CVE-2010-2632
35Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendepss 35%
da publicação à arma0 dias
Publicada no NVD19 de jan.
1ª PoC7 de out.
probabilidade de exploração
35%top 2% das CVEs
exploração observada
nãonenhuma fonte reporta
1 exploit(s) público(s)
Unspecified vulnerability in the FTP Server in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable researcher that this is an issue in the glob implementation in libc that allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 1
exploitdbwww.exploit-db.com/exploits/15215não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10598http://secunia.com/advisories/42984http://secunia.com/advisories/43433http://secunia.com/advisories/55212http://securityreason.com/achievement_securityalert/89http://securityreason.com/achievement_securityalert/97https://exchange.xforce.ibmcloud.com/vulnerabilities/64798https://support.avaya.com/css/P8/documents/100127892http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.htmlhttp://www.securitytracker.com/id?1024975http://www.vupen.com/english/advisories/2011/0151