Lucene search

PRIOn knowledge basePRION:CVE-2010-0589

HistoryApr 15, 2010 - 5:30 p.m.

Design/Logic Flaw

2010-04-1517:30:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.127 Low

EPSS

Percentile

95.3%

JSON

The Web Install ActiveX control (CSDWebInstaller) in Cisco Secure Desktop (CSD) before 3.5.841 does not properly verify the signatures of downloaded programs, which allows remote attackers to force the download and execution of arbitrary files via a crafted web page, aka Bug ID CSCta25876.

CPENameOperatorVersion
secure_desktopeq3.1.1.33
secure_desktopeq3.3
secure_desktopeq3.4.2048
secure_desktople3.5
secure_desktopeq3.1.1
secure_desktopeq3.2
secure_desktopeq3.2.1
secure_desktopeq3.4
secure_desktopeq3.1.1.27
secure_desktopeq3.4.2

Name	Operator	Version
secure_desktop	eq	3.1.1.33
secure_desktop	eq	3.3
secure_desktop	eq	3.4.2048
secure_desktop	le	3.5
secure_desktop	eq	3.1.1
secure_desktop	eq	3.2
secure_desktop	eq	3.2.1
secure_desktop	eq	3.4
secure_desktop	eq	3.1.1.27
secure_desktop	eq	3.4.2

Rows per page:

1-10 of 121

References

securitytracker.com/id?1023881

www.cisco.com/en/US/products/products_security_advisory09186a0080b25d01.shtml

www.securityfocus.com/bid/39478

www.zerodayinitiative.com/advisories/ZDI-10-072/

exchange.xforce.ibmcloud.com/vulnerabilities/57812

7.2 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.127 Low

EPSS

Percentile

95.3%

JSON

Related for PRION:CVE-2010-0589