cve/2010/CVE-2010-2632.md

CVE-2010-2632

Description

Unspecified vulnerability in the FTP Server in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable researcher that this is an issue in the glob implementation in libc that allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames.

POC

Reference

• http://securityreason.com/achievement_securityalert/89
• http://securityreason.com/achievement_securityalert/97
• http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html

Github

• https://github.com/CoolerVoid/Vision
• https://github.com/CoolerVoid/Vision2
• https://github.com/hack-parthsharma/Vision
• https://github.com/n0-traces/cve_monitor
• https://github.com/phx/cvescan