Red Hat qspice-client Race Condition Vulnerability
BID:42711
Info
Red Hat qspice-client Race Condition Vulnerability
| Bugtraq ID: | 42711 |
| Class: | Race Condition Error |
| CVE: |
CVE-2010-2792 |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 25 2010 12:00AM |
| Updated: | Jan 05 2011 08:52PM |
| Credit: | Petr Matousek |
| Vulnerable: |
RedHat Enterprise Linux Optional Productivity Application 5 server Red Hat Enterprise Linux Desktop 5 client |
| Not Vulnerable: | |
Discussion
Red Hat qspice-client Race Condition Vulnerability
qspice-client is prone to a race-condition vulnerability.
A local attacker can exploit this issue to gain access to authentication details, or perform a man-in-the-middle attack on the SPICE connection. Other attacks may be possible.
qspice-client is prone to a race-condition vulnerability.
A local attacker can exploit this issue to gain access to authentication details, or perform a man-in-the-middle attack on the SPICE connection. Other attacks may be possible.
Exploit / POC
Red Hat qspice-client Race Condition Vulnerability
Attackers can use standard commands to exploit this issue.
Attackers can use standard commands to exploit this issue.
Solution / Fix
Red Hat qspice-client Race Condition Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Red Hat qspice-client Race Condition Vulnerability
References:
References: