CVE-2010-3690

概要

参考情報

• bugs.debian.org/cgi-bin/bugreport.cgi
• lists.fedoraproject.org/pipermail/package-announce/2010-November/050415.html
• lists.fedoraproject.org/pipermail/package-announce/2010-November/050428.html
• lists.fedoraproject.org/pipermail/package-announce/2010-October/049600.html
• lists.fedoraproject.org/pipermail/package-announce/2010-October/049602.html
• secunia.com/advisories/41878
• secunia.com/advisories/42149
• secunia.com/advisories/42184
• secunia.com/advisories/43427
• debian.org/security/2011/dsa-2172
• openwall.com/lists/oss-security/2010/09/29/6
• openwall.com/lists/oss-security/2010/10/01/2
• openwall.com/lists/oss-security/2010/10/01/5

phpcas のその他の脆弱性

• CVE-2022-39369高 8.0phpCAS is an authentication library that allows PHP applications to easily authenticate users via a Central Authentication Service (CAS) ser…
• CVE-2014-4172緊急 9.8A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client be…
• CVE-2012-1105中 5.5An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory. The Central Authentica…
• CVE-2012-1104中 5.3A Security Bypass vulnerability exists in the phpCAS 1.2.2 library from the jasig project due to the way proxying of services are managed.
• CVE-2017-1000071高 8.1Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against a…