CVE

Id
44820  
CVE No.
CVE-2010-2236  
Status
Candidate  
Description
The monitoring probe display in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 4.0.0 through 4.2.0 and 5.1.0 through 5.3.0, and Proxy 5.3.0, allows remote authenticated users with permissions to administer monitoring probes to execute arbitrary code via unspecified vectors, related to backticks.  
Phase
Assigned (20100609)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
489626 44820 CVE-2010-2236 MISC:https://bugzilla.redhat.com/attachment.cgi?id=819987&action=diff  View
489627 44820 CVE-2010-2236 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=607712  View
489628 44820 CVE-2010-2236 CONFIRM:https://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=18c70164285cae0660fa3ac55c6656bb19b3b13f  View
489629 44820 CVE-2010-2236 CONFIRM:https://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=c41c87a9dc9dac771eb761dd63ada05b2f9104f9  View
489630 44820 CVE-2010-2236 SUSE:SUSE-SU-2014:0222  View
489631 44820 CVE-2010-2236 URL:https://www.suse.com/support/update/announcement/2014/suse-su-20140222-1.html  View
489632 44820 CVE-2010-2236 SECUNIA:56952  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36242 JVNDB-2010-002022 Linux kernel の do_anonymous_page 関数における任意のコードを実行される脆弱性 Linux kernel の mm/memory.c 内にある do_anonymous_page 関数には、スタックおよびヒープを適切に区別しないため、任意のコードを実行される脆弱性が存在します。 CVE-2010-2240 44820 7.2 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002022.html  View