National Cyber Awareness System

Vulnerability Summary for CVE-2010-3846

Overview

Array index error in the apply_rcs_change function in rcs.c in CVS 1.11.23 allows local users to gain privileges via an RCS file containing crafted delta fragment changes that trigger a heap-based buffer overflow.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=642146

Type: Patch Information

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=642146

External Source: VUPEN

Name: ADV-2010-2845

Type: Advisory; Patch Information

Hyperlink:http://www.vupen.com/english/advisories/2010/2845

External Source: CONFIRM

Name: http://cvs.savannah.gnu.org/viewvc/cvs/ccvs/src/rcs.c?r1=1.262.4.65&r2=1.262.4.66&sortby=rev

Type: Patch Information

Hyperlink:http://cvs.savannah.gnu.org/viewvc/cvs/ccvs/src/rcs.c?r1=1.262.4.65&r2=1.262.4.66&sortby=rev

External Source: XF

Name: cvs-applyrcschange-bo(62858)

Hyperlink:http://xforce.iss.net/xforce/xfdb/62858

External Source: VUPEN

Name: ADV-2010-3080

Hyperlink:http://www.vupen.com/english/advisories/2010/3080

External Source: VUPEN

Name: ADV-2010-2899

Hyperlink:http://www.vupen.com/english/advisories/2010/2899

External Source: VUPEN

Name: ADV-2010-2869

Hyperlink:http://www.vupen.com/english/advisories/2010/2869

External Source: VUPEN

Name: ADV-2010-2846

Hyperlink:http://www.vupen.com/english/advisories/2010/2846

External Source: SECTRACK

Name: 1024795

Hyperlink:http://www.securitytracker.com/id?1024795

External Source: BID

Name: 44528

Hyperlink:http://www.securityfocus.com/bid/44528

External Source: REDHAT

Name: RHSA-2010:0918

Hyperlink:http://www.redhat.com/support/errata/RHSA-2010-0918.html

External Source: OSVDB

Name: 68952

Hyperlink:http://www.osvdb.org/68952

External Source: SECUNIA

Name: 42409

Hyperlink:http://secunia.com/advisories/42409

External Source: SECUNIA

Name: 42041

Hyperlink:http://secunia.com/advisories/42041

External Source: SECUNIA

Name: 41079

Type: Advisory

Hyperlink:http://secunia.com/advisories/41079

External Source: FEDORA

Name: FEDORA-2010-16600

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050090.html

External Source: FEDORA

Name: FEDORA-2010-16721

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050287.html

External Source: FEDORA

Name: FEDORA-2010-16599

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050212.html