CVE-2010-0013

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

12.49% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 95.8% of scored records. A rank, not a probability.

NVD base score

7.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD analysis status

Modified. NVD last modified this record on 2026-06-16.

Red Hat severity

Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2010-01-09 18:00Z16 YR AGO

Last updated

2024-08-07 00:37Z2 YR AGO

Reserved

2009-12-14

Assigning CNA

redhat

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

• CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Base

Data version

5.1

Document digest

cf813548d8c64032ca455a08cd94c4e8ad5441fea0ef1c6fe6e9bd4cf53de173

• www.openwall.com[oss-security] 20100102 CVE request - pidgin MSN arbitrary file uploadhttp://www.openwall.com/lists/oss-security/2010/01/02/1mailing-listx_refsource_MLIST
• secunia.com37953http://secunia.com/advisories/37953third-party-advisoryx_refsource_SECUNIA
• d.pidgin.imhttp://d.pidgin.im/viewmtn/revision/info/3d02401cf232459fc80c0837d31e05fae7ae5467x_refsource_MISC
• bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=552483x_refsource_CONFIRM
• sunsolve.sun.com277450http://sunsolve.sun.com/search/document.do?assetkey=1-66-277450-1vendor-advisoryx_refsource_SUNALERT
• secunia.com37954http://secunia.com/advisories/37954third-party-advisoryx_refsource_SECUNIA
• www.mandriva.comMDVSA-2010:085http://www.mandriva.com/security/advisories?name=MDVSA-2010:085vendor-advisoryx_refsource_MANDRIVA
• www.openwall.com[oss-security] 20100107 Re: CVE request - pidgin MSN arbitrary file uploadhttp://www.openwall.com/lists/oss-security/2010/01/07/1mailing-listx_refsource_MLIST
• oval.cisecurity.orgoval:org.mitre.oval:def:17620https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17620vdb-entrysignaturex_refsource_OVAL
• sunsolve.sun.com1022203http://sunsolve.sun.com/search/document.do?assetkey=1-77-1022203.1-1vendor-advisoryx_refsource_SUNALERT
• www.vupen.comADV-2009-3663http://www.vupen.com/english/advisories/2009/3663vdb-entryx_refsource_VUPEN
• developer.pidgin.imhttp://developer.pidgin.im/viewmtn/revision/diff/3d02401cf232459fc80c0837d31e05fae7ae5467/with/c64a1adc8bda2b4aeaae1f273541afbc4f71b810/libpurple/protocols/msn/slp.cx_refsource_CONFIRM
• lists.fedoraproject.orgFEDORA-2010-0368http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033771.htmlvendor-advisoryx_refsource_FEDORA
• lists.fedoraproject.orgFEDORA-2010-0429http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033848.htmlvendor-advisoryx_refsource_FEDORA
• www.vupen.comADV-2010-1020http://www.vupen.com/english/advisories/2010/1020vdb-entryx_refsource_VUPEN
• lists.opensuse.orgSUSE-SR:2010:006http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.htmlvendor-advisoryx_refsource_SUSE
• oval.cisecurity.orgoval:org.mitre.oval:def:10333https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10333vdb-entrysignaturex_refsource_OVAL
• events.ccc.dehttp://events.ccc.de/congress/2009/Fahrplan/events/3596.en.htmlx_refsource_MISC
• d.pidgin.imhttp://d.pidgin.im/viewmtn/revision/info/4be2df4f72bd8a55cdae7f2554b73342a497c92fx_refsource_MISC
• www.vupen.comADV-2009-3662http://www.vupen.com/english/advisories/2009/3662vdb-entryx_refsource_VUPEN
• d.pidgin.imhttp://d.pidgin.im/viewmtn/revision/info/c64a1adc8bda2b4aeaae1f273541afbc4f71b810x_refsource_CONFIRM
• www.openwall.com[oss-security] 20100107 Re: CVE request - pidgin MSN arbitrary file uploadhttp://www.openwall.com/lists/oss-security/2010/01/07/2mailing-listx_refsource_MLIST
• secunia.com37961http://secunia.com/advisories/37961third-party-advisoryx_refsource_SECUNIA
• secunia.com38915http://secunia.com/advisories/38915third-party-advisoryx_refsource_SECUNIA