CVE-2010-2594

Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent 3.1.7 and earlier on Windows, Snare Agent 1.5.0 and earlier on Linux and AIX, Snare Agent 1.4 and earlier on IRIX, Snare Epilog 1.5.3 and earlier on Windows, and Snare Epilog 1.2 and earlier on UNIX allow remote attackers to hijack the authentication of administrators for requests that (1) change the password or (2) change the listening port.

• CWE-352

• http://holisticinfosec.org/content/view/144/45/Third Party Advisory
• http://secunia.com/advisories/39562Broken Link
• http://www.kb.cert.org/vuls/id/173009Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/41226Third Party Advisory, VDB Entry
• http://holisticinfosec.org/content/view/144/45/Third Party Advisory
• http://secunia.com/advisories/39562Broken Link
• http://www.kb.cert.org/vuls/id/173009Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/41226Third Party Advisory, VDB Entry

Published

Jul 2, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-2585Multiple buffer overflows in the RealPage Module Upload Acti…
• CVE-2010-2586Multiple integer overflows in in_nsv.dll in the in_nsv plugi…
• CVE-2010-2587The dirapi.dll module in Adobe Shockwave Player before 11.5.…
• CVE-2010-2588The dirapi.dll module in Adobe Shockwave Player before 11.5.…
• CVE-2010-2589Integer overflow in the dirapi.dll module in Adobe Shockwave…
• CVE-2010-2590Heap-based buffer overflow in the CrystalReports12.CrystalPr…
• CVE-2010-2595The TIFFYCbCrtoRGB function in LibTIFF 3.9.0 and 3.9.2, as u…
• CVE-2010-2596The OJPEGPostDecode function in tif_ojpeg.c in LibTIFF 3.9.0…
• CVE-2010-2597The TIFFVStripSize function in tif_strip.c in LibTIFF 3.9.0 …
• CVE-2010-2598LibTIFF in Red Hat Enterprise Linux (RHEL) 3 on x86_64 platf…
• CVE-2010-2599Unspecified vulnerability in Research In Motion (RIM) BlackB…
• CVE-2010-2600Untrusted search path vulnerability in BlackBerry Desktop So…