製品・ソフトウェアに関する情報

JVN脆弱性詳細

Oracle Solaris の FTB サーバにおける脆弱性

Title	Oracle Solaris の FTB サーバにおける脆弱性
Summary	Oracle Solaris の FTB サーバには、可用性に影響のある脆弱性が存在します。
Possible impacts	第三者により、サービス運用妨害 (DoS) 攻撃が行われる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Jan. 18, 2011, midnight
Registration Date	Feb. 16, 2011, 2:09 p.m.
Last Update	June 29, 2011, 10:10 a.m.

Affected System

オラクル

Oracle Solaris 10

Oracle Solaris 11 Express

Oracle Solaris 8

Oracle Solaris 9

アップル

Apple Mac OS X v10.5.8

Apple Mac OS X v10.6 から v10.6.7

Apple Mac OS X Server v10.5.8

Apple Mac OS X Server v10.6 から v10.6.7

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2010-2632	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2632
National Vulnerability Database (NVD)
2	CVE-2010-2632	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-2632

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-noinfo	https://www.ipa.go.jp/security/vuln/CWE.html#CWEnoinfo

ベンダー情報

No	Name	URL
Apple Security Updates
1	HT4723	http://support.apple.com/kb/HT4723
Oracle Critical Patch Update
2	cpujan2011-194091	http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html

その他

No	Name	URL
ISS X-Force Database
1	64798	http://xforce.iss.net/xforce/xfdb/64798
JVN
2	JVNVU#976710	http://jvn.jp/cert/JVNVU976710
Secunia Advisory
3	SA42984	http://secunia.com/advisories/42984
SecurityFocus
4	43819	http://www.securityfocus.com/bid/43819
SecurityTracker
5	1024975	http://www.securitytracker.com/id?1024975
VUPEN Security
6	VUPEN/ADV-2011-0151	http://www.vupen.com/english/advisories/2011/0151

Change Log

No	Changed Details	Date of change
0	[2011年02月16日] 掲載 [2011年06月29日] 影響を受けるシステム：アップル (HT4723) の情報を追加ベンダ情報：アップル (HT4723) を追加	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2010-2632

Summary	Unspecified vulnerability in the FTP Server in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable researcher that this is an issue in the glob implementation in libc that allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames.
Publication Date	Jan. 20, 2011, 1 a.m.
Registration Date	Jan. 29, 2021, 11:03 a.m.
Last Update	Nov. 21, 2024, 10:17 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10598
2	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10598
3	http://secunia.com/advisories/42984
4	http://secunia.com/advisories/42984
5	http://secunia.com/advisories/43433
6	http://secunia.com/advisories/43433
7	http://secunia.com/advisories/55212
8	http://secunia.com/advisories/55212
9	http://securityreason.com/achievement_securityalert/89
10	http://securityreason.com/achievement_securityalert/89
11	http://securityreason.com/achievement_securityalert/97
12	http://securityreason.com/achievement_securityalert/97
13	http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html	Vendor Advisory
14	http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html	Vendor Advisory
15	http://www.securitytracker.com/id?1024975
16	http://www.securitytracker.com/id?1024975
17	http://www.vupen.com/english/advisories/2011/0151
18	http://www.vupen.com/english/advisories/2011/0151
19	https://exchange.xforce.ibmcloud.com/vulnerabilities/64798
20	https://exchange.xforce.ibmcloud.com/vulnerabilities/64798
21	https://support.avaya.com/css/P8/documents/100127892
22	https://support.avaya.com/css/P8/documents/100127892

Common Vulnerabilities List