Description
Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessment Manager, Unified Operations Manager, Unified Provisioning Manager, and other products, allows remote attackers to access arbitrary files via unspecified vectors.
Affected products
- Cisco / ciscoworks_common_services3.0.3 – 3.0.3
- Cisco / ciscoworks_common_services3.0.4 – 3.0.4
- Cisco / ciscoworks_common_services3.0.5 – 3.0.5
- Cisco / ciscoworks_common_services3.0.6 – 3.0.6
- Cisco / ciscoworks_common_services3.1 – 3.1
- Cisco / ciscoworks_common_services3.1.1 – 3.1.1
- Cisco / ciscoworks_common_services3.2 – 3.2
- Cisco / ciscoworks_health_and_utilization_monitor1.0 – 1.0
- Cisco / ciscoworks_health_and_utilization_monitor1.1 – 1.1
- Cisco / ciscoworks_lan_management_solution2.5 – 2.5
- Cisco / ciscoworks_lan_management_solution2.6 – 2.6
- Cisco / ciscoworks_lan_management_solution3.0 – 3.0
- Cisco / ciscoworks_lan_management_solution3.1 – 3.1
- Cisco / ciscoworks_qos_policy_manager4.0 – 4.0
- Cisco / ciscoworks_qos_policy_manager4.1 – 4.1
- Cisco / ciscoworks_voice_manager3.0 – 3.0
- Cisco / ciscoworks_voice_manager3.1 – 3.1
- Cisco / security_manager3.0 – 3.0
- Cisco / security_manager3.1 – 3.1
- Cisco / security_manager3.2 – 3.2
- Cisco / telepresence_readiness_assessment_manager1.0 – 1.0
- Cisco / unified_operations_manager1.0 – 1.0
- Cisco / unified_operations_manager1.1 – 1.1
- Cisco / unified_operations_manager2.0 – 2.0
- Cisco / unified_operations_manager2.1 – 2.1
- Cisco / unified_provisioning_manager1.0 – 1.0
- Cisco / unified_provisioning_manager1.1 – 1.1
- Cisco / unified_provisioning_manager1.2 – 1.2
- Cisco / unified_provisioning_manager1.3 – 1.3
- Cisco / unified_service_monitor1.0 – 1.0
- Cisco / unified_service_monitor1.1 – 1.1
- Cisco / unified_service_monitor2.0 – 2.0
- Cisco / unified_service_monitor2.1 – 2.1
References
- MISChttp://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000032.html
- VENDOR_ADVISORYhttp://www.cisco.com/en/US/products/products_security_advisory09186a0080ab7b56.shtml
- MISChttp://www.securityfocus.com/bid/35040
- MISChttp://jvn.jp/en/jp/JVN62527913/index.html
- MISChttp://osvdb.org/54616
- MISChttp://securitytracker.com/id?1022263
- VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2009/1390
- VENDOR_ADVISORYhttp://secunia.com/advisories/35179