28054 matches found
CVE-2012-2248
CVE-2012-2248 affects dhclient 4.3.1-6 due to an embedded path variable, described across multiple sources as a path traversal issue. The available connected documents consistently identify the problem as a vulnerability in the dhclient component, but do not provide concrete exploitation steps, a...
CVE-2012-6655
CVE-2012-6655 affects AccountService (accountsservice) 0.6.37, where a flaw in the user_change_password_authorized_cb() function in user.c could allow a local user to obtain encrypted passwords. The connected records confirm the vulnerable component and the root cause, but do not provide a vendor...
DEBIAN-CVE-2012-6639
An privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an untrusted system are submitted for EC2 instance data...
CVE-2012-6639
An privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an untrusted system are submitted for EC2 instance data...
CVE-2012-6639
CVE-2012-6639 describes a privilege-elevation vulnerability in Cloud-init prior to 0.7.0. The issue occurs when requests to an untrusted system are made for EC2 instance data, allowing an attacker with network access to leverage low-privileged execution to gain higher privileges. The available co...
CVE-2012-5631
ipa 3.0 does not properly check server identity before sending credential containing cookies...
CVE-2012-5644
libuser has information disclosure when moving user's home directory...
CVE-2012-5644
libuser has information disclosure when moving user's home directory...
CVE-2012-5644
libuser has information disclosure when moving user's home directory...
CVE-2012-5644
CVE-2012-5644 : The libuser component has an information disclosure vulnerability when moving a user’s home directory. The issue is confirmed across multiple feeds (NVD entry and downstream advisories/OpenVAS/Nessus references) and is described as enabling unauthorized access to confidential data...
CVE-2012-5640
thttpd has a local DoS vulnerability via specially-crafted .htpasswd files...
CVE-2012-5640
CVE-2012-5640 affects thttpd,; local DoS via specially crafted .htpasswd files. The OSV openSUSE entry notes a fix in thttpd-2.26-4.7 for GA media; other connected entries reiterate the local DoS vector. Exploitation status is not detailed in the provided documents. Monitor for updated advisories...
CVE-2012-5535
gnome-system-log polkit policy allows arbitrary files on the system to be read...
CVE-2012-5617
gksu-polkit: permissive PolicyKit policy configuration file allows privilege escalation...
CVE-2012-5521
quagga ospf6d 0.99.21 has a DoS flaw in the way the ospf6d daemon performs routes removal...
CVE-2012-5582
opendnssec misuses libcurl API...
CVE-2012-5630
libuser 0.56 and 0.57 has a TOCTOU time-of-check time-of-use race condition when copying and removing directory trees...
CVE-2012-5527
Claws Mail vCalendar plugin: credentials exposed on interface...