Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2010-4073
HistoryNov 29, 2010 - 12:00 a.m.

CVE-2010-4073

2010-11-2900:00:00
ubuntu.com
ubuntu.com
21

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

9.4%

JSON

The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize
certain structures, which allows local users to obtain potentially
sensitive information from kernel stack memory via vectors related to the
(1) compat_sys_semctl, (2) compat_sys_msgctl, and (3) compat_sys_shmctl
functions in ipc/compat.c; and the (4) compat_sys_mq_open and (5)
compat_sys_mq_getsetattr functions in ipc/compat_mq.c.

Bugs

Notes

Author Note
jdstrand dapper_linux-source-2.6.15 was marked as pending, but it was not included in 2.6.15-57.94. Marking as needed.
OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchlinux< 2.6.24-29.92UNKNOWN
ubuntu9.10noarchlinux< 2.6.31-22.73UNKNOWN
ubuntu10.04noarchlinux< 2.6.32-28.52UNKNOWN
ubuntu10.10noarchlinux< 2.6.35-25.43UNKNOWN
ubuntu9.10noarchlinux-ec2< 2.6.31-307.27UNKNOWN
ubuntu10.04noarchlinux-ec2< 2.6.32-312.24UNKNOWN
ubuntu9.10noarchlinux-fsl-imx51< 2.6.31-112.30UNKNOWN
ubuntu10.04noarchlinux-fsl-imx51< 2.6.31-608.22UNKNOWN
ubuntu10.04noarchlinux-lts-backport-maverick< 2.6.35-25.44~lucid1UNKNOWN
ubuntu10.04noarchlinux-mvl-dove< 2.6.32-214.30UNKNOWN
Rows per page:
1-10 of 121

Related

prion 1
cve 1
veracode 1
exploitpack 1
seebug 2
packetstorm 2
nessus 29
exploitdb 1
openvas 56
fedora 14
centos 1
redhat 4
oraclelinux 4
ubuntu 8
kitploit 1
securityvulns 3
suse 6
debian 1
osv 1
vmware 2
prion
prion
Design/Logic Flaw
2010-11-29 16:00:00
cve
cve
CVE-2010-4073
2010-11-29 16:00:00
veracode
veracode
Information Disclosure
2020-04-10 00:55:13
exploitpack
exploitpack
Linux Kernel 2.6.36.2 (Ubuntu 10.04) - Half-Nelson.c Econet Privilege Escalation
2011-09-05 00:00:00
seebug
seebug
Linux Kernel &lt; 2.6.36.2 Econet Privilege Escalation Exploit
2011-09-09 00:00:00
Linux Kernel < 2.6.36.2 - Econet Privilege Escalation Exploit
2014-07-01 00:00:00
packetstorm
packetstorm
Linux Kernel Econet Privilege Escalation
2011-09-06 00:00:00
Ubuntu Security Notice USN-1202-1
2011-09-14 00:00:00
nessus
nessus
Fedora 12 : kernel-2.6.32.26-175.fc12 (2010-18432)
2010-12-02 00:00:00
Fedora 14 : kernel-2.6.35.9-64.fc14 (2010-18493)
2010-12-06 00:00:00
Fedora 13 : kernel-2.6.34.7-63.fc13 (2010-18506)
2010-12-08 00:00:00
exploitdb
exploitdb
Linux Kernel &lt; 2.6.36.2 (Ubuntu 10.04) - &#039;Half-Nelson.c&#039; Econet Privilege Escalation
2011-09-05 00:00:00
openvas
openvas
Fedora Update for kernel FEDORA-2010-18493
2010-12-09 00:00:00
Fedora Update for kernel FEDORA-2010-18493
2010-12-09 00:00:00
CentOS Update for kernel CESA-2011:0162 centos4 x86_64
2012-07-30 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: kernel-2.6.35.9-64.fc14
2010-12-05 00:42:46
[SECURITY] Fedora 14 Update: kernel-2.6.35.13-92.fc14
2011-06-11 04:22:38
[SECURITY] Fedora 14 Update: kernel-2.6.35.13-91.fc14
2011-05-09 20:58:33
centos
centos
kernel security update
2011-01-27 09:25:23
redhat
redhat
(RHSA-2011:0162) Important: kernel security and bug fix update
2011-01-18 00:00:00
(RHSA-2011:0017) Important: Red Hat Enterprise Linux 5.6 kernel security and bug fix update
2011-01-13 00:00:00
(RHSA-2010:0958) Important: kernel-rt security and bug fix update
2010-12-08 00:00:00
oraclelinux
oraclelinux
kernel security and bug fix update
2011-01-18 00:00:00
Oracle Linux 4.9 kernel security and bug fix update
2011-02-23 00:00:00
kernel security and bug fix update
2011-02-12 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2011-08-09 00:00:00
Linux kernel vulnerabilities
2011-02-01 00:00:00
Linux kernel vulnerabilities
2011-02-25 00:00:00
kitploit
kitploit
[Linux Exploit Suggester] Grab the Linux Operating Systems release version, and return a suggestive list of possible exploits
2013-08-29 00:48:00
securityvulns
securityvulns
NGS000267 Technical Advisory: Symantec Messaging Gateway SSH with backdoor user account plus privilege escalation to root due to very old Kernel
2012-12-02 00:00:00
[SECURITY] [DSA 2126-1] New Linux 2.6.26 packages fix several issues
2010-12-01 00:00:00
Linux kernel multiple security vulnerabilities
2010-12-09 00:00:00
suse
suse
local privilege escalation in kernel
2011-01-14 16:35:40
remote denial of service in kernel
2010-12-14 13:42:46
local privilege escalation, remote denial of in kernel
2011-02-11 13:07:24
debian
debian
[SECURITY] [DSA 2126-1] New Linux 2.6.26 packages fix several issues
2010-11-27 04:49:43
osv
osv
linux-2.6 - several issues
2010-11-26 00:00:00
vmware
vmware
VMware ESXi and ESX updates to third party libraries and ESX Service Console
2011-10-12 00:00:00
VMware ESX third party updates for Service Console packages glibc and dhcp
2011-10-12 00:00:00

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

9.4%

JSON
Related for UB:CVE-2010-4073
prion1cve1veracode1exploitpack1seebug2packetstorm2nessus29exploitdb1openvas56fedora14centos1redhat4oraclelinux4ubuntu8kitploit1securityvulns3suse6debian1osv1vmware2