Lucene search

[email protected]CVE-2009-1161

HistoryMay 21, 2009 - 2:30 p.m.

CVE-2009-1161

2009-05-2114:30:00

CWE-22

[email protected]

web.nvd.nist.gov

cve-2009-1161

directory traversal

tftp service

cisco

cisco unified service monitor

security manager

telepresence readiness assessment manager

unified operations manager

unified provisioning manager

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

Low

0.018 Low

EPSS

Percentile

88.2%

JSON

Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessment Manager, Unified Operations Manager, Unified Provisioning Manager, and other products, allows remote attackers to access arbitrary files via unspecified vectors.

Affected configurations

NVD

Node

ciscociscoworks_common_servicesMatch3.0.3windows

ciscociscoworks_common_servicesMatch3.0.4windows

ciscociscoworks_common_servicesMatch3.0.5windows

ciscociscoworks_common_servicesMatch3.0.6windows

ciscociscoworks_common_servicesMatch3.1windows

ciscociscoworks_common_servicesMatch3.1.1windows

ciscociscoworks_common_servicesMatch3.2windows

AND

ciscociscoworks_health_and_utilization_monitorMatch1.0

ciscociscoworks_health_and_utilization_monitorMatch1.1

ciscociscoworks_lan_management_solutionMatch2.5

ciscociscoworks_lan_management_solutionMatch2.6

ciscociscoworks_lan_management_solutionMatch3.0

ciscociscoworks_lan_management_solutionMatch3.1

ciscociscoworks_qos_policy_managerMatch4.0

ciscociscoworks_qos_policy_managerMatch4.1

ciscociscoworks_voice_managerMatch3.0

ciscociscoworks_voice_managerMatch3.1

ciscosecurity_managerMatch3.0

ciscosecurity_managerMatch3.1

ciscosecurity_managerMatch3.2

ciscotelepresence_readiness_assessment_managerMatch1.0

ciscounified_operations_managerMatch1.0

ciscounified_operations_managerMatch1.1

ciscounified_operations_managerMatch2.0

ciscounified_operations_managerMatch2.1

ciscounified_provisioning_managerMatch1.0

ciscounified_provisioning_managerMatch1.1

ciscounified_provisioning_managerMatch1.2

ciscounified_provisioning_managerMatch1.3

ciscounified_service_monitorMatch1.0

ciscounified_service_monitorMatch1.1

ciscounified_service_monitorMatch2.0

ciscounified_service_monitorMatch2.1

CPENameOperatorVersion
cisco:ciscoworks_common_servicescisco ciscoworks common serviceseq3.0.3
cisco:ciscoworks_common_servicescisco ciscoworks common serviceseq3.0.4
cisco:ciscoworks_common_servicescisco ciscoworks common serviceseq3.0.5
cisco:ciscoworks_common_servicescisco ciscoworks common serviceseq3.0.6
cisco:ciscoworks_common_servicescisco ciscoworks common serviceseq3.1
cisco:ciscoworks_common_servicescisco ciscoworks common serviceseq3.1.1
cisco:ciscoworks_common_servicescisco ciscoworks common serviceseq3.2
cisco:ciscoworks_health_and_utilization_monitorcisco ciscoworks health and utilization monitoreq1.0
cisco:ciscoworks_health_and_utilization_monitorcisco ciscoworks health and utilization monitoreq1.1
cisco:ciscoworks_lan_management_solutioncisco ciscoworks lan management solutioneq2.5

CPE	Name	Operator	Version
cisco:ciscoworks_common_services	cisco ciscoworks common services	eq	3.0.3
cisco:ciscoworks_common_services	cisco ciscoworks common services	eq	3.0.4
cisco:ciscoworks_common_services	cisco ciscoworks common services	eq	3.0.5
cisco:ciscoworks_common_services	cisco ciscoworks common services	eq	3.0.6
cisco:ciscoworks_common_services	cisco ciscoworks common services	eq	3.1
cisco:ciscoworks_common_services	cisco ciscoworks common services	eq	3.1.1
cisco:ciscoworks_common_services	cisco ciscoworks common services	eq	3.2
cisco:ciscoworks_health_and_utilization_monitor	cisco ciscoworks health and utilization monitor	eq	1.0
cisco:ciscoworks_health_and_utilization_monitor	cisco ciscoworks health and utilization monitor	eq	1.1
cisco:ciscoworks_lan_management_solution	cisco ciscoworks lan management solution	eq	2.5