CVE-2010-1100

Publication date 24 March 2010

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

Integer overflow in Arora allows remote attackers to bypass intended port restrictions on outbound TCP connections via a port number outside the range of the unsigned short data type, as demonstrated by a value of 65561 for TCP port 25.

Read the notes from the security team

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
arora 11.10 oneiric
Not affected
11.04 natty
Not affected
10.10 maverick
Not affected
10.04 LTS lucid
Not affected
9.10 karmic Ignored end of life
9.04 jaunty Ignored end of life
8.10 intrepid Ignored end of life, was needs-triage
8.04 LTS hardy Not in release
6.06 LTS dapper Not in release

Notes

jdstrand

cannot reproduce on Ubuntu 10.04 and later