260901
|
- |
|
redhat
|
openstack_essex openstack_folsom
|
Red Hat OpenStack Essex and Folsom creates the /var/log/puppet directory with world-readable permissions, which allows local users to obtain sensitive information such as Puppet log files.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-6120
|
2013-04-11 13:00 |
2013-04-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260902
|
- |
|
privoxy
|
privoxy
|
Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it easier for remote HTTP servers to spoof the intended…
|
CWE-20
Improper Input Validation
|
CVE-2013-2503
|
2013-04-11 12:33 |
2013-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260903
|
- |
|
ovirt
|
sanlock
|
The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restricti…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-5638
|
2013-04-11 12:32 |
2012-12-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260904
|
- |
|
mcafee
|
email_gateway
|
Directory traversal vulnerability in McAfee Email Gateway (MEG) 7.0.0 and 7.0.1 allows remote authenticated users to bypass intended access restrictions and download arbitrary files via a crafted URL.
|
CWE-22
Path Traversal
|
CVE-2012-4596
|
2013-04-11 12:31 |
2012-08-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260905
|
- |
|
cisco
|
ios
|
The SIP ALG feature in the NAT implementation in Cisco IOS 12.2, 12.4, and 15.0 through 15.2 allows remote attackers to cause a denial of service (device reload) via transit IP packets, aka Bug ID CS…
|
CWE-399
Resource Management Errors
|
CVE-2012-4618
|
2013-04-11 12:31 |
2012-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260906
|
- |
|
cisco
|
ios
|
The NAT implementation in Cisco IOS 12.2, 12.4, and 15.0 through 15.2 allows remote attackers to cause a denial of service (device reload) via transit IP packets, aka Bug ID CSCtr46123.
|
CWE-399
Resource Management Errors
|
CVE-2012-4619
|
2013-04-11 12:31 |
2012-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260907
|
- |
|
optimalog
|
optima_plc
|
APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted packet.
|
CWE-399
Resource Management Errors
|
CVE-2012-5048
|
2013-04-11 12:31 |
2012-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260908
|
- |
|
optimalog
|
optima_plc
|
APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service (infinite loop) via a malformed packet.
|
CWE-20
Improper Input Validation
|
CVE-2012-5049
|
2013-04-11 12:31 |
2012-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260909
|
- |
|
bigace
|
bigace
|
Session fixation vulnerability in BIGACE before 2.7.8 allows remote attackers to hijack web sessions via unspecified vectors.
|
NVD-CWE-Other
|
CVE-2012-5173
|
2013-04-11 12:31 |
2012-11-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
260910
|
- |
|
bigace
|
bigace
|
Per: http://cwe.mitre.org/data/definitions/384.html 'CWE-384: Session Fixation'
|
NVD-CWE-Other
|
CVE-2012-5173
|
2013-04-11 12:31 |
2012-11-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|