PT-2009-1212 · Cisco+1 · Cisco Ips Event Viewer+2

Publicado 2009-01-22 · Atualizado 2017-08-08 · CVE-2008-3820

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco Security Manager versions 3.1 through 3.2 before 3.2.2

Description The issue allows remote attackers to obtain root access to IEV via unspecified use of TCP sessions to exposed ports used by the MySQL daemon and IEV server when Cisco IPS Event Viewer (IEV) is used.

Recommendations For versions 3.1 through 3.2 before 3.2.2, update to version 3.2.2 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2008-3820

Produtos afetados

Cisco Ips Event Viewer

Cisco Security Manager

Mysql Server

Referências · 7

• http://securityfocus.com/bid/33381 · Nota
• http://secunia.com/advisories/33633 · Aviso do Fabricante
• http://securitytracker.com/id?1021619 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48134 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-3820 · Nota de Segurança
• http://vupen.com/english/advisories/2009/0214 · Nota
• http://cisco.com/en/US/products/products_security_advisory09186a0080a6192a.shtml · Aviso do Fabricante