VAR-201004-0257
Vulnerability from variot - Updated: 2025-04-11 21:20Stack-based buffer overflow in Open Direct Connect Hub (aka Open DC Hub or OpenDCHub) 0.8.1 allows remote authenticated users to execute arbitrary code via a long MyINFO message. Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. ----------------------------------------------------------------------
Proof-of-Concept (PoC) and Extended Analysis available for customers.
Get a free trial, contact sales@secunia.com
TITLE: Fedora update for opendchub
SECUNIA ADVISORY ID: SA39664
VERIFY ADVISORY: http://secunia.com/advisories/39664/
DESCRIPTION: Fedora has issued an update for opendchub. This fixes a vulnerability, which can be exploited by malicious people to compromise a vulnerable system.
For more information: SA39199
SOLUTION: Apply updated packages using the yum utility ("yum update opendchub"). ----------------------------------------------------------------------
Secunia CSI + Microsoft SCCM
= Extensive Patch Management
http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/
TITLE: Open DC Hub "myinfo()" Buffer Overflow Vulnerability
SECUNIA ADVISORY ID: SA39199
VERIFY ADVISORY: http://secunia.com/advisories/39199/
DESCRIPTION: Pierre Nogu\xe8s has discovered a vulnerability in Open DC Hub, which can be exploited by malicious people to compromise a vulnerable system.
The vulnerability is caused due to a boundary error within the "myinfo()" function in commands.c. This can be exploited to cause a stack-based buffer overflow via a specially crafted "MyINFO" message.
Successful exploitation may allow execution of arbitrary code.
The vulnerability is confirmed in version 0.8.1. Other versions may also be affected.
SOLUTION: Restrict network access to trusted users only.
PROVIDED AND/OR DISCOVERED BY: Pierre Nogu\xe8s
ORIGINAL ADVISORY: http://www.indahax.com/exploits/opendchub-0-8-1-remote-code-execution-exploit
About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/advisories/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
.
Workaround
There is no known workaround at this time.
Resolution
All Open DC Hub users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-p2p/opendchub-0.8.2"
References
[ 1 ] CVE-2010-1147 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1147
Availability
This GLSA and any updates to it are available for viewing at the Gentoo Security Website:
http://security.gentoo.org/glsa/glsa-201311-12.xml
Concerns?
Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.
License
Copyright 2013 Gentoo Foundation, Inc; referenced text belongs to its owner(s).
The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201004-0257",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "open direct connect hub",
"scope": "eq",
"trust": 2.5,
"vendor": "roshan singh",
"version": "0.8.1"
},
{
"model": "dc hub open dc hub",
"scope": "eq",
"trust": 0.3,
"vendor": "open",
"version": "0.8.1"
},
{
"model": "linux",
"scope": null,
"trust": 0.3,
"vendor": "gentoo",
"version": null
},
{
"model": "dc hub open dc hub",
"scope": "ne",
"trust": 0.3,
"vendor": "open",
"version": "0.8.2"
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2010-1147"
},
{
"db": "BID",
"id": "39129"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-005359"
},
{
"db": "CNNVD",
"id": "CNNVD-201004-093"
},
{
"db": "NVD",
"id": "CVE-2010-1147"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:roshan_singh:open_direct_connect_hub",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2010-005359"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Pierre Nogues",
"sources": [
{
"db": "BID",
"id": "39129"
}
],
"trust": 0.3
},
"cve": "CVE-2010-1147",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 6.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 6.8,
"id": "CVE-2010-1147",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.9,
"vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2010-1147",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2010-1147",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNNVD",
"id": "CNNVD-201004-093",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULMON",
"id": "CVE-2010-1147",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2010-1147"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-005359"
},
{
"db": "CNNVD",
"id": "CNNVD-201004-093"
},
{
"db": "NVD",
"id": "CVE-2010-1147"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Stack-based buffer overflow in Open Direct Connect Hub (aka Open DC Hub or OpenDCHub) 0.8.1 allows remote authenticated users to execute arbitrary code via a long MyINFO message. \nAttackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. ----------------------------------------------------------------------\n\n\nProof-of-Concept (PoC) and Extended Analysis available for customers. \n\nGet a free trial, contact sales@secunia.com\n\n\n----------------------------------------------------------------------\n\nTITLE:\nFedora update for opendchub\n\nSECUNIA ADVISORY ID:\nSA39664\n\nVERIFY ADVISORY:\nhttp://secunia.com/advisories/39664/\n\nDESCRIPTION:\nFedora has issued an update for opendchub. This fixes a\nvulnerability, which can be exploited by malicious people to\ncompromise a vulnerable system. \n\nFor more information:\nSA39199\n\nSOLUTION:\nApply updated packages using the yum utility (\"yum update\nopendchub\"). ----------------------------------------------------------------------\n\n\n Secunia CSI\n+ Microsoft SCCM\n-----------------------\n= Extensive Patch Management\n\nhttp://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/\n\n\n----------------------------------------------------------------------\n\nTITLE:\nOpen DC Hub \"myinfo()\" Buffer Overflow Vulnerability\n\nSECUNIA ADVISORY ID:\nSA39199\n\nVERIFY ADVISORY:\nhttp://secunia.com/advisories/39199/\n\nDESCRIPTION:\nPierre Nogu\\xe8s has discovered a vulnerability in Open DC Hub, which\ncan be exploited by malicious people to compromise a vulnerable\nsystem. \n\nThe vulnerability is caused due to a boundary error within the\n\"myinfo()\" function in commands.c. This can be exploited to cause a\nstack-based buffer overflow via a specially crafted \"MyINFO\"\nmessage. \n\nSuccessful exploitation may allow execution of arbitrary code. \n\nThe vulnerability is confirmed in version 0.8.1. Other versions may\nalso be affected. \n\nSOLUTION:\nRestrict network access to trusted users only. \n\nPROVIDED AND/OR DISCOVERED BY:\nPierre Nogu\\xe8s\n\nORIGINAL ADVISORY:\nhttp://www.indahax.com/exploits/opendchub-0-8-1-remote-code-execution-exploit\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\nprivate users keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/advisories/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/advisories/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n. \n\nWorkaround\n==========\n\nThere is no known workaround at this time. \n\nResolution\n==========\n\nAll Open DC Hub users should upgrade to the latest version:\n\n # emerge --sync\n # emerge --ask --oneshot --verbose \"\u003e=net-p2p/opendchub-0.8.2\"\n\nReferences\n==========\n\n[ 1 ] CVE-2010-1147\n http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1147\n\nAvailability\n============\n\nThis GLSA and any updates to it are available for viewing at\nthe Gentoo Security Website:\n\n http://security.gentoo.org/glsa/glsa-201311-12.xml\n\nConcerns?\n=========\n\nSecurity is a primary focus of Gentoo Linux and ensuring the\nconfidentiality and security of our users\u0027 machines is of utmost\nimportance to us. Any security concerns should be addressed to\nsecurity@gentoo.org or alternatively, you may file a bug at\nhttps://bugs.gentoo.org. \n\nLicense\n=======\n\nCopyright 2013 Gentoo Foundation, Inc; referenced text\nbelongs to its owner(s). \n\nThe contents of this document are licensed under the\nCreative Commons - Attribution / Share Alike license. \n\nhttp://creativecommons.org/licenses/by-sa/2.5\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2010-1147"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-005359"
},
{
"db": "BID",
"id": "39129"
},
{
"db": "VULMON",
"id": "CVE-2010-1147"
},
{
"db": "PACKETSTORM",
"id": "89101"
},
{
"db": "PACKETSTORM",
"id": "87854"
},
{
"db": "PACKETSTORM",
"id": "124087"
}
],
"trust": 2.25
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://vulmon.com/exploitdetails?qidtp=exploitdb\u0026qid=11986",
"trust": 0.1,
"type": "exploit"
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2010-1147"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2010-1147",
"trust": 3.0
},
{
"db": "OPENWALL",
"id": "OSS-SECURITY/2010/04/03/1",
"trust": 1.7
},
{
"db": "BID",
"id": "39129",
"trust": 1.4
},
{
"db": "SECUNIA",
"id": "39664",
"trust": 1.2
},
{
"db": "VUPEN",
"id": "ADV-2010-1023",
"trust": 1.1
},
{
"db": "VUPEN",
"id": "ADV-2010-1044",
"trust": 1.1
},
{
"db": "JVNDB",
"id": "JVNDB-2010-005359",
"trust": 0.8
},
{
"db": "MLIST",
"id": "[OSS-SECURITY] 20100406 RE: CVE REQUEST -- OPENDCHUB V0.8.1 -- STACK OVERFLOW BY HANDLING A SPECIALLY-CRAFTED MYINFO MESSAGE",
"trust": 0.6
},
{
"db": "MLIST",
"id": "[OSS-SECURITY] 20100403 CVE REQUEST -- OPENDCHUB V0.8.1 -- STACK OVERFLOW BY HANDLING A SPECIALLY-CRAFTED MYINFO MESSAGE",
"trust": 0.6
},
{
"db": "BUGTRAQ",
"id": "20100331 OPENDCHUB 0.8.1 REMOTE CODE EXECUTION EXPLOIT",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201004-093",
"trust": 0.6
},
{
"db": "OTHER",
"id": "NONE",
"trust": 0.1
},
{
"db": "EXPLOIT-DB",
"id": "11986",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2010-1147",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "89101",
"trust": 0.1
},
{
"db": "SECUNIA",
"id": "39199",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "87854",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "124087",
"trust": 0.1
}
],
"sources": [
{
"db": "OTHER",
"id": null
},
{
"db": "VULMON",
"id": "CVE-2010-1147"
},
{
"db": "BID",
"id": "39129"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-005359"
},
{
"db": "PACKETSTORM",
"id": "89101"
},
{
"db": "PACKETSTORM",
"id": "87854"
},
{
"db": "PACKETSTORM",
"id": "124087"
},
{
"db": "CNNVD",
"id": "CNNVD-201004-093"
},
{
"db": "NVD",
"id": "CVE-2010-1147"
}
]
},
"id": "VAR-201004-0257",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "OTHER",
"id": null
}
],
"trust": 0.01
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"network device"
],
"sub_category": "hub",
"trust": 0.1
}
],
"sources": [
{
"db": "OTHER",
"id": null
}
]
},
"last_update_date": "2025-04-11T21:20:01.079000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Open Direct Connect Hub",
"trust": 0.8,
"url": "http://opendchub.sourceforge.net/"
},
{
"title": "opendchub-0.8.2.tar",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=4488"
},
{
"title": "LinuxFlaw",
"trust": 0.1,
"url": "https://github.com/mudongliang/LinuxFlaw "
},
{
"title": "cve-",
"trust": 0.1,
"url": "https://github.com/oneoy/cve- "
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2010-1147"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-005359"
},
{
"db": "CNNVD",
"id": "CNNVD-201004-093"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-119",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2010-005359"
},
{
"db": "NVD",
"id": "CVE-2010-1147"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.7,
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=576308"
},
{
"trust": 1.7,
"url": "http://marc.info/?l=oss-security\u0026m=127051570728944\u0026w=2"
},
{
"trust": 1.7,
"url": "http://openwall.com/lists/oss-security/2010/04/03/1"
},
{
"trust": 1.7,
"url": "http://www.indahax.com/exploits/opendchub-0-8-1-remote-code-execution-exploit#more-600"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/archive/1/510428"
},
{
"trust": 1.7,
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=579206"
},
{
"trust": 1.2,
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-april/040380.html"
},
{
"trust": 1.2,
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-april/040421.html"
},
{
"trust": 1.1,
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-april/040360.html"
},
{
"trust": 1.1,
"url": "http://secunia.com/advisories/39664"
},
{
"trust": 1.1,
"url": "http://www.securityfocus.com/bid/39129"
},
{
"trust": 1.1,
"url": "http://www.vupen.com/english/advisories/2010/1023"
},
{
"trust": 1.1,
"url": "http://www.vupen.com/english/advisories/2010/1044"
},
{
"trust": 0.9,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2010-1147"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-1147"
},
{
"trust": 0.3,
"url": "http://opendchub.sourceforge.net/"
},
{
"trust": 0.2,
"url": "http://secunia.com/advisories/about_secunia_advisories/"
},
{
"trust": 0.2,
"url": "http://secunia.com/advisories/secunia_security_advisories/"
},
{
"trust": 0.2,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.2,
"url": "http://secunia.com/advisories/39199/"
},
{
"trust": 0.1,
"url": "https://ieeexplore.ieee.org/abstract/document/10769424"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/119.html"
},
{
"trust": 0.1,
"url": "https://www.rapid7.com/db/vulnerabilities/gentoo-linux-cve-2010-1147"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "https://www.exploit-db.com/exploits/11986/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/39664/"
},
{
"trust": 0.1,
"url": "http://www.indahax.com/exploits/opendchub-0-8-1-remote-code-execution-exploit"
},
{
"trust": 0.1,
"url": "http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/"
},
{
"trust": 0.1,
"url": "http://creativecommons.org/licenses/by-sa/2.5"
},
{
"trust": 0.1,
"url": "http://security.gentoo.org/"
},
{
"trust": 0.1,
"url": "http://security.gentoo.org/glsa/glsa-201311-12.xml"
},
{
"trust": 0.1,
"url": "https://bugs.gentoo.org."
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2010-1147"
}
],
"sources": [
{
"db": "OTHER",
"id": null
},
{
"db": "VULMON",
"id": "CVE-2010-1147"
},
{
"db": "BID",
"id": "39129"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-005359"
},
{
"db": "PACKETSTORM",
"id": "89101"
},
{
"db": "PACKETSTORM",
"id": "87854"
},
{
"db": "PACKETSTORM",
"id": "124087"
},
{
"db": "CNNVD",
"id": "CNNVD-201004-093"
},
{
"db": "NVD",
"id": "CVE-2010-1147"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "OTHER",
"id": null
},
{
"db": "VULMON",
"id": "CVE-2010-1147"
},
{
"db": "BID",
"id": "39129"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-005359"
},
{
"db": "PACKETSTORM",
"id": "89101"
},
{
"db": "PACKETSTORM",
"id": "87854"
},
{
"db": "PACKETSTORM",
"id": "124087"
},
{
"db": "CNNVD",
"id": "CNNVD-201004-093"
},
{
"db": "NVD",
"id": "CVE-2010-1147"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2010-04-06T00:00:00",
"db": "VULMON",
"id": "CVE-2010-1147"
},
{
"date": "2010-03-31T00:00:00",
"db": "BID",
"id": "39129"
},
{
"date": "2012-12-20T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2010-005359"
},
{
"date": "2010-05-03T14:43:18",
"db": "PACKETSTORM",
"id": "89101"
},
{
"date": "2010-03-31T06:27:30",
"db": "PACKETSTORM",
"id": "87854"
},
{
"date": "2013-11-20T21:55:00",
"db": "PACKETSTORM",
"id": "124087"
},
{
"date": "2010-03-31T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201004-093"
},
{
"date": "2010-04-06T16:30:00.717000",
"db": "NVD",
"id": "CVE-2010-1147"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2010-05-08T00:00:00",
"db": "VULMON",
"id": "CVE-2010-1147"
},
{
"date": "2015-04-13T21:16:00",
"db": "BID",
"id": "39129"
},
{
"date": "2012-12-20T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2010-005359"
},
{
"date": "2010-04-07T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201004-093"
},
{
"date": "2025-04-11T00:51:21.963000",
"db": "NVD",
"id": "CVE-2010-1147"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201004-093"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Open Direct Connect Hub Vulnerable to stack-based buffer overflow",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2010-005359"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "buffer overflow",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201004-093"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…