# CVEs published 2010-10-07

7 CVEs were published on October 7, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-1322](https://cve.now/CVE-2010-1322.md): The merge\_authdata function in kdc\_authdata.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8.x before 1.8.4 does not (no CVSS)
- [CVE-2010-3321](https://cve.now/CVE-2010-3321.md): RSA Authentication Client 2.0.x, 3.0, and 3.5.x before 3.5.3 does not properly handle a SENSITIVE or NON-EXTRACTABLE tag on a secret key obj (no CVSS)
- [CVE-2010-3690](https://cve.now/CVE-2010-3690.md): Multiple cross-site scripting (XSS) vulnerabilities in phpCAS before 1.1.3, when proxy mode is enabled, allow remote attackers to inject arb (no CVSS)
- [CVE-2010-3691](https://cve.now/CVE-2010-3691.md): PGTStorage/pgt-file.php in phpCAS before 1.1.3, when proxy mode is enabled, allows local users to overwrite arbitrary files via a symlink at (no CVSS)
- [CVE-2010-3692](https://cve.now/CVE-2010-3692.md): Directory traversal vulnerability in the callback function in client.php in phpCAS before 1.1.3, when proxy mode is enabled, allows remote a (no CVSS)
- [CVE-2010-3696](https://cve.now/CVE-2010-3696.md): The fr\_dhcp\_decode function in lib/dhcp.c in FreeRADIUS 2.1.9, in certain non-default builds, does not properly handle the DHCP Relay Agent (no CVSS)
- [CVE-2010-3697](https://cve.now/CVE-2010-3697.md): The wait\_for\_child\_to\_die function in main/event.c in FreeRADIUS 2.1.x before 2.1.10, in certain circumstances involving long-term database (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-10-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.