CVE-2010-2308: High severity sophos anti-virus for sophos central macos vulnerability
Published Jun 16, 2010
·Updated
Unspecified vulnerability in the filter driver (savonaccessfilter.sys) in Sophos Anti-Virus before 7.6.20 allows local users to gain privileges via crafted arguments to the NtQueryAttributesFile function.
Affected Software
43 affected components
SOPHOS Anti-Virus=4.04
SOPHOS Anti-Virus=5.2
SOPHOS Anti-Virus=3.83
SOPHOS Anti-Virus=7.6.15
SOPHOS Anti-Virus=3.86
SOPHOS Anti-Virus=7.6.14
SOPHOS Anti-Virus=3.4.6
SOPHOS Anti-Virus=5.0.2
SOPHOS Anti-Virus=3.80
SOPHOS Anti-Virus=7.0
SOPHOS Anti-Virus=3.96.0
SOPHOS Anti-Virus=4.5.12
SOPHOS Anti-Virus=3.81
SOPHOS Anti-Virus=7.6.16
SOPHOS Anti-Virus=4.5.11
SOPHOS Anti-Virus=3.79
SOPHOS Anti-Virus=4.7.1
SOPHOS Anti-Virus=4.03
SOPHOS Anti-Virus=7.6.17
SOPHOS Anti-Virus=4.33.0
SOPHOS Anti-Virus=6.5
SOPHOS Anti-Virus=4.7.2
SOPHOS Anti-Virus=5.0.4
SOPHOS Anti-Virus=3.90
SOPHOS Anti-Virus=7.0.5
SOPHOS Anti-Virus=5.2.1
SOPHOS Anti-Virus=3.78
SOPHOS Anti-Virus=7.6.18
SOPHOS Anti-Virus=4.05
SOPHOS Anti-Virus=4.5.3
SOPHOS Anti-Virus=3.78d
SOPHOS Anti-Virus=3.95
SOPHOS Anti-Virus=5.0.9
SOPHOS Anti-Virus=3.82
SOPHOS Anti-Virus<=7.6.19
SOPHOS Anti-Virus=4.5.4
SOPHOS Anti-Virus=7.6
SOPHOS Anti-Virus=3.84
SOPHOS Anti-Virus=6.0.4
SOPHOS Anti-Virus=5.1
SOPHOS Anti-Virus=5.0.1
SOPHOS Anti-Virus=3.85
SOPHOS Anti-Virus=3.91
Event History
Jun 16, 2010
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-2308?
CVE-2010-2308 is classified as a privilege escalation vulnerability.
2
How do I fix CVE-2010-2308?
To fix CVE-2010-2308, upgrade Sophos Anti-Virus to version 7.6.20 or later.
3
Who is affected by CVE-2010-2308?
CVE-2010-2308 affects various versions of Sophos Anti-Virus prior to 7.6.20.
4
What type of attack can exploit CVE-2010-2308?
CVE-2010-2308 can be exploited by local users to gain elevated privileges.
5
What component is involved in CVE-2010-2308 vulnerability?
The vulnerability involves the filter driver savonaccessfilter.sys in Sophos Anti-Virus.