CVE-2010-4225

Unspecified vulnerability in the mod_mono module for XSP in Mono 2.8.x before 2.8.2 allows remote attackers to obtain the source code for .aspx (ASP.NET) applications via unknown vectors related to an "unloading bug."

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://osvdb.org/70312
http://secunia.com/advisories/42842	Vendor Advisory
http://www.mono-project.com/Vulnerabilities#XSP.2Fmod_mono_source_code_disclosure
http://www.securityfocus.com/bid/45711
http://www.vupen.com/english/advisories/2011/0051	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/64532

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:mono:mono:2.8:::::::*
	cpe:2.3:a:mono:mono:2.8.1:::::::*

History

No history.

Information

Published : 2011-01-11 03:00

Updated : 2017-08-17 01:33

NVD link : CVE-2010-4225

Mitre link : CVE-2010-4225

CVE.ORG link : CVE-2010-4225

JSON object : View

Products Affected

mono

mono

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

NVD-CWE-noinfo

{"id": "CVE-2010-4225", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2011-01-11T03:00:03.453", "references": [{"url": "http://osvdb.org/70312", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/42842", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.mono-project.com/Vulnerabilities#XSP.2Fmod_mono_source_code_disclosure", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/45711", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2011/0051", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64532", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}, {"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the mod_mono module for XSP in Mono 2.8.x before 2.8.2 allows remote attackers to obtain the source code for .aspx (ASP.NET) applications via unknown vectors related to an \"unloading bug.\""}, {"lang": "es", "value": "Vulnerabilidad no especificada en el m\u00f3dulo mod_mono para XSP en Mono v2.8.x anterior a v2.8.2, permite a atacantes remotos obtener el c\u00f3digo fuente de aplicaciones .aspx (ASP.NET) a trav\u00e9s de vectores desconocidos relacionados con un \"error de descarga\"."}], "lastModified": "2017-08-17T01:33:08.523", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mono:mono:2.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "44241D62-3150-4C7E-A0D7-5580E8784715"}, {"criteria": "cpe:2.3:a:mono:mono:2.8.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "657BD07A-8EF8-4977-9BDF-E78FF8E9EA53"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}