CVE-2010-0790
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2010-0790
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
sutil/ncpumount.c in ncpumount in ncpfs 2.2.6 produces certain detailed error messages about the results of privileged file-access attempts, which allows local users to determine the existence of arbitrary files via the mountpoint name.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
ncpfs 多个本地文件信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
ncpfs是Linux下的NetWare协议支持软件。 ncpfs的ncpumount中源代码文件sutil/ncpumount.c产生一些权限文件访问尝试结果的详细错误信息，本地用户可以借助mountpoint名称，限定任意存在的文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2010-0790
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2010-0790
请登录查看更多情报信息。
Vendor Advisories for CVE-2010-0790 (3)
Mailing List Discussions for CVE-2010-0790 (3)
- http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.htmlvendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.htmlvendor-advisoryx_refsource_SUSE
Same Patch Batch · n/a · 2010-03-09 · 18 CVEs total
| CVE-2010-0955 | Media-Products Bild Flirt Community 'index.php' SQL注入漏洞 | |
| CVE-2010-0926 | Samba smbd默认配置目录遍历漏洞 | |
| CVE-2010-0791 | ncpfs 多个访问控制漏洞 | |
| CVE-2010-0728 | Samba 'CAP_DAC_OVERRIDE' 文件权限 | |
| CVE-2010-0418 | chumby web界面操作系统命令注入漏洞 | |
| CVE-2010-0103 | Energizer DUO USB Battery Charger 未授权访问漏洞 | |
| CVE-2010-0958 | Tribisur 'modules/hayoo/index.php'目录遍历漏洞 | |
| CVE-2010-0957 | Saskia_Bruckner Saskia's Shopsystem 'content.php' 目录遍历漏洞 | |
| CVE-2010-0956 | OpenCart 'index.php' SQL注入漏洞 | |
| CVE-2010-0947 | BBSMAX 'post.aspx' 跨站脚本攻击漏洞 | |
| CVE-2010-0954 | Pre Projects Pre E-Learning Portal 'search_result.asp' SQL注入漏洞 | |
| CVE-2010-0953 | phpCOIN 'mod.php' 目录遍历漏洞 | |
| CVE-2010-0952 | Insanevisions OneCMS 'index.php' SQL注入漏洞 | |
| CVE-2010-0951 | dev4u CMS 'go_target.php' SQL注入漏洞 | |
| CVE-2010-0950 | Natychmiast CMS 多个SQL注入漏洞 | |
| CVE-2010-0949 | Natychmiast CMS 多个跨站脚本攻击漏洞 | |
| CVE-2010-0948 | Bfs.Kilu Bigforum 'profil.php'SQL注入漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-15533
DedeCMS Column Management search.php code injection - CVE-2026-15530
WuzhiCMS Attachment API index.php listimage information disc - CVE-2026-15516
MacCMS Pro Installation Index.php step5 authorization - CVE-2026-15510
Leantime API saveSetting improper authorization - CVE-2026-15509
Leantime JSON-RPC Endpoint addUser improper authorization
V. Comments for CVE-2010-0790
No comments yet