# CVEs published 2014-02-15

20 CVEs were published on February 15, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2011-1831](https://cve.now/CVE-2011-1831.md): utils/mount.ecryptfs\_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to… (no CVSS)
- [CVE-2011-1832](https://cve.now/CVE-2011-1832.md): utils/mount.ecryptfs\_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to… (no CVSS)
- [CVE-2011-1834](https://cve.now/CVE-2011-1834.md): utils/mount.ecryptfs\_private.c in ecryptfs-utils before 90 does not properly maintain the mtab file during error conditions, which allows… (no CVSS)
- [CVE-2011-1835](https://cve.now/CVE-2011-1835.md): The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does not properly ensure that… (no CVSS)
- [CVE-2011-1836](https://cve.now/CVE-2011-1836.md): utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permissions, which might allow… (no CVSS)
- [CVE-2011-1837](https://cve.now/CVE-2011-1837.md): The lock-counter implementation in utils/mount.ecryptfs\_private.c in ecryptfs-utils before 90 allows local users to overwrite arbitrary… (no CVSS)
- [CVE-2011-2500](https://cve.now/CVE-2011-2500.md): The host\_reliable\_addrinfo function in support/export/hostname.c in nfs-utils before 1.2.4 does not properly use DNS to verify access to… (no CVSS)
- [CVE-2011-2909](https://cve.now/CVE-2011-2909.md): The do\_devinfo\_ioctl function in drivers/staging/comedi/comedi\_fops.c in the Linux kernel before 3.1 allows local users to obtain… (no CVSS)
- [CVE-2011-3588](https://cve.now/CVE-2011-3588.md): The SSH configuration in the Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x… (no CVSS)
- [CVE-2011-3589](https://cve.now/CVE-2011-3589.md): The Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages… (no CVSS)
- [CVE-2011-3590](https://cve.now/CVE-2011-3590.md): The Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages… (no CVSS)
- [CVE-2012-1088](https://cve.now/CVE-2012-1088.md): iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by (1) configure or… (no CVSS)
- [CVE-2012-1171](https://cve.now/CVE-2012-1171.md): The libxml RSHUTDOWN function in PHP 5.x allows remote attackers to bypass the open\_basedir protection mechanism and read arbitrary files… (no CVSS)
- [CVE-2012-2663](https://cve.now/CVE-2012-2663.md): extensions/libxt\_tcp.c in iptables through 1.4.21 does not match TCP SYN+FIN packets in --syn rules, which might allow remote attackers to… (no CVSS)
- [CVE-2012-6108](https://cve.now/CVE-2012-6108.md): HP Linux Imaging and Printing (HPLIP) before 3.13.2 uses world-writable permissions for /var/log/hp and /var/log/hp/tmp, which allows… (no CVSS)
- [CVE-2012-6638](https://cve.now/CVE-2012-6638.md): The tcp\_rcv\_state\_process function in net/ipv4/tcp\_input.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2013-4737](https://cve.now/CVE-2013-4737.md): The CONFIG\_STRICT\_MEMORY\_RWX implementation for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions… (no CVSS)
- [CVE-2013-6166](https://cve.now/CVE-2013-6166.md): Google Chrome before 29 sends HTTP Cookie headers without first validating that they have the required character-set restrictions, which… (no CVSS)
- [CVE-2013-6167](https://cve.now/CVE-2013-6167.md): Mozilla Firefox through 27 sends HTTP Cookie headers without first validating that they have the required character-set restrictions… (no CVSS)
- [CVE-2013-0346](https://cve.now/CVE-2013-0346.md): Apache Tomcat 7.x uses world-readable permissions for the log directory and its files, which might allow local users to obtain sensitive… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2014-02-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.