NVD

Id
13724  
Name
CVE-2010-2242  
Description
Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-08-19  
Modified Date
2010-10-30  
Seq
2010-2242  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
76315 13724 CVE-2010-2242 http://libvirt.org/news.html  View
76316 13724 CVE-2010-2242 FEDORA-2010-10960  View
76317 13724 CVE-2010-2242 FEDORA-2010-11021  View
76318 13724 CVE-2010-2242 SUSE-SR:2010:017  View
76319 13724 CVE-2010-2242 USN-1008-1  View
76320 13724 CVE-2010-2242 USN-1008-2  View
76321 13724 CVE-2010-2242 USN-1008-3  View
76322 13724 CVE-2010-2242 RHSA-2010:0615  View
76323 13724 CVE-2010-2242 ADV-2010-2062  View
76324 13724 CVE-2010-2242 ADV-2010-2763  View
76325 13724 CVE-2010-2242 https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/591943  View
76326 13724 CVE-2010-2242 https://bugzilla.redhat.com/show_bug.cgi?id=602455  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36158 JVNDB-2010-001938 libvirt における任意のファイルを読まれる脆弱性 libvirt には、特権のソースポートの不適切なマッピングを用いて iptables ルールを作成してしまう不備があるため、 IP アドレスおよびソースポートの値により、アクセス制限を回避される脆弱性が存在します。 CVE-2010-2242 44822 CVE-2010-2242 13724 2.1 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001938.html 2010-08-04 2010-09-03 View