# CVEs published 2011-09-06

18 CVEs were published on September 6, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-3388](https://cve.now/CVE-2011-3388.md): Opera before 11.51 allows remote attackers to cause an insecure site to appear secure or trusted via unspecified actions related to Extended (no CVSS)
- [CVE-2011-3389](https://cve.now/CVE-2011-3389.md): The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Op (no CVSS)
- [CVE-2011-1771](https://cve.now/CVE-2011-1771.md): The cifs\_close function in fs/cifs/file.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service (NULL pointer de (no CVSS)
- [CVE-2011-1776](https://cve.now/CVE-2011-1776.md): The is\_gpt\_valid function in fs/partitions/efi.c in the Linux kernel before 2.6.39 does not check the size of an Extensible Firmware Interfa (no CVSS)
- [CVE-2011-2184](https://cve.now/CVE-2011-2184.md): The key\_replace\_session\_keyring function in security/keys/process\_keys.c in the Linux kernel before 2.6.39.1 does not initialize a certain s (no CVSS)
- [CVE-2011-2660](https://cve.now/CVE-2011-2660.md): The modify\_resolvconf\_suse script in the vpnc package before 0.5.1-55.10.1 in SUSE Linux Enterprise Desktop 11 SP1 might allow remote attack (no CVSS)
- [CVE-2011-2724](https://cve.now/CVE-2011-2724.md): The check\_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the (1) devi (no CVSS)
- [CVE-2011-3200](https://cve.now/CVE-2011-3200.md): Stack-based buffer overflow in the parseLegacySyslogMsg function in tools/syslogd.c in rsyslogd in rsyslog 4.6.x before 4.6.8 and 5.2.0 thro (no CVSS)
- [CVE-2011-3204](https://cve.now/CVE-2011-3204.md): hammerhead.cc in Hammerhead 2.1.4 allows local users to write to arbitrary files via a symlink attack on (1) /tmp/hammer.log (aka the HH\_LOG (no CVSS)
- [CVE-2010-4831](https://cve.now/CVE-2010-4831.md): Untrusted search path vulnerability in gdk/win32/gdkinput-win32.c in GTK+ before 2.21.8 allows local users to gain privileges via a Trojan h (no CVSS)
- [CVE-2010-4833](https://cve.now/CVE-2010-4833.md): Untrusted search path vulnerability in modules/engines/ms-windows/xp\_theme.c in GTK+ before 2.24.0 allows local users to gain privileges via (no CVSS)
- [CVE-2011-0258](https://cve.now/CVE-2011-0258.md): Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and (no CVSS)
- [CVE-2011-1359](https://cve.now/CVE-2011-1359.md): Directory traversal vulnerability in the administration console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41, 7.0 before 7. (no CVSS)
- [CVE-2011-2654](https://cve.now/CVE-2011-2654.md): The RPC implementation in the server in Novell Cloud Manager 1.1.2 before Patch 3 does not properly initialize objects, which allows remote (no CVSS)
- [CVE-2011-2700](https://cve.now/CVE-2011-2700.md): Multiple buffer overflows in the si4713\_write\_econtrol\_string function in drivers/media/radio/si4713-i2c.c in the Linux kernel before 2.6.39 (no CVSS)
- [CVE-2011-2723](https://cve.now/CVE-2011-2723.md): The skb\_gro\_header\_slow function in include/linux/netdevice.h in the Linux kernel before 2.6.39.4, when Generic Receive Offload (GRO) is ena (no CVSS)
- [CVE-2011-3205](https://cve.now/CVE-2011-3205.md): Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, an (no CVSS)
- [CVE-2011-3390](https://cve.now/CVE-2011-3390.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in IBM OpenAdmin Tool (OAT) before 2.72 for Informix allow remote attackers (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-09-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.