CVE-2010-2476

Опубликовано: 07 нояб. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

syscp 1.4.2.1 allows attackers to add arbitrary paths via the documentroot of a domain by appending a colon to it and setting the open basedir path to use that domain documentroot.

Ссылки

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=587481
Mailing List
Patch
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2010-2476
Third Party Advisory
https://www.openwall.com/lists/oss-security/2010/06/30/15
Mailing List
Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=587481
Mailing List
Patch
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2010-2476
Third Party Advisory
https://www.openwall.com/lists/oss-security/2010/06/30/15
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:syscp_project:syscp:1.4.2.1:*:*:*:*:*:*:*

EPSS

Процентиль: 75%

0.01725

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2010-2476

CVSS3: 9.8

ubuntu

почти 7 лет назад

syscp 1.4.2.1 allows attackers to add arbitrary paths via the documentroot of a domain by appending a colon to it and setting the open basedir path to use that domain documentroot.

CVE-2010-2476

CVSS3: 9.8

debian

почти 7 лет назад

syscp 1.4.2.1 allows attackers to add arbitrary paths via the document ...

GHSA-rw9p-4whq-876w

github

больше 4 лет назад

syscp 1.4.2.1 allows attackers to add arbitrary paths via the documentroot of a domain by appending a colon to it and setting the open basedir path to use that domain documentroot.

EPSS

Процентиль: 75%

0.01725

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-20