(65609)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65609'}, {'name': '20110223 Multiple Vulnerabilities in Cisco TelePresence Recording Server', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml'}, {'name': '1025114', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025114'}, {'name': '46522', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46522'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0392?


Explain the CVE ID: What does the identifier CVE-2011-0393 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0393.

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.12), 7.1 and 7.2 before 7.2(5.2), 8.0 before 8.0(5.21), 8.1 before 8.1(2.49), 8.2 before 8.2(3.6), and 8.3 before 8.3(2.7) and Cisco PIX Security Appliances 500 series devices, when transparent firewall mode is configured but IPv6 is not configured, allow remote attackers to cause a denial of service (packet buffer exhaustion and device outage) via IPv6 traffic, aka Bug ID CSCtj04707.


Provide references for further information: Can you share references or external links related to CVE-2011-0393?

{'name': '20110223 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14d.shtml'}, {'name': '1025108', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025108'}, {'name': '43488', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43488'}, {'name': 'ADV-2011-0493', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0493'}, {'name': 'asa-packet-buffer-dos(65589)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65589'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0393?


Explain the CVE ID: What does the identifier CVE-2011-0394 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0394.

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2(5.1), 8.0 before 8.0(5.19), 8.1 before 8.1(2.47), 8.2 before 8.2(2.19), and 8.3 before 8.3(1.8); Cisco PIX Security Appliances 500 series devices; and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(20), 3.2 before 3.2(20), 4.0 before 4.0(15), and 4.1 before 4.1(5) allow remote attackers to cause a denial of service (device reload) via a malformed Skinny Client Control Protocol (SCCP) message, aka Bug IDs CSCtg69457 and CSCtl84952.


Provide references for further information: Can you share references or external links related to CVE-2011-0394?

{'name': '20110223 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14d.shtml'}, {'name': 'cisco-fwsm-sccp-dos(65593)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65593'}, {'name': '1025108', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025108'}, {'name': '46518', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46518'}, {'name': 'ADV-2011-0494', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0494'}, {'name': '43453', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43453'}, {'name': '43488', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43488'}, {'name': 'ADV-2011-0493', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0493'}, {'name': '1025109', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025109'}, {'name': '20110223 Cisco Firewall Services Module Skinny Client Control Protocol Inspection Denial of Service Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e148.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0394?


Explain the CVE ID: What does the identifier CVE-2011-0395 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0395.

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.20), 8.1 before 8.1(2.48), 8.2 before 8.2(3), and 8.3 before 8.3(2.1), when the RIP protocol and the Cisco Phone Proxy functionality are configured, allow remote attackers to cause a denial of service (device reload) via a RIP update, aka Bug ID CSCtg66583.


Provide references for further information: Can you share references or external links related to CVE-2011-0395?

{'name': '20110223 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14d.shtml'}, {'name': '1025108', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025108'}, {'name': '43488', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43488'}, {'name': 'ADV-2011-0493', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0493'}, {'name': 'asa-rip-dos(65590)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65590'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0395?


Explain the CVE ID: What does the identifier CVE-2011-0396 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0396.

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.23), 8.1 before 8.1(2.49), 8.2 before 8.2(4.1), and 8.3 before 8.3(2.13), when a Certificate Authority (CA) is configured, allow remote attackers to read arbitrary files via unspecified vectors, aka Bug ID CSCtk12352.


Provide references for further information: Can you share references or external links related to CVE-2011-0396?

{'name': '20110223 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14d.shtml'}, {'name': '1025108', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025108'}, {'name': 'asa-ca-unauth-access(65591)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65591'}, {'name': '43488', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43488'}, {'name': 'ADV-2011-0493', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0493'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0396?


Explain the CVE ID: What does the identifier CVE-2011-0398 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0398.

The Piwik_Common::getIP function in Piwik before 1.1 does not properly determine the client IP address, which allows remote attackers to bypass intended geolocation and logging functionality via (1) use of a private (aka RFC 1918) address behind a proxy server or (2) spoofing of the X-Forwarded-For HTTP header.


Provide references for further information: Can you share references or external links related to CVE-2011-0398?

{'name': '45787', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45787'}, {'name': '70384', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70384'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dev.piwik.org/trac/ticket/567'}, {'name': 'piwik-piwikcommongetip-security-bypass(64641)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64641'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://piwik.org/blog/2011/01/piwik-1-1-2/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0398?


Explain the CVE ID: What does the identifier CVE-2011-0399 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0399.

Piwik before 1.1 does not prevent the rendering of the login form inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.


Provide references for further information: Can you share references or external links related to CVE-2011-0399?

{'name': '45787', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45787'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dev.piwik.org/trac/ticket/1679'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://piwik.org/blog/2011/01/piwik-1-1-2/'}, {'name': 'piwik-loginform-clickjacking(64640)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64640'}, {'name': '70383', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70383'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0399?


Explain the CVE ID: What does the identifier CVE-2011-0400 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0400.

Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.


Provide references for further information: Can you share references or external links related to CVE-2011-0400?

{'name': '45787', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45787'}, {'name': '70382', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70382'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dev.piwik.org/trac/ticket/1795'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://piwik.org/blog/2011/01/piwik-1-1-2/'}, {'name': 'piwik-cookie-weak-security(64639)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64639'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0400?


Explain the CVE ID: What does the identifier CVE-2011-0401 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0401.

Piwik before 1.1 does not properly limit the number of files stored under tmp/sessions/, which might allow remote attackers to cause a denial of service (inode consumption) by establishing many sessions.


Provide references for further information: Can you share references or external links related to CVE-2011-0401?

{'name': '45787', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45787'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dev.piwik.org/trac/ticket/1910'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dev.piwik.org/trac/ticket/1279#comment:13'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://piwik.org/blog/2011/01/piwik-1-1-2/'}, {'name': 'piwik-sessions-dos(64638)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64638'}, {'name': '70381', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70381'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0401?


Explain the CVE ID: What does the identifier CVE-2011-0402 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0402.

dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify arbitrary files via a symlink attack on unspecified files in the .pc directory.


Provide references for further information: Can you share references or external links related to CVE-2011-0402?

{'name': '42831', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42831'}, {'name': 'FEDORA-2011-0345', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053311.html'}, {'name': 'dpkg-dpkgsource-symlink(64614)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64614'}, {'name': '42826', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42826'}, {'name': 'FEDORA-2011-0362', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053306.html'}, {'name': 'USN-1038-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1038-1'}, {'name': '70367', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70367'}, {'name': 'ADV-2011-0040', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0040'}, {'name': '45703', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45703'}, {'name': 'DSA-2142', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2142'}, {'name': '43054', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43054'}, {'name': 'ADV-2011-0044', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0044'}, {'name': 'ADV-2011-0196', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0196'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0402?


Explain the CVE ID: What does the identifier CVE-2011-0403 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0403.

Untrusted search path vulnerability in ImgBurn.exe in ImgBurn 2.4.0.0, 2.5.4.0, and other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a CUE file.


Provide references for further information: Can you share references or external links related to CVE-2011-0403?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.org/files/view/97207/imgburn-dllhijack.txt'}, {'name': '42798', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42798'}, {'name': '70273', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70273'}, {'name': '45657', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45657'}, {'name': 'imgburn-dll-code-execution(64478)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64478'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0403?


Explain the CVE ID: What does the identifier CVE-2011-0404 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0404.

Stack-based buffer overflow in NetSupport Manager Agent for Linux 11.00, for Solaris 9.50, and for Mac OS X 11.00 allows remote attackers to execute arbitrary code via a long control hostname to TCP port 5405, probably a different vulnerability than CVE-2007-5252.


Provide references for further information: Can you share references or external links related to CVE-2011-0404?

{'name': 'ADV-2011-0062', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0062'}, {'name': '15937', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/15937'}, {'name': '70408', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70408'}, {'name': '1024943', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1024943'}, {'name': '45728', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45728'}, {'name': 'netsupport-manager-client-bo(64546)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64546'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ikkisoft.com/stuff/netsupport_linux.txt'}, {'name': '16838', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/16838'}, {'name': '20110108 NetSupport Manager Agent Remote Buffer Overflow (Linux, Solaris, Mac, ...)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2011-01/0090.html'}, {'name': '42794', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42794'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0404?


Explain the CVE ID: What does the identifier CVE-2011-0405 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0405.

Directory traversal vulnerability in module.php in PhpGedView 4.2.3 and possibly other versions, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via directory traversal sequences in the pgvaction parameter.


Provide references for further information: Can you share references or external links related to CVE-2011-0405?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/projects/phpgedview/forums/forum/185166/topic/4040059'}, {'name': 'ADV-2011-0036', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0036'}, {'name': '70295', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70295'}, {'name': '15913', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/15913'}, {'name': 'phpgedview-module-file-include(64733)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64733'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/tracker/?func=detail&aid=3152857&group_id=55456&atid=477081'}, {'name': '42786', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42786'}, {'name': '45674', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45674'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0405?


Explain the CVE ID: What does the identifier CVE-2011-0406 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0406.

Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a long request to TCP port 777.


Provide references for further information: Can you share references or external links related to CVE-2011-0406?

{'name': 'kingview-historysvr-bo(64559)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64559'}, {'name': '15957', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/15957'}, {'name': '45727', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45727'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.cnnvd.org.cn/showCnnvd.html?id=2011010108'}, {'name': '42851', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42851'}, {'name': '70366', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70366'}, {'name': '8134', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8134'}, {'name': 'ADV-2011-0063', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0063'}, {'tags': ['x_refsource_MISC'], 'url': 'http://thesauceofutterpwnage.blogspot.com/2011/01/waking-up-sleeping-dragon.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kingview.com/news/detail.aspx?contentid=528'}, {'name': 'VU#180119', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/180119'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0406?


Explain the CVE ID: What does the identifier CVE-2011-0407 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0407.

SQL injection vulnerability in the store function in _phenotype/system/class/PhenoTypeDataObject.class.php in Phenotype CMS 3.0 allows remote attackers to execute arbitrary SQL commands via a crafted URI, as demonstrated by Gallery/gal_id/1/image1,1.html.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2011-0407?

{'name': 'phenotypecms-uri-sql-injection(64538)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64538'}, {'name': '20110106 SQL Injection in Phenotype CMS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/515577/100/0/threaded'}, {'name': '70308', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70308'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.htbridge.ch/advisory/sql_injection_in_phenotype_cms.html'}, {'name': '45700', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/45700'}, {'name': '42837', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42837'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0407?


Explain the CVE ID: What does the identifier CVE-2011-0408 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0408.

pngrtran.c in libpng 1.5.x before 1.5.1 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted palette-based PNG image that triggers a buffer overflow, related to the png_do_expand_palette function, the png_do_rgb_to_gray function, and an integer underflow.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2011-0408?

{'name': '42863', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/42863'}, {'name': '70417', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70417'}, {'name': 'VU#643140', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/643140'}, {'name': 'libpng-pngsetrgbtogray-bo(64637)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64637'}, {'tags': ['x_refsource_MISC'], 'url': 'ftp://ftp.simplesystems.org/pub/png-group/src/libpng-1.5.1beta01-README.txt'}, {'name': '1024955', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1024955'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftp.simplesystems.org/pub/png-group/src/libpng-1.5.1beta01-1.5.0-diff.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/mailarchive/forum.php?thread_name=002b01cbb0e2%24ae636c80%240b2a4580%24%40acm.org&forum_name=png-mng-implement'}, {'name': 'ADV-2011-0080', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0080'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0408?


Explain the CVE ID: What does the identifier CVE-2011-0410 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0410.

CollabNet ScrumWorks Basic 1.8.4 uses cleartext credentials for network communication and the internal database, which makes it easier for context-dependent attackers to obtain sensitive information by (1) sniffing the network for transmissions of Java objects or (2) reading the database.


Provide references for further information: Can you share references or external links related to CVE-2011-0410?

{'name': '70601', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70601'}, {'name': 'VU#547167', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/547167'}, {'name': '70602', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/70602'}, {'name': '43010', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43010'}, {'name': 'scrumworks-base64-info-disclosure(64883)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64883'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0410?


Explain the CVE ID: What does the identifier CVE-2011-0411 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0411.

The STARTTLS implementation in Postfix 2.4.x before 2.4.16, 2.5.x before 2.5.12, 2.6.x before 2.6.9, and 2.7.x before 2.7.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack.


Provide references for further information: Can you share references or external links related to CVE-2011-0411?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html'}, {'name': 'multiple-starttls-command-execution(65932)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/65932'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.postfix.org/CVE-2011-0411.html'}, {'name': '43646', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43646'}, {'name': 'SUSE-SR:2011:009', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html'}, {'name': '71021', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/71021'}, {'name': 'ADV-2011-0752', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0752'}, {'name': 'ADV-2011-0891', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0891'}, {'name': 'GLSA-201206-33', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201206-33.xml'}, {'name': 'FEDORA-2011-3355', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056560.html'}, {'name': '43874', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43874'}, {'name': 'FEDORA-2011-3394', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056559.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kb.cert.org/vuls/id/MORO-8ELH6Z'}, {'name': 'APPLE-SA-2011-10-12-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html'}, {'name': 'ADV-2011-0611', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0611'}, {'name': '46767', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46767'}, {'name': 'RHSA-2011:0423', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0423.html'}, {'name': 'VU#555316', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/555316'}, {'name': '1025179', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1025179'}, {'name': 'RHSA-2011:0422', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0422.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT5002'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705'}, {'name': 'DSA-2233', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2233'}, {'name': '[oss-security] 20210810 STARTTLS vulnerabilities', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2021/08/10/2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0411?


Explain the CVE ID: What does the identifier CVE-2011-0412 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0412.

Oracle Solaris 8, 9, and 10 stores back-out patch files (undo.Z) unencrypted with world-readable permissions under /var/sadm/pkg/, which allows local users to obtain password hashes and conduct brute force password guessing attacks.


Provide references for further information: Can you share references or external links related to CVE-2011-0412?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html'}, {'name': '44047', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/44047'}, {'name': 'VU#648244', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/648244'}, {'name': 'solaris-password-info-disclosure(66579)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/66579'}, {'name': '47171', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47171'}, {'name': '71646', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/71646'}, {'name': 'ADV-2011-0882', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0882'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0412?


Explain the CVE ID: What does the identifier CVE-2011-0413 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0413.

The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before 4.1-ESV-R1, and 4.2.x before 4.2.1b1 allows remote attackers to cause a denial of service (assertion failure and daemon crash) by sending a message over IPv6 for a declined and abandoned address.


Provide references for further information: Can you share references or external links related to CVE-2011-0413?

{'name': 'ADV-2011-0266', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0266'}, {'name': '43006', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43006'}, {'name': 'ADV-2011-0235', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0235'}, {'name': '43354', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43354'}, {'name': 'dhcp-dhcpv6-dos(64959)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/64959'}, {'name': '70680', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/70680'}, {'name': '43104', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43104'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.isc.org/article/AA-00456'}, {'name': 'MDVSA-2011:022', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:022'}, {'name': 'ADV-2011-0583', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0583'}, {'name': 'ADV-2011-0300', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0300'}, {'name': '43613', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43613'}, {'name': '1024999', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1024999'}, {'name': '43167', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43167'}, {'name': 'RHSA-2011:0256', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2011-0256.html'}, {'name': '46035', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/46035'}, {'name': 'FEDORA-2011-0862', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053644.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.isc.org/software/dhcp/advisories/cve-2011-0413'}, {'name': 'ADV-2011-0400', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0400'}, {'name': 'DSA-2184', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2184'}, {'name': 'VU#686084', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/686084'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0413?


Explain the CVE ID: What does the identifier CVE-2011-0414 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0414.

ISC BIND 9.7.1 through 9.7.2-P3, when configured as an authoritative server, allows remote attackers to cause a denial of service (deadlock and daemon hang) by sending a query at the time of (1) an IXFR transfer or (2) a DDNS update.


Provide references for further information: Can you share references or external links related to CVE-2011-0414?

{'name': 'VU#449980', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/449980'}, {'name': 'ADV-2011-0489', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0489'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.isc.org/software/bind/advisories/cve-2011-0414'}, {'name': '1025110', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1025110'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=679496'}, {'name': 'SUSE-SR:2011:005', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html'}, {'name': 'VU#559980', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/559980'}, {'name': '43443', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43443'}, {'name': 'DSA-2208', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2011/dsa-2208'}, {'name': 'ADV-2011-0466', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/0466'}, {'name': '43439', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/43439'}, {'name': 'USN-1070-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1070-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0414?


Explain the CVE ID: What does the identifier CVE-2011-0418 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0418.

The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not properly expand expressions containing curly brackets, which allows remote authenticated users to cause a denial of service (memory consumption) via a crafted FTP STAT command.


Provide references for further information: Can you share references or external links related to CVE-2011-0418?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gen/glob.c#rev1.28'}, {'name': 'ADV-2011-1273', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2011/1273'}, {'name': 'MDVSA-2011:094', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2011:094'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gen/glob.c.diff?r1=1.27&r2=1.28&f=h'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=704283'}, {'name': '47671', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/47671'}, {'name': '20110502 Multiple Vendors libc/glob(3) GLOB_BRACE|GLOB_LIMIT memory exhaustion', 'tags': ['third-party-advisory', 'x_refsource_SREASONRES'], 'url': 'http://securityreason.com/achievement_securityalert/97'}, {'name': '8228', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8228'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.pureftpd.org/project/pure-ftpd/news'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2011-0418?


Explain the CVE ID: What does the identifier CVE-2011-0419 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2011-0419.

Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument, as demonstrated by attacks against mod_autoindex in httpd.