Lucene search
HistoryJun 16, 2010 - 8:30 p.m.
CVE-2010-2308
cve-2010-2308
vulnerability
filter driver
sophos anti-virus
privilege escalation
ntqueryattributesfile
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.7 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
23.8%
Unspecified vulnerability in the filter driver (savonaccessfilter.sys) in Sophos Anti-Virus before 7.6.20 allows local users to gain privileges via crafted arguments to the NtQueryAttributesFile function.
Affected configurations
Node
sophosanti-virusRange≤7.6.19
ORsophosanti-virusMatch3.4.6
ORsophosanti-virusMatch3.78
ORsophosanti-virusMatch3.78d
ORsophosanti-virusMatch3.79
ORsophosanti-virusMatch3.80
ORsophosanti-virusMatch3.81
ORsophosanti-virusMatch3.82
ORsophosanti-virusMatch3.83
ORsophosanti-virusMatch3.84
ORsophosanti-virusMatch3.85
ORsophosanti-virusMatch3.86
ORsophosanti-virusMatch3.90
ORsophosanti-virusMatch3.91
ORsophosanti-virusMatch3.95
ORsophosanti-virusMatch3.96.0
ORsophosanti-virusMatch4.03
ORsophosanti-virusMatch4.04
ORsophosanti-virusMatch4.05
ORsophosanti-virusMatch4.5.3
ORsophosanti-virusMatch4.5.4
ORsophosanti-virusMatch4.5.11
ORsophosanti-virusMatch4.5.12
ORsophosanti-virusMatch4.7.1
ORsophosanti-virusMatch4.7.2
ORsophosanti-virusMatch4.33.0
ORsophosanti-virusMatch5.0.1
ORsophosanti-virusMatch5.0.2
ORsophosanti-virusMatch5.0.4
ORsophosanti-virusMatch5.0.9
ORsophosanti-virusMatch5.1
ORsophosanti-virusMatch5.2
ORsophosanti-virusMatch5.2.1
ORsophosanti-virusMatch6.0.4
ORsophosanti-virusMatch6.5
ORsophosanti-virusMatch7.0
ORsophosanti-virusMatch7.0.5
ORsophosanti-virusMatch7.6
ORsophosanti-virusMatch7.6.14
ORsophosanti-virusMatch7.6.15
ORsophosanti-virusMatch7.6.16
ORsophosanti-virusMatch7.6.17
ORsophosanti-virusMatch7.6.18
Related
nessus
nessus
Sophos Anti-Virus SAVOnAccessFilter Local Privilege Escalation
2010-06-10 00:00:00
prion
prion
Design/Logic Flaw
2010-06-16 20:30:00
nvd
nvd
CVE-2010-2308
2010-06-16 20:30:02
cvelist
cvelist
CVE-2010-2308
2010-06-16 20:00:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.7 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
23.8%
Related for CVE-2010-2308