CVE-2010-0633

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Unspecified vulnerability in Citrix XenServer 5.0 Update 3 and earlier, and 5.5, allows local users to bypass authentication and execute unspecified Xen API (XAPI) calls via unknown vectors.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/38431Vendor Advisory
http://support.citrix.com/article/CTX123193Patch
http://support.citrix.com/article/CTX123456Patch, Vendor Advisory
http://support.citrix.com/article/CTX123460Patch
http://www.securityfocus.com/bid/38052
http://www.securitytracker.com/id?1023530
http://www.vupen.com/english/advisories/2010/0290Vendor Advisory
http://secunia.com/advisories/38431Vendor Advisory
http://support.citrix.com/article/CTX123193Patch
http://support.citrix.com/article/CTX123456Patch, Vendor Advisory
http://support.citrix.com/article/CTX123460Patch
http://www.securityfocus.com/bid/38052
http://www.securitytracker.com/id?1023530
http://www.vupen.com/english/advisories/2010/0290Vendor Advisory

Timeline

Published: Feb 12, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-06347.5Unspecified vulnerability in Fast Lexical Analyzer Generator (flex) before 2.5.35 has unknown impact and attack vectors.CVE-2010-06357.5SQL injection vulnerability in the plgSearchEventsearch::onSearch method in eventsearch.php in the JEvents Search plugin 1.5 through 1.5.3 f CVE-2010-06364.3Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to inject CVE-2010-06376.8Multiple cross-site request forgery (CSRF) vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to CVE-2010-06386.8Cross-site request forgery (CSRF) vulnerability in WebCalendar 1.2.0 allows remote attackers to hijack the authentication of administrators CVE-2010-06395.0The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABL CVE-2010-06402.6Cross-site scripting (XSS) vulnerability in CA eHealth Performance Manager 6.0.x through 6.2.x, when malicious HTML detection is disabled, a CVE-2010-06414.3Cross-site scripting (XSS) vulnerability in webline/html/admin/wcs/LoginPage.jhtml in Cisco Collaboration Server (CCS) 5 allows remote attac CVE-2010-06425.0Cisco Collaboration Server (CCS) 5 allows remote attackers to read the source code of JHTML files via URL encoded characters in the filename CVE-2010-06434.3Google Chrome before 4.0.249.89 attempts to make direct connections to web sites when all configured proxy servers are unavailable, which al CVE-2010-06444.3Google Chrome before 4.0.249.89, when a SOCKS 5 proxy server is configured, sends DNS queries directly, which allows remote DNS servers to o CVE-2010-06459.3Multiple integer overflows in factory.cc in Google V8 before r3560, as used in Google Chrome before 4.0.249.89, allow remote attackers to ex