Vulnerability Details CVE-2010-2476
syscp 1.4.2.1 allows attackers to add arbitrary paths via the documentroot of a domain by appending a colon to it and setting the open basedir path to use that domain documentroot.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 66.6%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=587481
- https://security-tracker.debian.org/tracker/CVE-2010-2476
- https://www.openwall.com/lists/oss-security/2010/06/30/15
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=587481
- https://security-tracker.debian.org/tracker/CVE-2010-2476
- https://www.openwall.com/lists/oss-security/2010/06/30/15
Products affected by CVE-2010-2476
-
cpe:2.3:a:syscp_project:syscp:1.4.2.1