PT-2010-4717 · Php+2 · Alternative Php Cache (Apc) Extension+2

Hanno Böck · Publicado 2010-09-24 · Atualizado 2023-02-13 · CVE-2010-3294

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Alternative PHP Cache (APC) extension versions prior to 3.1.4

Description The issue is related to a cross-site scripting (XSS) vulnerability. This allows remote attackers to inject arbitrary web script or HTML.

Recommendations For versions prior to 3.1.4, update to version 3.1.4 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CESA-2012_0811

CVE-2010-3294

RHSA-2012:0811

RHSA-2012_0811

Produtos afetados

Alternative Php Cache (Apc) Extension

Centos

Red Hat

Referências · 16

• https://lists.centos.org/pipermail/centos-announce/2012-July/080875.html · Nota
• https://lists.centos.org/pipermail/centos-announce/2012-July/055632.html · Nota
• https://access.redhat.com/security/cve/CVE-2010-3294 · Nota
• http://pecl.php.net/package-changelog.php?package=APC&release=3.1.4 · Nota
• https://linux.oracle.com/errata/ELSA-2012-0811.html · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2010/09/14/8 · Nota
• https://lists.centos.org/pipermail/centos-announce/2012-July/068188.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3294 · Nota de Segurança
• http://rhn.redhat.com/errata/RHSA-2012-0811.html · Aviso do Fabricante
• https://lists.centos.org/pipermail/centos-announce/2012-July/030751.html · Nota
• http://openwall.com/lists/oss-security/2010/09/14/1 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-3294 · Nota de Segurança
• https://rhn.redhat.com/errata/RHSA-2012-0811.html · Nota
• http://openwall.com/lists/oss-security/2010/09/14/6 · Nota
• http://vupen.com/english/advisories/2010/2406 · Aviso do Fabricante