5

CVE-2010-4098

monotone before 0.48.1, when configured to allow remote commands, allows remote attackers to cause a denial of service (crash) via an empty argument to the mtn command.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Monotone ≫ Monotone Version <= 0.48
Monotone ≫ Monotone Version-
Monotone ≫ Monotone Version0.1
Monotone ≫ Monotone Version0.2
Monotone ≫ Monotone Version0.3
Monotone ≫ Monotone Version0.4
Monotone ≫ Monotone Version0.5
Monotone ≫ Monotone Version0.6
Monotone ≫ Monotone Version0.7
Monotone ≫ Monotone Version0.8
Monotone ≫ Monotone Version0.9
Monotone ≫ Monotone Version0.10
Monotone ≫ Monotone Version0.11
Monotone ≫ Monotone Version0.12
Monotone ≫ Monotone Version0.13
Monotone ≫ Monotone Version0.14
Monotone ≫ Monotone Version0.15
Monotone ≫ Monotone Version0.16
Monotone ≫ Monotone Version0.17
Monotone ≫ Monotone Version0.18
Monotone ≫ Monotone Version0.19
Monotone ≫ Monotone Version0.20
Monotone ≫ Monotone Version0.21
Monotone ≫ Monotone Version0.22
Monotone ≫ Monotone Version0.23
Monotone ≫ Monotone Version0.24
Monotone ≫ Monotone Version0.25
Monotone ≫ Monotone Version0.26
Monotone ≫ Monotone Version0.27
Monotone ≫ Monotone Version0.28
Monotone ≫ Monotone Version0.29
Monotone ≫ Monotone Version0.30
Monotone ≫ Monotone Version0.31
Monotone ≫ Monotone Version0.32
Monotone ≫ Monotone Version0.33
Monotone ≫ Monotone Version0.34
Monotone ≫ Monotone Version0.35
Monotone ≫ Monotone Version0.36
Monotone ≫ Monotone Version0.37
Monotone ≫ Monotone Version0.38
Monotone ≫ Monotone Version0.39
Monotone ≫ Monotone Version0.40
Monotone ≫ Monotone Version0.41
Monotone ≫ Monotone Version0.42
Monotone ≫ Monotone Version0.43
Monotone ≫ Monotone Version0.44
Monotone ≫ Monotone Version0.45
Monotone ≫ Monotone Version0.46
Monotone ≫ Monotone Version0.47
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.07% 0.789
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050468.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050484.html
http://secunia.com/advisories/41960
Vendor Advisory
http://secunia.com/advisories/42177
http://www.monotone.ca/NEWS
http://www.securityfocus.com/bid/44383
http://www.vupen.com/english/advisories/2010/2910
https://exchange.xforce.ibmcloud.com/vulnerabilities/62758