CVE-2010-2967
Severity Score
7.8
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The loginDefaultEncrypt algorithm in loginLib in Wind River VxWorks before 6.9 does not properly support a large set of distinct possible passwords, which makes it easier for remote attackers to obtain access via a (1) telnet, (2) rlogin, or (3) FTP session.
El algoritmo loginDefaultEncrypt en loginLib en Wind River VxWorks anterior v6.9 no soporta adecuadamente un amplio conjunto de distintas posibilidades de contraseña, lo que hace fácil para atacantes remotos obtner acceso a través de una sesión (1) telnet, (2) rlogin, o (3) FTP.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2010-08-04 CVE Reserved
- 2010-08-04 CVE Published
- 2024-09-16 CVE Updated
- 2024-09-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-310: Cryptographic Issues
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://blog.metasploit.com/2010/08/vxworks-vulnerabilities.html | X_refsource_misc | |
| http://www.kb.cert.org/vuls/id/840249 | Third Party Advisory |
|
| http://www.kb.cert.org/vuls/id/MAPG-863QH9 | X_refsource_confirm |
|
| https://support.windriver.com/olsPortal/faces/maintenance/downloadDetails.jspx?contentId=033709 | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Windriver Search vendor "Windriver" | Vxworks Search vendor "Windriver" for product "Vxworks" | <= 6.8 Search vendor "Windriver" for product "Vxworks" and version " <= 6.8" | - |
Affected
| ||||||
| Windriver Search vendor "Windriver" | Vxworks Search vendor "Windriver" for product "Vxworks" | 5 Search vendor "Windriver" for product "Vxworks" and version "5" | - |
Affected
| ||||||
| Windriver Search vendor "Windriver" | Vxworks Search vendor "Windriver" for product "Vxworks" | 5.5 Search vendor "Windriver" for product "Vxworks" and version "5.5" | - |
Affected
| ||||||
| Windriver Search vendor "Windriver" | Vxworks Search vendor "Windriver" for product "Vxworks" | 6 Search vendor "Windriver" for product "Vxworks" and version "6" | - |
Affected
| ||||||
| Windriver Search vendor "Windriver" | Vxworks Search vendor "Windriver" for product "Vxworks" | 6.4 Search vendor "Windriver" for product "Vxworks" and version "6.4" | - |
Affected
| ||||||