CVE-2010-3036 Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary code via a session on....
HighCVSS 10.0
EPSS 6.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary code via a session on TCP port (1) 443 or (2) 1741, aka Bug ID CSCti41352.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ciscoworks common services | = 3.0.5 | No fix listed |
| ciscoworks common services | = 3.0.6 | No fix listed |
| ciscoworks common services | = 3.1 | No fix listed |
| ciscoworks common services | = 3.1.1 | No fix listed |
| ciscoworks common services | = 3.2 | No fix listed |
| ciscoworks common services | = 3.3 | No fix listed |
| ciscoworks lan management solution | = 2.6-update | No fix listed |
| ciscoworks lan management solution | = 3.0 | No fix listed |
| ciscoworks lan management solution | = 3.0-december_2007 | No fix listed |
| ciscoworks lan management solution | = 3.1 | No fix listed |
| ciscoworks lan management solution | = 3.2 | No fix listed |
| cisco qos policy manager | = 4.0 | No fix listed |
| cisco qos policy manager | = 4.0.1 | No fix listed |
| cisco qos policy manager | = 4.0.2 | No fix listed |
| cisco security manager | = 3.0.2 | No fix listed |
| cisco security manager | = 3.2 | No fix listed |
| cisco telepresence readiness assessment manager | = 1.0 | No fix listed |
| cisco unified operations manager | = 2.0.1 | No fix listed |
| cisco unified operations manager | = 2.0.2 | No fix listed |
| cisco unified operations manager | = 2.0.3 | No fix listed |
| cisco unified service monitor | = 2.0.1 | No fix listed |
References
- 68927 vdb-entry
- 42011 third-party-advisory vendor-advisory
- 1024646 vdb-entry
- 20101027 CiscoWorks Common Services Arbitrary Code Execution Vulnerability patch vendor-advisory
- 44468 patch vdb-entry
- ADV-2010-2793 vdb-entry vendor-advisory