# CVEs published 2010-10-12

16 CVEs were published on October 12, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2009-5007](https://cve.now/CVE-2009-5007.md): The Cisco trial client on Linux for Cisco AnyConnect SSL VPN allows local users to overwrite arbitrary files via a symlink attack on unspeci (no CVSS)
- [CVE-2009-5008](https://cve.now/CVE-2009-5008.md): Cisco Secure Desktop (CSD), when used in conjunction with an AnyConnect SSL VPN server, does not properly perform verification, which allows (no CVSS)
- [CVE-2009-5009](https://cve.now/CVE-2009-5009.md): Double free vulnerability in OpenConnect before 1.40 might allow remote AnyConnect SSL VPN servers to cause a denial of service (application (no CVSS)
- [CVE-2010-3071](https://cve.now/CVE-2010-3071.md): bip before 0.8.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an empty USER command. (no CVSS)
- [CVE-2010-3076](https://cve.now/CVE-2010-3076.md): The filter function in php/src/include.php in Simple Management for BIND (aka smbind) before 0.4.8 does not anchor a certain regular express (no CVSS)
- [CVE-2010-3192](https://cve.now/CVE-2010-3192.md): Certain run-time memory protection mechanisms in the GNU C Library (aka glibc or libc6) print argv\[0\] and backtrace information, which might (no CVSS)
- [CVE-2010-3312](https://cve.now/CVE-2010-3312.md): Epiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock icon for any URL beginning with the https: (no CVSS)
- [CVE-2010-3900](https://cve.now/CVE-2010-3900.md): Midori before 0.2.5, when WebKitGTK+ before 1.1.14 or LibSoup before 2.29.91 is used, does not verify X.509 certificates, which allows man-i (no CVSS)
- [CVE-2010-3901](https://cve.now/CVE-2010-3901.md): OpenConnect before 2.25 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary AnyConnec (no CVSS)
- [CVE-2010-3902](https://cve.now/CVE-2010-3902.md): OpenConnect before 2.26 places the webvpn cookie value in the debugging output, which might allow remote attackers to obtain sensitive infor (no CVSS)
- [CVE-2010-3903](https://cve.now/CVE-2010-3903.md): Unspecified vulnerability in OpenConnect before 2.23 allows remote AnyConnect SSL VPN servers to cause a denial of service (application cras (no CVSS)
- [CVE-2010-2951](https://cve.now/CVE-2010-2951.md): dns\_internal.cc in Squid 3.1.6, when IPv6 DNS resolution is not enabled, accesses an invalid socket during an IPv4 TCP DNS query, which allo (no CVSS)
- [CVE-2010-3083](https://cve.now/CVE-2010-3083.md): sys/ssl/SslSocket.cpp in qpidd in Apache Qpid, as used in Red Hat Enterprise MRG before 1.2.2 and other products, when SSL is enabled, allow (no CVSS)
- [CVE-2010-3085](https://cve.now/CVE-2010-3085.md): The network-play implementation in Mednafen before 0.8.D might allow remote servers to execute arbitrary code via unspecified vectors, relat (no CVSS)
- [CVE-2010-3701](https://cve.now/CVE-2010-3701.md): lib/MessageStoreImpl.cpp in Red Hat Enterprise MRG before 1.2.2 allows remote authenticated users to cause a denial of service (stack memory (no CVSS)
- [CVE-2010-3110](https://cve.now/CVE-2010-3110.md): Multiple buffer overflows in the Novell Client novfs module for the Linux kernel in SUSE Linux Enterprise 11 SP1 and openSUSE 11.3 allow loc (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-10-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.