Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

canonical ubuntu linux 11.04 vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2
CVE-2011-2725
Directory traversal vulnerability in Ark 4.7.x and previous versions allows remote malicious users to delete and force the display of arbitrary files via .. (dot dot) sequences in a zip file.
Kde Kde Sc 4.7.1Kde Kde Sc 4.7.2Kde Kde Sc 4.7.3Kde Kde ScKde ArkKde Kde Sc 4.7.0Opensuse Opensuse 11.4Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 11.04Canonical Ubuntu Linux 10.10Canonical Ubuntu Linux 11.10
2.6
CVSSv2
CVE-2011-3634
methods/https.cc in apt prior to 0.8.11 accepts connections when the certificate host name fails validation and Verify-Host is enabled, which allows man-in-the-middle malicious users to obtain repository credentials via unspecified vectors.
Canonical Ubuntu Linux 10.10Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 11.04Canonical Ubuntu Linux 10.04Debian Advanced Package Tool 0.8.0Debian Advanced Package Tool 0.8.1Debian Advanced Package Tool 0.8.10Debian Advanced Package Tool 0.8.10.1Debian Advanced Package Tool 0.8.10.2Debian Advanced Package Tool
6.1
CVSSv2
CVE-2012-3571
ISC DHCP 4.1.2 up to and including 4.2.4 and 4.1-ESV prior to 4.1-ESV-R6 allows remote malicious users to cause a denial of service (infinite loop and CPU consumption) via a malformed client identifier.
Isc Dhcp 4.1.2Isc Dhcp 4.2.0Isc Dhcp 4.2.1Isc Dhcp 4.2.2Isc Dhcp 4.2.3Isc Dhcp 4.2.4Isc Dhcp 4.1-esvCanonical Ubuntu Linux 11.04Canonical Ubuntu Linux 11.10Canonical Ubuntu Linux 12.04Debian Debian Linux 6.0Debian Debian Linux 7.0
6
CVSSv2
CVE-2012-1988
Puppet 2.6.x prior to 2.6.15 and 2.7.x prior to 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x prior to 2.5.1 allows remote authenticated users with agent SSL keys and file-creation permissions on the puppet master to execute arbitrary commands by crea...
Puppet PuppetPuppet Puppet Enterprise 1.0Puppet Puppet Enterprise 1.1Puppet Puppet EnterpriseFedoraproject Fedora 17Fedoraproject Fedora 16Fedoraproject Fedora 15Debian Debian Linux 7.0Debian Debian Linux 6.0Canonical Ubuntu Linux 11.04Canonical Ubuntu Linux 11.10Canonical Ubuntu Linux 10.04
6.8
CVSSv2
CVE-2011-4516
Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote malicious users to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a coding style default (COD) marker...
Jasper Project Jasper 1.900.1Suse Linux Enterprise Server 11Fedoraproject Fedora 16Canonical Ubuntu Linux 10.10Suse Linux Enterprise Desktop 11Canonical Ubuntu Linux 11.04Canonical Ubuntu Linux 11.10Debian Debian Linux 6.0Fedoraproject Fedora 15Canonical Ubuntu Linux 10.04Suse Linux Enterprise Software Development Kit 11Oracle Outside In Technology 8.3.5Oracle Outside In Technology 8.3.7
9.3
CVSSv2
CVE-2012-4181
Use-after-free vulnerability in the nsSMILAnimationController::DoSample function in Mozilla Firefox prior to 16.0, Firefox ESR 10.x prior to 10.0.8, Thunderbird prior to 16.0, Thunderbird ESR 10.x prior to 10.0.8, and SeaMonkey prior to 2.13 allows remote malicious users to execu...
Mozilla Firefox EsrMozilla Thunderbird EsrMozilla FirefoxMozilla ThunderbirdMozilla SeamonkeyCanonical Ubuntu Linux 10.04Canonical Ubuntu Linux 11.04Canonical Ubuntu Linux 11.10Canonical Ubuntu Linux 12.04Redhat Enterprise Linux Desktop 5.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Eus 6.3Redhat Enterprise Linux Server 5.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 5.0Redhat Enterprise Linux Workstation 6.0
6.8
CVSSv2
CVE-2011-4517
The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote malicious users to trigger a heap-based buffer overflow and execute arbitrary code, or cause a denial of service (heap memo...
Jasper Project Jasper 1.900.1Suse Linux Enterprise Server 11Fedoraproject Fedora 16Canonical Ubuntu Linux 10.10Suse Linux Enterprise Desktop 11Canonical Ubuntu Linux 11.04Canonical Ubuntu Linux 11.10Debian Debian Linux 6.0Fedoraproject Fedora 15Canonical Ubuntu Linux 10.04Suse Linux Enterprise Software Development Kit 11Oracle Outside In Technology 8.3.5Oracle Outside In Technology 8.3.7Redhat Enterprise Linux Desktop 4
3.3
CVSSv2
CVE-2012-3954
Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x prior to 4.2.4-P1 and 4.1-ESV prior to 4.1-ESV-R6 allow remote malicious users to cause a denial of service (memory consumption) by sending many requests.
Isc Dhcp 4.1.0Isc Dhcp 4.1.1Isc Dhcp 4.1.2Isc Dhcp 4.2.0Isc Dhcp 4.2.1Isc Dhcp 4.2.2Isc Dhcp 4.2.3Isc Dhcp 4.2.4Isc Dhcp 4.1-esvDebian Debian Linux 6.0Debian Debian Linux 7.0Canonical Ubuntu Linux 11.04Canonical Ubuntu Linux 11.10Canonical Ubuntu Linux 12.04
10
CVSSv2
CVE-2012-0444
Mozilla Firefox prior to 3.6.26 and 4.x up to and including 9.0, Thunderbird prior to 3.1.18 and 5.0 up to and including 9.0, and SeaMonkey prior to 2.7 do not properly initialize nsChildView data structures, which allows remote malicious users to cause a denial of service (memor...
Mozilla FirefoxMozilla SeamonkeyMozilla ThunderbirdDebian Debian Linux 5.0Debian Debian Linux 6.0Opensuse Opensuse 11.4Suse Linux Enterprise Desktop 10Suse Linux Enterprise Desktop 11Suse Linux Enterprise Server 10Suse Linux Enterprise Server 11Suse Linux Enterprise Software Development Kit 10Suse Linux Enterprise Software Development Kit 11Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 10.10Canonical Ubuntu Linux 11.04Canonical Ubuntu Linux 11.10
4.3
CVSSv2
CVE-2011-3377
The web browser plug-in in IcedTea-Web 1.0.x prior to 1.0.6 and 1.1.x prior to 1.1.4 allows remote malicious users to bypass the Same Origin Policy (SOP) and execute arbitrary script or establish network connections to unintended hosts via an applet whose origin has the same seco...
Redhat Icedtea-web 1.1Redhat Icedtea-web 1.1.1Redhat Icedtea-web 1.1.2Redhat Icedtea-web 1.1.3Redhat Icedtea-web 1.0Redhat Icedtea-web 1.0.5Redhat Icedtea-web 1.0.2Redhat Icedtea-web 1.0.4Redhat Icedtea-web 1.0.1Redhat Icedtea-web 1.0.3Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 10.10Canonical Ubuntu Linux 11.04Opensuse Opensuse 12.1Canonical Ubuntu Linux 11.10
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-3675CVE-2024-3400CVE-2024-23557mass assignmentCVE-2023-1389local file inclusionCVE-2024-32596file uploadCVE-2024-32593
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook