CVE-2010-2812

概要

参考情報

• lists.fedoraproject.org/pipermail/package-announce/2010-August/045385.html
• lists.fedoraproject.org/pipermail/package-announce/2010-August/045386.html
• marc.info
• marc.info
• marc.info
• secunia.com/advisories/40919 · Vendor Advisory
• secunia.com/advisories/40970 · Vendor Advisory
• securityfocus.com/bid/42314
• vupen.com/english/advisories/2010/2071 · Vendor Advisory
• znc.svn.sourceforge.net/viewvc/znc/trunk/Client.cpp
• znc.svn.sourceforge.net/viewvc/znc
• bugzilla.redhat.com/show_bug.cgi

znc のその他の脆弱性

• CVE-2020-13775中 6.5ZNC 1.8.0 up to 1.8.1-rc1 allows authenticated users to trigger an application crash (with a NULL pointer dereference) if echo-message is no…
• CVE-2010-2488高 7.5NULL pointer dereference vulnerability in ZNC before 0.092 caused by traffic stats when there are unauthenticated connections.
• CVE-2019-12816高 8.8Modules.cpp in ZNC before 1.7.4-rc1 allows remote authenticated non-admin users to escalate privileges and execute arbitrary code by loading…
• CVE-2019-9917中 6.5ZNC before 1.7.3-rc1 allows an existing remote user to cause a Denial of Service (crash) via invalid encoding.
• CVE-2018-14056中 5.3ZNC before 1.7.1-rc1 is prone to a path traversal flaw via ../ in a web skin name to access files outside of the intended skins directories.