CVE-2010-4225

EUVD-2010-4199
Unspecified vulnerability in the mod_mono module for XSP in Mono 2.8.x before 2.8.2 allows remote attackers to obtain the source code for .aspx (ASP.NET) applications via unknown vectors related to an "unloading bug."
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 67%
Affected Products (NVD)
VendorProductVersion
monomono
2.8
monomono
2.8.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
mono
bookworm
6.8.0.105+dfsg-3.3
fixed
bullseye
6.8.0.105+dfsg-3.3~deb11u1
fixed
sid
6.12.0.199+dfsg-2
fixed
trixie
6.12.0.199+dfsg-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mono
dapper
ignored
hardy
ignored
karmic
ignored
lucid
not-affected
maverick
not-affected
natty
not-affected
Common Weakness Enumeration
References
http://osvdb.org/70312
http://secunia.com/advisories/42842
http://www.mono-project.com/Vulnerabilities#XSP.2Fmod_mono_source_code_disclosure
http://www.securityfocus.com/bid/45711
http://www.vupen.com/english/advisories/2011/0051
https://exchange.xforce.ibmcloud.com/vulnerabilities/64532
http://osvdb.org/70312
http://secunia.com/advisories/42842
http://www.mono-project.com/Vulnerabilities#XSP.2Fmod_mono_source_code_disclosure
http://www.securityfocus.com/bid/45711
http://www.vupen.com/english/advisories/2011/0051
https://exchange.xforce.ibmcloud.com/vulnerabilities/64532