CVE

Id
43749  
CVE No.
CVE-2010-1165  
Status
Candidate  
Description
Atlassian JIRA 3.12 through 4.1 allows remote authenticated administrators to execute arbitrary code by modifying the (1) attachment (aka attachments), (2) index (aka indexing), or (3) backup path and then uploading a file, as exploited in the wild in April 2010.  
Phase
Assigned (20100329)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
476364 43749 CVE-2010-1165 MLIST:[oss-security] 20100416 CVE Request: JIRA Issues  View
476365 43749 CVE-2010-1165 URL:http://www.openwall.com/lists/oss-security/2010/04/16/3  View
476366 43749 CVE-2010-1165 MLIST:[oss-security] 20100416 Re: CVE Request: JIRA Issues  View
476367 43749 CVE-2010-1165 URL:http://www.openwall.com/lists/oss-security/2010/04/16/4  View
476368 43749 CVE-2010-1165 CONFIRM:http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2010-04-16  View
476369 43749 CVE-2010-1165 CONFIRM:http://jira.atlassian.com/browse/JRA-20995  View
476370 43749 CVE-2010-1165 CONFIRM:http://jira.atlassian.com/browse/JRA-21004  View
476371 43749 CVE-2010-1165 BID:39485  View
476372 43749 CVE-2010-1165 URL:http://www.securityfocus.com/bid/39485  View
476373 43749 CVE-2010-1165 SECUNIA:39353  View
476374 43749 CVE-2010-1165 URL:http://secunia.com/advisories/39353  View
476375 43749 CVE-2010-1165 XF:jira-pathsettings-priv-escalation(57828)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35718 JVNDB-2010-001498 PostgreSQL における任意の Perl コードを実行される脆弱性 PostgreSQL には、PL/perl プロシージャを適切に制限しない不備があるため、データベースの作成権限により、任意の Perl コードを実行される脆弱性が存在します。 CVE-2010-1169 43749 8.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001498.html  View