# CVEs published 2011-03-31

9 CVEs were published on March 31, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-1552](https://cve.now/CVE-2011-1552.md): t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote (no CVSS)
- [CVE-2011-1553](https://cve.now/CVE-2011-1553.md): Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers (no CVSS)
- [CVE-2011-1554](https://cve.now/CVE-2011-1554.md): Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a d (no CVSS)
- [CVE-2010-3695](https://cve.now/CVE-2010-3695.md): Cross-site scripting (XSS) vulnerability in fetchmailprefs.php in Horde IMP before 4.3.8, and Horde Groupware Webmail Edition before 1.2.7, (no CVSS)
- [CVE-2011-0727](https://cve.now/CVE-2011-0727.md): GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dm (no CVSS)
- [CVE-2011-0764](https://cve.now/CVE-2011-0764.md): t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereferenc (no CVSS)
- [CVE-2011-0963](https://cve.now/CVE-2011-0963.md): The default configuration of the RADIUS authentication feature on the Cisco Network Admission Control (NAC) Guest Server with software befor (no CVSS)
- [CVE-2011-1174](https://cve.now/CVE-2011-1174.md): manager.c in Asterisk Open Source 1.6.1.x before 1.6.1.24, 1.6.2.x before 1.6.2.17.2, and 1.8.x before 1.8.3.2 allows remote attackers to ca (no CVSS)
- [CVE-2011-1175](https://cve.now/CVE-2011-1175.md): tcptls.c in the TCP/TLS server in Asterisk Open Source 1.6.1.x before 1.6.1.23, 1.6.2.x before 1.6.2.17.1, and 1.8.x before 1.8.3.1 allows r (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-03-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
