NVD

Id
14962  
Name
CVE-2010-3584  
Description
Unspecified vulnerability in the Oracle VM component in Oracle VM 2.2.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to ovs-agent. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a third party researcher that this is related to the storage of passwords and password hashes in cleartext in files with insecure permissions.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.1  
CVSS Vector
(AV:L/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-10-14  
Modified Date
2010-11-19  
Seq
2010-3584  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
83209 14962 CVE-2010-3584 http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html  View
83210 14962 CVE-2010-3584 20101102 [Onapsis Security Advisory 2010-010] Oracle Virtual Server Agent Local Privilege Escalation  View
83211 14962 CVE-2010-3584 TA10-287A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37403 JVNDB-2010-003188 Oracle VM の Oracle VM コンポーネントにおける ovs エージェントの処理に関する脆弱性 Oracle VM の Oracle VM コンポーネントは、ovs エージェントの処理に不備があるため、機密性、完全性、可用性に影響のある脆弱性が存在します。 CVE-2010-3584 46164 CVE-2010-3584 14962 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003188.html 2010-10-14 2012-03-27 View