CVE Feed

    Dashboard / CVE / CVE-2010-0743

    CVE-2010-0743

    Multiple format string vulnerabilities in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) 1.0.3, 0.9.5, and earlier and (2) iSCSI Enterprise Target (aka iscsitarget) 0.4.16 allow remote attackers to cause a denial of service (tgtd daemon crash) or possibly have unspecified other impact via vectors that involve the isns_attr_query and qry_rsp_handle functions, and are related to (a) client appearance and (b) client disappearance messages.

    Published:Mar 22, 2010
    Last Modified:Apr 11, 2025
    EPS:Apr 8, 2010
    EPSS Score:0.06442
    CVSS Score:5

    Affected Products

    Vendor
    Iscsitarget
    Product
    Iscsitarget
    Vendor
    Redhat
    Product
    Rhel Cluster Storage
    Vendor
    Zaal
    Product
    Tgt

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-135 Format String Injection
    CAPEC-67 String Format Overflow in syslog()

    References

    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=574935
    http://git.kernel.org/?p=linux/kernel/git/tomo/tgt.git%3Ba=commit%3Bh=107d922706cd36f3bb79bcca9bc4678c32f22e59
    http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
    http://marc.info/?l=oss-security&m=127005132403189&w=2
    http://secunia.com/advisories/39142
    http://secunia.com/advisories/39726
    http://www.debian.org/security/2010/dsa-2042
    http://www.mandriva.com/security/advisories?name=MDVSA-2010:131
    http://www.securityfocus.com/bid/39127
    http://www.vupen.com/english/advisories/2010/1786
    https://bugzilla.redhat.com/show_bug.cgi?id=576359
    https://exchange.xforce.ibmcloud.com/vulnerabilities/57496
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11248
    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=574935
    http://git.kernel.org/?p=linux/kernel/git/tomo/tgt.git%3Ba=commit%3Bh=107d922706cd36f3bb79bcca9bc4678c32f22e59
    http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
    http://marc.info/?l=oss-security&m=127005132403189&w=2
    http://secunia.com/advisories/39142
    http://secunia.com/advisories/39726
    http://www.debian.org/security/2010/dsa-2042
    http://www.mandriva.com/security/advisories?name=MDVSA-2010:131
    http://www.securityfocus.com/bid/39127
    http://www.vupen.com/english/advisories/2010/1786
    https://bugzilla.redhat.com/show_bug.cgi?id=576359
    https://exchange.xforce.ibmcloud.com/vulnerabilities/57496
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11248

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High