critical10.0
CVE-2010-3036
Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to…
Impact
Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary code via a session on TCP port (1) 443 or (2) 1741, aka Bug ID CSCti41352.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Ciscoworks Common Services | Versions 3.0.5, 3.0.6, 3.1, 3.1.1, 3.2, 3.3 |
| Cisco | Ciscoworks Lan Management Solution | Versions 2.6, 3.0, 3.1, 3.2 |
| Cisco | Qos Policy Manager | Versions 4.0, 4.0.1, 4.0.2 |
| Cisco | Security Manager | Versions 3.0.2, 3.2 |
| Cisco | Telepresence Readiness Assessment Manager | Version 1.0 |
| Cisco | Unified Operations Manager | Versions 2.0.1, 2.0.2, 2.0.3 |
| Cisco | Unified Service Monitor | Version 2.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/68927
- http://secunia.com/advisories/42011
- http://securitytracker.com/id?1024646
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b51501.shtml
- http://www.securityfocus.com/bid/44468
- http://www.vupen.com/english/advisories/2010/2793
- http://osvdb.org/68927
- http://secunia.com/advisories/42011
- http://securitytracker.com/id?1024646
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b51501.shtml
- http://www.securityfocus.com/bid/44468
- http://www.vupen.com/english/advisories/2010/2793