CVE-2010-3036
Critical
Description
Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary code via a session on TCP port (1) 443 or (2) 1741, aka Bug ID CSCti41352.
SeverityCritical
CVSS10.0
Exploit probability—
Product
Ciscoworks Common Services
PublishedOct 29, 2010
First seenOct 29, 2010
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ciscoworks_common_services | 3.0.5, 3.0.6, 3.1, 3.1.1, 3.2, 3.3 | — |
| cisco ciscoworks_lan_management_solution | 2.6, 3.0, 3.1, 3.2 | — |
| cisco qos_policy_manager | 4.0, 4.0.1, 4.0.2 | — |
| cisco security_manager | 3.0.2, 3.2 | — |
| cisco telepresence_readiness_assessment_manager | 1.0 | — |
| cisco unified_operations_manager | 2.0.1, 2.0.2, 2.0.3 | — |
| cisco unified_service_monitor | 2.0.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.