Lucene search

[email protected]CVE-2010-3036

HistoryOct 29, 2010 - 7:00 p.m.

CVE-2010-3036

2010-10-2919:00:02

CWE-119

[email protected]

web.nvd.nist.gov

cve-2010-3036

buffer overflow

cisco

ciscoworks

common services

remote code execution

nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

Low

0.097 Low

EPSS

Percentile

94.8%

JSON

Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary code via a session on TCP port (1) 443 or (2) 1741, aka Bug ID CSCti41352.

Affected configurations

NVD

Node

ciscociscoworks_common_servicesMatch3.0.5

ciscociscoworks_common_servicesMatch3.0.6

ciscociscoworks_common_servicesMatch3.1

ciscociscoworks_common_servicesMatch3.1.1

ciscociscoworks_common_servicesMatch3.2

ciscociscoworks_common_servicesMatch3.3

AND

ciscociscoworks_lan_management_solutionMatch2.6update

ciscociscoworks_lan_management_solutionMatch3.0

ciscociscoworks_lan_management_solutionMatch3.0december_2007

ciscociscoworks_lan_management_solutionMatch3.1

ciscociscoworks_lan_management_solutionMatch3.2

ciscoqos_policy_managerMatch4.0

ciscoqos_policy_managerMatch4.0.1

ciscoqos_policy_managerMatch4.0.2

ciscosecurity_managerMatch3.0.2

ciscosecurity_managerMatch3.2

ciscotelepresence_readiness_assessment_managerMatch1.0

ciscounified_operations_managerMatch2.0.1

ciscounified_operations_managerMatch2.0.2

ciscounified_operations_managerMatch2.0.3

ciscounified_service_monitorMatch2.0.1

CPENameOperatorVersion
cisco:ciscoworks_common_servicescisco ciscoworks common serviceseq3.0.5
cisco:ciscoworks_common_servicescisco ciscoworks common serviceseq3.0.6
cisco:ciscoworks_common_servicescisco ciscoworks common serviceseq3.1
cisco:ciscoworks_common_servicescisco ciscoworks common serviceseq3.1.1
cisco:ciscoworks_common_servicescisco ciscoworks common serviceseq3.2
cisco:ciscoworks_common_servicescisco ciscoworks common serviceseq3.3
cisco:ciscoworks_lan_management_solutioncisco ciscoworks lan management solutioneq2.6
cisco:ciscoworks_lan_management_solutioncisco ciscoworks lan management solutioneq3.0
cisco:ciscoworks_lan_management_solutioncisco ciscoworks lan management solutioneq3.1
cisco:ciscoworks_lan_management_solutioncisco ciscoworks lan management solutioneq3.2

CPE	Name	Operator	Version
cisco:ciscoworks_common_services	cisco ciscoworks common services	eq	3.0.5
cisco:ciscoworks_common_services	cisco ciscoworks common services	eq	3.0.6
cisco:ciscoworks_common_services	cisco ciscoworks common services	eq	3.1
cisco:ciscoworks_common_services	cisco ciscoworks common services	eq	3.1.1
cisco:ciscoworks_common_services	cisco ciscoworks common services	eq	3.2
cisco:ciscoworks_common_services	cisco ciscoworks common services	eq	3.3
cisco:ciscoworks_lan_management_solution	cisco ciscoworks lan management solution	eq	2.6
cisco:ciscoworks_lan_management_solution	cisco ciscoworks lan management solution	eq	3.0
cisco:ciscoworks_lan_management_solution	cisco ciscoworks lan management solution	eq	3.1
cisco:ciscoworks_lan_management_solution	cisco ciscoworks lan management solution	eq	3.2