PT-2011-1675 · Smarty · Smarty

Publicado 2011-02-03 · Atualizado 2011-02-15 · CVE-2010-4725

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Smarty versions prior to 3.0.0 RC3

Description The issue is related to the handling of the asp tags option in the php.ini file. It does not properly handle an on value, which has unspecified impact and can be exploited remotely.

Recommendations For versions prior to 3.0.0 RC3, update to version 3.0.0 RC3 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2010-4725

Produtos afetados

Smarty

Referências · 6

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4725 · Nota
• http://smarty-php.googlecode.com/svn/trunk/distribution/change_log.txt · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-4725 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2010-4725 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2010-4725 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-4725 · Aviso do Fabricante