Lucene search

[email protected]CVE-2010-1906

HistoryMay 12, 2010 - 11:46 a.m.

CVE-2010-1906

2010-05-1211:46:31

CWE-310

[email protected]

web.nvd.nist.gov

cve-2010-1906

tgsrv.exe

consona dynamic agent

repair service

repair manager

subscriber activation

subscriber agent

remote code execution

predictable timestamp

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.3%

JSON

tgsrv.exe in the Repair Service in Consona Dynamic Agent, Repair Manager, Subscriber Activation, and Subscriber Agent relies on a predictable timestamp field to validate input to the \.\pipe__RepairService_pipe__company named pipe, which allows remote authenticated users to execute arbitrary code by obtaining the current time from (1) tcpip.sys or (2) an SMB2 service.

Affected configurations

NVD

Node

consonaconsona_dynamic_agentMatch--enterprise

consonaconsona_dynamic_agentMatch--marketing

consonaconsona_dynamic_agentMatch--support

consonaconsona_repair_manager

consonaconsona_subscriber_activation

consonaconsona_subscriber_agent

AND

microsoftwindows_7

microsoftwindows_vista

CPENameOperatorVersion
consona:consona_dynamic_agentconsona consona dynamic agenteq-
consona:consona_repair_managerconsona consona repair managereq*
consona:consona_subscriber_activationconsona consona subscriber activationeq*
consona:consona_subscriber_agentconsona consona subscriber agenteq*

CPE	Name	Operator	Version
consona:consona_dynamic_agent	consona consona dynamic agent	eq	-
consona:consona_repair_manager	consona consona repair manager	eq	*
consona:consona_subscriber_activation	consona consona subscriber activation	eq	*
consona:consona_subscriber_agent	consona consona subscriber agent	eq	*

References

secunia.com/advisories/39752

wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html

www.consona.com/Content/CRM/Support/SecurityBulletin_April2010.pdf

www.kb.cert.org/vuls/id/602801

www.securityfocus.com/archive/1/511176/100/0/threaded

www.wintercore.com/downloads/rootedcon_0day.pdf

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.3%

JSON

Related for CVE-2010-1906

prion1 nvd1 cvelist1