NVD

Id
12173  
Name
CVE-2010-0624  
Description
Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service (memory corruption) or possibly execute arbitrary code by sending more data than was requested, related to archive filenames that contain a : (colon) character.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-03-15  
Modified Date
2016-12-07  
Seq
2010-0624  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
66982 12173 CVE-2010-0624 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691  View
66983 12173 CVE-2010-0624 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705  View
66984 12173 CVE-2010-0624 FEDORA-2010-2895  View
66985 12173 CVE-2010-0624 FEDORA-2010-4309  View
66986 12173 CVE-2010-0624 FEDORA-2010-4321  View
66987 12173 CVE-2010-0624 FEDORA-2010-4302  View
66988 12173 CVE-2010-0624 FEDORA-2010-4306  View
66989 12173 CVE-2010-0624 SUSE-SR:2010:011  View
66990 12173 CVE-2010-0624 oval:org.mitre.oval:def:10277  View
66991 12173 CVE-2010-0624 oval:org.mitre.oval:def:6907  View
66992 12173 CVE-2010-0624 GLSA-201111-11  View
66993 12173 CVE-2010-0624 http://www.agrs.tu-berlin.de/index.php?id=78327  View
66994 12173 CVE-2010-0624 MDVSA-2010:065  View
66995 12173 CVE-2010-0624 RHSA-2010:0141  View
66996 12173 CVE-2010-0624 RHSA-2010:0142  View
66997 12173 CVE-2010-0624 RHSA-2010:0144  View
66998 12173 CVE-2010-0624 RHSA-2010:0145  View
66999 12173 CVE-2010-0624 20101027 rPSA-2010-0070-1 cpio tar  View
67000 12173 CVE-2010-0624 USN-2456-1  View
67001 12173 CVE-2010-0624 ADV-2010-0628  View
67002 12173 CVE-2010-0624 ADV-2010-0629  View
67003 12173 CVE-2010-0624 ADV-2010-0639  View
67004 12173 CVE-2010-0624 ADV-2010-0687  View
67005 12173 CVE-2010-0624 ADV-2010-0728  View
67006 12173 CVE-2010-0624 ADV-2010-0729  View
67007 12173 CVE-2010-0624 ADV-2010-1107  View
67008 12173 CVE-2010-0624 https://bugzilla.redhat.com/show_bug.cgi?id=564368  View
67009 12173 CVE-2010-0624 https://issues.rpath.com/browse/RPL-3219  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35416 JVNDB-2010-001196 GNU tar および GNU cpio の rmt_read__ 関数におけるヒープベースのバッファオーバーフローの脆弱性 GNU tar および GNU cpio の rmt クライアント機能の rmt_read__ 関数には、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2010-0624 43204 CVE-2010-0624 12173 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001196.html 2010-03-15 2010-06-11 View