# CVEs published 2011-10-27

11 CVEs were published on October 27, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-2569](https://cve.now/CVE-2011-2569.md): Cisco Nexus OS (aka NX-OS) 4.2 and 5.0 and Cisco Unified Computing System with software 1.4 and 2.0 do not properly restrict command-line op (no CVSS)
- [CVE-2011-3315](https://cve.now/CVE-2011-3315.md): Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x before 7.1(5b)SU2, and 8. (no CVSS)
- [CVE-2011-3318](https://cve.now/CVE-2011-3318.md): Cisco Video Surveillance 2421 and 2500 series cameras with software 1.1.x and 2.x before 2.4.0 and Video Surveillance 2600 series cameras wi (no CVSS)
- [CVE-2011-3319](https://cve.now/CVE-2011-3319.md): Buffer overflow in the WRF parsing functionality in the Cisco WebEx Recording Format (WRF) player T26 before SP49 EP40 and T27 before SP28 a (no CVSS)
- [CVE-2011-4004](https://cve.now/CVE-2011-4004.md): Buffer overflow in the ATAS32 processing functionality in the Cisco WebEx Recording Format (WRF) player T26 before SP49 EP40 and T27 before (no CVSS)
- [CVE-2011-3848](https://cve.now/CVE-2011-3848.md): Directory traversal vulnerability in Puppet 2.6.x before 2.6.10 and 2.7.x before 2.7.4 allows remote attackers to write X.509 Certificate Si (no CVSS)
- [CVE-2011-3869](https://cve.now/CVE-2011-3869.md): Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x allows local users to overwrite arbitrary files via a symlink attack on the .k5lo (no CVSS, puppet)
- [CVE-2011-3870](https://cve.now/CVE-2011-3870.md): Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x allows local users to modify the permissions of arbitrary files via a symlink att (no CVSS, puppet)
- [CVE-2011-3871](https://cve.now/CVE-2011-3871.md): Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x, when running in --edit mode, uses a predictable file name, which allows local us (no CVSS, puppet)
- [CVE-2011-3872](https://cve.now/CVE-2011-3872.md): Puppet 2.6.x before 2.6.12 and 2.7.x before 2.7.6, and Puppet Enterprise (PE) Users 1.0, 1.1, and 1.2 before 1.2.4, when signing an agent ce (no CVSS)
- [CVE-2011-4079](https://cve.now/CVE-2011-4079.md): Off-by-one error in the UTF8StringNormalize function in OpenLDAP 2.4.26 and earlier allows remote attackers to cause a denial of service (sl (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-10-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.