ByteOS Network

CVE Vulnerability Details :

CVE-2011-1425

PUBLISHED

More Info Official Page

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-03 Apr, 2011 | 01:00

Updated At-06 Aug, 2024 | 22:28

▼CVE Numbering Authority (CNA)

xslt.c in XML Security Library (aka xmlsec) before 1.2.17, as used in WebKit and other products, when XSLT is enabled, allows remote attackers to create or overwrite arbitrary files via vectors involving the libxslt output extension and a ds:Transform element during signature verification.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://bugzilla.redhat.com/show_bug.cgi?id=692133	x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2011/0855	vdb-entry x_refsource_VUPEN
http://www.securitytracker.com/id?1025284	vdb-entry x_refsource_SECTRACK
http://www.debian.org/security/2011/dsa-2219	vendor-advisory x_refsource_DEBIAN
http://www.mandriva.com/security/advisories?name=MDVSA-2011:063	vendor-advisory x_refsource_MANDRIVA
http://www.securityfocus.com/bid/47135	vdb-entry x_refsource_BID
http://trac.webkit.org/changeset/79159	x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2011/1010	vdb-entry x_refsource_VUPEN
http://www.aleksey.com/pipermail/xmlsec/2011/009120.html	mailing-list x_refsource_MLIST
http://secunia.com/advisories/44423	third-party-advisory x_refsource_SECUNIA
http://git.gnome.org/browse/xmlsec/commit/?id=2d5eddcc4163ea050cf3a3a1a25452bb5124f780	x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2011-0486.html	vendor-advisory x_refsource_REDHAT
http://git.gnome.org/browse/xmlsec/commit/?id=35eaacde6093d6711339754fc2146341b8b9f5fa	x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2011/1172	vdb-entry x_refsource_VUPEN
http://secunia.com/advisories/44167	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/43920	third-party-advisory x_refsource_SECUNIA
https://bugs.webkit.org/show_bug.cgi?id=52688	x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2011/0858	vdb-entry x_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/66506	vdb-entry x_refsource_XF

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=692133

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.vupen.com/english/advisories/2011/0855

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.securitytracker.com/id?1025284

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://www.debian.org/security/2011/dsa-2219

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2011:063

Resource:

vendor-advisory

x_refsource_MANDRIVA

Hyperlink: http://www.securityfocus.com/bid/47135

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://trac.webkit.org/changeset/79159

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.vupen.com/english/advisories/2011/1010

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.aleksey.com/pipermail/xmlsec/2011/009120.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://secunia.com/advisories/44423

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://git.gnome.org/browse/xmlsec/commit/?id=2d5eddcc4163ea050cf3a3a1a25452bb5124f780

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0486.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://git.gnome.org/browse/xmlsec/commit/?id=35eaacde6093d6711339754fc2146341b8b9f5fa

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.vupen.com/english/advisories/2011/1172

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://secunia.com/advisories/44167

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://secunia.com/advisories/43920

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://bugs.webkit.org/show_bug.cgi?id=52688

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.vupen.com/english/advisories/2011/0858

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/66506

Resource:

vdb-entry

x_refsource_XF

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://bugzilla.redhat.com/show_bug.cgi?id=692133	x_refsource_CONFIRM x_transferred
http://www.vupen.com/english/advisories/2011/0855	vdb-entry x_refsource_VUPEN x_transferred
http://www.securitytracker.com/id?1025284	vdb-entry x_refsource_SECTRACK x_transferred
http://www.debian.org/security/2011/dsa-2219	vendor-advisory x_refsource_DEBIAN x_transferred
http://www.mandriva.com/security/advisories?name=MDVSA-2011:063	vendor-advisory x_refsource_MANDRIVA x_transferred
http://www.securityfocus.com/bid/47135	vdb-entry x_refsource_BID x_transferred
http://trac.webkit.org/changeset/79159	x_refsource_CONFIRM x_transferred
http://www.vupen.com/english/advisories/2011/1010	vdb-entry x_refsource_VUPEN x_transferred
http://www.aleksey.com/pipermail/xmlsec/2011/009120.html	mailing-list x_refsource_MLIST x_transferred
http://secunia.com/advisories/44423	third-party-advisory x_refsource_SECUNIA x_transferred
http://git.gnome.org/browse/xmlsec/commit/?id=2d5eddcc4163ea050cf3a3a1a25452bb5124f780	x_refsource_CONFIRM x_transferred
http://www.redhat.com/support/errata/RHSA-2011-0486.html	vendor-advisory x_refsource_REDHAT x_transferred
http://git.gnome.org/browse/xmlsec/commit/?id=35eaacde6093d6711339754fc2146341b8b9f5fa	x_refsource_CONFIRM x_transferred
http://www.vupen.com/english/advisories/2011/1172	vdb-entry x_refsource_VUPEN x_transferred
http://secunia.com/advisories/44167	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/43920	third-party-advisory x_refsource_SECUNIA x_transferred
https://bugs.webkit.org/show_bug.cgi?id=52688	x_refsource_CONFIRM x_transferred
http://www.vupen.com/english/advisories/2011/0858	vdb-entry x_refsource_VUPEN x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/66506	vdb-entry x_refsource_XF x_transferred