# CVEs published 2010-08-20

30 CVEs were published on August 20, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-3101](https://cve.now/CVE-2010-3101.md): Directory traversal vulnerability in FTPx Corp FTP Explorer 10.5.19.1 for Windows, and probably earlier versions, allows remote FTP servers (no CVSS)
- [CVE-2010-3102](https://cve.now/CVE-2010-3102.md): Directory traversal vulnerability in SiteDesigner Technologies, Inc. (no CVSS)
- [CVE-2010-3103](https://cve.now/CVE-2010-3103.md): Directory traversal vulnerability in FTPGetter Team FTPGetter 3.51.0.05, and probably earlier versions, allows remote FTP servers to write a (no CVSS)
- [CVE-2010-3104](https://cve.now/CVE-2010-3104.md): Directory traversal vulnerability in DeskShare AutoFTP Manager 4.31, and probably earlier versions, allows remote FTP servers to write arbit (no CVSS)
- [CVE-2010-2484](https://cve.now/CVE-2010-2484.md): The strrchr function in PHP 5.2 before 5.2.14 allows context-dependent attackers to obtain sensitive information (memory contents) or trigge (no CVSS)
- [CVE-2010-2531](https://cve.now/CVE-2010-2531.md): The var\_export function in PHP 5.2 before 5.2.14 and 5.3 before 5.3.3 flushes the output buffer to the user when certain fatal errors occur, (no CVSS)
- [CVE-2010-2710](https://cve.now/CVE-2010-2710.md): Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via u (no CVSS)
- [CVE-2010-1768](https://cve.now/CVE-2010-1768.md): Unspecified vulnerability in Apple iTunes before 9.1 allows local users to gain console privileges via vectors related to log files, "insecu (no CVSS)
- [CVE-2010-1795](https://cve.now/CVE-2010-1795.md): Untrusted search path vulnerability in Apple iTunes before 9.1, when running on Windows 7, Vista, and XP, allows local users and possibly re (no CVSS)
- [CVE-2010-2944](https://cve.now/CVE-2010-2944.md): The authenticate function in LDAPUserFolder/LDAPUserFolder.py in zope-ldapuserfolder 2.9-1 does not verify the password for the emergency ac (no CVSS)
- [CVE-2010-3014](https://cve.now/CVE-2010-3014.md): The Coda filesystem kernel module, as used in NetBSD and FreeBSD, when Coda is loaded and Venus is running with /coda mounted, allows local (no CVSS)
- [CVE-2010-3062](https://cve.now/CVE-2010-3062.md): mysqlnd\_wireprotocol.c in the Mysqlnd extension in PHP 5.3 through 5.3.2 allows remote attackers to (1) read sensitive memory via a modified (no CVSS)
- [CVE-2010-3063](https://cve.now/CVE-2010-3063.md): The php\_mysqlnd\_read\_error\_from\_line function in the Mysqlnd extension in PHP 5.3 through 5.3.2 does not properly calculate a buffer length, (no CVSS)
- [CVE-2010-3064](https://cve.now/CVE-2010-3064.md): Stack-based buffer overflow in the php\_mysqlnd\_auth\_write function in the Mysqlnd extension in PHP 5.3 through 5.3.2 allows context-dependen (no CVSS)
- [CVE-2010-3065](https://cve.now/CVE-2010-3065.md): The default session serializer in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 does not properly handle the PS\_UNDEF\_MARKER marker, which al (no CVSS)
- [CVE-2010-3096](https://cve.now/CVE-2010-3096.md): Directory traversal vulnerability in SoftX FTP Client 3.3 and possibly earlier allows remote FTP servers to write arbitrary files via "..\\" (no CVSS)
- [CVE-2010-3097](https://cve.now/CVE-2010-3097.md): Directory traversal vulnerability in WinFrigate Frigate 3 FTP client 3.36 and earlier allows remote FTP servers to overwrite arbitrary files (no CVSS)
- [CVE-2010-3098](https://cve.now/CVE-2010-3098.md): Directory traversal vulnerability in IoRush Software FTP Rush 1.1.3 and possibly earlier allows remote FTP servers to overwrite arbitrary fi (no CVSS)
- [CVE-2010-3099](https://cve.now/CVE-2010-3099.md): Directory traversal vulnerability in SmartSoft Ltd SmartFTP Client 4.0.1124.0, and possibly other versions before 4.0 Build 1133, allows rem (no CVSS)
- [CVE-2010-3100](https://cve.now/CVE-2010-3100.md): Directory traversal vulnerability in Porta+ FTP Client 4.1, and possibly other versions, allows remote FTP servers to overwrite arbitrary fi (no CVSS)
- [CVE-2008-7258](https://cve.now/CVE-2008-7258.md): The standardise function in Anibal Monsalve Salazar sSMTP 2.61 and 2.62 allows local users to cause a denial of service (application exit) v (no CVSS)
- [CVE-2010-1172](https://cve.now/CVE-2010-1172.md): DBus-GLib 0.73 disregards the access flag of exported GObject properties, which allows local users to bypass intended access restrictions an (no CVSS)
- [CVE-2010-2628](https://cve.now/CVE-2010-2628.md): The IKE daemon in strongSwan 4.3.x before 4.3.7 and 4.4.x before 4.4.1 does not properly check the return values of snprintf calls, which al (no CVSS)
- [CVE-2010-2810](https://cve.now/CVE-2010-2810.md): Heap-based buffer overflow in the convert\_to\_idna function in WWW/Library/Implementation/HTParse.c in Lynx 2.8.8dev.1 through 2.8.8dev.4 all (no CVSS)
- [CVE-2010-2937](https://cve.now/CVE-2010-2937.md): The ReadMetaFromId3v2 function in taglib.cpp in the TagLib plugin in VideoLAN VLC media player 0.9.0 through 1.1.2 does not properly process (no CVSS)
- [CVE-2010-3015](https://cve.now/CVE-2010-3015.md): Integer overflow in the ext4\_ext\_get\_blocks function in fs/ext4/extents.c in the Linux kernel before 2.6.34 allows local users to cause a de (no CVSS)
- [CVE-2010-3058](https://cve.now/CVE-2010-3058.md): The Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.x.x before 5.5.7, and 6.1.0.0, establishes an open UDP port, which might al (no CVSS)
- [CVE-2010-3059](https://cve.now/CVE-2010-3059.md): Buffer overflow in the message-protocol implementation in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.x.x before 5.5.7, and 6. (no CVSS)
- [CVE-2010-3060](https://cve.now/CVE-2010-3060.md): Unspecified vulnerability in the message-protocol implementation in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.x.x before 5.5 (no CVSS)
- [CVE-2010-3061](https://cve.now/CVE-2010-3061.md): Unspecified vulnerability in the message-protocol implementation in the Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.x.x bef (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-08-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.