CyberSec.Space Logo
CVEブラウザに戻る

CVE-2010-3036

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0020%
EPSS Percentile23.33th
Published2010年10月29日
Last Modified2026年4月29日

Vulnerability Description

Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary code via a session on TCP port (1) 443 or (2) 1741, aka Bug ID CSCti41352.

Affected Platforms (CPE)

📦
Cisco

Ciscoworks Common Services

= 3.0.5
📦
Cisco

Ciscoworks Common Services

= 3.0.6
📦
Cisco

Ciscoworks Common Services

= 3.1
📦
Cisco

Ciscoworks Common Services

= 3.1.1
📦
Cisco

Ciscoworks Common Services

= 3.2
📦
Cisco

Ciscoworks Common Services

= 3.3
📦
Cisco

Ciscoworks Lan Management Solution

= 2.6
📦
Cisco

Ciscoworks Lan Management Solution

= 3.0
📦
Cisco

Ciscoworks Lan Management Solution

= 3.0
📦
Cisco

Ciscoworks Lan Management Solution

= 3.1
📦
Cisco

Ciscoworks Lan Management Solution

= 3.2
📦
Cisco

Qos Policy Manager

= 4.0
📦
Cisco

Qos Policy Manager

= 4.0.1
📦
Cisco

Qos Policy Manager

= 4.0.2
📦
Cisco

Security Manager

= 3.0.2
📦
Cisco

Security Manager

= 3.2
📦
Cisco

Telepresence Readiness Assessment Manager

= 1.0
📦
Cisco

Unified Operations Manager

= 2.0.1
📦
Cisco

Unified Operations Manager

= 2.0.2
📦
Cisco

Unified Operations Manager

= 2.0.3
📦
Cisco

Unified Service Monitor

= 2.0.1

References & Advisories

🔗 http://osvdb.org/68927
🔗 http://secunia.com/advisories/42011
🔗 http://securitytracker.com/id?1024646
🔗 http://www.cisco.com/en/US/products/products_security_advisory09186a0080b51501.shtml
🔗 http://www.securityfocus.com/bid/44468
🔗 http://www.vupen.com/english/advisories/2010/2793
🔗 http://osvdb.org/68927
🔗 http://secunia.com/advisories/42011

関連する脆弱性情報

CVE-2009-116110.0

Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, a...

CVE-2008-20549.3

Unspecified vulnerability in Cisco CiscoWorks Common Services 3.0.3 through 3.1.1 allows remote attackers to execute arbitrary cod...

CVE-2011-33109.0

The Home Page component in Cisco CiscoWorks Common Services before 4.1 on Windows, as used in CiscoWorks LAN Management Solution, ...

CVE-2011-09666.8

Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Services 3.3 a...