A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that, when processed would lead to memory exhaustion or excessive CPU consumption.

thttpd has a local DoS vulnerability via specially-crafted .htpasswd files

ipa: client does not properly check server identity before sending cookies that contain credentials

ipa 3.0 does not properly check server identity before sending credential containing cookies

libuser: TOCTOU race conditions by copying and removing directory trees

libuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees.

gofer: /var/lib/gofer/journal/watchdog is world writable

gofer before 0.68 uses world-writable permissions for /var/lib/gofer/journal/watchdog, which allows local users to cause a denial of service by removing journal entries.

JBoss - EJB method invocation ignores roles specified using the @RunAs annotation

EJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Operations Network 3.1; Red Hat JBoss Portal 4 and 5; Red Hat JBoss SOA Platform 4.2, 4.3, and 5; in Red Hat JBoss Enterprise Web Server 1 ignores roles specified using the @RunAs annotation.

Squirrelmail 4.0 uses the outdated MD5 hash algorithm for passwords.

Ushahidi before 2.6.1 has insufficient entropy for forgot-password tokens.

gksu-polkit: permissive PolicyKit policy configuration file allows privilege escalation

opendnssec: misuses libcurl API

opendnssec misuses libcurl API

Python keyring has insecure permissions on new databases allowing world-readable files to be created

Python keyring lib before 0.10 created keyring files with world-readable permissions.

The Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allows remote authenticated users with the "access basic_webmail" permission to read arbitrary users' email addresses.

Cross-site scripting (XSS) vulnerability in the Smiley module 6.x-1.x versions prior to 6.x-1.1 and Smileys module 6.x-1.x versions prior to 6.x-1.1 for Drupal allows remote authenticated users with the "administer smiley" permission to inject arbitrary web script or HTML via a smiley acronym.

gnome-system-log: polkit policy too lax, allows reading arbitrary files on the system

gnome-system-log polkit policy allows arbitrary files on the system to be read

Claws Mail vCalendar plugin: credentials exposed on interface

(ospf6d): Assertion failure when removing routes (retrieving information which route to remove)

quagga (ospf6d) 0.99.21 has a DoS flaw in the way the ospf6d daemon performs routes removal

vdsm: certificate generation upon node creation

vdsm: certificate generation upon node creation allowing vdsm to start and serve requests from anyone who has a matching key (and certificate)

OpenStack: Quantum /etc/quantum/quantum.conf secret password and token exposure

Within the RHOS Essex Preview (2012.2) of the OpenStack dashboard package, the file /etc/quantum/quantum.conf is world readable which exposes the admin password and token value.

OpenStack: Dashboard /etc/openstack-dashboard/local_settings secret key exposure

The file /etc/openstack-dashboard/local_settings within Red Hat OpenStack Platform 2.0 and RHOS Essex Release (python-django-horizon package before 2012.1.1) is world readable and exposes the secret key value.