# CVEs published 2012-02-17

7 CVEs were published on February 17, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2011-4105](https://cve.now/CVE-2011-4105.md): LightDM before 1.0.6 allows local users to change ownership of arbitrary files via a symlink attack on ~/.Xauthority. (no CVSS)
- [CVE-2011-4113](https://cve.now/CVE-2011-4113.md): SQL injection vulnerability in the Views module before 6.x-2.13 for Drupal allows remote attackers to execute arbitrary SQL commands via vec (no CVSS)
- [CVE-2012-1191](https://cve.now/CVE-2012-1191.md): The resolver in dnscache in Daniel J. (no CVSS)
- [CVE-2012-1192](https://cve.now/CVE-2012-1192.md): The resolver in Unbound before 1.4.11 overwrites cached server names and TTL values in NS records during the processing of a response to an (no CVSS)
- [CVE-2012-1193](https://cve.now/CVE-2012-1193.md): The resolver in PowerDNS Recursor (aka pdns\_recursor) 3.3 overwrites cached server names and TTL values in NS records during the processing (no CVSS)
- [CVE-2012-1194](https://cve.now/CVE-2012-1194.md): The resolver in the DNS Server service in Microsoft Windows Server 2008 before R2 overwrites cached server names and TTL values in NS record (no CVSS)
- [CVE-2012-0206](https://cve.now/CVE-2012-0206.md): common\_startup.cc in PowerDNS (aka pdns) Authoritative Server before 2.9.22.5 and 3.x before 3.0.1 allows remote attackers to cause a denial (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-02-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.