CVE-2010-2242

2010-08-1900:00:00

ubuntu.com

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.001

Percentile

26.4%

JSON

Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper
mappings of privileged source ports, which allows guest OS users to bypass
intended access restrictions by leveraging IP address and source-port
values, as demonstrated by copying and deleting an NFS directory tree.

Bugs

<https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/591943>

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchlibvirt< 0.4.0-2ubuntu8.3UNKNOWN
ubuntu9.04noarchlibvirt< 0.6.1-0ubuntu5.2UNKNOWN
ubuntu9.10noarchlibvirt< 0.7.0-1ubuntu13.2UNKNOWN
ubuntu10.04noarchlibvirt< 0.7.5-5ubuntu27.5UNKNOWN
ubuntu10.10noarchlibvirt< 0.8.3-1ubuntu8UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	libvirt	< 0.4.0-2ubuntu8.3	UNKNOWN
ubuntu	9.04	noarch	libvirt	< 0.6.1-0ubuntu5.2	UNKNOWN
ubuntu	9.10	noarch	libvirt	< 0.7.0-1ubuntu13.2	UNKNOWN
ubuntu	10.04	noarch	libvirt	< 0.7.5-5ubuntu27.5	UNKNOWN
ubuntu	10.10	noarch	libvirt	< 0.8.3-1ubuntu8	UNKNOWN