PT-2009-1212 · Cisco+1 · Cisco Ips Event Viewer+2

Published 2009-01-22 · Updated 2017-08-08 · CVE-2008-3820

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco Security Manager versions 3.1 through 3.2 before 3.2.2

Description The issue allows remote attackers to obtain root access to IEV via unspecified use of TCP sessions to exposed ports used by the MySQL daemon and IEV server when Cisco IPS Event Viewer (IEV) is used.

Recommendations For versions 3.1 through 3.2 before 3.2.2, update to version 3.2.2 or later to resolve the issue.

Fix

Related Identifiers

CVE-2008-3820

Affected Products

Cisco Ips Event Viewer

Cisco Security Manager

Mysql Server

References · 7

• http://secunia.com/advisories/33633 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-3820 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a0080a6192a.shtml · Vendor Advisory
• http://securityfocus.com/bid/33381 · Note
• http://securitytracker.com/id?1021619 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48134 · Note
• http://vupen.com/english/advisories/2009/0214 · Note