CVE-2010-0147

Related Files

Cisco Security Advisory 20100217-csa

Posted Feb 17, 2010

Authored by Cisco Systems | Site cisco.com

Cisco Security Advisory - The Management Center for Cisco Security Agents is affected by a directory traversal vulnerability and a SQL injection vulnerability. Successful exploitation of the directory traversal vulnerability may allow an authenticated attacker to view and download arbitrary files from the server hosting the Management Center. Successful exploitation of the SQL injection vulnerability may allow an authenticated attacker to execute SQL statements that can cause instability of the product or changes in the configuration. Additionally, the Cisco Security Agent is affected by a denial of service (DoS) vulnerability. Successful exploitation of the Cisco Security Agent agent DoS vulnerability may cause the affected system to crash. Repeated exploitation could result in a sustained DoS condition. These vulnerabilities are independent of each other.

tags | advisory, denial of service, arbitrary, vulnerability, sql injection

systems | cisco

advisories | CVE-2010-0146, CVE-2010-0147, CVE-2010-0148

SHA-256 | 89168264ce3123b644a7cdc45c7829cc364b9057312f73f74dba55d5259b1325

Download | Favorite | View