PT-2010-1028 · Debian · Lxr-Cvs

Raphael · Publicado 2010-01-07 · Atualizado 2017-08-17 · CVE-2010-1448

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions lxr-cvs (affected versions not specified)

Description The issue concerns multiple vulnerabilities in the lxr-cvs package of the Debian GNU/Linux operating system. These vulnerabilities can be exploited remotely, potentially leading to a breach of protected information integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

BDU:2015-03054

CVE-2010-1448

DSA-2092-1

Produtos afetados

Lxr-Cvs

Referências · 22

• http://debian.org/security/dsa-2092 · Nota
• http://openwall.com/lists/oss-security/2010/05/06/2 · Nota
• http://lxr.cvs.sourceforge.net/viewvc/lxr/lxr/lib/LXR/Common.pm?view=log#rev1.64 · Nota
• http://openwall.com/lists/oss-security/2010/05/03/7 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1448 · Nota de Segurança
• http://sourceforge.net/projects/lxr/files/stable/lxr-0.9.8/lxr-0.9.8.tgz/download · Correção
• http://osvdb.org/64216 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1738 · Nota de Segurança
• http://secunia.com/advisories/39686 · Nota
• http://marc.info/?l=oss-security&m=127289957223005&w=2 · Nota
• http://openwall.com/lists/oss-security/2010/05/03/1 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1448 · Nota
• http://marc.info/?l=oss-security&m=127291817517567&w=2 · Nota
• http://securityfocus.com/bid/39865 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-1448 · Nota de Segurança