CVE-2011-0966 Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to read arbitrary files via a .. (d...
MediumCVSS 6.8
EPSS 41.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, aka Bug ID CSCto35577.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ciscoworks common services | <= 3.3 | No fix listed |
| ciscoworks common services | = 1.0 | No fix listed |
| ciscoworks common services | = 2.2 | No fix listed |
| ciscoworks common services | = 3.0 | No fix listed |
| ciscoworks common services | = 3.0.3 | No fix listed |
| ciscoworks common services | = 3.0.4 | No fix listed |
| ciscoworks common services | = 3.0.5 | No fix listed |
| ciscoworks common services | = 3.0.6 | No fix listed |
| ciscoworks common services | = 3.1 | No fix listed |
| ciscoworks common services | = 3.1.1 | No fix listed |
| ciscoworks common services | = 3.2 | No fix listed |
References
- 20110518 Cisco Unified Operations Manager Multiple Vulnerabilities - SOS-11-006 exploit mailing-list
- tools.cisco.com
- 17304 exploit
- www.senseofsecurity.com.au exploit url-repurposed
- cisco-uom-auditlog-directory-traversal(67525) vdb-entry