Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-1425
HistoryApr 04, 2011 - 12:00 a.m.

CVE-2011-1425

2011-04-0400:00:00
ubuntu.com
ubuntu.com
15

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

85.4%

xslt.c in XML Security Library (aka xmlsec) before 1.2.17, as used in
WebKit and other products, when XSLT is enabled, allows remote attackers to
create or overwrite arbitrary files via vectors involving the libxslt
output extension and a ds:Transform element during signature verification.

OSVersionArchitecturePackageVersionFilename
ubuntu10.10noarchxmlsec1< 1.2.14-1+squeeze1build0.10.10.1UNKNOWN
ubuntu11.04noarchxmlsec1< 1.2.14-1+squeeze1build0.11.04.1UNKNOWN

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

85.4%