28619 matches found
CVE-2012-5644
libuser has information disclosure when moving user's home directory...
CVE-2012-5631
ipa 3.0 does not properly check server identity before sending credential containing cookies...
CVE-2012-5644
CVE-2012-5644 : The libuser component has an information disclosure vulnerability when moving a user’s home directory. The issue is confirmed across multiple feeds (NVD entry and downstream advisories/OpenVAS/Nessus references) and is described as enabling unauthorized access to confidential data...
CVE-2012-5644
libuser has information disclosure when moving user's home directory...
CVE-2012-5644
libuser has information disclosure when moving user's home directory...
CVE-2012-5640
CVE-2012-5640 affects thttpd,; local DoS via specially crafted .htpasswd files. The OSV openSUSE entry notes a fix in thttpd-2.26-4.7 for GA media; other connected entries reiterate the local DoS vector. Exploitation status is not detailed in the provided documents. Monitor for updated advisories...
CVE-2012-5640
thttpd has a local DoS vulnerability via specially-crafted .htpasswd files...
CVE-2012-5582
opendnssec misuses libcurl API...
CVE-2012-5617
gksu-polkit: permissive PolicyKit policy configuration file allows privilege escalation...
CVE-2012-5521
quagga ospf6d 0.99.21 has a DoS flaw in the way the ospf6d daemon performs routes removal...
CVE-2012-5535
gnome-system-log polkit policy allows arbitrary files on the system to be read...
CVE-2012-5527
Claws Mail vCalendar plugin: credentials exposed on interface...
CVE-2012-5630
libuser 0.56 and 0.57 has a TOCTOU time-of-check time-of-use race condition when copying and removing directory trees...
CVE-2012-5535
gnome-system-log polkit policy allows arbitrary files on the system to be read...
CVE-2012-5582
opendnssec misuses libcurl API...
CVE-2012-5631
ipa 3.0 does not properly check server identity before sending credential containing cookies...
CVE-2012-5631
CVE-2012-5631 affects IPA 3.0 where the client fails to properly verify the server identity before sending a credential-containing cookie. Root cause is improper server identity checking on the client side, enabling potential exposure or manipulation of authentication cookies. The impact, as refl...
CVE-2012-5630
CVE-2012-5630 affects libuser versions 0.56 and 0.57 and describes a TOCTOU race condition during copying and removing directory trees. The vulnerability is indexed as a local issue with potential partial integrity/availability impact per CVSS data (local access, medium to high impact in some met...
CVE-2012-5617
Technical details about CVE-2012-5617, including affected products, root cause, and remediation, are not provided in the supplied documents. Monitor updates from vendors and security advisories for confirmed impact and fixes.