# CVEs published 2011-02-18

26 CVEs were published on February 18, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2010-4323](https://cve.now/CVE-2010-4323.md): Heap-based buffer overflow in novell-tftp.exe in Novell ZENworks Configuration Manager (ZCM) 10.3.1, 10.3.2, and 11.0, and earlier versions, (no CVSS)
- [CVE-2010-4328](https://cve.now/CVE-2010-4328.md): Multiple stack-based buffer overflows in opt/novell/iprint/bin/ipsmd in Novell iPrint for Linux Open Enterprise Server 2 SP2 and SP3 allow r (no CVSS)
- [CVE-2011-0013](https://cve.now/CVE-2011-0013.md): Multiple cross-site scripting (XSS) vulnerabilities in the HTML Manager Interface in Apache Tomcat 5.5 before 5.5.32, 6.0 before 6.0.30, and (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2011-0014](https://cve.now/CVE-2011-0014.md): ssl/t1\_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a denial of service (crash), and pos (no CVSS)
- [CVE-2011-0050](https://cve.now/CVE-2011-0050.md): Cross-site scripting (XSS) vulnerability in the nonjs interface (interfaces/nonjs.pm) in CGI:IRC before 0.5.10 allows remote attackers to in (no CVSS)
- [CVE-2011-0364](https://cve.now/CVE-2011-0364.md): The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary (no CVSS)
- [CVE-2011-0420](https://cve.now/CVE-2011-0420.md): The grapheme\_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5 allows context-dependent attackers to cause (no CVSS)
- [CVE-2011-0430](https://cve.now/CVE-2011-0430.md): Double free vulnerability in the Rx server process in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly other versions allows remote attackers to (no CVSS)
- [CVE-2011-0431](https://cve.now/CVE-2011-0431.md): The afs\_linux\_lock function in afs/LINUX/osi\_vnodeops.c in the kernel module in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly other versions d (no CVSS)
- [CVE-2011-0706](https://cve.now/CVE-2011-0706.md): The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in OpenJDK Runtime Environment 1.6.0, allows remote attackers to gain privile (no CVSS)
- [CVE-2011-0721](https://cve.now/CVE-2011-0721.md): Multiple CRLF injection vulnerabilities in (1) chfn and (2) chsh in shadow 1:4.1.4 allow local users to add new users or groups to /etc/pass (no CVSS)
- [CVE-2011-0724](https://cve.now/CVE-2011-0724.md): The Live DVD for Edubuntu 9.10, 10.04 LTS, and 10.10 does not correctly regenerate iTALC private keys after installation, which causes each (no CVSS)
- [CVE-2011-1000](https://cve.now/CVE-2011-1000.md): jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio an (no CVSS)
- [CVE-2011-1035](https://cve.now/CVE-2011-1035.md): The password reset in PivotX before 2.2.4 allows remote attackers to modify the passwords of arbitrary users via unspecified vectors. (no CVSS)
- [CVE-2010-4649](https://cve.now/CVE-2010-4649.md): Integer overflow in the ib\_uverbs\_poll\_cq function in drivers/infiniband/core/uverbs\_cmd.c in the Linux kernel before 2.6.37 allows local us (no CVSS)
- [CVE-2011-0709](https://cve.now/CVE-2011-0709.md): The br\_mdb\_ip\_get function in net/bridge/br\_multicast.c in the Linux kernel before 2.6.35-rc5 allows remote attackers to cause a denial of s (no CVSS)
- [CVE-2011-0710](https://cve.now/CVE-2011-0710.md): The task\_show\_regs function in arch/s390/kernel/traps.c in the Linux kernel before 2.6.38-rc4-next-20110216 on the s390 platform allows loca (no CVSS)
- [CVE-2011-0712](https://cve.now/CVE-2011-0712.md): Multiple buffer overflows in the caiaq Native Instruments USB audio functionality in the Linux kernel before 2.6.38-rc4-next-20110215 might (no CVSS)
- [CVE-2011-1044](https://cve.now/CVE-2011-1044.md): The ib\_uverbs\_poll\_cq function in drivers/infiniband/core/uverbs\_cmd.c in the Linux kernel before 2.6.37 does not initialize a certain respo (no CVSS)
- [CVE-2010-4743](https://cve.now/CVE-2010-4743.md): Heap-based buffer overflow in the getarena function in abc2ps.c in abcm2ps before 5.9.13 might allow remote attackers to execute arbitrary c (no CVSS)
- [CVE-2010-4744](https://cve.now/CVE-2010-4744.md): Multiple unspecified vulnerabilities in abcm2ps before 5.9.13 have unknown impact and attack vectors, a different issue than CVE-2010-3441. (no CVSS)
- [CVE-2010-4741](https://cve.now/CVE-2010-4741.md): Stack-based buffer overflow in MDMUtil.dll in MDMTool.exe in MDM Tool before 2.3 in Moxa Device Manager allows remote MDM Gateways to execut (no CVSS)
- [CVE-2010-4742](https://cve.now/CVE-2010-4742.md): Stack-based buffer overflow in a certain ActiveX control in MediaDBPlayback.DLL 2.2.0.5 in the Moxa ActiveX SDK allows remote attackers to e (no CVSS)
- [CVE-2010-3441](https://cve.now/CVE-2010-3441.md): Multiple buffer overflows in abcm2ps before 5.9.12 might allow remote attackers to execute arbitrary code via (1) a crafted input file, rela (no CVSS)
- [CVE-2011-0453](https://cve.now/CVE-2011-0453.md): F-Secure Internet Gatekeeper for Linux 3.x before 3.03 does not require authentication for reading access logs, which allows remote attacker (no CVSS)
- [CVE-2011-1042](https://cve.now/CVE-2011-1042.md): Use-after-free vulnerability in flimflamd in flimflam in Google Chrome OS before 0.9.130.14 Beta allows user-assisted remote attackers to ca (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-02-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.