CVE-2010-1459 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2010-1459 Interim 1 15 2023-02-15T02:39:21Z current 2021-05-30T12:51:23Z 2023-02-15T02:39:21Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2010-1459 The default configuration of ASP.NET in Mono before 2.6.4 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by the __VIEWSTATE parameter to 2.0/menu/menu1.aspx in the XSP sample project. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html E-Mail link for SUSE-SR:2010:012 https://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html E-Mail link for SUSE-SR:2010:014 https://lists.opensuse.org/opensuse-updates/2010-06/msg00010.html E-Mail link for openSUSE-SU-2010:0342-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SUSE Linux Enterprise Software Development Kit 11 SP4 bytefx-data-mysql-2.6.7-0.13.1 mono-core-2.0.1-1.26.1 mono-core-2.6.7-0.13.1 mono-core-2.6.7-0.7.19 mono-data-2.0.1-1.26.1 mono-data-2.6.7-0.13.1 mono-data-2.6.7-0.7.19 mono-data-firebird-2.6.7-0.13.1 mono-data-oracle-2.6.7-0.13.1 mono-data-postgresql-2.0.1-1.26.1 mono-data-postgresql-2.6.7-0.13.1 mono-data-postgresql-2.6.7-0.7.19 mono-data-sqlite-2.0.1-1.26.1 mono-data-sqlite-2.6.7-0.13.1 mono-data-sqlite-2.6.7-0.7.19 mono-data-sybase-2.6.7-0.13.1 mono-devel-2.6.7-0.13.1 mono-extras-2.6.7-0.13.1 mono-jscript-2.6.7-0.13.1 mono-locale-extras-2.0.1-1.26.1 mono-locale-extras-2.6.7-0.13.1 mono-locale-extras-2.6.7-0.7.19 mono-nunit-2.0.1-1.26.1 mono-nunit-2.6.7-0.13.1 mono-nunit-2.6.7-0.7.19 mono-wcf-2.6.7-0.13.1 mono-web-2.0.1-1.26.1 mono-web-2.6.7-0.13.1 mono-web-2.6.7-0.7.19 mono-winforms-2.0.1-1.26.1 mono-winforms-2.6.7-0.13.1 mono-winforms-2.6.7-0.7.19 mono-winfxcore-2.6.7-0.13.1 monodoc-core-2.6.7-0.13.1 mono-core-2.0.1-1.26.1 as a component of SUSE Linux Enterprise Server 11 mono-data-2.0.1-1.26.1 as a component of SUSE Linux Enterprise Server 11 mono-data-postgresql-2.0.1-1.26.1 as a component of SUSE Linux Enterprise Server 11 mono-data-sqlite-2.0.1-1.26.1 as a component of SUSE Linux Enterprise Server 11 mono-locale-extras-2.0.1-1.26.1 as a component of SUSE Linux Enterprise Server 11 mono-nunit-2.0.1-1.26.1 as a component of SUSE Linux Enterprise Server 11 mono-web-2.0.1-1.26.1 as a component of SUSE Linux Enterprise Server 11 mono-winforms-2.0.1-1.26.1 as a component of SUSE Linux Enterprise Server 11 mono-core-2.0.1-1.26.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mono-data-2.0.1-1.26.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mono-data-postgresql-2.0.1-1.26.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mono-data-sqlite-2.0.1-1.26.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mono-locale-extras-2.0.1-1.26.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mono-nunit-2.0.1-1.26.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mono-web-2.0.1-1.26.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mono-winforms-2.0.1-1.26.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mono-core-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP2 mono-data-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP2 mono-data-postgresql-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP2 mono-data-sqlite-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP2 mono-locale-extras-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP2 mono-nunit-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP2 mono-web-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP2 mono-winforms-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP2 mono-core-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP3 mono-data-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP3 mono-data-postgresql-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP3 mono-data-sqlite-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP3 mono-locale-extras-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP3 mono-nunit-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP3 mono-web-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP3 mono-winforms-2.6.7-0.7.19 as a component of SUSE Linux Enterprise Server 11 SP3 mono-core-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Server 11 SP4 mono-data-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Server 11 SP4 mono-data-postgresql-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Server 11 SP4 mono-data-sqlite-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Server 11 SP4 mono-locale-extras-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Server 11 SP4 mono-nunit-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Server 11 SP4 mono-web-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Server 11 SP4 mono-winforms-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Server 11 SP4 mono-core-2.0.1-1.26.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mono-data-2.0.1-1.26.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mono-data-postgresql-2.0.1-1.26.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mono-data-sqlite-2.0.1-1.26.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mono-locale-extras-2.0.1-1.26.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mono-nunit-2.0.1-1.26.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mono-web-2.0.1-1.26.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 mono-winforms-2.0.1-1.26.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 bytefx-data-mysql-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-core-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-data-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-data-firebird-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-data-oracle-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-data-postgresql-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-data-sqlite-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-data-sybase-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-devel-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-extras-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-jscript-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-locale-extras-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-nunit-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-wcf-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-web-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-winforms-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mono-winfxcore-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 monodoc-core-2.6.7-0.13.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 The default configuration of ASP.NET in Mono before 2.6.4 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by the __VIEWSTATE parameter to 2.0/menu/menu1.aspx in the XSP sample project. CVE-2010-1459 SUSE Linux Enterprise Server 11:mono-core-2.0.1-1.26.1 SUSE Linux Enterprise Server 11:mono-data-2.0.1-1.26.1 SUSE Linux Enterprise Server 11:mono-data-postgresql-2.0.1-1.26.1 SUSE Linux Enterprise Server 11:mono-data-sqlite-2.0.1-1.26.1 SUSE Linux Enterprise Server 11:mono-locale-extras-2.0.1-1.26.1 SUSE Linux Enterprise Server 11:mono-nunit-2.0.1-1.26.1 SUSE Linux Enterprise Server 11:mono-web-2.0.1-1.26.1 SUSE Linux Enterprise Server 11:mono-winforms-2.0.1-1.26.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mono-core-2.0.1-1.26.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mono-data-2.0.1-1.26.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mono-data-postgresql-2.0.1-1.26.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mono-data-sqlite-2.0.1-1.26.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mono-locale-extras-2.0.1-1.26.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mono-nunit-2.0.1-1.26.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mono-web-2.0.1-1.26.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:mono-winforms-2.0.1-1.26.1 SUSE Linux Enterprise Server 11 SP2:mono-core-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP2:mono-data-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP2:mono-data-postgresql-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP2:mono-data-sqlite-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP2:mono-locale-extras-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP2:mono-nunit-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP2:mono-web-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP2:mono-winforms-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP3:mono-core-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP3:mono-data-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP3:mono-data-postgresql-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP3:mono-data-sqlite-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP3:mono-locale-extras-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP3:mono-nunit-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP3:mono-web-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP3:mono-winforms-2.6.7-0.7.19 SUSE Linux Enterprise Server 11 SP4:mono-core-2.6.7-0.13.1 SUSE Linux Enterprise Server 11 SP4:mono-data-2.6.7-0.13.1 SUSE Linux Enterprise Server 11 SP4:mono-data-postgresql-2.6.7-0.13.1 SUSE Linux Enterprise Server 11 SP4:mono-data-sqlite-2.6.7-0.13.1 SUSE Linux Enterprise Server 11 SP4:mono-locale-extras-2.6.7-0.13.1 SUSE Linux Enterprise Server 11 SP4:mono-nunit-2.6.7-0.13.1 SUSE Linux Enterprise Server 11 SP4:mono-web-2.6.7-0.13.1 SUSE Linux Enterprise Server 11 SP4:mono-winforms-2.6.7-0.13.1 SUSE Linux Enterprise Server for SAP Applications 11:mono-core-2.0.1-1.26.1 SUSE Linux Enterprise Server for SAP Applications 11:mono-data-2.0.1-1.26.1 SUSE Linux Enterprise Server for SAP Applications 11:mono-data-postgresql-2.0.1-1.26.1 SUSE Linux Enterprise Server for SAP Applications 11:mono-data-sqlite-2.0.1-1.26.1 SUSE Linux Enterprise Server for SAP Applications 11:mono-locale-extras-2.0.1-1.26.1 SUSE Linux Enterprise Server for SAP Applications 11:mono-nunit-2.0.1-1.26.1 SUSE Linux Enterprise Server for SAP Applications 11:mono-web-2.0.1-1.26.1 SUSE Linux Enterprise Server for SAP Applications 11:mono-winforms-2.0.1-1.26.1 SUSE Linux Enterprise Software Development Kit 11 SP4:bytefx-data-mysql-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-core-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-data-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-data-firebird-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-data-oracle-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-data-postgresql-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-data-sqlite-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-data-sybase-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-devel-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-extras-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-jscript-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-locale-extras-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-nunit-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-wcf-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-web-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-winforms-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mono-winfxcore-2.6.7-0.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:monodoc-core-2.6.7-0.13.1 important 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N