PT-2010-2394 · Cisco · Cisco Collaboration Server

S4Squatch · Published 2010-02-17 · Updated 2017-08-17 · CVE-2010-0642

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Collaboration Server (CCS) version 5

Description The issue allows remote attackers to read the source code of JHTML files by manipulating URL encoded characters in the filename extension. This can be achieved through various methods, including changing the .jhtml extension to %2Ejhtml, .jhtm%6C, appending %00, or appending %c0%80 after .jhtml. The affected components include doc/docindex.jhtml, browserId/wizardForm.jhtml, webline/html/forms/callback.jhtml, webline/html/forms/callbackICM.jhtml, webline/html/agent/AgentFrame.jhtml, webline/html/agent/default/badlogin.jhtml, callme/callForm.jhtml, webline/html/multichatui/nowDefunctWindow.jhtml, browserId/wizard.jhtml, admin/CiscoAdmin.jhtml, msccallme/mscCallForm.jhtml, and webline/html/admin/wcs/LoginPage.jhtml.

Recommendations As a temporary workaround, consider restricting access to the affected JHTML files until a patch is available. Avoid using URL encoded characters in the filename extension to minimize the risk of exploitation.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2010-0642

Affected Products

Cisco Collaboration Server

References · 5

• 🔥 https://exploit-db.com/exploits/11403 · Exploit
• 🔥 http://exploit-db.com/exploits/11403 · Exploit
• 🔥 http://securityfocus.com/bid/38202 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-0642 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56221 · Note