Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2010-3850
HistoryDec 30, 2010 - 7:00 p.m.

CVE-2010-3850

2010-12-3019:00:00
NVD-CWE-noinfo
[email protected]
web.nvd.nist.gov
76
cve-2010-3850
linux kernel
econet
access restrictions

5.8 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

9.2%

JSON

The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_ADMIN capability, which allows local users to bypass intended access restrictions and configure econet addresses via an SIOCSIFADDR ioctl call.

References

Related

ubuntucve 1
prion 1
exploitpack 2
openvas 16
f5 2
seebug 4
threatpost 1
packetstorm 1
securityvulns 4
nessus 12
exploitdb 2
ubuntu 6
suse 5
kitploit 1
debian 1
osv 1
ubuntucve
ubuntucve
CVE-2010-3850
2010-11-30 00:00:00
prion
prion
Design/Logic Flaw
2010-12-30 19:00:00
exploitpack
exploitpack
Linux Kernel 2.6.37 (RedHat Ubuntu 10.04) - Full-Nelson.c Local Privilege Escalation
2010-12-07 00:00:00
Linux Kernel 2.6.36.2 (Ubuntu 10.04) - Half-Nelson.c Econet Privilege Escalation
2011-09-05 00:00:00
openvas
openvas
Ubuntu Update for Linux kernel vulnerabilities USN-1023-1
2010-12-09 00:00:00
Ubuntu Update for Linux kernel vulnerabilities USN-1023-1
2010-12-09 00:00:00
Mandriva Update for kernel MDVSA-2010:257 (kernel)
2011-01-04 00:00:00
f5
f5
K16489 : Linux kernel security vulnerabilities CVE-2010-3848, CVE-2010-3849, and CVE-2010-3850
2015-04-24 00:00:00
SOL16489 - Multiple Linux Kernel security vulnerabilities CVE-2010-3848, CVE-2010-3849, and CVE-2010-3850
2015-04-24 00:00:00
seebug
seebug
Linux Kernel <= 2.6.37 - Local Privilege Escalation
2014-07-01 00:00:00
Linux Kernel &lt; 2.6.36.2 Econet Privilege Escalation Exploit
2011-09-09 00:00:00
Linux Kernel &lt;= 2.6.37 Local Privilege Escalation
2010-12-09 00:00:00
threatpost
threatpost
New Local Linux Kernel Root Exploit Published
2010-12-08 15:33:53
packetstorm
packetstorm
Linux Kernel Econet Privilege Escalation
2011-09-06 00:00:00
securityvulns
securityvulns
Linux kernel exploit
2010-12-09 00:00:00
NGS000267 Technical Advisory: Symantec Messaging Gateway SSH with backdoor user account plus privilege escalation to root due to very old Kernel
2012-12-02 00:00:00
[SECURITY] [DSA 2126-1] New Linux 2.6.26 packages fix several issues
2010-12-01 00:00:00
nessus
nessus
Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : linux, linux-{ec2,source-2.6.15} vulnerabilities (USN-1023-1)
2010-11-30 00:00:00
SuSE 10 Security Update : the Linux kernel (ZYPP Patch Number 7303)
2011-01-27 00:00:00
SuSE 10 Security Update : the Linux kernel (ZYPP Patch Number 7304)
2012-05-17 00:00:00
exploitdb
exploitdb
Linux Kernel &lt; 2.6.36.2 (Ubuntu 10.04) - &#039;Half-Nelson.c&#039; Econet Privilege Escalation
2011-09-05 00:00:00
Linux Kernel 2.6.37 (RedHat / Ubuntu 10.04) - &#039;Full-Nelson.c&#039; Local Privilege Escalation
2010-12-07 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2010-11-30 00:00:00
Linux kernel (OMAP4) vulnerabilities
2011-04-20 00:00:00
Linux kernel vulnerabilities
2011-02-25 00:00:00
suse
suse
local privilege escalation in kernel
2011-01-25 15:24:01
local privilege escalation, remote denial of in kernel
2011-02-11 13:07:24
local privilege escalation, remote denial of in kernel
2011-04-18 14:12:03
kitploit
kitploit
[Linux Exploit Suggester] Grab the Linux Operating Systems release version, and return a suggestive list of possible exploits
2013-08-29 00:48:00
debian
debian
[SECURITY] [DSA 2126-1] New Linux 2.6.26 packages fix several issues
2010-11-27 04:49:43
osv
osv
linux-2.6 - several issues
2010-11-26 00:00:00

5.8 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

9.2%

JSON
Related for CVE-2010-3850
ubuntucve1prion1exploitpack2openvas16f52seebug4threatpost1packetstorm1securityvulns4nessus12exploitdb2ubuntu6suse5kitploit1debian1osv1