# CVEs published 2010-09-08

15 CVEs were published on September 8, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2009-4895](https://cve.now/CVE-2009-4895.md): Race condition in the tty\_fasync function in drivers/char/tty\_io.c in the Linux kernel before 2.6.32.6 allows local users to cause a denial (no CVSS)
- [CVE-2010-2066](https://cve.now/CVE-2010-2066.md): The mext\_check\_arguments function in fs/ext4/move\_extent.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only (no CVSS)
- [CVE-2010-2492](https://cve.now/CVE-2010-2492.md): Buffer overflow in the ecryptfs\_uid\_hash macro in fs/ecryptfs/messaging.c in the eCryptfs subsystem in the Linux kernel before 2.6.35 might (no CVSS)
- [CVE-2010-2495](https://cve.now/CVE-2010-2495.md): The pppol2tp\_xmit function in drivers/net/pppol2tp.c in the L2TP implementation in the Linux kernel before 2.6.34 does not properly validate (no CVSS)
- [CVE-2010-2524](https://cve.now/CVE-2010-2524.md): The DNS resolution functionality in the CIFS implementation in the Linux kernel before 2.6.35, when CONFIG\_CIFS\_DFS\_UPCALL is enabled, relie (no CVSS)
- [CVE-2010-2798](https://cve.now/CVE-2010-2798.md): The gfs2\_dirent\_find\_space function in fs/gfs2/dir.c in the Linux kernel before 2.6.35 uses an incorrect size value in calculations associat (no CVSS)
- [CVE-2010-2803](https://cve.now/CVE-2010-2803.md): The drm\_ioctl function in drivers/gpu/drm/drm\_drv.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.27.53, 2. (no CVSS)
- [CVE-2010-2955](https://cve.now/CVE-2010-2955.md): The cfg80211\_wext\_giwessid function in net/wireless/wext-compat.c in the Linux kernel before 2.6.36-rc3-next-20100831 does not properly init (no CVSS)
- [CVE-2010-2958](https://cve.now/CVE-2010-2958.md): Cross-site scripting (XSS) vulnerability in libraries/Error.class.php in phpMyAdmin 3.x before 3.3.6 allows remote attackers to inject arbit (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2010-2959](https://cve.now/CVE-2010-2959.md): Integer overflow in net/can/bcm.c in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.27.53, 2.6.32.x before (no CVSS)
- [CVE-2010-2960](https://cve.now/CVE-2010-2960.md): The keyctl\_session\_to\_parent function in security/keys/keyctl.c in the Linux kernel 2.6.35.4 and earlier expects that a certain parent sessi (no CVSS)
- [CVE-2010-3004](https://cve.now/CVE-2010-3004.md): Unspecified vulnerability in HP Operations Agent 7.36 and 8.6 on Windows allows remote attackers to execute arbitrary code via unknown vecto (no CVSS)
- [CVE-2010-3005](https://cve.now/CVE-2010-3005.md): Unspecified vulnerability in HP Operations Agent 7.36 and 8.6 on Windows allows local users to gain privileges via unknown vectors. (no CVSS)
- [CVE-2010-3198](https://cve.now/CVE-2010-3198.md): ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads (no CVSS, zope)
- [CVE-2010-3264](https://cve.now/CVE-2010-3264.md): The engine installer in Novell Identity Manager (aka IDM) 3.6.1 stores admin tree credentials in /tmp/idmInstall.log, which allows local use (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-09-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.