Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2010-2066
HistorySep 08, 2010 - 8:00 p.m.

CVE-2010-2066

2010-09-0820:00:02
[email protected]
web.nvd.nist.gov
48
linux kernel
privilege escalation
move_ext ioctl
security vulnerability

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

5.6

Confidence

High

EPSS

0

Percentile

5.1%

JSON

The mext_check_arguments function in fs/ext4/move_extent.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a MOVE_EXT ioctl call that specifies this file as a donor.

Affected configurations

NVD
Node
linuxlinux_kernelRange<2.6.35
Node
vmwareesxMatch4.0
OR
vmwareesxMatch4.1
Node
canonicalubuntu_linuxMatch6.06
OR
canonicalubuntu_linuxMatch8.04
OR
canonicalubuntu_linuxMatch9.04
OR
canonicalubuntu_linuxMatch9.10
OR
canonicalubuntu_linuxMatch10.04-
OR
canonicalubuntu_linuxMatch10.10
Node
suselinux_enterprise_high_availability_extensionMatch11sp1
OR
susesuse_linux_enterprise_desktopMatch11sp1
OR
susesuse_linux_enterprise_serverMatch11sp1

Related

veracode 1
nvd 1
prion 1
ubuntucve 1
cvelist 1
nessus 12
suse 2
redhat 2
openvas 25
centos 1
oraclelinux 2
fedora 5
ubuntu 4
veracode
veracode
Authorization Bypass
2020-04-10 00:46:30
nvd
nvd
CVE-2010-2066
2010-09-08 20:00:02
prion
prion
Design/Logic Flaw
2010-09-08 20:00:00
ubuntucve
ubuntucve
CVE-2010-2066
2010-09-08 00:00:00
cvelist
cvelist
CVE-2010-2066
2010-09-08 19:00:00
nessus
nessus
Fedora 12 : kernel-2.6.32.16-150.fc12 (2010-11412)
2010-08-03 00:00:00
SuSE 11.1 Security Update : Linux Kernel (SAT Patch Numbers 2760 / 2763 / 2764)
2011-01-21 00:00:00
Oracle Linux 5 : kernel (ELSA-2010-0610)
2013-07-12 00:00:00
suse
suse
local privilege escalation in kernel
2010-08-02 13:03:12
local privilege escalation in kernel
2010-09-23 16:37:26
redhat
redhat
(RHSA-2010:0610) Important: kernel security and bug fix update
2010-08-10 00:00:00
(RHSA-2010:0622) Important: rhev-hypervisor security and bug fix update
2010-08-19 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2010-0610)
2015-10-06 00:00:00
RedHat Update for kernel RHSA-2010:0610-01
2010-08-13 00:00:00
CentOS Update for kernel CESA-2010:0610 centos5 i386
2011-08-09 00:00:00
centos
centos
kernel security update
2010-08-11 12:16:13
oraclelinux
oraclelinux
kernel security and bug fix update
2010-08-10 00:00:00
Oracle Linux 5.6 kernel security and bug fix update
2011-01-20 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: kernel-2.6.32.16-150.fc12
2010-08-03 00:59:08
[SECURITY] Fedora 12 Update: kernel-2.6.32.21-166.fc12
2010-09-02 20:42:04
[SECURITY] Fedora 12 Update: kernel-2.6.32.19-163.fc12
2010-08-23 22:02:23
ubuntu
ubuntu
Linux kernel vulnerabilities
2010-10-19 00:00:00
Linux kernel vulnerabilities
2011-02-28 00:00:00
Linux kernel vulnerabilities
2011-02-25 00:00:00

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

5.6

Confidence

High

EPSS

0

Percentile

5.1%

JSON
Related for CVE-2010-2066
veracode1nvd1prion1ubuntucve1cvelist1nessus12suse2redhat2openvas25centos1oraclelinux2fedora5ubuntu4