Lucene search
HistoryMay 27, 2010 - 10:30 p.m.
CVE-2010-2104
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.7 Medium
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.2%
Directory traversal vulnerability in Orbit Downloader 3.0.0.4 and 3.0.0.5 allows user-assisted remote attackers to write arbitrary files via a metalink file containing directory traversal sequences in the name attribute of a file element.
Affected configurations
Node
orbitdownloaderorbit_downloaderMatch3.0.0.4
ORorbitdownloaderorbit_downloaderMatch3.0.0.5
Related
cve
cve
CVE-2010-2104
2010-05-27 22:30:02
openvas
openvas
Orbit Downloader metalink 'name' Directory Traversal Vulnerability
2010-06-04 00:00:00
Orbit Downloader metalink 'name' Directory Traversal Vulnerability
2010-06-04 00:00:00
prion
prion
Directory traversal
2010-05-27 22:30:00
cvelist
cvelist
CVE-2010-2104
2010-05-27 22:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.7 Medium
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.2%
Related for NVD:CVE-2010-2104