# CVEs published 2013-03-01 19 CVEs were published on March 1, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2011-1019](https://cve.now/CVE-2011-1019.md): The dev\_load function in net/core/dev.c in the Linux kernel before 2.6.38 allows local users to bypass an intended CAP\_SYS\_MODULE capability (no CVSS) - [CVE-2011-1182](https://cve.now/CVE-2011-1182.md): kernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system c (no CVSS) - [CVE-2011-2479](https://cve.now/CVE-2011-2479.md): The Linux kernel before 2.6.39 does not properly create transparent huge pages in response to a MAP\_PRIVATE mmap system call on /dev/zero, w (no CVSS) - [CVE-2011-2491](https://cve.now/CVE-2011-2491.md): The Network Lock Manager (NLM) protocol implementation in the NFS client functionality in the Linux kernel before 3.0 allows local users to (no CVSS) - [CVE-2011-2905](https://cve.now/CVE-2011-2905.md): Untrusted search path vulnerability in the perf\_config function in tools/perf/util/config.c in perf, as distributed in the Linux kernel befo (no CVSS) - [CVE-2011-3638](https://cve.now/CVE-2011-3638.md): fs/ext4/extents.c in the Linux kernel before 3.0 does not mark a modified extent as dirty in certain cases of extent splitting, which allows (no CVSS) - [CVE-2013-0228](https://cve.now/CVE-2013-0228.md): The xen\_iret function in arch/x86/xen/xen-asm\_32.S in the Linux kernel before 3.7.9 on 32-bit Xen paravirt\_ops platforms does not properly h (no CVSS) - [CVE-2012-1568](https://cve.now/CVE-2012-1568.md): The ExecShield feature in a certain Red Hat patch for the Linux kernel in Red Hat Enterprise Linux (RHEL) 5 and 6 and Fedora 15 and 16 does (no CVSS) - [CVE-2012-5561](https://cve.now/CVE-2012-5561.md): script/katello-generate-passphrase in Katello 1.1 uses world-readable permissions for /etc/katello/secure/passphrase, which allows local use (no CVSS) - [CVE-2012-5604](https://cve.now/CVE-2012-5604.md): The ldap\_fluff gem for Ruby, as used in Red Hat CloudForms 1.1, when using Active Directory for authentication, allows remote attackers to b (no CVSS, ldap\_fluff) - [CVE-2012-6109](https://cve.now/CVE-2012-6109.md): lib/rack/multipart.rb in Rack before 1.1.4, 1.2.x before 1.2.6, 1.3.x before 1.3.7, and 1.4.x before 1.4.2 uses an incorrect regular express (no CVSS, rack) - [CVE-2012-6116](https://cve.now/CVE-2012-6116.md): modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstra (no CVSS) - [CVE-2013-0162](https://cve.now/CVE-2013-0162.md): The diff\_pp function in lib/gauntlet\_rubyparser.rb in the ruby\_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitra (no CVSS, ruby\_parser) - [CVE-2013-0183](https://cve.now/CVE-2013-0183.md): multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (memory consumpti (no CVSS, rack) - [CVE-2013-0184](https://cve.now/CVE-2013-0184.md): Unspecified vulnerability in Rack::Auth::AbstractRequest in Rack 1.1.x before 1.1.5, 1.2.x before 1.2.7, 1.3.x before 1.3.9, and 1.4.x befor (no CVSS, rack) - [CVE-2013-0256](https://cve.now/CVE-2013-0256.md): darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows (no CVSS, rdoc) - [CVE-2013-0707](https://cve.now/CVE-2013-0707.md): Unspecified vulnerability in JustSystems Ichitaro 2006 and 2007, Ichitaro Government 2006 and 2007, Ichitaro Portable with oreplug, Hanako 2 (no CVSS) - [CVE-2013-0708](https://cve.now/CVE-2013-0708.md): Cross-site scripting (XSS) vulnerability in dopvCOMET\* 0009b allows remote attackers to inject arbitrary web script or HTML via the HTTP Ref (no CVSS) - [CVE-2013-0709](https://cve.now/CVE-2013-0709.md): Cross-site scripting (XSS) vulnerability in dopvSTAR\* 0091 allows remote attackers to inject arbitrary web script or HTML via the HTTP Refer (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-03-01 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.