EUVD-2011-4174

Malware in sbrugna...

Directory traversal

The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which allows remote attackers to enumerate directory names via a series of queries, aka Bug ID CSCtt94070...

CVE-2011-4232

Cisco Unified MeetingPlace 6.1 and 8.5 contain a directory enumeration vulnerability where the web server returns different responses for directory queries depending on existence. This allows unauthenticated, remote attackers to enumerate directory names. The root cause is described as an unspeci...

CVE-2011-4232

The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which allows remote attackers to enumerate directory names via a series of queries, aka Bug ID CSCtt94070...