Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2010-4754

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

OpenBSD、NetBSD、FreeBSD都是流行的BSD操作系统，是Unix的衍生系统。 FreeBSD 7.3和8.1版本，NetBSD 5.0.2版本，和OpenBSD 4.7版本中的glob实现中存在漏洞。远程认证用户可以借助并不匹配任何路径名称的特制glob表达式导致拒绝服务（CPU和内存消耗）。

AI Predicted 5.3 Difficulty: Easy EPSS 1.48% · P73
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2010-4754

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The glob implementation in libc in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, and OpenBSD 4.7, and Libsystem in Apple Mac OS X before 10.6.8, allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
多个BSD系统glob实现内存破坏漏洞拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OpenBSD、NetBSD、FreeBSD都是流行的BSD操作系统，是Unix的衍生系统。 FreeBSD 7.3和8.1版本，NetBSD 5.0.2版本，和OpenBSD 4.7版本中的glob实现中存在漏洞。远程认证用户可以借助并不匹配任何路径名称的特制glob表达式导致拒绝服务（CPU和内存消耗）。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2010-4754

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2010-4754

请登录查看更多情报信息。

Vendor Advisories for CVE-2010-4754 (1)

Mailing List Discussions for CVE-2010-4754 (1)

Other References for CVE-2010-4754 (6)

Same Patch Batch · n/a · 2011-03-02 · 16 CVEs total

CVE-2010-4755 OpenSSH glob表达式拒绝服务漏洞
CVE-2010-4756 GNU C Library glob实现拒绝服务漏洞
CVE-2011-0051 Mozilla Firefox和SeaMonkey对话框问题响应漏洞
CVE-2011-0053 Mozilla Firefox/Thunderbird/SeaMonkey浏览器引擎拒绝服务漏洞
CVE-2011-0054 Mozilla Firefox和SeaMonkey JavaScript非本地变量缓冲区溢出漏洞
CVE-2011-0055 Mozilla Firefox和SeaMonkey JSON.stringify方法释放后使用漏洞
CVE-2011-0056 Mozilla Firefox和SeaMonkey JavaScript引擎缓冲区溢出漏洞
CVE-2011-0057 Mozilla Firefox和SeaMonkey Web Worker实现释放后使用漏洞
CVE-2011-0058 Mozilla Firefox和SeaMonkey文本运行构建内存破坏漏洞
CVE-2011-0059 Mozilla Firefox和SeaMonkey跨站请求伪造漏洞
CVE-2011-0061 Mozilla Firefox/Thunderbird/SeaMonkey缓冲区溢出漏洞
CVE-2011-0062 Mozilla Firefox和SeaMonkey浏览器引擎拒绝服务漏洞
CVE-2011-0762 Beasts vsftpd 资源管理错误漏洞
CVE-2011-1004 Ruby 'FileUtils.remove_entry_secure()'方法任意文件删除漏洞
CVE-2011-1005 Ruby 'Exception#to_s'方法安全限制绕过漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2010-4754

No comments yet

Leave a comment