CVE-2010-3036

Currently unrated

Key Information:

Vendor
Cisco
Status
Ciscoworks Common Services
Ciscoworks Lan Management Solution
Qos Policy Manager
Security Manager
Vendor
CVE Published:
29 October 2010

Summary

Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary code via a session on TCP port (1) 443 or (2) 1741, aka Bug ID CSCti41352.

References

http://osvdb.org/68927
vdb-entryx_refsource_OSVDB
http://www.cisco.com/en/US/products/products_security_adv...
vendor-advisoryx_refsource_CISCO
http://securitytracker.com/id?1024646
vdb-entryx_refsource_SECTRACK

EPSS Score

7% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.