CVE-2010-2221
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 5.3%
Multiple buffer overflows in the iSNS implementation in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) before 1.0.6, (2) iSCSI Enterprise Target (aka iscsitarget or IET) 1.4.20.1 and earlier, and (3) Generic SCSI Target Subsystem for Linux (aka SCST or iscsi-scst) 1.0.1.1 and earlier allow remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via (a) a long iSCSI Name string in an SCN message or (b) an invalid PDU.
Produtos afetados
n/a · n/aReferências
http://archives.neohapsis.com/archives/bugtraq/2010-07/0022.htmlhttp://archives.neohapsis.com/archives/fulldisclosure/2010-07/0058.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.htmlhttp://lists.wpkg.org/pipermail/stgt/2010-July/003858.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=593877http://scst.svn.sourceforge.net/viewvc/scst/trunk/iscsi-scst/usr/isns.c?r1=1793&r2=1792&pathrev=1793http://scst.svn.sourceforge.net/viewvc/scst?view=revision&revision=1793http://secunia.com/advisories/40485http://secunia.com/advisories/40494http://secunia.com/advisories/40495http://sourceforge.net/mailarchive/forum.php?thread_name=E2BB8074E5500C42984D980D4BD78EF904075006%40MFG-NYC-EXCH2.mfg.prv&forum_name=iscsitarget-develhttp://www.mandriva.com/security/advisories?name=MDVSA-2010:131