CVE-2010-2632HIGH
Description
Unspecified vulnerability in the FTP Server in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable researcher that this is an issue in the glob implementation in libc that allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames.
References
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10598
http://secunia.com/advisories/42984
http://secunia.com/advisories/43433
http://secunia.com/advisories/55212
http://securityreason.com/achievement_securityalert/89
http://securityreason.com/achievement_securityalert/97
http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
http://www.securitytracker.com/id?1024975
http://www.vupen.com/english/advisories/2011/0151
Details
Source: MITRE
Published: 2011-01-19
Updated: 2017-08-17
Type: NVD-CWE-noinfo
Risk Information
CVSS v2.0
Base Score: 7.8
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Impact Score: 6.9
Exploitability Score: 10
Severity: HIGH
Vulnerable Software
Configuration 1
OR
cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*
cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 70481 | Juniper Junos GNU libc glob Remote DoS (JSA10598) | Nessus | Junos Local Security Checks | medium |
| 64791 | FreeBSD : FreeBSD -- glob(3) related resource exhaustion (3c90e093-7c6e-11e2-809b-6c626d99876c) | Nessus | FreeBSD Local Security Checks | high |
| 55416 | Mac OS X 10.6.x < 10.6.8 Multiple Vulnerabilities | Nessus | MacOS X Local Security Checks | critical |
| 55415 | Mac OS X Multiple Vulnerabilities (Security Update 2011-004) | Nessus | MacOS X Local Security Checks | high |
| 800790 | Mac OS X 10.6 < 10.6.8 Multiple Vulnerabilities | Log Correlation Engine | Operating System Detection | high |
| 5968 | Mac OS X 10.6 < 10.6.8 Multiple Vulnerabilities | Nessus Network Monitor | Generic | critical |
| 13605 | Solaris 9 (x86) : 114565-16 | Nessus | Solaris Local Security Checks | high |
| 13555 | Solaris 9 (sparc) : 114564-16 | Nessus | Solaris Local Security Checks | high |