Published: 05/10/2010 Updated: 29/07/2019

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

VMScore: 578

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

programs/pluto/xauth.c in the client in Openswan 2.6.25 up to and including 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in (1) cisco_dns_info or (2) cisco_domain_info data in a packet, a different vulnerability than CVE-2010-3302.

Vulnerable Product	Search on Vulmon	Subscribe to Product
xelerance openswan 2.6.25
xelerance openswan 2.6.26
xelerance openswan 2.6.27
xelerance openswan 2.6.28

Debian Bug report logs - #599515 bind9: CVE-2010-3762 Package: bind9; Maintainer for bind9 is Debian DNS Team <team+dns@trackerdebianorg>; Source for bind9 is src:bind9 (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <muehlenhoff@univentionde> Date: Fri, 8 Oct 2010 10:33:01 UTC Severity: grave Tags: securi ...

CWE-78 http://www.openswan.org/download/CVE-2010-3302/openswan-2.6.25-CVE-2010-3302.patch http://www.vupen.com/english/advisories/2010/2526 http://www.openswan.org/download/CVE-2010-3302/CVE-2010-3302.txt http://www.securityfocus.com/bid/43588 http://www.openswan.org/download/CVE-2010-3308/openswan-2.6.26-2.6.28-CVE-2010-330x.patch http://www.redhat.com/support/errata/RHSA-2010-0892.html http://www.securitytracker.com/id?1024749 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=599515

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2010-3752

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect