VRDA Feed by JPCERT/CC
  Vulnerability Response Decision Assistance Feed : Information for vulnerability impact analysis
[ about VRDA Feed | JPCERT/CC



 
Vulnerability Analysis Result (Revision No : 1) [ Download XML
CVE-2010-1577
content_delivery_system, internet_streamer: Directory traversal vulnerability in Cisco Internet...
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1577

Original

Directory traversal vulnerability in Cisco Internet Streamer, as used in Cisco Content Delivery System (CDS) 2.2.x, 2.3.x, 2.4.x, and 2.5.x before 2.5.7 allows remote attackers to read arbitrary files via a crafted URL.

Translation   (Show)





About This Analysis Information
Analysis Information Provider:
NIST NVD
First Published:
2010-07-28
Source Information Category:
Advisory, Alert
Last Updated:
2010-07-28




Affected Product Tags
cpe:/a:cisco:content_delivery_system
cpe:/a:cisco:internet_streamer:2.2%281%29
cpe:/a:cisco:internet_streamer:2.3%281%29
cpe:/a:cisco:internet_streamer:2.3%283%29
cpe:/a:cisco:internet_streamer:2.3%285%29
cpe:/a:cisco:internet_streamer:2.3%287%29
cpe:/a:cisco:internet_streamer:2.3%289%29
cpe:/a:cisco:internet_streamer:2.4%281%29
cpe:/a:cisco:internet_streamer:2.4%283%29
cpe:/a:cisco:internet_streamer:2.4%285%29
cpe:/a:cisco:internet_streamer:2.5%281%29
cpe:/a:cisco:internet_streamer:2.5%283%29
 


Vulnerability Analysis Results
[Access Vector]  [?]
Undefined [?]

Local [?]
Adjacent Network [?]
X Network [?]

[Access Complexit]  [?]
Undefined [?]

High [?]
Medium [?]
X Low [?]

[Authentication]  [?]
Undefined [?]

Multiple [?]
Single [?]
X None [?]

[Confidentiality Impact]  [?]
Undefined [?]

None [?]
Partial [?]
X Complete [?]

[Integrity Impact]  [?]
Undefined [?]

X None [?]
Partial [?]
Complete [?]

[Availability Impact]  [?]
Undefined [?]

X None [?]
Partial [?]
Complete [?]

Alternatives




References
CISCO 20100721 CDS Internet Streamer: Web Server Directory Traversal Vulnerability




OSVDB 66508




SECTRACK 1024234




SECUNIA 40701




VUPEN ADV-2010-1881




Vulnerability Type Path Traversal (CWE-22)




XF cisco-cds-streamer-directory-traversal(60567)





Copyright © 2010 JPCERT/CC All Rights Reserved.