CVE-2010-1906

tgsrv.exe in the Repair Service in Consona Dynamic Agent, Repair Manager, Subscriber Activation, and Subscriber Agent relies on a predictable timestamp field to validate input to the \\.\pipe\__RepairService_pipe__company named pipe, which allows remote authenticated users to execute arbitrary code by obtaining the current time from (1) tcpip.sys or (2) an SMB2 service.

• CWE-310

• http://secunia.com/advisories/39752Vendor Advisory
• http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html
• http://www.consona.com/Content/CRM/Support/SecurityBulletin_April2010.pdfPatch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/602801Patch, US Government Resource
• http://www.securityfocus.com/archive/1/511176/100/0/threaded
• http://www.wintercore.com/downloads/rootedcon_0day.pdfExploit
• http://secunia.com/advisories/39752Vendor Advisory
• http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html
• http://www.consona.com/Content/CRM/Support/SecurityBulletin_April2010.pdfPatch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/602801Patch, US Government Resource
• http://www.securityfocus.com/archive/1/511176/100/0/threaded
• http://www.wintercore.com/downloads/rootedcon_0day.pdfExploit

Published

May 12, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-1900Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Micr…
• CVE-2010-1901Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Micr…
• CVE-2010-1902Buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3,…
• CVE-2010-1903Microsoft Office Word 2002 SP3 and 2003 SP3, and Office Word…
• CVE-2010-1904SQL injection vulnerability in EMC RSA Key Manager (RKM) C C…
• CVE-2010-1905Multiple cross-site scripting (XSS) vulnerabilities in Conso…
• CVE-2010-1907The SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Conso…
• CVE-2010-1908The SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Conso…
• CVE-2010-1909Buffer overflow in the RunCmd method in the SdcUser.TgConCtl…
• CVE-2010-1910The Forgot Password implementation in Consona Live Assistanc…
• CVE-2010-1911The site-locking implementation in the SdcWebSecureBase inte…
• CVE-2010-1912The SdcWebSecureBase interface in tgctlcm.dll in Consona Liv…