PT-2010-3248 · Cisco · Cisco Internet Streamer+1

Published 2010-07-27 · Updated 2017-08-17 · CVE-2010-1577

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Content Delivery System (CDS) versions 2.2.x through 2.5.x before 2.5.7

Description The issue allows remote attackers to read arbitrary files via a crafted URL, specifically due to a directory traversal vulnerability in Cisco Internet Streamer.

Recommendations For versions 2.2.x through 2.5.x before 2.5.7, update to version 2.5.7 or later to resolve the issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2010-1577

Affected Products

Cisco Content Delivery System

Cisco Internet Streamer

References · 7

• http://vupen.com/english/advisories/2010/1881 · Vendor Advisory
• http://cisco.com/en/US/products/products_security_advisory09186a0080b3bd1c.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-1577 · Security Note
• http://secunia.com/advisories/40701 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/60567 · Note
• http://securitytracker.com/id?1024234 · Note
• http://osvdb.org/66508 · Note