CVE-2010-3752

CVSS V2 Medium 6.5 CVSS V3 None

Description

programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in (1) cisco_dns_info or (2) cisco_domain_info data in a packet, a different vulnerability than CVE-2010-3302.

Overview

CVE ID
CVE-2010-3752

Assigner
cve@mitre.org

Vulnerability Status
Modified

Published Version
2010-10-05T22:00:05

Last Modified Date
2019-07-29T13:26:17

Weakness Enumerations

CWE	URL
CWE-78	http://cwe.mitre.org/data/definitions/78.html

CPE Configuration (Product)

CPE	Vulnerable	Operator
cpe:2.3:a:xelerance:openswan:2.6.25:::::::*	1	OR
cpe:2.3:a:xelerance:openswan:2.6.26:::::::*	1	OR
cpe:2.3:a:xelerance:openswan:2.6.27:::::::*	1	OR
cpe:2.3:a:xelerance:openswan:2.6.28:::::::*	1	OR

CVSS Version 2

Version
2.0

Vector String
AV:N/AC:L/Au:S/C:P/I:P/A:P

Access Vector
NETWORK

Access Compatibility
LOW

Authentication
SINGLE

Confidentiality Impact
PARTIAL

Integrity Impact
PARTIAL

Availability Impact
PARTIAL

Base Score
6.5

Severity
MEDIUM

Exploitability Score
8

Impact Score
6.4

References

Reference URL	Reference Tags
http://www.openswan.org/download/CVE-2010-3302/openswan-2.6.25-CVE-2010-3302.patch	Patch
http://www.vupen.com/english/advisories/2010/2526	Vendor Advisory
http://www.openswan.org/download/CVE-2010-3302/CVE-2010-3302.txt	Vendor Advisory
http://www.securityfocus.com/bid/43588
http://www.openswan.org/download/CVE-2010-3308/openswan-2.6.26-2.6.28-CVE-2010-330x.patch	Patch
http://www.redhat.com/support/errata/RHSA-2010-0892.html
http://www.securitytracker.com/id?1024749

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2010-3752
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3752

History

Created	Old Value	New Value	Data Type	Notes
2022-05-10 17:40:19				Added to TrackCVE