# CVEs published 2011-05-24

13 CVEs were published on May 24, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-0418](https://cve.now/CVE-2011-0418.md): The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not properly expand expressions containing curly bracket (no CVSS)
- [CVE-2011-1328](https://cve.now/CVE-2011-1328.md): SQL injection vulnerability in RADVISION iVIEW Suite before 7.5 allows remote attackers to execute arbitrary SQL commands via unspecified ve (no CVSS)
- [CVE-2011-1424](https://cve.now/CVE-2011-1424.md): The default configuration of ExShortcut\\Web.config in EMC SourceOne Email Management before 6.6 SP1, when the Mobile Services component is u (no CVSS)
- [CVE-2011-1521](https://cve.now/CVE-2011-1521.md): The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: UR (no CVSS)
- [CVE-2011-1595](https://cve.now/CVE-2011-1595.md): Directory traversal vulnerability in the disk\_create function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows r (no CVSS)
- [CVE-2011-1928](https://cve.now/CVE-2011-1928.md): The fnmatch implementation in apr\_fnmatch.c in the Apache Portable Runtime (APR) library 1.4.3 and 1.4.4, and the Apache HTTP Server 2.2.18, (no CVSS)
- [CVE-2011-1929](https://cve.now/CVE-2011-1929.md): lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '\\0' characters in header n (no CVSS)
- [CVE-2011-2166](https://cve.now/CVE-2011-2166.md): script-login in Dovecot 2.0.x before 2.0.13 does not follow the user and group configuration settings, which might allow remote authenticate (no CVSS)
- [CVE-2011-2167](https://cve.now/CVE-2011-2167.md): script-login in Dovecot 2.0.x before 2.0.13 does not follow the chroot configuration setting, which might allow remote authenticated users t (no CVSS)
- [CVE-2011-2168](https://cve.now/CVE-2011-2168.md): Multiple integer overflows in the glob implementation in libc in OpenBSD before 4.9 might allow context-dependent attackers to have an unspe (no CVSS)
- [CVE-2011-2169](https://cve.now/CVE-2011-2169.md): Google Chrome OS before R12 0.12.433.38 Beta allows local users to gain privileges by creating a /var/lib/chromeos-aliases.conf file and pla (no CVSS)
- [CVE-2011-2170](https://cve.now/CVE-2011-2170.md): Google Chrome OS before R12 0.12.433.38 Beta, when Guest mode is enabled, does not prevent changes on the about:flags page, which has unspec (no CVSS)
- [CVE-2011-2171](https://cve.now/CVE-2011-2171.md): Unspecified vulnerability in the dbugs package in Google Chrome OS before R12 0.12.433.38 Beta has unknown impact and attack vectors. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-05-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.