NVD

Id
12858  
Name
CVE-2010-1326  
Description
perms.cpp in March Hare Software CVSNT 2.0.58, 2.5.01, 2.5.02, 2.5.03 before build 3736, 2.5.04 before build 2862; CVS Suite 2.5.03, 2008 before build 3736, and 2009 before 3729 allows remote attackers to bypass the permissions check, modify arbitrary modules and directories within CVSROOT, and execute arbitrary code via a crafted branch name ACL, possibly related to incorrect inheritance.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-09-15  
Modified Date
2011-08-12  
Seq
2010-1326  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
70889 12858 CVE-2010-1326 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=593884  View
70890 12858 CVE-2010-1326 http://customer.march-hare.com/webtools/bugzilla/attachment.cgi?tt=1&id=1790&action=view  View
70891 12858 CVE-2010-1326 http://march-hare.com/cvspro/vuln.htm  View
70892 12858 CVE-2010-1326 DSA-2108  View
70893 12858 CVE-2010-1326 ADV-2010-2350  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37150 JVNDB-2010-002935 March Hare Software CVSNT の perms.cpp における任意のコードを実行される脆弱性 March Hare Software CVSNT の perms.cpp は、適切に継承をしないため、パーミッションチェックを回避される、CVSROOT 内の任意のモジュールおよびディレクトリを変更される、および任意のコードを実行される脆弱性が存在します。 CVE-2010-1326 43906 CVE-2010-1326 12858 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002935.html 2010-09-15 2012-03-27 View