Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2010-2221

Multiple buffer overflows in the iSNS implementation in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) before 1.0.6, (2) iSCSI Enterprise Target (aka iscsitarget or IET) 1.4.20.1 and earlier, and (3) Generic SCSI Target Subsystem for Linux (aka SCST or iscsi-scst) 1.0.1.1 and earlier allow remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via (a) a long iSCSI Name string in an SCN message or (b) an invalid PDU.

Published

2010-07-08T18:30:00.907

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: NONE
Availability Impact: PARTIAL

Exploitability Score

10.0

Impact Score

2.9

Weaknesses

Type: Primary
CWE-119

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	zaal	tgt	≤ 1.0.5	Yes
Application	zaal	tgt	0.9.5	Yes
Application	zaal	tgt	1.0.0	Yes
Application	zaal	tgt	1.0.1	Yes
Application	zaal	tgt	1.0.2	Yes
Application	zaal	tgt	1.0.3	Yes
Application	zaal	tgt	1.0.4	Yes
Operating System	linux	linux_kernel	*	No
Application	arne_redlich_\&_ross_walker	iscsitarget	≤ 1.4.20	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.1.0	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.2.0	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.2.1	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.2.2	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.2.3	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.2.4	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.2.5	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.2.6	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.3.0	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.3.1	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.3.2	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.3.3	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.3.4	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.3.5	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.3.6	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.3.7	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.3.8	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.4.0	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.4.1	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.4.2	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.4.3	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.4.4	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.4.5	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.4.6	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.4.7	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.4.8	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.4.9	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.4.10	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.4.11	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.4.12	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.4.13	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.4.14	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.4.15	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.4.16	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	0.4.17	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	1.4.18	Yes
Application	arne_redlich_\&_ross_walker	iscsitarget	1.4.19	Yes
Application	vladislav_bolkhovitin	generic_scsi_target_subsystem	≤ 1.0.1	Yes
Application	vladislav_bolkhovitin	generic_scsi_target_subsystem	0.9.0a	Yes
Application	vladislav_bolkhovitin	generic_scsi_target_subsystem	0.9.1	Yes
Application	vladislav_bolkhovitin	generic_scsi_target_subsystem	0.9.2	Yes
Application	vladislav_bolkhovitin	generic_scsi_target_subsystem	0.9.3	Yes
Application	vladislav_bolkhovitin	generic_scsi_target_subsystem	0.9.3	Yes
Application	vladislav_bolkhovitin	generic_scsi_target_subsystem	0.9.3	Yes
Application	vladislav_bolkhovitin	generic_scsi_target_subsystem	0.9.3	Yes
Application	vladislav_bolkhovitin	generic_scsi_target_subsystem	0.9.4	Yes
Application	vladislav_bolkhovitin	generic_scsi_target_subsystem	0.9.5	Yes
Application	vladislav_bolkhovitin	generic_scsi_target_subsystem	0.9.5.1	Yes
Application	vladislav_bolkhovitin	generic_scsi_target_subsystem	0.9.5.2	Yes
Application	vladislav_bolkhovitin	generic_scsi_target_subsystem	1.0.0	Yes
Operating System	linux	linux_kernel	*	No

References

http://archives.neohapsis.com/archives/bugtraq/2010-07/0022.html ([email protected])
http://archives.neohapsis.com/archives/fulldisclosure/2010-07/0058.html ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html ([email protected])
http://lists.wpkg.org/pipermail/stgt/2010-July/003858.html ([email protected])
http://scst.svn.sourceforge.net/viewvc/scst/trunk/iscsi-scst/usr/isns.c?r1=1793&r2=1792&pathrev=1793 ([email protected])
http://scst.svn.sourceforge.net/viewvc/scst?view=revision&revision=1793 ([email protected])
http://secunia.com/advisories/40485 Vendor Advisory ([email protected])
http://secunia.com/advisories/40494 Vendor Advisory ([email protected])
http://secunia.com/advisories/40495 Vendor Advisory ([email protected])
http://sourceforge.net/mailarchive/forum.php?thread_name=E2BB8074E5500C42984D980D4BD78EF904075006%40MFG-NYC-EXCH2.mfg.prv&forum_name=iscsitarget-devel ([email protected])
http://www.mandriva.com/security/advisories?name=MDVSA-2010:131 ([email protected])
http://www.osvdb.org/65990 ([email protected])
http://www.osvdb.org/65991 ([email protected])
http://www.osvdb.org/65992 ([email protected])
http://www.redhat.com/support/errata/RHSA-2010-0518.html ([email protected])
http://www.securityfocus.com/bid/41327 ([email protected])
http://www.securitytracker.com/id?1024175 ([email protected])
http://www.vupen.com/english/advisories/2010/1760 ([email protected])
http://www.vupen.com/english/advisories/2010/1786 ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=593877 ([email protected])
http://archives.neohapsis.com/archives/bugtraq/2010-07/0022.html (af854a3a-2127-422b-91ae-364da2661108)
http://archives.neohapsis.com/archives/fulldisclosure/2010-07/0058.html (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html (af854a3a-2127-422b-91ae-364da2661108)
http://lists.wpkg.org/pipermail/stgt/2010-July/003858.html (af854a3a-2127-422b-91ae-364da2661108)
http://scst.svn.sourceforge.net/viewvc/scst/trunk/iscsi-scst/usr/isns.c?r1=1793&r2=1792&pathrev=1793 (af854a3a-2127-422b-91ae-364da2661108)
http://scst.svn.sourceforge.net/viewvc/scst?view=revision&revision=1793 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/40485 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/40494 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/40495 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://sourceforge.net/mailarchive/forum.php?thread_name=E2BB8074E5500C42984D980D4BD78EF904075006%40MFG-NYC-EXCH2.mfg.prv&forum_name=iscsitarget-devel (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDVSA-2010:131 (af854a3a-2127-422b-91ae-364da2661108)
http://www.osvdb.org/65990 (af854a3a-2127-422b-91ae-364da2661108)
http://www.osvdb.org/65991 (af854a3a-2127-422b-91ae-364da2661108)
http://www.osvdb.org/65992 (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2010-0518.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/41327 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1024175 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2010/1760 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2010/1786 (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=593877 (af854a3a-2127-422b-91ae-364da2661108)