high7.8
CVE-2010-1571
Directory traversal vulnerability in the bootstrap service in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), unspecified 6.0 vers…
Impact
Directory traversal vulnerability in the bootstrap service in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), unspecified 6.0 versions, and 5.0 before 5.0(2)SR3 allows remote attackers to read arbitrary files via a crafted bootstrap message to TCP port 6295.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Unified Contact Center Express | Versions 5.0, 6.0, 7.0 |
| Cisco | Customer Response Solution | Versions 5.0, 6.0, 7.0 |
| Cisco | Unified Ip Interactive Voice Response | Versions 5.0, 6.0, 7.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2f110.shtml
- http://www.securityfocus.com/bid/40680
- http://www.securitytracker.com/id?1024082
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59277
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2f110.shtml
- http://www.securityfocus.com/bid/40680
- http://www.securitytracker.com/id?1024082
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59277