PT-2010-1029 · Debian · Lxr-Cvs

Josh Bressers · Published 2010-01-07 · Updated 2010-06-24 · CVE-2010-1625

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions lxr-cvs (affected versions not specified)

Description The issue concerns multiple vulnerabilities in the lxr-cvs package of the Debian GNU/Linux operating system. These vulnerabilities can be exploited remotely, potentially leading to a breach of protected information integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2015-03054

CVE-2010-1625

DSA-2092-1

Affected Products

Lxr-Cvs

References · 14

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1448 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1738 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2010-1625 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4497 · Security Note
• https://bdu.fstec.ru/vul/2015-03054 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1625 · Security Note
• http://debian.org/security/dsa-2092 · Note
• http://openwall.com/lists/oss-security/2010/05/06/2 · Note
• http://openwall.com/lists/oss-security/2010/05/03/7 · Note
• http://marc.info/?l=oss-security&m=127289957223005&w=2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1625 · Note
• http://sourceforge.net/projects/lxr/files/stable/lxr-0.9.7/ChangeLog/download · Note
• http://openwall.com/lists/oss-security/2010/05/14/3 · Note
• http://marc.info/?l=oss-security&m=127316953819027&w=2 · Note