CVE

Id
46168  
CVE No.
CVE-2010-3584  
Status
Candidate  
Description
Unspecified vulnerability in the Oracle VM component in Oracle VM 2.2.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to ovs-agent. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a third party researcher that this is related to the storage of passwords and password hashes in cleartext in files with insecure permissions.  
Phase
Assigned (20100920)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
502648 46168 CVE-2010-3584 BUGTRAQ:20101102 [Onapsis Security Advisory 2010-010] Oracle Virtual Server Agent Local Privilege Escalation  View
502649 46168 CVE-2010-3584 URL:http://www.securityfocus.com/archive/1/archive/1/514612/100/0/threaded  View
502650 46168 CVE-2010-3584 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html  View
502651 46168 CVE-2010-3584 CERT:TA10-287A  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30816 JVNDB-2011-001055 Oracle Fusion Middleware の Oracle Discoverer コンポーネントにおける脆弱性 Oracle Fusion Middleware の Oracle Discoverer コンポーネントには、EUL Code & Schema に関する処理に不備があるため、機密性および完全性に影響のある脆弱性が存在します。 CVE-2010-3588 46168 5.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001055.html  View