CVE-2010-1577 Directory traversal vulnerability in Cisco Internet Streamer, as used in Cisco Content Delivery System (CDS) 2.2.x, 2.3.x, 2.4.x, and 2.5.x before 2.5.7 allows remote attackers to read arbitrary files...
HighCVSS 7.8
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in Cisco Internet Streamer, as used in Cisco Content Delivery System (CDS) 2.2.x, 2.3.x, 2.4.x, and 2.5.x before 2.5.7 allows remote attackers to read arbitrary files via a crafted URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco internet streamer | = 2.2(1) | No fix listed |
| cisco internet streamer | = 2.3(1) | No fix listed |
| cisco internet streamer | = 2.3(3) | No fix listed |
| cisco internet streamer | = 2.3(5) | No fix listed |
| cisco internet streamer | = 2.3(7) | No fix listed |
| cisco internet streamer | = 2.3(9) | No fix listed |
| cisco internet streamer | = 2.4(1) | No fix listed |
| cisco internet streamer | = 2.4(3) | No fix listed |
| cisco internet streamer | = 2.4(5) | No fix listed |
| cisco internet streamer | = 2.5(1) | No fix listed |
| cisco internet streamer | = 2.5(3) | No fix listed |
| cisco content delivery system | All versions | No fix listed |
References
- 66508 vdb-entry
- 40701 third-party-advisory vendor-advisory
- 20100721 CDS Internet Streamer: Web Server Directory Traversal Vulnerability patch vendor-advisory
- 1024234 vdb-entry
- ADV-2010-1881 vdb-entry vendor-advisory
- cisco-cds-streamer-directory-traversal(60567) vdb-entry