CVE-2010-2450

概要

参考情報

• bugs.debian.org/cgi-bin/bugreport.cgi · Mailing List
• security-tracker.debian.org/tracker/CVE-2010-2450 · Third Party Advisory
• todos.internet2.edu/browse/SSPCPP-106 · Third Party Advisory

service provider のその他の脆弱性

• CVE-2023-22947高 7.3Insecure folder permissions in the Windows installation path of Shibboleth Service Provider (SP) before 3.4.1 allow an unprivileged local at…
• CVE-2021-31826高 7.5Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature. The flaw is…
• CVE-2021-28963中 5.3Shibboleth Service Provider before 3.2.1 allows content injection because template generation uses attacker-controlled parameters.
• CVE-2019-19191高 7.8Shibboleth Service Provider (SP) 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlled by the service use…
• CVE-2017-16852高 8.1shibsp/metadata/DynamicMetadataProvider.cpp in the Dynamic MetadataProvider plugin in Shibboleth Service Provider before 2.6.1 fails to prop…