CVE-2010-2476

EUVD-2010-2485
syscp 1.4.2.1 allows attackers to add arbitrary paths via the documentroot of a domain by appending a colon to it and setting the open basedir path to use that domain documentroot.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 66%
Affected Products (NVD)
VendorProductVersion
syscp_projectsyscp
1.4.2.1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
syscp
hardy
dne
lucid
ignored
maverick
ignored
natty
ignored
oneiric
ignored
precise
dne
quantal
dne
raring
dne
saucy
dne
Common Weakness Enumeration
References
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=587481
https://security-tracker.debian.org/tracker/CVE-2010-2476
https://www.openwall.com/lists/oss-security/2010/06/30/15
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=587481
https://security-tracker.debian.org/tracker/CVE-2010-2476
https://www.openwall.com/lists/oss-security/2010/06/30/15