7.2 - RHSA-2010:0793

Executive Summary

Summary
Title	glibc security update

Informations
Name	RHSA-2010:0793	First vendor Publication	2010-10-25
Vendor	RedHat	Last vendor Modification	2010-10-25
Severity (Vendor)	Important	Revision	01

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	7.2	Attack Range	Local
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	3.9	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Problem Description:

Updated glibc packages that fix one security issue are now available for Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64

3. Description:

The glibc packages contain the standard C libraries used by multiple programs on the system. These packages contain the standard C and the standard math libraries. Without these two libraries, a Linux system cannot function properly.

It was discovered that the glibc dynamic linker/loader did not perform sufficient safety checks when loading dynamic shared objects (DSOs) to provide callbacks for its auditing API during the execution of privileged programs. A local attacker could use this flaw to escalate their privileges via a carefully-chosen system DSO library containing unsafe constructors. (CVE-2010-3856)

Red Hat would like to thank Ben Hawkes and Tavis Ormandy for reporting this issue.

All users should upgrade to these updated packages, which contain a backported patch to correct this issue.

4. Solution:

Before applying this update, make sure all previously-released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

5. Bugs fixed (http://bugzilla.redhat.com/):

645672 - CVE-2010-3856 glibc: ld.so arbitrary DSO loading via LD_AUDIT in setuid/setgid programs

Original Source

Url : https://rhn.redhat.com/errata/RHSA-2010-0793.html

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-264	Permissions, Privileges, and Access Controls

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:12604

Oval ID:	oval:org.mitre.oval:def:12604
Title:	DSA-2122-1 glibc -- missing input sanitisation
Description:	Ben Hawkes and Tavis Ormandy discovered that the dynamic loader in GNU libc allows local users to gain root privileges using a crafted LD_AUDIT environment variable. For the stable distribution, this problem has been fixed in version 2.7-18lenny6. For the upcoming stable distribution, this problem has been fixed in version 2.11.2-6+squeeze1 of the eglibc package. For the unstable distribution, this problem will be fixed soon. We recommend that you upgrade your glibc packages.
Family:	unix	Class:	patch
Reference(s):	DSA-2122-1 CVE-2010-3847 CVE-2010-3856	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	glibc
Definition Synopsis:
Debian GNU/Linux 5.0 is installed Architecture section Architecture independet section Installed architecture is all AND Packages section glibc-doc DPKG is earlier than 2.7-18lenny6 AND glibc-source DPKG is earlier than 2.7-18lenny6 AND locales DPKG is earlier than 2.7-18lenny6 OR Architecture depended section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is mips AND Installed architecture is arm AND Packages section libc6-prof DPKG is earlier than 2.7-18lenny6 AND nscd DPKG is earlier than 2.7-18lenny6 AND libc6-dev DPKG is earlier than 2.7-18lenny6 AND libc6-pic DPKG is earlier than 2.7-18lenny6 AND libc6 DPKG is earlier than 2.7-18lenny6 AND locales-all DPKG is earlier than 2.7-18lenny6 AND libc6-dbg DPKG is earlier than 2.7-18lenny6 OR Architecture depended section Installed architecture is s390 AND Packages section libc6-dev-s390x DPKG is earlier than 2.7-18lenny6 AND libc6-s390x DPKG is earlier than 2.7-18lenny6 OR Supported platform section Installed architecture is mips AND Packages section libc6-mips64 DPKG is earlier than 2.7-18lenny6 AND libc6-dev-mips64 DPKG is earlier than 2.7-18lenny6 AND libc6-dev-mipsn32 DPKG is earlier than 2.7-18lenny6 AND libc6-mipsn32 DPKG is earlier than 2.7-18lenny6

Definition Id: oval:org.mitre.oval:def:12802

Oval ID:	oval:org.mitre.oval:def:12802
Title:	DSA-2122-2 glibc -- missing input sanitisation
Description:	Colin Watson discovered that the update for stable relased in DSA-2122-1 did not complete address the underlying security issue in all possible scenarios.
Family:	unix	Class:	patch
Reference(s):	DSA-2122-2 CVE-2010-3847 CVE-2010-3856	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	glibc
Definition Synopsis:
Debian GNU/Linux 5.0 is installed AND Installed architecture is all AND glibc DPKG is earlier than 2.7-18lenny7

Definition Id: oval:org.mitre.oval:def:13244

Oval ID:	oval:org.mitre.oval:def:13244
Title:	USN-1009-2 -- eglibc, glibc vulnerability
Description:	USN-1009-1 fixed vulnerabilities in the GNU C library. Colin Watson discovered that the fixes were incomplete and introduced flaws with setuid programs loading libraries that used dynamic string tokens in their RPATH. If the "man" program was installed setuid, a local attacker could exploit this to gain "man" user privileges, potentially leading to further privilege escalations. Default Ubuntu installations were not affected. Original advisory details: Tavis Ormandy discovered multiple flaws in the GNU C Library�s handling of the LD_AUDIT environment variable when running a privileged binary. A local attacker could exploit this to gain root privileges
Family:	unix	Class:	patch
Reference(s):	USN-1009-2 CVE-2010-3847 CVE-2010-3856	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 10.10 Ubuntu 9.10 Ubuntu 10.04	Product(s):	eglibc glibc
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section glibc-doc DPKG is earlier than 2.7-10ubuntu8 AND glibc-source DPKG is earlier than 2.7-10ubuntu8 OR Architecture depended section Supported architectures section Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is i386 AND Packages section libnss-files-udeb DPKG is earlier than 2.7-10ubuntu8 AND libc6-prof DPKG is earlier than 2.7-10ubuntu8 AND libc6 DPKG is earlier than 2.7-10ubuntu8 AND libc6-dev DPKG is earlier than 2.7-10ubuntu8 AND libc6-pic DPKG is earlier than 2.7-10ubuntu8 AND libnss-dns-udeb DPKG is earlier than 2.7-10ubuntu8 AND nscd DPKG is earlier than 2.7-10ubuntu8 AND libc6-dbg DPKG is earlier than 2.7-10ubuntu8 AND libc6-udeb DPKG is earlier than 2.7-10ubuntu8 OR Architecture depended section Installed architecture is i386 AND Packages section libc6-amd64 DPKG is earlier than 2.7-10ubuntu8 AND libc6-dev-amd64 DPKG is earlier than 2.7-10ubuntu8 AND libc6-i686 DPKG is earlier than 2.7-10ubuntu8 AND libc6-xen DPKG is earlier than 2.7-10ubuntu8 OR Supported platform section Installed architecture is powerpc AND Packages section libc6-dev-ppc64 DPKG is earlier than 2.7-10ubuntu8 AND libc6-ppc64 DPKG is earlier than 2.7-10ubuntu8 OR Release section Ubuntu 10.10 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section glibc-doc DPKG is earlier than 2.12.1-0ubuntu10.1 AND eglibc-source DPKG is earlier than 2.12.1-0ubuntu10.1 OR Architecture depended section Supported architectures section Installed architecture is powerpc AND Installed architecture is armel AND Installed architecture is amd64 AND Installed architecture is i386 AND Packages section libc-bin DPKG is earlier than 2.12.1-0ubuntu10.1 AND libnss-files-udeb DPKG is earlier than 2.12.1-0ubuntu10.1 AND libc6-prof DPKG is earlier than 2.12.1-0ubuntu10.1 AND libc6 DPKG is earlier than 2.12.1-0ubuntu10.1 AND libc6-dev DPKG is earlier than 2.12.1-0ubuntu10.1 AND libc6-pic DPKG is earlier than 2.12.1-0ubuntu10.1 AND libc-dev-bin DPKG is earlier than 2.12.1-0ubuntu10.1 AND libnss-dns-udeb DPKG is earlier than 2.12.1-0ubuntu10.1 AND nscd DPKG is earlier than 2.12.1-0ubuntu10.1 AND libc6-dbg DPKG is earlier than 2.12.1-0ubuntu10.1 AND libc6-udeb DPKG is earlier than 2.12.1-0ubuntu10.1 OR Architecture depended section Installed architecture is i386 AND Packages section libc6-amd64 DPKG is earlier than 2.12.1-0ubuntu10.1 AND libc6-dev-amd64 DPKG is earlier than 2.12.1-0ubuntu10.1 AND libc6-xen DPKG is earlier than 2.12.1-0ubuntu10.1 OR Supported platform section Installed architecture is powerpc AND Packages section libc6-dev-ppc64 DPKG is earlier than 2.12.1-0ubuntu10.1 AND libc6-ppc64 DPKG is earlier than 2.12.1-0ubuntu10.1 OR Release section Ubuntu 9.10 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section glibc-doc DPKG is earlier than 2.10.1-0ubuntu19 AND eglibc-source DPKG is earlier than 2.10.1-0ubuntu19 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is lpia AND Packages section libc-bin DPKG is earlier than 2.10.1-0ubuntu19 AND libnss-files-udeb DPKG is earlier than 2.10.1-0ubuntu19 AND libc6-prof DPKG is earlier than 2.10.1-0ubuntu19 AND libc6 DPKG is earlier than 2.10.1-0ubuntu19 AND libc6-dev DPKG is earlier than 2.10.1-0ubuntu19 AND libc6-pic DPKG is earlier than 2.10.1-0ubuntu19 AND libc-dev-bin DPKG is earlier than 2.10.1-0ubuntu19 AND libnss-dns-udeb DPKG is earlier than 2.10.1-0ubuntu19 AND nscd DPKG is earlier than 2.10.1-0ubuntu19 AND libc6-dbg DPKG is earlier than 2.10.1-0ubuntu19 AND libc6-udeb DPKG is earlier than 2.10.1-0ubuntu19 OR Architecture depended section Installed architecture is amd64 AND Packages section libc6-dev-i386 DPKG is earlier than 2.10.1-0ubuntu19 AND libc6-i386 DPKG is earlier than 2.10.1-0ubuntu19 OR Supported platform section Installed architecture is powerpc AND Packages section libc6-dev-ppc64 DPKG is earlier than 2.10.1-0ubuntu19 AND libc6-ppc64 DPKG is earlier than 2.10.1-0ubuntu19 OR Release section Ubuntu 10.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section glibc-doc DPKG is earlier than 2.11.1-0ubuntu7.7 AND eglibc-source DPKG is earlier than 2.11.1-0ubuntu7.7 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is armel AND Packages section libc-bin DPKG is earlier than 2.11.1-0ubuntu7.7 AND libnss-files-udeb DPKG is earlier than 2.11.1-0ubuntu7.7 AND nscd DPKG is earlier than 2.11.1-0ubuntu7.7 AND libnss-dns-udeb DPKG is earlier than 2.11.1-0ubuntu7.7 AND libc6-dev DPKG is earlier than 2.11.1-0ubuntu7.7 AND libc6-pic DPKG is earlier than 2.11.1-0ubuntu7.7 AND libc-dev-bin DPKG is earlier than 2.11.1-0ubuntu7.7 AND libc6 DPKG is earlier than 2.11.1-0ubuntu7.7 AND libc6-prof DPKG is earlier than 2.11.1-0ubuntu7.7 AND libc6-dbg DPKG is earlier than 2.11.1-0ubuntu7.7 AND libc6-udeb DPKG is earlier than 2.11.1-0ubuntu7.7 OR Architecture depended section Installed architecture is sparc AND Packages section libc6-dev-sparc64 DPKG is earlier than 2.11.1-0ubuntu7.7 AND libc6-sparc64v DPKG is earlier than 2.11.1-0ubuntu7.7 AND libc6-sparcv9b DPKG is earlier than 2.11.1-0ubuntu7.7 AND libc6-sparcv9v2 DPKG is earlier than 2.11.1-0ubuntu7.7 AND libc6-sparc64b DPKG is earlier than 2.11.1-0ubuntu7.7 AND libc6-sparc64v2 DPKG is earlier than 2.11.1-0ubuntu7.7 AND libc6-sparc64 DPKG is earlier than 2.11.1-0ubuntu7.7 AND libc6-sparcv9v DPKG is earlier than 2.11.1-0ubuntu7.7 OR Supported platform section Installed architecture is powerpc AND Packages section libc6-dev-ppc64 DPKG is earlier than 2.11.1-0ubuntu7.7 AND libc6-ppc64 DPKG is earlier than 2.11.1-0ubuntu7.7

Definition Id: oval:org.mitre.oval:def:13489

Oval ID:	oval:org.mitre.oval:def:13489
Title:	USN-1009-1 -- glibc, eglibc vulnerabilities
Description:	Tavis Ormandy discovered multiple flaws in the GNU C Library�s handling of the LD_AUDIT environment variable when running a privileged binary. A local attacker could exploit this to gain root privileges
Family:	unix	Class:	patch
Reference(s):	USN-1009-1 CVE-2010-3847 CVE-2010-3856	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 10.10 Ubuntu 10.04 Ubuntu 9.04 Ubuntu 9.10	Product(s):	glibc eglibc
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section glibc-doc DPKG is earlier than 2.7-10ubuntu7 AND glibc-source DPKG is earlier than 2.7-10ubuntu7 OR Architecture depended section Supported architectures section Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is i386 AND Packages section libnss-files-udeb DPKG is earlier than 2.7-10ubuntu7 AND libc6-prof DPKG is earlier than 2.7-10ubuntu7 AND libc6 DPKG is earlier than 2.7-10ubuntu7 AND libc6-dev DPKG is earlier than 2.7-10ubuntu7 AND libc6-pic DPKG is earlier than 2.7-10ubuntu7 AND libnss-dns-udeb DPKG is earlier than 2.7-10ubuntu7 AND nscd DPKG is earlier than 2.7-10ubuntu7 AND libc6-dbg DPKG is earlier than 2.7-10ubuntu7 AND libc6-udeb DPKG is earlier than 2.7-10ubuntu7 OR Architecture depended section Installed architecture is i386 AND Packages section libc6-amd64 DPKG is earlier than 2.7-10ubuntu7 AND libc6-dev-amd64 DPKG is earlier than 2.7-10ubuntu7 AND libc6-i686 DPKG is earlier than 2.7-10ubuntu7 AND libc6-xen DPKG is earlier than 2.7-10ubuntu7 OR Supported platform section Installed architecture is powerpc AND Packages section libc6-dev-ppc64 DPKG is earlier than 2.7-10ubuntu7 AND libc6-ppc64 DPKG is earlier than 2.7-10ubuntu7 OR Release section Ubuntu 10.10 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section glibc-doc DPKG is earlier than 2.12.1-0ubuntu8 AND eglibc-source DPKG is earlier than 2.12.1-0ubuntu8 OR Architecture depended section Supported architectures section Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is i386 AND Packages section libc-bin DPKG is earlier than 2.12.1-0ubuntu8 AND libnss-files-udeb DPKG is earlier than 2.12.1-0ubuntu8 AND nscd DPKG is earlier than 2.12.1-0ubuntu8 AND libnss-dns-udeb DPKG is earlier than 2.12.1-0ubuntu8 AND libc6-dev DPKG is earlier than 2.12.1-0ubuntu8 AND libc6-pic DPKG is earlier than 2.12.1-0ubuntu8 AND libc-dev-bin DPKG is earlier than 2.12.1-0ubuntu8 AND libc6 DPKG is earlier than 2.12.1-0ubuntu8 AND libc6-prof DPKG is earlier than 2.12.1-0ubuntu8 AND libc6-dbg DPKG is earlier than 2.12.1-0ubuntu8 AND libc6-udeb DPKG is earlier than 2.12.1-0ubuntu8 OR Architecture depended section Installed architecture is i386 AND Packages section libc6-amd64 DPKG is earlier than 2.12.1-0ubuntu8 AND libc6-dev-amd64 DPKG is earlier than 2.12.1-0ubuntu8 AND libc6-xen DPKG is earlier than 2.12.1-0ubuntu8 OR Supported platform section Installed architecture is powerpc AND Packages section libc6-dev-ppc64 DPKG is earlier than 2.12.1-0ubuntu8 AND libc6-ppc64 DPKG is earlier than 2.12.1-0ubuntu8 OR Release section Ubuntu 10.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section glibc-doc DPKG is earlier than 2.11.1-0ubuntu7.5 AND eglibc-source DPKG is earlier than 2.11.1-0ubuntu7.5 OR Architecture depended section Installed architecture is sparc AND Packages section libc-bin DPKG is earlier than 2.11.1-0ubuntu7.5 AND libnss-files-udeb DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6-dev-sparc64 DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6-sparc64v DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6-sparcv9b DPKG is earlier than 2.11.1-0ubuntu7.5 AND nscd DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6-sparcv9v2 DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6 DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6-sparc64b DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6-dev DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6-sparc64v2 DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6-pic DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc-dev-bin DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6-dbg DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6-prof DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6-sparc64 DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6-sparcv9v DPKG is earlier than 2.11.1-0ubuntu7.5 AND libnss-dns-udeb DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6-udeb DPKG is earlier than 2.11.1-0ubuntu7.5 OR Architecture depended section Installed architecture is i386 AND Packages section libc-bin DPKG is earlier than 2.11.1-0ubuntu7.5 AND libnss-files-udeb DPKG is earlier than 2.11.1-0ubuntu7.5 AND nscd DPKG is earlier than 2.11.1-0ubuntu7.5 AND libnss-dns-udeb DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6 DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6-dev DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6-amd64 DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6-pic DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc-dev-bin DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6-dbg DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6-prof DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6-dev-amd64 DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6-i686 DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6-xen DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6-udeb DPKG is earlier than 2.11.1-0ubuntu7.5 OR Supported platform section Installed architecture is amd64 AND Packages section libc-bin DPKG is earlier than 2.11.1-0ubuntu7.5 AND libnss-files-udeb DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6-i386 DPKG is earlier than 2.11.1-0ubuntu7.5 AND libnss-dns-udeb DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6-dev-i386 DPKG is earlier than 2.11.1-0ubuntu7.5 AND nscd DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6-dev DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6-pic DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc-dev-bin DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6 DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6-prof DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6-dbg DPKG is earlier than 2.11.1-0ubuntu7.5 AND libc6-udeb DPKG is earlier than 2.11.1-0ubuntu7.5 OR Release section Ubuntu 9.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section glibc-doc DPKG is earlier than 2.9-4ubuntu6.3 AND glibc-source DPKG is earlier than 2.9-4ubuntu6.3 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section libnss-files-udeb DPKG is earlier than 2.9-4ubuntu6.3 AND nscd DPKG is earlier than 2.9-4ubuntu6.3 AND libc6 DPKG is earlier than 2.9-4ubuntu6.3 AND libc6-dev DPKG is earlier than 2.9-4ubuntu6.3 AND libc6-pic DPKG is earlier than 2.9-4ubuntu6.3 AND libnss-dns-udeb DPKG is earlier than 2.9-4ubuntu6.3 AND libc6-prof DPKG is earlier than 2.9-4ubuntu6.3 AND libc6-dbg DPKG is earlier than 2.9-4ubuntu6.3 AND libc6-udeb DPKG is earlier than 2.9-4ubuntu6.3 OR Architecture depended section Installed architecture is sparc AND Packages section libc6-dev-sparc64 DPKG is earlier than 2.9-4ubuntu6.3 AND libc6-sparc64v DPKG is earlier than 2.9-4ubuntu6.3 AND libc6-sparcv9b DPKG is earlier than 2.9-4ubuntu6.3 AND libc6-sparcv9v2 DPKG is earlier than 2.9-4ubuntu6.3 AND libc6-sparc64b DPKG is earlier than 2.9-4ubuntu6.3 AND libc6-sparc64v2 DPKG is earlier than 2.9-4ubuntu6.3 AND libc6-sparc64 DPKG is earlier than 2.9-4ubuntu6.3 AND libc6-sparcv9v DPKG is earlier than 2.9-4ubuntu6.3 OR Supported platform section Installed architecture is powerpc AND Packages section libc6-dev-ppc64 DPKG is earlier than 2.9-4ubuntu6.3 AND libc6-ppc64 DPKG is earlier than 2.9-4ubuntu6.3 OR Release section Ubuntu 9.10 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section glibc-doc DPKG is earlier than 2.10.1-0ubuntu18 AND eglibc-source DPKG is earlier than 2.10.1-0ubuntu18 OR Architecture depended section Supported architectures section Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is i386 AND Packages section libc-bin DPKG is earlier than 2.10.1-0ubuntu18 AND libnss-files-udeb DPKG is earlier than 2.10.1-0ubuntu18 AND libc6-prof DPKG is earlier than 2.10.1-0ubuntu18 AND libc6 DPKG is earlier than 2.10.1-0ubuntu18 AND libc6-dev DPKG is earlier than 2.10.1-0ubuntu18 AND libc6-pic DPKG is earlier than 2.10.1-0ubuntu18 AND libc-dev-bin DPKG is earlier than 2.10.1-0ubuntu18 AND libnss-dns-udeb DPKG is earlier than 2.10.1-0ubuntu18 AND nscd DPKG is earlier than 2.10.1-0ubuntu18 AND libc6-dbg DPKG is earlier than 2.10.1-0ubuntu18 AND libc6-udeb DPKG is earlier than 2.10.1-0ubuntu18 OR Architecture depended section Installed architecture is i386 AND Packages section libc6-amd64 DPKG is earlier than 2.10.1-0ubuntu18 AND libc6-dev-amd64 DPKG is earlier than 2.10.1-0ubuntu18 AND libc6-i686 DPKG is earlier than 2.10.1-0ubuntu18 AND libc6-xen DPKG is earlier than 2.10.1-0ubuntu18 OR Supported platform section Installed architecture is powerpc AND Packages section libc6-dev-ppc64 DPKG is earlier than 2.10.1-0ubuntu18 AND libc6-ppc64 DPKG is earlier than 2.10.1-0ubuntu18

Definition Id: oval:org.mitre.oval:def:20315

Oval ID:	oval:org.mitre.oval:def:20315
Title:	VMware ESX third party updates for Service Console packages glibc, sudo, and openldap
Description:	ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use of the LD_AUDIT environment variable to reference dynamic shared objects (DSOs) as audit objects, which allows local users to gain privileges by leveraging an unsafe DSO located in a trusted library directory, as demonstrated by libpcprofile.so.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-3856	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201101226-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201101226-SG is not installed OR Patch ESX400-201101405-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201101405-SG is not installed

Definition Id: oval:org.mitre.oval:def:21997

Oval ID:	oval:org.mitre.oval:def:21997
Title:	RHSA-2010:0793: glibc security update (Important)
Description:	ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use of the LD_AUDIT environment variable to reference dynamic shared objects (DSOs) as audit objects, which allows local users to gain privileges by leveraging an unsafe DSO located in a trusted library directory, as demonstrated by libpcprofile.so.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0793-01 CESA-2010:0793 CVE-2010-3856	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	glibc
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section glibc-common is earlier than 0:2.5-49.el5_5.7 AND glibc-headers is earlier than 0:2.5-49.el5_5.7 AND glibc-devel is earlier than 0:2.5-49.el5_5.7 AND glibc is earlier than 0:2.5-49.el5_5.7 AND nscd is earlier than 0:2.5-49.el5_5.7 AND glibc-utils is earlier than 0:2.5-49.el5_5.7

Definition Id: oval:org.mitre.oval:def:22327

Oval ID:	oval:org.mitre.oval:def:22327
Title:	RHSA-2010:0872: glibc security and bug fix update (Important)
Description:	ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use of the LD_AUDIT environment variable to reference dynamic shared objects (DSOs) as audit objects, which allows local users to gain privileges by leveraging an unsafe DSO located in a trusted library directory, as demonstrated by libpcprofile.so.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0872-02 CVE-2010-3847 CVE-2010-3856	Version:	29
Platform(s):	Red Hat Enterprise Linux 6	Product(s):	glibc
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section glibc-devel is earlier than 0:2.12-1.7.el6_0.3 AND glibc-utils is earlier than 0:2.12-1.7.el6_0.3 AND glibc is earlier than 0:2.12-1.7.el6_0.3 AND nscd is earlier than 0:2.12-1.7.el6_0.3 AND glibc-static is earlier than 0:2.12-1.7.el6_0.3 AND glibc-common is earlier than 0:2.12-1.7.el6_0.3 AND glibc-headers is earlier than 0:2.12-1.7.el6_0.3

Definition Id: oval:org.mitre.oval:def:22846

Oval ID:	oval:org.mitre.oval:def:22846
Title:	ELSA-2010:0793: glibc security update (Important)
Description:	ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use of the LD_AUDIT environment variable to reference dynamic shared objects (DSOs) as audit objects, which allows local users to gain privileges by leveraging an unsafe DSO located in a trusted library directory, as demonstrated by libpcprofile.so.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0793-01 CVE-2010-3856	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	glibc
Definition Synopsis:
Oracle Linux 5.x rpm test glibc-common is earlier than 0:2.5-49.el5_5.7 AND glibc-headers is earlier than 0:2.5-49.el5_5.7 AND glibc-devel is earlier than 0:2.5-49.el5_5.7 AND glibc is earlier than 0:2.5-49.el5_5.7 AND nscd is earlier than 0:2.5-49.el5_5.7 AND glibc-utils is earlier than 0:2.5-49.el5_5.7

Definition Id: oval:org.mitre.oval:def:23540

Oval ID:	oval:org.mitre.oval:def:23540
Title:	ELSA-2010:0872: glibc security and bug fix update (Important)
Description:	ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use of the LD_AUDIT environment variable to reference dynamic shared objects (DSOs) as audit objects, which allows local users to gain privileges by leveraging an unsafe DSO located in a trusted library directory, as demonstrated by libpcprofile.so.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0872-02 CVE-2010-3847 CVE-2010-3856	Version:	13
Platform(s):	Oracle Linux 6	Product(s):	glibc
Definition Synopsis:
Oracle Linux 6.x rpm test glibc-devel is earlier than 0:2.12-1.7.el6_0.3 AND glibc-utils is earlier than 0:2.12-1.7.el6_0.3 AND glibc is earlier than 0:2.12-1.7.el6_0.3 AND nscd is earlier than 0:2.12-1.7.el6_0.3 AND glibc-static is earlier than 0:2.12-1.7.el6_0.3 AND glibc-common is earlier than 0:2.12-1.7.el6_0.3 AND glibc-headers is earlier than 0:2.12-1.7.el6_0.3

Definition Id: oval:org.mitre.oval:def:27803

Oval ID:	oval:org.mitre.oval:def:27803
Title:	DEPRECATED: ELSA-2010-0872 -- glibc security and bug fix update (important)
Description:	[2.12-1.7.el6_0.3] - Require suid bit on audit objects in privileged programs (#645679, CVE-2010-3856) [2.12-1.7.el6_0.2] - Never expand in privileged programs (#643821) [2.12-1.7.el6_0.1] - Fix bug in generic strstr/memmem implementation handling certain repeated patterns (#643341) - Correctly align TCB for AVX (#643343)
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0872 CVE-2010-3847 CVE-2010-3856	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	glibc
Definition Synopsis:
Oracle Linux 6.x Packages match section glibc is earlier than 0:2.12-1.7.el6_0.3 AND glibc-common is earlier than 0:2.12-1.7.el6_0.3 AND glibc-devel is earlier than 0:2.12-1.7.el6_0.3 AND glibc-headers is earlier than 0:2.12-1.7.el6_0.3 AND glibc-static is earlier than 0:2.12-1.7.el6_0.3 AND glibc-utils is earlier than 0:2.12-1.7.el6_0.3 AND nscd is earlier than 0:2.12-1.7.el6_0.3

Definition Id: oval:org.mitre.oval:def:28160

Oval ID:	oval:org.mitre.oval:def:28160
Title:	DEPRECATED: ELSA-2010-0793 -- glibc security update (important)
Description:	[2.5-49.el5_5.7] - Require suid bit on audit objects in privileged programs (#645677, CVE-2010-3856)
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0793 CVE-2010-3856	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	glibc
Definition Synopsis:
Oracle Linux 5.x Packages match section glibc is earlier than 0:2.5-49.el5_5.7 AND glibc-common is earlier than 0:2.5-49.el5_5.7 AND glibc-devel is earlier than 0:2.5-49.el5_5.7 AND glibc-headers is earlier than 0:2.5-49.el5_5.7 AND glibc-utils is earlier than 0:2.5-49.el5_5.7 AND nscd is earlier than 0:2.5-49.el5_5.7

CPE : Common Platform Enumeration

Type	Description	Count
Application	Gnu Glibc cpe:2.3:a:gnu:glibc:2.9:::::::* cpe:2.3:a:gnu:glibc:2.8:::::::* cpe:2.3:a:gnu:glibc:2.7:::::::* cpe:2.3:a:gnu:glibc:2.6.1:::::::* cpe:2.3:a:gnu:glibc:2.6:::::::* cpe:2.3:a:gnu:glibc:2.5.1:::::::* cpe:2.3:a:gnu:glibc:2.5-49.el5_5.6:::::::* cpe:2.3:a:gnu:glibc:2.5:::::::* cpe:2.3:a:gnu:glibc:2.4:::::::* cpe:2.3:a:gnu:glibc:2.3.6:::::::* cpe:2.3:a:gnu:glibc:2.3.5:::::::* cpe:2.3:a:gnu:glibc:2.3.4:::::::* cpe:2.3:a:gnu:glibc:2.3.3:::::::* cpe:2.3:a:gnu:glibc:2.3.2:::::::* cpe:2.3:a:gnu:glibc:2.3.10:::::::* cpe:2.3:a:gnu:glibc:2.3.1:::::::* cpe:2.3:a:gnu:glibc:2.3:::::::* cpe:2.3:a:gnu:glibc:2.2.5:::::::* cpe:2.3:a:gnu:glibc:2.2.4:::::::* cpe:2.3:a:gnu:glibc:2.2.3:::::::* cpe:2.3:a:gnu:glibc:2.2.2:::::::* cpe:2.3:a:gnu:glibc:2.2.1:::::::* cpe:2.3:a:gnu:glibc:2.2:::::::* cpe:2.3:a:gnu:glibc:2.12.1:::::::* cpe:2.3:a:gnu:glibc:2.12.0:::::::* cpe:2.3:a:gnu:glibc:2.11.2:::::::* cpe:2.3:a:gnu:glibc:2.11.1:::::::* cpe:2.3:a:gnu:glibc:2.11:::::::* cpe:2.3:a:gnu:glibc:2.10.2:::::::* cpe:2.3:a:gnu:glibc:2.10.1:::::::* cpe:2.3:a:gnu:glibc:2.10:::::::* cpe:2.3:a:gnu:glibc:2.1.9:::::::* cpe:2.3:a:gnu:glibc:2.1.3.10:::::::* cpe:2.3:a:gnu:glibc:2.1.3:::::::* cpe:2.3:a:gnu:glibc:2.1.2:::::::* cpe:2.3:a:gnu:glibc:2.1.1.6:::::::* cpe:2.3:a:gnu:glibc:2.1.1:::::::* cpe:2.3:a:gnu:glibc:2.1:::::::* cpe:2.3:a:gnu:glibc:2.0.6:::::::* cpe:2.3:a:gnu:glibc:2.0.5:::::::* cpe:2.3:a:gnu:glibc:2.0.4:::::::* cpe:2.3:a:gnu:glibc:2.0.3:::::::* cpe:2.3:a:gnu:glibc:2.0.2:::::::* cpe:2.3:a:gnu:glibc:2.0.1:::::::* cpe:2.3:a:gnu:glibc:2.0:::::::* cpe:2.3:a:gnu:glibc:1.09.5:::::::* cpe:2.3:a:gnu:glibc:1.09.3:::::::* cpe:2.3:a:gnu:glibc:1.09.2:::::::* cpe:2.3:a:gnu:glibc:1.09.1:::::::* cpe:2.3:a:gnu:glibc:1.09:::::::* cpe:2.3:a:gnu:glibc:1.08.9:::::::* cpe:2.3:a:gnu:glibc:1.08.8:::::::* cpe:2.3:a:gnu:glibc:1.08.7:::::::* cpe:2.3:a:gnu:glibc:1.08.6:::::::* cpe:2.3:a:gnu:glibc:1.08.5:::::::* cpe:2.3:a:gnu:glibc:1.08.4:::::::* cpe:2.3:a:gnu:glibc:1.08.3:::::::* cpe:2.3:a:gnu:glibc:1.08.14:::::::* cpe:2.3:a:gnu:glibc:1.08.13:::::::* cpe:2.3:a:gnu:glibc:1.08.12:::::::* cpe:2.3:a:gnu:glibc:1.08.11:::::::* cpe:2.3:a:gnu:glibc:1.08.10:::::::* cpe:2.3:a:gnu:glibc:1.08.1:::::::* cpe:2.3:a:gnu:glibc:1.08:::::::* cpe:2.3:a:gnu:glibc:1.07.6:::::::* cpe:2.3:a:gnu:glibc:1.07.5:::::::* cpe:2.3:a:gnu:glibc:1.07.4:::::::* cpe:2.3:a:gnu:glibc:1.07.3:::::::* cpe:2.3:a:gnu:glibc:1.07.2:::::::* cpe:2.3:a:gnu:glibc:1.07.1:::::::* cpe:2.3:a:gnu:glibc:1.07:::::::* cpe:2.3:a:gnu:glibc:1.06.9:::::::* cpe:2.3:a:gnu:glibc:1.06.8:::::::* cpe:2.3:a:gnu:glibc:1.06.7:::::::* cpe:2.3:a:gnu:glibc:1.06.6:::::::* cpe:2.3:a:gnu:glibc:1.06.4:::::::* cpe:2.3:a:gnu:glibc:1.06.3:::::::* cpe:2.3:a:gnu:glibc:1.06.2:::::::* cpe:2.3:a:gnu:glibc:1.06.13:::::::* cpe:2.3:a:gnu:glibc:1.06.12:::::::* cpe:2.3:a:gnu:glibc:1.06.11:::::::* cpe:2.3:a:gnu:glibc:1.06.10:::::::* cpe:2.3:a:gnu:glibc:1.06.1:::::::* cpe:2.3:a:gnu:glibc:1.06:::::::* cpe:2.3:a:gnu:glibc:1.05:::::::* cpe:2.3:a:gnu:glibc:1.04:::::::* cpe:2.3:a:gnu:glibc:1.03:::::::* cpe:2.3:a:gnu:glibc:1.02:::::::* cpe:2.3:a:gnu:glibc:1.01:::::::* cpe:2.3:a:gnu:glibc:1.00:::::::* cpe:2.3:a:gnu:glibc:0.6:::::::* cpe:2.3:a:gnu:glibc:0.5:::::::* cpe:2.3:a:gnu:glibc:0.4.1:::::::* cpe:2.3:a:gnu:glibc:0.4:::::::* cpe:2.3:a:gnu:glibc:0.1:::::::* cpe:2.3:a:gnu:glibc:::::::x64:* cpe:2.3:a:gnu:glibc:::::::x86:* cpe:2.3:a:gnu:glibc:::::::: cpe:2.3:a:gnu:glibc:-:::::::*	99

ExploitDB Exploits

id	Description
2011-11-10	glibc LD_AUDIT arbitrary DSO load Privilege Escalation
2010-10-22	GNU C library dynamic linker LD_AUDIT arbitrary DSO load Vulnerability

OpenVAS Exploits

Date	Description
2011-08-09	Name : CentOS Update for glibc CESA-2010:0793 centos5 i386 File : nvt/gb_CESA-2010_0793_glibc_centos5_i386.nasl
2011-03-09	Name : Gentoo Security Advisory GLSA 201011-01 (glibc) File : nvt/glsa_201011_01.nasl
2011-03-07	Name : Debian Security Advisory DSA 2122-2 (glibc) File : nvt/deb_2122_2.nasl
2011-01-14	Name : Ubuntu Update for eglibc, glibc vulnerability USN-1009-2 File : nvt/gb_ubuntu_USN_1009_2.nasl
2010-12-02	Name : Fedora Update for glibc FEDORA-2010-16851 File : nvt/gb_fedora_2010_16851_glibc_fc14.nasl
2010-11-17	Name : Debian Security Advisory DSA 2122-1 (glibc) File : nvt/deb_2122_1.nasl
2010-11-16	Name : Fedora Update for glibc FEDORA-2010-16641 File : nvt/gb_fedora_2010_16641_glibc_fc12.nasl
2010-11-16	Name : SuSE Update for glibc SUSE-SA:2010:052 File : nvt/gb_suse_2010_052.nasl
2010-11-04	Name : RedHat Update for glibc RHSA-2010:0793-01 File : nvt/gb_RHSA-2010_0793-01_glibc.nasl
2010-11-04	Name : Fedora Update for glibc FEDORA-2010-16655 File : nvt/gb_fedora_2010_16655_glibc_fc13.nasl
2010-10-26	Name : Mandriva Update for glibc MDVSA-2010:212 (glibc) File : nvt/gb_mandriva_MDVSA_2010_212.nasl
2010-10-26	Name : Ubuntu Update for glibc, eglibc vulnerabilities USN-1009-1 File : nvt/gb_ubuntu_USN_1009_1.nasl
0000-00-00	Name : Slackware Advisory SSA:2010-301-01 glibc File : nvt/esoft_slk_ssa_2010_301_01.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
68920	GNU C Library Dynamic Linker LD_AUDIT non-setuid Library Loading Issue GNU C Library contains a flaw related to 'ld.so' failing to properly restrict use of the LD_AUDIT environment variable to reference dynamic shared objects as audit objects. This may allow a local attacker to gain elevated privileges via an unsafe DSO located in a trusted library directory.

Nessus® Vulnerability Scanner

Date	Description
2016-03-04	Name : The remote VMware ESX host is missing a security-related patch. File : vmware_VMSA-2011-0001_remote.nasl - Type : ACT_GATHER_INFO
2015-02-02	Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2015-0023.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_glibc-101027.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0793.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0872.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101110_glibc_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2011-01-12	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1009-2.nasl - Type : ACT_GATHER_INFO
2011-01-06	Name : The remote VMware ESX host is missing one or more security-related patches. File : vmware_VMSA-2011-0001.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_glibc-101025.nasl - Type : ACT_GATHER_INFO
2010-11-24	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0793.nasl - Type : ACT_GATHER_INFO
2010-11-18	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0872.nasl - Type : ACT_GATHER_INFO
2010-11-16	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201011-01.nasl - Type : ACT_GATHER_INFO
2010-11-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-16641.nasl - Type : ACT_GATHER_INFO
2010-10-29	Name : The remote Fedora host is missing a security update. File : fedora_2010-16851.nasl - Type : ACT_GATHER_INFO
2010-10-29	Name : The remote Fedora host is missing a security update. File : fedora_2010-16655.nasl - Type : ACT_GATHER_INFO
2010-10-29	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2010-301-01.nasl - Type : ACT_GATHER_INFO
2010-10-28	Name : The remote openSUSE host is missing a security update. File : suse_11_1_glibc-101026.nasl - Type : ACT_GATHER_INFO
2010-10-28	Name : The remote openSUSE host is missing a security update. File : suse_11_2_glibc-101027.nasl - Type : ACT_GATHER_INFO
2010-10-28	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_glibc-7201.nasl - Type : ACT_GATHER_INFO
2010-10-26	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0793.nasl - Type : ACT_GATHER_INFO
2010-10-25	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-212.nasl - Type : ACT_GATHER_INFO
2010-10-24	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1009-1.nasl - Type : ACT_GATHER_INFO
2010-10-24	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2122.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-17 11:53:58	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	11
CPE ID(s)	99
osvdb(s)	1
ExploitDB Exploit(s)	2
Openvas Exploit(s)	13
Nessus® Exploit(s)	23

	Related
7.2	CVE-2010-3856
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 1 more Alert(s)

7.2 - RHSA-2010:0793

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

ExploitDB Exploits

OpenVAS Exploits

Open Source Vulnerability Database (OSVDB)

Nessus® Vulnerability Scanner

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU