CVE-2010-2452

Directory traversal vulnerability in the DCC functionality in KVIrc 3.4 and 4.0 allows remote attackers to overwrite arbitrary files via unknown vectors.

• CWE-22

• http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043601.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043629.html
• http://lists.omnikron.net/pipermail/kvirc/2010-May/000867.html
• http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
• http://secunia.com/advisories/32410Vendor Advisory
• http://secunia.com/advisories/40349Vendor Advisory
• http://www.debian.org/security/2010/dsa-2065Patch
• http://www.securityfocus.com/bid/40746Patch
• http://www.vupen.com/english/advisories/2010/1602Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043601.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043629.html
• http://lists.omnikron.net/pipermail/kvirc/2010-May/000867.html
• http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
• http://secunia.com/advisories/32410Vendor Advisory
• http://secunia.com/advisories/40349Vendor Advisory
• http://www.debian.org/security/2010/dsa-2065Patch
• http://www.securityfocus.com/bid/40746Patch
• http://www.vupen.com/english/advisories/2010/1602Vendor Advisory

Published

Jun 29, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-2446Rbot Reaction plugin allows command execution9.8
• CVE-2010-2447gitolite before 1.4.1 does not filter src/ or hooks/ from pa…9.8
• CVE-2010-2448znc.cpp in ZNC before 0.092 allows remote authenticated user…
• CVE-2010-2449Gource through 0.26 logs to a predictable file name (/tmp/go…6.5
• CVE-2010-2450The keygen.sh script in Shibboleth SP 2.0 (located in /usr/l…7.5
• CVE-2010-2451Multiple format string vulnerabilities in the DCC functional…
• CVE-2010-2453Multiple cross-site scripting (XSS) vulnerabilities in Synol…
• CVE-2010-2454Apple Safari does not properly manage the address bar betwee…
• CVE-2010-2455Opera does not properly manage the address bar between the r…
• CVE-2010-2456Multiple directory traversal vulnerabilities in index.php in…
• CVE-2010-2457Cross-site scripting (XSS) vulnerability in index.php in K-S…
• CVE-2010-2458Cross-site scripting (XSS) vulnerability in video.php in 2da…