CVE-2010-2793

Race condition in the SPICE (aka spice-activex) plug-in for Internet Explorer in Red Hat Enterprise Virtualization (RHEV) Manager before 2.2.4 allows local users to create a certain named pipe, and consequently gain privileges, via vectors involving knowledge of the name of this named pipe, in conjunction with use of the ImpersonateNamedPipeClient function.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://rhn.redhat.com/errata/RHSA-2010-0818.html
http://securitytracker.com/id?1024825
http://www.securityfocus.com/bid/45213
https://bugzilla.redhat.com/show_bug.cgi?id=620355

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:redhat:enterprise_virtualization_manager:2.2:::::::*
	cpe:2.3:o:redhat:enterprise_virtualization_manager:2.1:::::::*
	cpe:2.3:a:redhat:spice-activex:-:::::::*
	cpe:2.3:o:redhat:enterprise_virtualization_manager::::::::

Information

Published : 2010-12-08 10:00

Updated : 2013-01-15 21:00

NVD link : CVE-2010-2793

Mitre link : CVE-2010-2793

JSON object : View

CWE

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Products Affected

redhat

spice-activex
enterprise_virtualization_manager

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://rhn.redhat.com/errata/RHSA-2010-0818.html", "name": "RHSA-2010:0818", "tags": [], "refsource": "REDHAT"}, {"url": "http://securitytracker.com/id?1024825", "name": "1024825", "tags": [], "refsource": "SECTRACK"}, {"url": "http://www.securityfocus.com/bid/45213", "name": "45213", "tags": [], "refsource": "BID"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=620355", "name": "https://bugzilla.redhat.com/show_bug.cgi?id=620355", "tags": [], "refsource": "CONFIRM"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Race condition in the SPICE (aka spice-activex) plug-in for Internet Explorer in Red Hat Enterprise Virtualization (RHEV) Manager before 2.2.4 allows local users to create a certain named pipe, and consequently gain privileges, via vectors involving knowledge of the name of this named pipe, in conjunction with use of the ImpersonateNamedPipeClient function."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-362"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2010-2793", "ASSIGNER": "secalert@redhat.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2010-12-08T18:00Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:redhat:enterprise_virtualization_manager:2.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:redhat:enterprise_virtualization_manager:2.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:redhat:spice-activex:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:redhat:enterprise_virtualization_manager:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "2.2.3"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2013-01-16T05:00Z"}

6.8 /10