PT-2010-5291 · Unknown · Monkeysphere

Publicado 2010-10-27 · Atualizado 2011-01-04 · CVE-2010-4096

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Monkeysphere versions 0.31 through 0.32

Description The issue allows local users to execute arbitrary code via unknown manipulations related to the "monkeysphere-authentication keys-for-user" command, specifically affecting the share/ma/keys for user component.

Recommendations For Monkeysphere versions 0.31 and 0.32, consider restricting access to the monkeysphere-authentication keys-for-user command until a patch is available. As a temporary workaround, avoid using the share/ma/keys for user component in sensitive operations to minimize the risk of exploitation.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2010-4096

Produtos afetados

Monkeysphere

Referências · 7

• https://lists.riseup.net/www/arc/monkeysphere/2010-10/msg00066.html · Nota
• https://security-tracker.debian.org/tracker/CVE-2010-4096 · Aviso do Fabricante
• http://web.monkeysphere.info/news/CVE-2010-4096 · Nota
• http://secunia.com/advisories/42067 · Nota
• https://osv.dev/vulnerability/CVE-2010-4096 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-4096 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-4096 · Aviso do Fabricante