PT-2014-3761 · Cisco · Cisco Jabber

Published 2014-01-16 · Updated 2017-08-29 · CVE-2014-0666

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco Jabber versions 9.2.1 and earlier

Description A directory traversal issue in the Send Screen Capture feature allows remote attackers to upload arbitrary files and execute arbitrary code via modified packets.

Recommendations For Cisco Jabber versions 9.2.1 and earlier, update to a version later than 9.2.1 to resolve the issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2014-0666

Affected Products

Cisco Jabber

References · 8

• http://tools.cisco.com/security/center/viewAlert.x?alertId=32451 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-0666 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0666 · Vendor Advisory
• http://osvdb.org/102122 · Note
• http://secunia.com/advisories/56331 · Note
• http://securitytracker.com/id/1029635 · Note
• http://securityfocus.com/bid/64965 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90435 · Note