OSVDB: Open Sourced Vulnerability Database

Creditee: Jason A. Donenfeld

Known Contact Information:

(as of 2012-08-11)

Known Affiliations:

None at this time

Disclosed Vulnerabilities (23):

Disc. Date	OSVDB ID	CVEID	Title
2013-05-18	93495	2013-2125	OpenSMTPD TLS Support Socket Exhaustion Remote DoS
2013-05-14	93406	2013-2100	Gentoo Linux Portage SSL Certificate Valdiation MitM Spoofing Weakness
2013-02-23	90665	2013-1767	Linux Kernel tmpfs mempolicy Object Handling Use-after-free Local Privilege Escalation
2012-12-24	88744	2012-6077	W3 Total Cache Plugin for WordPress Cache File Direct Request Remote Information Disclosure
2012-12-24	92741	2012-6078	W3 Total Cache Plugin for WordPress Predictable Hash Key Generation
2012-12-24	92742	2012-6079	W3 Total Cache Plugin for WordPress Hash Key Cached Database Value Disclosure
2012-10-28	86753	2012-4548	cgit syntax-highlighting.sh File Addition Highlight Command Arbitrary Command Injection
2012-08-12	84709	2012-4284	Viscosity setuid-set ViscosityHelper Binary Script Execution Symlink Local Privilege Escalation
2012-08-11	84704	2012-3483	Tunnelblick File Permission Checking Race Condition Local Privilege Escalation
2012-08-11	84702	2012-3485	Tunnelblick errorExitIfAttackViaString Path Verification Local DoS
2012-08-11	84703	2012-3487	Tunnelblick Race Condition Arbitrary Process Termination
2012-08-11	84705	2012-3484	Tunnelblick 0:0 744 Checking Local Privilege Escalation
2012-08-11	84707	2012-3486	Tunnelblick Insecure OpenVPN Configuration Local Privilege Escalation
2012-08-11	84706	2012-3485	Tunnelblick Path Name Verification Local Privilege Escalation
2012-08-11	85139	2012-4676	Tunnelblick errorExitIfAttackViaString Function Symlink Arbitrary File Deletion
2012-08-11	85138	2012-4677	Tunnelblick Crafted Info.plist File gOkIfNotSecure Value Manipulation Local Privilege Escalation
2011-11-02	76829		Calibre calibre-mount-helper Utility Arbitrary Directory / Mountpoint Manipulation
2011-11-02	76826		Calibre calibre-mount-helper Utility Arbitrary Empty Directory Deletion
2011-11-02	76827		Calibre calibre-mount-helper Utility created_by_calibre_mount_helper Arbitrary File Manipulation
2011-11-02	76828		Calibre calibre-mount-helper Utility PATH Environment Variable Arbitrary Application Execution
2011-11-02	76830		Calibre calibre-mount-helper Utility Multiple Race Condition Symlink Arbitrary Directory Mounting
2011-11-02	76825		Calibre calibre-mount-helper Utility Arbitrary Root Directory Creation
2011-11-02	76831		Calibre mount Utility Argument Injection

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.