# CVEs published 2014-02-15

20 CVEs were published on February 15, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2011-1831](https://cve.now/CVE-2011-1831.md): utils/mount.ecryptfs\_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to effec (no CVSS)
- [CVE-2011-1832](https://cve.now/CVE-2011-1832.md): utils/mount.ecryptfs\_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to remov (no CVSS)
- [CVE-2011-1834](https://cve.now/CVE-2011-1834.md): utils/mount.ecryptfs\_private.c in ecryptfs-utils before 90 does not properly maintain the mtab file during error conditions, which allows lo (no CVSS)
- [CVE-2011-1835](https://cve.now/CVE-2011-1835.md): The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does not properly ensure that the (no CVSS)
- [CVE-2011-1836](https://cve.now/CVE-2011-1836.md): utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permissions, which might allow local (no CVSS)
- [CVE-2011-1837](https://cve.now/CVE-2011-1837.md): The lock-counter implementation in utils/mount.ecryptfs\_private.c in ecryptfs-utils before 90 allows local users to overwrite arbitrary file (no CVSS)
- [CVE-2011-2500](https://cve.now/CVE-2011-2500.md): The host\_reliable\_addrinfo function in support/export/hostname.c in nfs-utils before 1.2.4 does not properly use DNS to verify access to NFS (no CVSS)
- [CVE-2011-2909](https://cve.now/CVE-2011-2909.md): The do\_devinfo\_ioctl function in drivers/staging/comedi/comedi\_fops.c in the Linux kernel before 3.1 allows local users to obtain sensitive (no CVSS)
- [CVE-2011-3588](https://cve.now/CVE-2011-3588.md): The SSH configuration in the Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x befo (no CVSS)
- [CVE-2011-3589](https://cve.now/CVE-2011-3589.md): The Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in (no CVSS)
- [CVE-2011-3590](https://cve.now/CVE-2011-3590.md): The Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in (no CVSS)
- [CVE-2012-1088](https://cve.now/CVE-2012-1088.md): iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by (1) configure or (2) (no CVSS)
- [CVE-2012-1171](https://cve.now/CVE-2012-1171.md): The libxml RSHUTDOWN function in PHP 5.x allows remote attackers to bypass the open\_basedir protection mechanism and read arbitrary files vi (no CVSS)
- [CVE-2012-2663](https://cve.now/CVE-2012-2663.md): extensions/libxt\_tcp.c in iptables through 1.4.21 does not match TCP SYN+FIN packets in --syn rules, which might allow remote attackers to b (no CVSS)
- [CVE-2012-6108](https://cve.now/CVE-2012-6108.md): HP Linux Imaging and Printing (HPLIP) before 3.13.2 uses world-writable permissions for /var/log/hp and /var/log/hp/tmp, which allows local (no CVSS)
- [CVE-2012-6638](https://cve.now/CVE-2012-6638.md): The tcp\_rcv\_state\_process function in net/ipv4/tcp\_input.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of se (no CVSS)
- [CVE-2013-4737](https://cve.now/CVE-2013-4737.md): The CONFIG\_STRICT\_MEMORY\_RWX implementation for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for (no CVSS)
- [CVE-2013-6166](https://cve.now/CVE-2013-6166.md): Google Chrome before 29 sends HTTP Cookie headers without first validating that they have the required character-set restrictions, which all (no CVSS)
- [CVE-2013-6167](https://cve.now/CVE-2013-6167.md): Mozilla Firefox through 27 sends HTTP Cookie headers without first validating that they have the required character-set restrictions, which (no CVSS)
- [CVE-2013-0346](https://cve.now/CVE-2013-0346.md): Apache Tomcat 7.x uses world-readable permissions for the log directory and its files, which might allow local users to obtain sensitive inf (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-02-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.