CVE-2010-2811 - Virtual Desktop Server Manager (VDSM) in Red Hat Enterprise Virtualization (RHEV) 2.2 does not prope

CVE-2010-2811

Summary

Virtual Desktop Server Manager (VDSM) in Red Hat Enterprise Virtualization (RHEV) 2.2 does not properly accept TCP connections for SSL sessions, which allows remote attackers to cause a denial of service (daemon outage) via crafted SSL traffic.

References

Vulnerable Configurations

cpe:2.3:a:redhat:enterprise_virtualization:2.2:*:*:*:*:*:*:*
cpe:2.3:a:redhat:enterprise_virtualization:2.2:*:*:*:*:*:*:*

CVSS

Base:	5.7 (as of 25-08-2010 - 04:00)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
ADJACENT_NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	COMPLETE

cvss-vector via4

AV:A/AC:M/Au:N/C:N/I:N/A:C

redhat via4

advisories

rhsa
id RHSA-2010:0622
rhsa
id RHSA-2010:0628

rpms

rhev-hypervisor-0:5.5-2.2.6.1.el5_5rhev2_2
rhev-hypervisor-pxe-0:5.5-2.2.6.1.el5_5rhev2_2
vdsm22-0:4.5-62.14.el5_5rhev2_2
vdsm22-cli-0:4.5-62.14.el5_5rhev2_2
vdsm22-debuginfo-0:4.5-62.14.el5_5rhev2_2

refmap via4

bid	42580
confirm	https://bugzilla.redhat.com/show_bug.cgi?id=622928
sectrack	1024347

Last major update

25-08-2010 - 04:00

Published

24-08-2010 - 18:00

Last modified

25-08-2010 - 04:00