Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2010-3389
HistoryOct 20, 2010 - 6:00 p.m.

CVE-2010-3389

2010-10-2018:00:04
[email protected]
web.nvd.nist.gov
31
cve-2010-3389
sap
ocf resource agents
cluster-agents
linux-ha
privilege escalation
shared library
nvd

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

8.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

The (1) SAPDatabase and (2) SAPInstance scripts in OCF Resource Agents (aka resource-agents or cluster-agents) 1.0.3 in Linux-HA place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Affected configurations

NVD
Node
linux-haocf_resource_agentsMatch1.0.3

Related

nessus 9
openvas 8
veracode 1
gentoo 2
redhat 3
centos 1
ubuntucve 1
cvelist 1
oraclelinux 1
prion 1
nvd 1
nessus
nessus
Scientific Linux Security Update : resource-agents on SL6.x i386/x86_64
2012-08-01 00:00:00
Scientific Linux Security Update : rgmanager on SL5.x i386/x86_64
2012-08-01 00:00:00
RHEL 5 : rgmanager (RHSA-2011:1000)
2013-01-24 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2011-1000)
2015-10-06 00:00:00
CentOS Update for rgmanager CESA-2011:1000 centos5 x86_64
2012-07-30 00:00:00
Gentoo Security Advisory GLSA 201110-18 (rgmanager)
2012-02-12 00:00:00
veracode
veracode
Privilege Escalation
2020-04-10 00:59:15
gentoo
gentoo
rgmanager: Privilege escalation
2011-10-22 00:00:00
Multiple packages, Multiple vulnerabilities fixed in 2011
2014-12-11 00:00:00
redhat
redhat
(RHSA-2011:1000) Low: rgmanager security, bug fix, and enhancement update
2011-07-21 00:00:00
(RHSA-2011:1580) Low: resource-agents security, bug fix, and enhancement update
2011-12-06 00:00:00
(RHSA-2011:0264) Low: rgmanager security and bug fix update
2011-02-16 00:00:00
centos
centos
rgmanager security update
2011-09-01 16:12:13
ubuntucve
ubuntucve
CVE-2010-3389
2010-10-20 00:00:00
cvelist
cvelist
CVE-2010-3389
2010-10-20 17:00:00
oraclelinux
oraclelinux
rgmanager security, bug fix, and enhancement update
2011-07-31 00:00:00
prion
prion
Directory traversal
2010-10-20 18:00:00
nvd
nvd
CVE-2010-3389
2010-10-20 18:00:04

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

8.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON
Related for CVE-2010-3389
nessus9openvas8veracode1gentoo2redhat3centos1ubuntucve1cvelist1oraclelinux1prion1nvd1