CVE-2014-3301

The CVE-2014-3301 issue affects Cisco WebEx Meetings Server (CWMS) 1.5(.1.131) and earlier, where the ProfileAction controller could disclose sensitive information by inadvertently returning stack traces in responses. Root cause: improper sanitization of returned messages, enabling an unauthentic...

CVE-2014-3305

CVE-2014-3305 concerns a CSRF vulnerability in the Cisco WebEx Meetings Server web framework (affecting 1.5(.1.131) and earlier). The issue allows remote attackers to hijack the authentication of unspecified victims via unknown vectors (Bug ID CSCuj81735). The core impact is that user sessions co...

CVE-2014-3305: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the web framework in Cisco WebEx Meetings Server 1.5.1.131 and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCuj81735...

CVE-2014-3301: Exposure of Sensitive Information to an Unauthorized Actor

The ProfileAction controller in Cisco WebEx Meetings Server CWMS 1.5.1.131 and earlier allows remote attackers to obtain sensitive information by reading stack traces in returned messages, aka Bug ID CSCuj81700...

PT-2014-5196

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server versions 1.5.1.131 and earlier Description The issue allows remote attackers to obtain sensitive information by reading stack traces in returned messages. Recommendations For Cisco WebEx Meetings Server versions...

PT-2014-5200

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server version 1.5.1.131 and earlier Description A cross-site request forgery CSRF issue in the web framework allows remote attackers to hijack the authentication of victims via unknown vectors. Recommendations For Cisco...

Cisco WebEx Meetings Server Cross-Site Request Forgery Vulnerability

A vulnerability in the web framework code of Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to perform a cross-site request forgery CSRF attack. The vulnerability is due to insufficient CSRF protections. An attacker could exploit this vulnerability by convincing the...

Cisco WebEx Meetings Server Authenticated Encryption Vulnerability

A vulnerability in the user.php script of Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to view sensitive information. The vulnerability is due to an invalid token timer. An attacker could exploit this vulnerability by submitting crafted URL requests to a vulnerable...

Cisco WebEx Meetings Server Stack Trace Vulnerability

A vulnerability in the ProfileAction controller of Cisco WebEx Meetings Server CWMS could allow an unauthenticated, remote attacker to view sensitive information. The vulnerability is due to improper sanitization of returned messages. An attacker could exploit this vulnerability by submitting...

Cisco WebEx Meetings Client Arbitrary File Download Vulnerability

A vulnerability in the File Transfer functionality of the Cisco WebEx Meetings client could allow an unauthenticated, remote attacker to access arbitrary files on another user's computer also running the Cisco WebEx Meetings client. The vulnerability exists because the affected software does not...

Cisco WebEx Meetings Client Heap-Based Buffer Overflow Vulnerability

A vulnerability in the file sharing functionality of the Cisco WebEx Meetings client could allow an unauthenticated, remote attacker to trigger a heap-based buffer overflow in the Cisco WebEx Meetings client running on another user's computer. The vulnerability exists because the affected softwar...

CVE-2014-3310

The File Transfer feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center does not verify that a requested file was an offered file, which allows remote attackers to read arbitrary files via a modified request, aka Bug IDs CSCup62442 and CSCup58463...

CVE-2014-3311

Heap-based buffer overflow in the file-sharing feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center allows remote attackers to execute arbitrary code via crafted data, aka Bug IDs CSCup62463 and CSCup58467...

Buffer overflow

The File Transfer feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center does not verify that a requested file was an offered file, which allows remote attackers to read arbitrary files via a modified request, aka Bug IDs CSCup62442 and CSCup58463...

Heap overflow

Heap-based buffer overflow in the file-sharing feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center allows remote attackers to execute arbitrary code via crafted data, aka Bug IDs CSCup62463 and CSCup58467...

CVE-2014-3311

Heap-based buffer overflow in the file-sharing feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center allows remote attackers to execute arbitrary code via crafted data, aka Bug IDs CSCup62463 and CSCup58467...

CVE-2014-3310

The File Transfer feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center does not verify that a requested file was an offered file, which allows remote attackers to read arbitrary files via a modified request, aka Bug IDs CSCup62442 and CSCup58463...

CVE-2014-3310

The Cisco advisory for CVE-2014-3310 reports an authentication-free, remote arbitrary file download vulnerability in the File Transfer feature of WebEx Meetings Client/Server/Meeting Center. The issue arises because the receiving client does not verify that the requested file matches the offered ...

CVE-2014-3311

Cisco WebEx Meetings Client vulnerability CVE-2014-3311 is a heap-based buffer overflow in the file-sharing feature of the WebEx Meetings Client used with WebEx Meetings Server and WebEx Meeting Center. The root cause is improper bounds checking during data transfer, allowing an unauthenticated r...

CVE-2014-3311: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the file-sharing feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center allows remote attackers to execute arbitrary code via crafted data, aka Bug IDs CSCup62463 and CSCup58467...