# CVEs published 2011-08-29

37 CVEs were published on August 29, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-1769](https://cve.now/CVE-2011-1769.md): SystemTap 1.4 and earlier, when unprivileged (aka stapusr) mode is enabled, allows local users to cause a denial of service (divide-by-zero (no CVSS)
- [CVE-2011-1781](https://cve.now/CVE-2011-1781.md): SystemTap 1.4, when unprivileged (aka stapusr) mode is enabled, allows local users to cause a denial of service (divide-by-zero error and OO (no CVSS)
- [CVE-2011-0228](https://cve.now/CVE-2011-0228.md): The Data Security component in Apple iOS before 4.2.10 and 4.3.x before 4.3.5 does not check the basicConstraints parameter during validatio (no CVSS)
- [CVE-2011-2555](https://cve.now/CVE-2011-2555.md): Cisco TelePresence Recording Server 1.7.2.x before 1.7.2.1 has a default password for the root administrator account, which makes it easier (no CVSS)
- [CVE-2011-2213](https://cve.now/CVE-2011-2213.md): The inet\_diag\_bc\_audit function in net/ipv4/inet\_diag.c in the Linux kernel before 2.6.39.3 does not properly audit INET\_DIAG bytecode, whic (no CVSS)
- [CVE-2011-2497](https://cve.now/CVE-2011-2497.md): Integer underflow in the l2cap\_config\_req function in net/bluetooth/l2cap\_core.c in the Linux kernel before 3.0 allows remote attackers to c (no CVSS)
- [CVE-2011-2929](https://cve.now/CVE-2011-2929.md): The template selection functionality in actionpack/lib/action\_view/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.10 and 3.1.x befor (no CVSS, actionpack)
- [CVE-2011-2930](https://cve.now/CVE-2011-2930.md): Multiple SQL injection vulnerabilities in the quote\_table\_name method in the ActiveRecord adapters in activerecord/lib/active\_record/connect (no CVSS, activerecord)
- [CVE-2011-2931](https://cve.now/CVE-2011-2931.md): Cross-site scripting (XSS) vulnerability in the strip\_tags helper in actionpack/lib/action\_controller/vendor/html-scanner/html/node.rb in Ru (no CVSS, actionpack)
- [CVE-2011-2932](https://cve.now/CVE-2011-2932.md): Cross-site scripting (XSS) vulnerability in activesupport/lib/active\_support/core\_ext/string/output\_safety.rb in Ruby on Rails 2.x before 2. (no CVSS, activesupport)
- [CVE-2011-3186](https://cve.now/CVE-2011-3186.md): CRLF injection vulnerability in actionpack/lib/action\_controller/response.rb in Ruby on Rails 2.3.x before 2.3.13 allows remote attackers to (no CVSS, actionpack)
- [CVE-2011-3187](https://cve.now/CVE-2011-3187.md): The to\_s method in actionpack/lib/action\_dispatch/middleware/remote\_ip.rb in Ruby on Rails 3.0.5 does not validate the X-Forwarded-For heade (no CVSS, actionpack)
- [CVE-2011-2928](https://cve.now/CVE-2011-2928.md): The befs\_follow\_link function in fs/befs/linuxvfs.c in the Linux kernel before 3.1-rc3 does not validate the length attribute of long symlin (no CVSS)
- [CVE-2011-2943](https://cve.now/CVE-2011-2943.md): The irc\_msg\_who function in msgs.c in the IRC protocol plugin in libpurple 2.8.0 through 2.9.0 in Pidgin before 2.10.0 does not properly val (no CVSS)
- [CVE-2011-3181](https://cve.now/CVE-2011-3181.md): Multiple cross-site scripting (XSS) vulnerabilities in the Tracking feature in phpMyAdmin 3.3.x before 3.3.10.4 and 3.4.x before 3.4.4 allow (no CVSS)
- [CVE-2011-3184](https://cve.now/CVE-2011-3184.md): The msn\_httpconn\_parse\_data function in httpconn.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.0 does not properly handle (no CVSS)
- [CVE-2011-3185](https://cve.now/CVE-2011-3185.md): gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute arbitrary programs via a file: URL in a messa (no CVSS)
- [CVE-2011-1643](https://cve.now/CVE-2011-1643.md): Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x, 7.x before 7.1(5b)su4, 8.0, and 8.5 before 8.5(1)su2 and Cisco Un (no CVSS)
- [CVE-2011-2560](https://cve.now/CVE-2011-2560.md): The Packet Capture Service in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x does not properly handle idle TCP co (no CVSS)
- [CVE-2011-2561](https://cve.now/CVE-2011-2561.md): The SIP process in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7.x before 7.1(5b)su4 and 8.x before 8.0(1) does no (no CVSS)
- [CVE-2011-2562](https://cve.now/CVE-2011-2562.md): Unspecified vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su2, 7.x before 7.1(5b)s (no CVSS)
- [CVE-2011-2563](https://cve.now/CVE-2011-2563.md): Unspecified vulnerability in the Service Advertisement Framework (SAF) in Cisco Unified Communications Manager (aka CUCM, formerly CallManag (no CVSS)
- [CVE-2011-2564](https://cve.now/CVE-2011-2564.md): Unspecified vulnerability in the Service Advertisement Framework (SAF) in Cisco Unified Communications Manager (aka CUCM, formerly CallManag (no CVSS)
- [CVE-2011-2712](https://cve.now/CVE-2011-2712.md): Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.18, when setAutomaticMultiWindowSupport is enabled, allows remote (no CVSS)
- [CVE-2011-2746](https://cve.now/CVE-2011-2746.md): Unspecified vulnerability in Kernel/Modules/AdminPackageManager.pm in OTRS-Core in Open Ticket Request System (OTRS) 2.x before 2.4.11 and 3 (no CVSS)
- [CVE-2011-2806](https://cve.now/CVE-2011-2806.md): Google Chrome before 13.0.782.215 on Windows does not properly handle vertex data, which allows remote attackers to execute arbitrary code o (no CVSS)
- [CVE-2011-2821](https://cve.now/CVE-2011-2821.md): Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or (no CVSS)
- [CVE-2011-2822](https://cve.now/CVE-2011-2822.md): Google Chrome before 13.0.782.215 on Windows does not properly parse URLs located on the command line, which has unspecified impact and atta (no CVSS)
- [CVE-2011-2823](https://cve.now/CVE-2011-2823.md): Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unsp (no CVSS)
- [CVE-2011-2824](https://cve.now/CVE-2011-2824.md): Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unsp (no CVSS)
- [CVE-2011-2825](https://cve.now/CVE-2011-2825.md): Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unsp (no CVSS)
- [CVE-2011-2826](https://cve.now/CVE-2011-2826.md): Google Chrome before 13.0.782.215 allows remote attackers to bypass the Same Origin Policy via vectors related to empty origins. (no CVSS)
- [CVE-2011-2827](https://cve.now/CVE-2011-2827.md): Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unsp (no CVSS)
- [CVE-2011-2828](https://cve.now/CVE-2011-2828.md): Google V8, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified o (no CVSS)
- [CVE-2011-2829](https://cve.now/CVE-2011-2829.md): Integer overflow in Google Chrome before 13.0.782.215 on 32-bit platforms allows remote attackers to cause a denial of service or possibly h (no CVSS)
- [CVE-2011-2839](https://cve.now/CVE-2011-2839.md): The PDF implementation in Google Chrome before 13.0.782.215 on Linux does not properly use the memset library function, which allows remote (no CVSS)
- [CVE-2011-3192](https://cve.now/CVE-2011-3192.md): The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a deni (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-08-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.