PT-2010-3248 · Cisco · Cisco Internet Streamer+1

Publicado 2010-07-27 · Atualizado 2017-08-17 · CVE-2010-1577

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Content Delivery System (CDS) versions 2.2.x through 2.5.x before 2.5.7

Description The issue allows remote attackers to read arbitrary files via a crafted URL, specifically due to a directory traversal vulnerability in Cisco Internet Streamer.

Recommendations For versions 2.2.x through 2.5.x before 2.5.7, update to version 2.5.7 or later to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2010-1577

Produtos afetados

Cisco Content Delivery System

Cisco Internet Streamer

Referências · 7

• https://exchange.xforce.ibmcloud.com/vulnerabilities/60567 · Nota
• http://securitytracker.com/id?1024234 · Nota
• http://vupen.com/english/advisories/2010/1881 · Aviso do Fabricante
• http://cisco.com/en/US/products/products_security_advisory09186a0080b3bd1c.shtml · Aviso do Fabricante
• http://osvdb.org/66508 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-1577 · Nota de Segurança
• http://secunia.com/advisories/40701 · Aviso do Fabricante