CVE-2010-3332 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2010-3332 Interim 1 12 2023-02-15T02:35:55Z current 2021-05-30T12:53:18Z 2023-02-15T02:35:55Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2010-3332 Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Internet Information Services (IIS), provides detailed error codes during decryption attempts, which allows remote attackers to decrypt and modify encrypted View State (aka __VIEWSTATE) form data, and possibly forge cookies or read application files, via a padding oracle attack, aka "ASP.NET Padding Oracle Vulnerability." The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/opensuse-security-announce/2011-05/msg00000.html E-Mail link for SUSE-SR:2011:008 https://lists.suse.com/pipermail/sle-security-updates/2012-March/000059.html E-Mail link for SUSE-SU-2012:0393-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 bytefx-data-mysql-2.6.7-0.13.1 mono-core-2.0.1-1.34.1 mono-core-2.6.7-0.13.1 mono-core-2.6.7-0.7.19 mono-data-2.0.1-1.34.1 mono-data-2.6.7-0.13.1 mono-data-2.6.7-0.7.19 mono-data-firebird-2.6.7-0.13.1 mono-data-oracle-2.6.7-0.13.1 mono-data-postgresql-2.0.1-1.34.1 mono-data-postgresql-2.6.7-0.13.1 mono-data-postgresql-2.6.7-0.7.19 mono-data-sqlite-2.0.1-1.34.1 mono-data-sqlite-2.6.7-0.13.1 mono-data-sqlite-2.6.7-0.7.19 mono-data-sybase-2.6.7-0.13.1 mono-devel-2.6.7-0.13.1 mono-extras-2.6.7-0.13.1 mono-jscript-2.6.7-0.13.1 mono-locale-extras-2.0.1-1.34.1 mono-locale-extras-2.6.7-0.13.1 mono-locale-extras-2.6.7-0.7.19 mono-nunit-2.0.1-1.34.1 mono-nunit-2.6.7-0.13.1 mono-nunit-2.6.7-0.7.19 mono-wcf-2.6.7-0.13.1 mono-web-2.0.1-1.34.1 mono-web-2.6.7-0.13.1 mono-web-2.6.7-0.7.19 mono-winforms-2.0.1-1.34.1 mono-winforms-2.6.7-0.13.1 mono-winforms-2.6.7-0.7.19 mono-winfxcore-2.6.7-0.13.1 monodoc-core-2.6.7-0.13.1 mono-core-2.0.1-1.34.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mono-data-2.0.1-1.34.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mono-data-postgresql-2.0.1-1.34.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mono-data-sqlite-2.0.1-1.34.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mono-locale-extras-2.0.1-1.34.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mono-nunit-2.0.1-1.34.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mono-web-2.0.1-1.34.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mono-winforms-2.0.1-1.34.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mono-core-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP2 mono-data-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP2 mono-data-postgresql-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP2 mono-data-sqlite-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP2 mono-locale-extras-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP2 mono-nunit-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP2 mono-web-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP2 mono-winforms-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP2 mono-core-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP3 mono-data-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP3 mono-data-postgresql-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP3 mono-data-sqlite-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP3 mono-locale-extras-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP3 mono-nunit-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP3 mono-web-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP3 mono-winforms-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP3 mono-core-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Server 11 SP4 mono-data-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Server 11 SP4 mono-data-postgresql-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Server 11 SP4 mono-data-sqlite-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Server 11 SP4 mono-locale-extras-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Server 11 SP4 mono-nunit-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Server 11 SP4 mono-web-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Server 11 SP4 mono-winforms-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Server 11 SP4 bytefx-data-mysql-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-core-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-data-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-data-firebird-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-data-oracle-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-data-postgresql-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-data-sqlite-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-data-sybase-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-devel-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-extras-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-jscript-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-locale-extras-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-nunit-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-wcf-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-web-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-winforms-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-winfxcore-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 monodoc-core-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Internet Information Services (IIS), provides detailed error codes during decryption attempts, which allows remote attackers to decrypt and modify encrypted View State (aka __VIEWSTATE) form data, and possibly forge cookies or read application files, via a padding oracle attack, aka "ASP.NET Padding Oracle Vulnerability." CVE-2010-3332 SUSE Linux Enterprise Server 11 SP1-TERADATA:mono-core-2.0.1-1.34.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mono-data-2.0.1-1.34.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mono-data-postgresql-2.0.1-1.34.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mono-data-sqlite-2.0.1-1.34.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mono-locale-extras-2.0.1-1.34.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mono-nunit-2.0.1-1.34.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mono-web-2.0.1-1.34.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mono-winforms-2.0.1-1.34.1 SUSE Linux Enterprise Server 11 SP2:mono-core-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP2:mono-data-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP2:mono-data-postgresql-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP2:mono-data-sqlite-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP2:mono-locale-extras-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP2:mono-nunit-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP2:mono-web-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP2:mono-winforms-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP3:mono-core-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP3:mono-data-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP3:mono-data-postgresql-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP3:mono-data-sqlite-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP3:mono-locale-extras-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP3:mono-nunit-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP3:mono-web-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP3:mono-winforms-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP4:mono-core-2.6.7-0.13.1 SUSE Linux Enterprise Server 11 SP4:mono-data-2.6.7-0.13.1 SUSE Linux Enterprise Server 11 SP4:mono-data-postgresql-2.6.7-0.13.1 SUSE Linux Enterprise Server 11 SP4:mono-data-sqlite-2.6.7-0.13.1 SUSE Linux Enterprise Server 11 SP4:mono-locale-extras-2.6.7-0.13.1 SUSE Linux Enterprise Server 11 SP4:mono-nunit-2.6.7-0.13.1 SUSE Linux Enterprise Server 11 SP4:mono-web-2.6.7-0.13.1 SUSE Linux Enterprise Server 11 SP4:mono-winforms-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:bytefx-data-mysql-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-core-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-data-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-data-firebird-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-data-oracle-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-data-postgresql-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-data-sqlite-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-data-sybase-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-devel-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-extras-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-jscript-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-locale-extras-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-nunit-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-wcf-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-web-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-winforms-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-winfxcore-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:monodoc-core-2.6.7-0.13.1 moderate 6.4 AV:N/AC:L/Au:N/C:P/I:P/A:N