Lucene search

K
nvd[email protected]NVD:CVE-2010-3036
HistoryOct 29, 2010 - 7:00 p.m.

CVE-2010-3036

2010-10-2919:00:02
CWE-119
web.nvd.nist.gov
1

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

Low

0.097 Low

EPSS

Percentile

94.8%

Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary code via a session on TCP port (1) 443 or (2) 1741, aka Bug ID CSCti41352.

Affected configurations

NVD
Node
ciscociscoworks_common_servicesMatch3.0.5
OR
ciscociscoworks_common_servicesMatch3.0.6
OR
ciscociscoworks_common_servicesMatch3.1
OR
ciscociscoworks_common_servicesMatch3.1.1
OR
ciscociscoworks_common_servicesMatch3.2
OR
ciscociscoworks_common_servicesMatch3.3
AND
ciscociscoworks_lan_management_solutionMatch2.6update
OR
ciscociscoworks_lan_management_solutionMatch3.0
OR
ciscociscoworks_lan_management_solutionMatch3.0december_2007
OR
ciscociscoworks_lan_management_solutionMatch3.1
OR
ciscociscoworks_lan_management_solutionMatch3.2
OR
ciscoqos_policy_managerMatch4.0
OR
ciscoqos_policy_managerMatch4.0.1
OR
ciscoqos_policy_managerMatch4.0.2
OR
ciscosecurity_managerMatch3.0.2
OR
ciscosecurity_managerMatch3.2
OR
ciscotelepresence_readiness_assessment_managerMatch1.0
OR
ciscounified_operations_managerMatch2.0.1
OR
ciscounified_operations_managerMatch2.0.2
OR
ciscounified_operations_managerMatch2.0.3
OR
ciscounified_service_monitorMatch2.0.1

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

Low

0.097 Low

EPSS

Percentile

94.8%