ubuntu · CVE-2010-3752

Quick triage

Priority: medium Published: 2010-10-05 22:00:00 UTC Updated: 2024-07-24 15:57:39 UTC

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2010-3752 medium priority: Ubuntu including 1 source packages (openswan), 9 status rows across 9 suites (dapper, hardy, jaunty, karmic, lucid, maverick, natty, oneiric, upstream): ignored 4, not-affected 4, released 1.

Description:

programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in (1) cisco_dns_info or (2) cisco_domain_info data in a packet, a different vulnerability than CVE-2010-3302.

cvelogic Threat Intelligence