CVE-2010-3881 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Vector
NIST	NIST	2.1 UNKNOWN	LOCAL	LOW	AV:L/AC:L/Au:N/C:P/I:N/A:N
redhat	CNA	---			---
CVE	ADP	---			---

Base Score

CVSS 3.x

EPSS Score

Percentile: 23%

Vendor	Product	Version
linux	linux_kernel	𝑥 < 2.6.36.2
redhat	enterprise_linux_server	6.0
redhat	enterprise_linux_workstation	6.0

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

linux

natty	not-affected
maverick	Fixed 2.6.35-25.43 released
lucid	Fixed 2.6.32-28.52 released
karmic	not-affected
hardy	not-affected
dapper	dne

linux-ec2

natty	dne
maverick	ignored
lucid	Fixed 2.6.32-313.25 released
karmic	not-affected
hardy	dne
dapper	dne

linux-fsl-imx51

natty	dne
maverick	dne
lucid	not-affected
karmic	not-affected
hardy	dne
dapper	dne

linux-lts-backport-maverick

natty	dne
maverick	dne
lucid	Fixed 2.6.35-25.44 released
karmic	dne
hardy	dne
dapper	dne

linux-lts-backport-natty

natty	dne
maverick	dne
lucid	not-affected
hardy	dne

linux-mvl-dove

natty	dne
maverick	Fixed 2.6.32-414.30 released
lucid	Fixed 2.6.32-211.27 released
karmic	ignored
hardy	dne
dapper	dne

linux-source-2.6.15

natty	dne
maverick	dne
lucid	dne
karmic	dne
hardy	dne
dapper	not-affected

linux-ti-omap4

natty	not-affected
maverick	Fixed 2.6.35-903.16 released
lucid	dne
karmic	dne
hardy	dne
dapper	dne

Common Weakness Enumeration

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=97e69aa62f8b5d338d6cff49be09e37cc1262838

http://git.kernel.org/?p=virt/kvm/kvm.git%3Ba=commit%3Bh=831d9d02f9522e739825a51a11e3bc5aa531a905

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html

http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html

http://openwall.com/lists/oss-security/2010/11/04/10

http://openwall.com/lists/oss-security/2010/11/05/4

http://rhn.redhat.com/errata/RHSA-2010-0998.html

http://secunia.com/advisories/42932

http://securitytracker.com/id?1024912

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2

http://www.securityfocus.com/bid/44666

http://www.spinics.net/lists/kvm/msg44130.html

http://www.vupen.com/english/advisories/2010/3287

http://www.vupen.com/english/advisories/2011/0124

http://www.vupen.com/english/advisories/2011/0298

https://bugzilla.redhat.com/show_bug.cgi?id=649920