CVE

Id
44805  
CVE No.
CVE-2010-2221  
Status
Candidate  
Description
Multiple buffer overflows in the iSNS implementation in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) before 1.0.6, (2) iSCSI Enterprise Target (aka iscsitarget or IET) 1.4.20.1 and earlier, and (3) Generic SCSI Target Subsystem for Linux (aka SCST or iscsi-scst) 1.0.1.1 and earlier allow remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via (a) a long iSCSI Name string in an SCN message or (b) an invalid PDU.  
Phase
Assigned (20100609)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
489332 44805 CVE-2010-2221 BUGTRAQ:20100702 TELUS Security Labs VR - iSCSI target Multiple Implementations iSNS Stack Buffer Overflow  View
489333 44805 CVE-2010-2221 URL:http://archives.neohapsis.com/archives/bugtraq/2010-07/0022.html  View
489334 44805 CVE-2010-2221 FULLDISC:20100702 TELUS Security Labs VR - iSCSI target Multiple Implementations iSNS Stack Buffer Overflow  View
489335 44805 CVE-2010-2221 URL:http://archives.neohapsis.com/archives/fulldisclosure/2010-07/0058.html  View
489336 44805 CVE-2010-2221 MLIST:[iscsitarget-devel] 20100701 [patch] fix iSNS bounds checking  View
489337 44805 CVE-2010-2221 URL:http://sourceforge.net/mailarchive/forum.php?thread_name=E2BB8074E5500C42984D980D4BD78EF904075006%40MFG-NYC-EXCH2.mfg.prv&forum_name=iscsitarget-devel  View
489338 44805 CVE-2010-2221 MLIST:[stgt] 20100701 1.0.6 released  View
489339 44805 CVE-2010-2221 URL:http://lists.wpkg.org/pipermail/stgt/2010-July/003858.html  View
489340 44805 CVE-2010-2221 CONFIRM:http://scst.svn.sourceforge.net/viewvc/scst/trunk/iscsi-scst/usr/isns.c?r1=1793&r2=1792&pathrev=1793  View
489341 44805 CVE-2010-2221 CONFIRM:http://scst.svn.sourceforge.net/viewvc/scst?view=revision&revision=1793  View
489342 44805 CVE-2010-2221 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=593877  View
489343 44805 CVE-2010-2221 MANDRIVA:MDVSA-2010:131  View
489344 44805 CVE-2010-2221 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:131  View
489345 44805 CVE-2010-2221 REDHAT:RHSA-2010:0518  View
489346 44805 CVE-2010-2221 URL:http://www.redhat.com/support/errata/RHSA-2010-0518.html  View
489347 44805 CVE-2010-2221 SUSE:SUSE-SR:2010:017  View
489348 44805 CVE-2010-2221 URL:http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html  View
489349 44805 CVE-2010-2221 BID:41327  View
489350 44805 CVE-2010-2221 URL:http://www.securityfocus.com/bid/41327  View
489351 44805 CVE-2010-2221 OSVDB:65990  View
489352 44805 CVE-2010-2221 URL:http://www.osvdb.org/65990  View
489353 44805 CVE-2010-2221 OSVDB:65991  View
489354 44805 CVE-2010-2221 URL:http://www.osvdb.org/65991  View
489355 44805 CVE-2010-2221 OSVDB:65992  View
489356 44805 CVE-2010-2221 URL:http://www.osvdb.org/65992  View
489357 44805 CVE-2010-2221 SECTRACK:1024175  View
489358 44805 CVE-2010-2221 URL:http://www.securitytracker.com/id?1024175  View
489359 44805 CVE-2010-2221 SECUNIA:40485  View
489360 44805 CVE-2010-2221 URL:http://secunia.com/advisories/40485  View
489361 44805 CVE-2010-2221 SECUNIA:40494  View
489362 44805 CVE-2010-2221 URL:http://secunia.com/advisories/40494  View
489363 44805 CVE-2010-2221 SECUNIA:40495  View
489364 44805 CVE-2010-2221 URL:http://secunia.com/advisories/40495  View
489365 44805 CVE-2010-2221 VUPEN:ADV-2010-1760  View
489366 44805 CVE-2010-2221 URL:http://www.vupen.com/english/advisories/2010/1760  View
489367 44805 CVE-2010-2221 VUPEN:ADV-2010-1786  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36060 JVNDB-2010-001840 PHP の SplObjectStorage における重要な情報を取得される脆弱性 PHP の SplObjectStorage には、unserialize 関数の処理に関して不備があるため、任意のコードを実行される、または重要な情報を取得される脆弱性が存在します。 CVE-2010-2225 44805 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001840.html  View