Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-3894
HistoryNov 12, 2010 - 10:00 p.m.

CVE-2010-3894

2010-11-1222:00:02
CWE-119
[email protected]
web.nvd.nist.gov
1

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.496 Medium

EPSS

Percentile

97.5%

JSON

Stack-based buffer overflow in the Java_com_ibm_es_oss_CryptionNative_ESEncrypt function in /opt/IBM/es/lib/libffq.cryptionjni.so in the login form in the administration interface in IBM OmniFind Enterprise Edition before 8.5 FP6 allows remote attackers to execute arbitrary code via a long password.

Affected configurations

NVD
Node
ibmomnifindRange≤8.5-enterprise
OR
ibmomnifindMatch6.1-enterprise
OR
ibmomnifindMatch8.0-enterprise
OR
ibmomnifindMatch8.4-enterprise

Related

exploitpack 1
cvelist 1
prion 1
cve 1
exploitdb 1
securityvulns 2
packetstorm 1
exploitpack
exploitpack
IBM OmniFind - Buffer Overflow
2010-11-09 00:00:00
cvelist
cvelist
CVE-2010-3894
2010-11-12 21:00:00
prion
prion
Stack overflow
2010-11-12 22:00:00
cve
cve
CVE-2010-3894
2010-11-12 22:00:02
exploitdb
exploitdb
IBM OmniFind - Buffer Overflow
2010-11-09 00:00:00
securityvulns
securityvulns
IBM OmniFind - several vulnerabilities
2010-11-18 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2010-11-18 00:00:00
packetstorm
packetstorm
IBM OmniFind Cross Site Scripting / Privilege Escalation
2010-11-10 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.496 Medium

EPSS

Percentile

97.5%

JSON
Related for NVD:CVE-2010-3894
exploitpack1cvelist1prion1cve1exploitdb1securityvulns2packetstorm1