Lucene search
RedhatCVE-2010-2060HistoryJun 08, 2010 - 12:30 a.m.
CVE-2010-2060
2010-06-0800:30:01
redhat
web.nvd.nist.gov
31
cve-2010-2060
beanstalkd
remote attackers
arbitrary commands
prot.c
nvd
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
9.7
Confidence
High
EPSS
0.016
Percentile
87.3%
The put command functionality in beanstalkd 1.4.5 and earlier allows remote attackers to execute arbitrary Beanstalk commands via the body in a job that is too big, which is not properly handled by the dispatch_cmd function in prot.c.
Affected configurations
Node
wildbitbeanstalkdRange≤1.4.5
ORwildbitbeanstalkdMatch0.5-
ORwildbitbeanstalkdMatch0.6
ORwildbitbeanstalkdMatch0.7
ORwildbitbeanstalkdMatch0.8
ORwildbitbeanstalkdMatch0.9
ORwildbitbeanstalkdMatch0.10
ORwildbitbeanstalkdMatch1.0
ORwildbitbeanstalkdMatch1.1
ORwildbitbeanstalkdMatch1.2
ORwildbitbeanstalkdMatch1.3
ORwildbitbeanstalkdMatch1.4
ORwildbitbeanstalkdMatch1.4.1
ORwildbitbeanstalkdMatch1.4.2
ORwildbitbeanstalkdMatch1.4.3
ORwildbitbeanstalkdMatch1.4.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| wildbit | beanstalkd | * | cpe:2.3:a:wildbit:beanstalkd:*:*:*:*:*:*:*:* |
| wildbit | beanstalkd | 0.5 | cpe:2.3:a:wildbit:beanstalkd:0.5:-:*:*:*:*:*:* |
| wildbit | beanstalkd | 0.6 | cpe:2.3:a:wildbit:beanstalkd:0.6:*:*:*:*:*:*:* |
| wildbit | beanstalkd | 0.7 | cpe:2.3:a:wildbit:beanstalkd:0.7:*:*:*:*:*:*:* |
| wildbit | beanstalkd | 0.8 | cpe:2.3:a:wildbit:beanstalkd:0.8:*:*:*:*:*:*:* |
| wildbit | beanstalkd | 0.9 | cpe:2.3:a:wildbit:beanstalkd:0.9:*:*:*:*:*:*:* |
| wildbit | beanstalkd | 0.10 | cpe:2.3:a:wildbit:beanstalkd:0.10:*:*:*:*:*:*:* |
| wildbit | beanstalkd | 1.0 | cpe:2.3:a:wildbit:beanstalkd:1.0:*:*:*:*:*:*:* |
| wildbit | beanstalkd | 1.1 | cpe:2.3:a:wildbit:beanstalkd:1.1:*:*:*:*:*:*:* |
| wildbit | beanstalkd | 1.2 | cpe:2.3:a:wildbit:beanstalkd:1.2:*:*:*:*:*:*:* |
Related
ubuntucve
ubuntucve
CVE-2010-2060
2010-06-08 00:00:00
cvelist
cvelist
CVE-2010-2060
2010-06-07 20:00:00
nvd
nvd
CVE-2010-2060
2010-06-08 00:30:01
openvas
openvas
Beanstalkd Job Data RCE Vulnerability
2010-06-21 00:00:00
Beanstalkd Job Data Remote Command Execution Vulnerability
2010-06-21 00:00:00
Gentoo Security Advisory GLSA 201412-08
2015-09-29 00:00:00
nessus
nessus
Beanstalkd < 1.4.6 Remote Beanstalkd Command Injection
2010-06-14 00:00:00
GLSA-201412-08 : Multiple packages, Multiple vulnerabilities fixed in 2010
2014-12-15 00:00:00
debiancve
debiancve
CVE-2010-2060
2010-06-08 00:30:01
prion
prion
Command injection
2010-06-08 00:30:00
gentoo
gentoo
Multiple packages, Multiple vulnerabilities fixed in 2010
2014-12-11 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
9.7
Confidence
High
EPSS
0.016
Percentile
87.3%
Related for CVE-2010-2060