PT-2010-4945 · Oracle · Oracle Vm

Published 2010-10-14 · Updated 2018-10-10 · CVE-2010-3584

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:L/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle VM version 2.2.1

Description The issue affects confidentiality, integrity, and availability. It is related to the ovs-agent in Oracle VM. There are claims from a third-party researcher that this issue might be related to the storage of passwords and password hashes in cleartext in files with insecure permissions.

Recommendations For Oracle VM version 2.2.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2010-3584

Affected Products

Oracle Vm

References · 4

• http://oracle.com/technetwork/topics/security/cpuoct2010-175626.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-3584 · Security Note
• http://securityfocus.com/archive/1/514612/100/0/threaded · Note
• http://us-cert.gov/cas/techalerts/TA10-287A.html · Note