CVE-2012-5526

CGI.pm module before 3.63 for Perl does not properly escape newlines in 1 Set-Cookie or 2 P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm...

CVE-2012-4537

Xen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p tables when the setp2mentry function fails, which allows local HVM guest OS administrators to cause a denial of service memory consumption and assertion failure, aka "Memory mapping failure DoS...

CVE-2012-4409

Stack-based buffer overflow in the checkfilehead function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to execute arbitrary code via an encrypted file with a crafted header containing long salt data that is not properly handled during decryption...

CVE-2012-3512

Munin before 2.0.6 stores plugin state files that run as root in the same group-writable directory as non-root plugins, which allows local users to execute arbitrary code by replacing a state file, as demonstrated using the smart plugin...

DEBIAN-CVE-2012-3513

munin-cgi-graph in Munin before 2.0.6, when running as a CGI module under Apache, allows remote attackers to load new configurations and create files in arbitrary directories via the logdir command...

CVE-2012-4426

Multiple format string vulnerabilities in mcrypt 2.6.8 and earlier might allow user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via vectors involving 1 errors.c or 2 mcrypt.c...

CVE-2012-3513

munin-cgi-graph in Munin before 2.0.6, when running as a CGI module under Apache, allows remote attackers to load new configurations and create files in arbitrary directories via the logdir command...

CVE-2012-3513

munin-cgi-graph in Munin before 2.0.6, when running as a CGI module under Apache, allows remote attackers to load new configurations and create files in arbitrary directories via the logdir command...

CVE-2012-4409

Stack-based buffer overflow in the checkfilehead function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to execute arbitrary code via an encrypted file with a crafted header containing long salt data that is not properly handled during decryption...

CVE-2012-4537

CVE-2012-4537 is a Xen memory DoS issue: when set_p2m_entry fails, Xen 3.4–4.2 may fail to synchronize p2m and m2p tables, enabling local HVM guests to cause memory consumption and assertion failures. The vulnerability is documented in Xen advisories (e.g., AXSA:2013-80:01) and related vendor adv...

CVE-2012-4535

CVE-2012-4535 affects Xen hypervisor (Xen 3.4 through 4.2, and possibly earlier) where a VCPU set with an inappropriate deadline can cause a denial of service via an infinite loop and excessive CPU use by local guest OS admins. Public documents in connected advisories (Xen/XSA entries and vendor ...

CVE-2012-3512

CVE-2012-3512 affects Munin (prior to 2.0.6). The vulnerability arises because plugin state files run as root and are stored in the same group-writable directory as non-root plugins, enabling a local attacker to replace a state file and execute arbitrary code (demonstrated with the smart_ plugin)...

CVE-2012-4409

The CVE-2012-4409 issue affects MCrypt, specifically mcrypt versions up to and including 2.6.8, due to a flaw in the check_file_head() function (extra.c). A crafted header with long salt data during decryption can trigger a stack-based buffer overflow, enabling a user-assisted remote attacker to ...

CVE-2012-4426

MCrypt before and including version 2.6.8 contains multiple format-string vulnerabilities (CVE-2012-4426) that may allow a remote attacker to cause a crash or possibly execute arbitrary code via errors.c or mcrypt.c. The issue is documented across multiple sources (NVD, Debian/Ubuntu advisories, ...

CVE-2012-4527

CVE-2012-4527: MCrypt (mcrypt) up to version 2.6.8 is affected by a stack-based buffer overflow when handling long file names, enabling a user-assisted remote attacker to crash the process or potentially execute arbitrary code. The issue is documented across multiple advisories (Gentoo GLSA 20140...

CVE-2012-5526

The CVE-2012-5526 issue affects the CGI.pm module for Perl, specifically CGI.pm before 3.63. It does not properly escape newlines in Set-Cookie and P3P headers, enabling remote header injection from applications using CGI.pm. Connected advisories (F5 K15867, SOL15867, ALAS-2013-177, and CentOS/RH...

CVE-2012-4536

Public technical details for CVE-2012-4536 are not present in the provided Connected documents. The materials reference Xen components and CVE identifiers but do not include affected versions, root cause specifics, exploit details, or remediation steps. Monitor for updates.

CVE-2012-4539

This CVE affects Xen hypervisor versions 4.0–4.2 when running 32-bit PV guests on 64-bit hosts. The vulnerability is triggered by invalid arguments to GNTTABOP_get_status_frames in the grant table hypercall, allowing a local guest OS administrator to cause a denial-of-service (infinite loop, hang...

CVE-2012-3513

CVE-2012-3513 affects Munin’s munin-cgi-graph when run as a CGI module under Apache; the logdir command allows remote attackers to load new configurations and create files in arbitrary directories. Affected versions are Munin prior to 2.0.6. The issue is part of a set of multiple Munin vulnerabil...

CVE-2012-3513

munin-cgi-graph in Munin before 2.0.6, when running as a CGI module under Apache, allows remote attackers to load new configurations and create files in arbitrary directories via the logdir command...