CVE-2010-0891
published 2010-04-13CVE-2010-0891: Unspecified vulnerability in the Sun Management Center component in Oracle Sun Product Suite 3.6.1 and 4.0 allows remote attackers to affect confidentiality…
PriorityP427medium5.8CVSS 2.0
AVNACMAuNCPIPAN
EPSS
2.35%
81.7th percentile
Unspecified vulnerability in the Sun Management Center component in Oracle Sun Product Suite 3.6.1 and 4.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Solaris Container Manager.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | sun_products_suite | — | — |
| oracle | sun_products_suite | — | — |
CVSS provenance
nvdv2.05.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N
vendor_redhat4.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-h7hv-7vh8-4hjp: Unspecified vulnerability in the Sun Management Center component in Oracle Sun Product Suite 3
ghsa_unreviewed·2022-05-02
CVE-2010-0891 [MEDIUM] GHSA-h7hv-7vh8-4hjp: Unspecified vulnerability in the Sun Management Center component in Oracle Sun Product Suite 3
Unspecified vulnerability in the Sun Management Center component in Oracle Sun Product Suite 3.6.1 and 4.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Solaris Container Manager.
Red Hat
pam: pam_xauth: Does not check if certain ACL file is a regular file
vendor_redhat·2010-10-03·CVSS 4.9
CVE-2010-4707 [MEDIUM] pam: pam_xauth: Does not check if certain ACL file is a regular file
pam: pam_xauth: Does not check if certain ACL file is a regular file
The check_acl function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) 1.1.2 and earlier does not verify that a certain ACL file is a regular file, which might allow local users to cause a denial of service (resource consumption) via a special file.
Statement: The Red Hat Security Response Team has rated this issue as having low security impact. This issue was addressed in the PAM packages in Red Hat Enterprise Linux 5 via RHSA-2010:0819 and in Red Hat Enterprise Linux 6 via RHSA-2010:0891. A future update may correct this issue in the PAM packages in Red Hat Enterprise Linux 4.
Package: pam (Red Hat Enterprise Linux 4) - Will not fix
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://sunsolve.sun.com/search/document.do?assetkey=1-66-248666-1http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019908.1-1http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.htmlhttp://www.us-cert.gov/cas/techalerts/TA10-103B.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/57751https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7233http://sunsolve.sun.com/search/document.do?assetkey=1-66-248666-1http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019908.1-1http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.htmlhttp://www.us-cert.gov/cas/techalerts/TA10-103B.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/57751https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7233
2010-04-13
Published