CVE-2010-2542

Stack-based buffer overflow in the is_git_directory function in setup.c in Git before 1.7.2.1 allows local users to gain privileges via a long gitdir: field in a .git file in a working copy.

• CWE-787

• http://git.kernel.org/?p=git/git.git%3Ba=commit%3Bh=3c9d0414ed2db0167e6c828b547be8fc9f88fccc
• http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.htmlThird Party Advisory
• http://secunia.com/advisories/43457Third Party Advisory
• http://www.kernel.org/pub/software/scm/git/docs/RelNotes-1.7.2.1.txtBroken Link
• http://www.openwall.com/lists/oss-security/2010/07/22/1Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2010/07/22/4Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/41891Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2011/0464Permissions Required
• https://bugzilla.redhat.com/show_bug.cgi?id=618108Issue Tracking, Third Party Advisory
• http://git.kernel.org/?p=git/git.git%3Ba=commit%3Bh=3c9d0414ed2db0167e6c828b547be8fc9f88fccc
• http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.htmlThird Party Advisory
• http://secunia.com/advisories/43457Third Party Advisory
• http://www.kernel.org/pub/software/scm/git/docs/RelNotes-1.7.2.1.txtBroken Link
• http://www.openwall.com/lists/oss-security/2010/07/22/1Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2010/07/22/4Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/41891Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2011/0464Permissions Required
• https://bugzilla.redhat.com/show_bug.cgi?id=618108Issue Tracking, Third Party Advisory

Published

Aug 11, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-2536Multiple cross-site scripting (XSS) vulnerabilities in rekon…
• CVE-2010-2537The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Li…7.1
• CVE-2010-2538Integer overflow in the btrfs_ioctl_clone function in fs/btr…5.5
• CVE-2010-2539Buffer overflow in the msTmpFile function in maputil.c in ma…
• CVE-2010-2540mapserv.c in mapserv in MapServer before 4.10.6 and 5.x befo…
• CVE-2010-2541Buffer overflow in ftmulti.c in the ftmulti demo program in …
• CVE-2010-2543Cross-site scripting (XSS) vulnerability in include/top_grap…
• CVE-2010-2544Cross-site scripting (XSS) vulnerability in utilities.php in…
• CVE-2010-2545Multiple cross-site scripting (XSS) vulnerabilities in Cacti…
• CVE-2010-2546Multiple heap-based buffer overflows in loaders/load_it.c in…
• CVE-2010-2547Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM i…8.1
• CVE-2010-2548IcedTea6 before 1.7.4 does not properly check property acces…9.1