CVE-2010-1165

Atlassian JIRA 3.12 through 4.1 allows remote authenticated administrators to execute arbitrary code by modifying the (1) attachment (aka attachments), (2) index (aka indexing), or (3) backup path and then uploading a file, as exploited in the wild in April 2010.

CVSS v2.0 9.0 HIGH

9.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability : 8.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2010-04-16	Patch Vendor Advisory
http://www.securityfocus.com/bid/39485
http://secunia.com/advisories/39353	Vendor Advisory
http://jira.atlassian.com/browse/JRA-20995	Vendor Advisory
http://jira.atlassian.com/browse/JRA-21004	Patch Vendor Advisory
http://www.openwall.com/lists/oss-security/2010/04/16/4
http://www.openwall.com/lists/oss-security/2010/04/16/3
https://exchange.xforce.ibmcloud.com/vulnerabilities/57828

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:atlassian:jira:3.12:::::::*
	cpe:2.3:a:atlassian:jira:3.13.3:::::::*
	cpe:2.3:a:atlassian:jira:3.13.1:::::::*
	cpe:2.3:a:atlassian:jira:3.13.2:::::::*
	cpe:2.3:a:atlassian:jira:4.1:::::::*
	cpe:2.3:a:atlassian:jira:3.12.3:::::::*
	cpe:2.3:a:atlassian:jira:3.13:::::::*
	cpe:2.3:a:atlassian:jira:4.0.1:::::::*
	cpe:2.3:a:atlassian:jira:4.0.2:::::::*
	cpe:2.3:a:atlassian:jira:3.13.4:::::::*
	cpe:2.3:a:atlassian:jira:3.12.1:::::::*
	cpe:2.3:a:atlassian:jira:3.13.5:::::::*
	cpe:2.3:a:atlassian:jira:3.12.2:::::::*
	cpe:2.3:a:atlassian:jira:4.0:::::::*

Information

Published : 2010-04-20 08:30

Updated : 2017-08-16 18:32

NVD link : CVE-2010-1165

Mitre link : CVE-2010-1165

JSON object : View

CWE

CWE-94

Improper Control of Generation of Code ('Code Injection')

Advertisement

Products Affected

atlassian

jira

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2010-04-16", "name": "http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2010-04-16", "tags": ["Patch", "Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.securityfocus.com/bid/39485", "name": "39485", "tags": [], "refsource": "BID"}, {"url": "http://secunia.com/advisories/39353", "name": "39353", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://jira.atlassian.com/browse/JRA-20995", "name": "http://jira.atlassian.com/browse/JRA-20995", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://jira.atlassian.com/browse/JRA-21004", "name": "http://jira.atlassian.com/browse/JRA-21004", "tags": ["Patch", "Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.openwall.com/lists/oss-security/2010/04/16/4", "name": "[oss-security] 20100416 Re: CVE Request: JIRA Issues", "tags": [], "refsource": "MLIST"}, {"url": "http://www.openwall.com/lists/oss-security/2010/04/16/3", "name": "[oss-security] 20100416 CVE Request: JIRA Issues", "tags": [], "refsource": "MLIST"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57828", "name": "jira-pathsettings-priv-escalation(57828)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Atlassian JIRA 3.12 through 4.1 allows remote authenticated administrators to execute arbitrary code by modifying the (1) attachment (aka attachments), (2) index (aka indexing), or (3) backup path and then uploading a file, as exploited in the wild in April 2010."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-94"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2010-1165", "ASSIGNER": "secalert@redhat.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 9.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "authentication": "SINGLE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "impactScore": 10.0, "obtainAllPrivilege": true, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2010-04-20T15:30Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:atlassian:jira:3.12:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:atlassian:jira:3.13.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:atlassian:jira:3.13.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:atlassian:jira:3.13.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:atlassian:jira:4.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:atlassian:jira:3.12.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:atlassian:jira:3.13:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:atlassian:jira:4.0.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:atlassian:jira:4.0.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:atlassian:jira:3.13.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:atlassian:jira:3.12.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:atlassian:jira:3.13.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:atlassian:jira:3.12.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:atlassian:jira:4.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-08-17T01:32Z"}