CVE-2010-0136 :: Enginsight Vulnerability Database

Severity

UNKNOWN

AV:N/AC:M/Au:N/C:C/I:C/A:C

Atk. Vector

NETWORK

Atk. Complexity

MEDIUM

Base Score

CVSS 3.x

EPSS Score

Percentile: 77%

Vendor	Product	Version
apache	openoffice	2.0.4
apache	openoffice	2.4.1
apache	openoffice	3.1.1
canonical	ubuntu_linux	8.04
canonical	ubuntu_linux	8.10
canonical	ubuntu_linux	9.04
canonical	ubuntu_linux	9.10
debian	debian_linux	4.0
debian	debian_linux	5.0

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')
The software constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

References

http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00005.html

http://secunia.com/advisories/38695

http://secunia.com/advisories/38921

http://securitytracker.com/id?1023588

http://www.debian.org/security/2010/dsa-1995

http://www.mail-archive.com/debian-openoffice%40lists.debian.org/msg23178.html

http://www.mandriva.com/security/advisories?name=MDVSA-2010:221

http://www.securityfocus.com/bid/38245

http://www.ubuntu.com/usn/USN-903-1

http://www.vupen.com/english/advisories/2010/0635

http://www.vupen.com/english/advisories/2010/2905