NetSight
IP …
critical10.0

CVE-2009-1161

Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Servi…

Impact

Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessment Manager, Unified Operations Manager, Unified Provisioning Manager, and other products, allows remote attackers to access arbitrary files via unspecified vectors.

Affected products

VendorProductAffected versions
CiscoCiscoworks Common Services
Versions 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.1, 3.1.1
CiscoCiscoworks Health And Utilization Monitor
Versions 1.0, 1.1
CiscoCiscoworks Lan Management Solution
Versions 2.5, 2.6, 3.0, 3.1
CiscoCiscoworks Qos Policy Manager
Versions 4.0, 4.1
CiscoCiscoworks Voice Manager
Versions 3.0, 3.1
CiscoSecurity Manager
Versions 3.0, 3.1, 3.2
CiscoTelepresence Readiness Assessment Manager
Version 1.0
CiscoUnified Operations Manager
Versions 1.0, 1.1, 2.0, 2.1
CiscoUnified Provisioning Manager
Versions 1.0, 1.1, 1.2, 1.3
CiscoUnified Service Monitor
Versions 1.0, 1.1, 2.0, 2.1

Weakness classification

CWE-22

References