PT-2010-4508 · Cisco · Ciscoworks Common Services

Published 2010-10-29 · Updated 2010-11-06 · CVE-2010-3036

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CiscoWorks Common Services versions prior to 4.0

Description The issue is related to multiple buffer overflows in the authentication functionality of the web-server module. This allows remote attackers to execute arbitrary code via a session on TCP port 443 or 1741.

Recommendations For versions prior to 4.0, update to version 4.0 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-3036

Affected Products

Ciscoworks Common Services

References · 7

• http://vupen.com/english/advisories/2010/2793 · Vendor Advisory
• http://cisco.com/en/US/products/products_security_advisory09186a0080b51501.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-3036 · Security Note
• http://secunia.com/advisories/42011 · Vendor Advisory
• http://securityfocus.com/bid/44468 · Patch
• http://securitytracker.com/id?1024646 · Note
• http://osvdb.org/68927 · Note