CVE-2010-2075
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
60Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 84%
da publicação à armano mesmo dia
Publicada no NVD15 de jun.
1ª PoC13 de jun.
metasploit12 de jun.
UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally introduced modification (Trojan Horse) in the DEBUG3_DOLOG_SYSTEM macro, which allows remote attackers to execute arbitrary commands.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 14✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16922exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/13853githubgithub.com/MFernstrom/OffensivePascal-CVE-2010-2075★ 2githubgithub.com/FredBrave/CVE-2010-2075-UnrealIRCd-3.2.8.1★ 1githubgithub.com/rhimavanth32-max/Metasploitable2-Reconnaissance-and-UnrealIRCd-Backdoor-Exploitation★ 1githubgithub.com/chancej715/UnrealIRCd-3.2.8.1-Backdoor-Command-Execution★ 1githubgithub.com/Tc-XoNoR/CVE-2010-2075★ 1githubgithub.com/zales2004/sunset-noontide-pentesting★ 0githubgithub.com/earthbendergara/unrealircd3.2.8.1-local-exploit★ 0githubgithub.com/mishaqdev/cve-2010-2075-analysis★ 0githubgithub.com/Elazab2005/unrealircd-backdoor-pentest-report★ 0githubgithub.com/rushikesh-a-bhujbal/CVE-2010-2075★ 0githubgithub.com/JoseLRC97/UnrealIRCd-3.2.8.1-Backdoor-Command-Execution★ 0cve_referencewww.exploit-db.com/exploits/13853não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://osvdb.org/65445http://seclists.org/fulldisclosure/2010/Jun/277http://seclists.org/fulldisclosure/2010/Jun/284http://secunia.com/advisories/40169http://security.gentoo.org/glsa/glsa-201006-21.xmlhttp://www.exploit-db.com/exploits/13853http://www.openwall.com/lists/oss-security/2010/06/14/11http://www.securityfocus.com/bid/40820http://www.unrealircd.com/txt/unrealsecadvisory.20100612.txthttp://www.vupen.com/english/advisories/2010/1437