|
292901
|
- |
|
canonical
|
ubuntu_linux
|
The Apport hook (DistUpgradeApport.py) in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04, uploads the /var/log/dist-upgrade directory when reporting bugs to Launchpad, which allows rem…
|
CWE-200
Information Exposure
|
CVE-2012-0950
|
2024-11-21 10:36 |
2012-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292902
|
- |
|
redhat
|
satellite
|
spacewalk-backend in Red Hat Network Satellite 5.4 on Red Hat Enterprise Linux 6 does not properly authorize or authenticate uploads to the NULL organization when mod_wsgi is used, which allows remot…
|
CWE-287
Improper Authentication
|
CVE-2012-1145
|
2024-11-21 10:36 |
2012-06-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292903
|
- |
|
canonical gnome
|
ubuntu_linux update-manager-core
|
DistUpgrade/DistUpgradeMain.py in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04, uses weak permissions for (1) apt-clone_system_state.tar.gz and (2) system_state.tar.gz, which allows …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-0948
|
2024-11-21 10:36 |
2012-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292904
|
- |
|
mit
|
kerberos_5
|
The check_1_6_dummy function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x, and 1.10.x before 1.10.2 allows remote authenticated administrators to cause a deni…
|
NVD-CWE-Other
|
CVE-2012-1013
|
2024-11-21 10:36 |
2012-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292905
|
- |
|
mit
|
kerberos_5
|
server/server_stubs.c in the kadmin protocol implementation in MIT Kerberos 5 (aka krb5) 1.10 before 1.10.1 does not properly restrict access to (1) SET_STRING and (2) GET_STRINGS operations, which m…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2012-1012
|
2024-11-21 10:36 |
2012-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292906
|
- |
|
sony
|
vaio_easy_connect smartwi_connection_utillity vaio_wireless_wizard vaio_pc_wireless_lan_wizard
|
Multiple buffer overflows in the Wireless Manager ActiveX control 4.0.0.0 in WifiMan.dll in Sony VAIO PC Wireless LAN Wizard 1.0; VAIO Wireless Wizard 1.00, 1.00_64, 1.0.1, 2.0, and 3.0; SmartWi Conn…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2012-0985
|
2024-11-21 10:36 |
2012-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292907
|
5.5 |
MEDIUM
Local
|
imagemagick debian canonical opensuse
|
imagemagick debian_linux ubuntu_linux opensuse
|
Integer overflow in the SyncImageProfiles function in profile.c in ImageMagick 6.7.5-8 and earlier allows remote attackers to cause a denial of service (infinite loop) via crafted IOP tag offsets in …
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2012-1186
|
2024-11-21 10:36 |
2012-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292908
|
7.8 |
HIGH
Local
|
imagemagick debian canonical opensuse
|
imagemagick debian_linux ubuntu_linux opensuse
|
Multiple integer overflows in (1) magick/profile.c or (2) magick/property.c in ImageMagick 6.7.5 and earlier allow remote attackers to cause a denial of service (memory corruption) and possibly execu…
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2012-1185
|
2024-11-21 10:36 |
2012-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292909
|
- |
|
libtiff
|
libtiff
|
Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the (1) gtTile…
|
CWE-189
Numeric Errors
|
CVE-2012-1173
|
2024-11-21 10:36 |
2012-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292910
|
- |
|
sebastian_heinlein canonical
|
aptdaemon ubuntu_linux
|
Aptdaemon 0.43 and earlier in Ubuntu 11.04, 11.10, and 12.04 LTS does not authenticate packages when the transaction is not simulated, which allows remote attackers to install arbitrary packages via …
|
CWE-287
Improper Authentication
|
CVE-2012-0944
|
2024-11-21 10:36 |
2012-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|