Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-2322
HistoryJun 18, 2010 - 6:30 p.m.

CVE-2010-2322

2010-06-1818:30:01
CWE-22
[email protected]
web.nvd.nist.gov

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

6.6 Medium

AI Score

Confidence

Low

0.013 Low

EPSS

Percentile

86.1%

JSON

Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.

Affected configurations

NVD
Node
matthias_klosefastjarMatch0.98

Related

prion 2
nessus 25
debiancve 2
cvelist 3
cve 4
ubuntucve 3
gentoo 2
redhat 3
openvas 27
oraclelinux 3
fedora 3
securityvulns 3
nvd 3
suse 2
veracode 2
debian 1
centos 2
ubuntu 1
vmware 1
prion
prion
Path traversal
2010-06-18 18:30:00
Directory traversal
2010-06-18 18:30:00
nessus
nessus
openSUSE 15 Security Update : fastjar (openSUSE-SU-2021:2565-1)
2021-07-30 00:00:00
SUSE SLES12 Security Update : fastjar (SUSE-SU-2021:2635-1)
2021-08-06 00:00:00
openSUSE 15 Security Update : fastjar (openSUSE-SU-2021:1107-1)
2021-08-10 00:00:00
debiancve
debiancve
CVE-2010-2322
2010-06-18 18:30:01
CVE-2010-0831
2010-06-18 18:30:01
cvelist
cvelist
CVE-2010-2322
2010-06-18 18:00:00
CVE-2010-0831
2010-06-18 18:00:00
CVE-2006-3619
2006-07-25 19:00:00
cve
cve
CVE-2010-2322
2010-06-18 18:30:01
CVE-2010-0831
2010-06-18 18:30:01
CVE-2006-3619
2006-07-25 19:17:00
ubuntucve
ubuntucve
CVE-2010-2322
2010-06-18 00:00:00
CVE-2010-0831
2010-05-25 00:00:00
CVE-2006-3619
2006-07-25 00:00:00
gentoo
gentoo
fastjar: Directory traversal
2012-09-28 00:00:00
VMware Workstation and Player: Multiple vulnerabilities
2007-11-18 00:00:00
redhat
redhat
(RHSA-2011:0025) Low: gcc security and bug fix update
2011-01-13 00:00:00
(RHSA-2007:0220) Moderate: gcc security and bug fix update
2007-05-01 00:00:00
(RHSA-2007:0473) Moderate: gcc security and bug fix update
2007-06-11 13:45:45
openvas
openvas
RedHat Update for gcc RHSA-2011:0025-01
2011-01-14 00:00:00
Gentoo Security Advisory GLSA 201209-21 (fastjar)
2012-10-03 00:00:00
Oracle: Security Advisory (ELSA-2011-0025)
2015-10-06 00:00:00
oraclelinux
oraclelinux
gcc security and bug fix update
2011-01-20 00:00:00
Moderate: gcc security and bug fix update
2007-06-20 00:00:00
Moderate: gcc security and bug fix update
2007-05-17 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: gcc-4.4.4-10.fc13
2010-07-05 22:05:54
[SECURITY] Fedora 12 Update: gcc-4.4.4-10.fc12
2010-07-06 17:17:47
[SECURITY] Fedora 12 Update: libtool-2.2.6-18.fc12.1
2010-07-06 17:17:47
securityvulns
securityvulns
fastjar archiver directory traversal
2010-06-23 00:00:00
[ MDVSA-2010:122 ] fastjar
2010-06-23 00:00:00
VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player
2007-09-21 00:00:00
nvd
nvd
CVE-2010-0831
2010-06-18 18:30:01
CVE-2006-3619
2006-07-25 19:17:00
CVE-2005-3990
2005-12-04 23:03:00
suse
suse
Security update for fastjar (low)
2021-08-10 00:00:00
Security update for fastjar (low)
2021-07-29 00:00:00
veracode
veracode
Arbitrary File Overwrite
2020-04-10 00:59:13
Arbitrary File Overwrite
2020-04-10 00:59:12
debian
debian
[SECURITY] [DSA 1170-1] New fastjar packages fix directory traversal
2006-09-06 17:31:24
centos
centos
cpp, gcc, libf2c, libgcc, libgcj, libgnat, libobjc, libstdc++ security update
2007-05-02 04:14:53
cpp, gcc, libf2c, libgcc, libgcj, libgnat, libobjc, libstdc++ security update
2007-06-11 20:18:35
ubuntu
ubuntu
fastjar vulnerability
2010-06-21 00:00:00
vmware
vmware
Updated versions of all supported hosted products and all ESX 2x products and patches for ESX 30x address critical security updates. Service Console security updates for samba, bind, krb5, vixie-cron, shadow-utils, openldap, pam, gcc, and gdb packages.
2007-09-18 00:00:00

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

6.6 Medium

AI Score

Confidence

Low

0.013 Low

EPSS

Percentile

86.1%

JSON
Related for NVD:CVE-2010-2322
prion2nessus25debiancve2cvelist3cve4ubuntucve3gentoo2redhat3openvas27oraclelinux3fedora3securityvulns3nvd3suse2veracode2debian1centos2ubuntu1vmware1