CVE-2010-2891

Published: Oct 28, 2010Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflow in the smiGetNode function in lib/smi.c in libsmi 0.4.8 allows context-dependent attackers to execute arbitrary code via an Object Identifier (aka OID) represented as a numerical string containing many components separated by . (dot) characters.

Affected (1)

Products: Tu Braunschweig: Libsmi

Tu Braunschweig

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Tu Braunschweig Libsmi	Version 0.4.8

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (36)

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: cve@mitre.org

http://secunia.com/advisories/41841

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/42877

Source: cve@mitre.org

http://secunia.com/advisories/42902

Source: cve@mitre.org

http://secunia.com/advisories/43068

Source: cve@mitre.org

http://security-tracker.debian.org/tracker/CVE-2010-2891

Source: cve@mitre.org

http://www.coresecurity.com/content/libsmi-smigetnode-buffer-overflow

Source: cve@mitre.org

ExploitPatch

http://www.debian.org/security/2011/dsa-2145

Source: cve@mitre.org

http://www.exploit-db.com/exploits/15293

Source: cve@mitre.org

ExploitPatch

http://www.mandriva.com/security/advisories?name=MDVSA-2010:209

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/514382/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/44276

Source: cve@mitre.org

ExploitPatch

http://www.vupen.com/english/advisories/2010/2764

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0076

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2011/0111

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2011/0212

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/62686

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/41841

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/42877

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/42902

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/43068

Source: af854a3a-2127-422b-91ae-364da2661108

http://security-tracker.debian.org/tracker/CVE-2010-2891

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.coresecurity.com/content/libsmi-smigetnode-buffer-overflow

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

http://www.debian.org/security/2011/dsa-2145

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.exploit-db.com/exploits/15293

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

http://www.mandriva.com/security/advisories?name=MDVSA-2010:209

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/514382/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/44276

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

http://www.vupen.com/english/advisories/2010/2764

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0076

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0111

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0212

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/62686

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.