CVE-2009-1161: Path Traversal
First published: Thu May 21 2009(Updated: )
Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessment Manager, Unified Operations Manager, Unified Provisioning Manager, and other products, allows remote attackers to access arbitrary files via unspecified vectors.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco CiscoWorks Common Services | =3.0.3 | |
| Cisco CiscoWorks Common Services | =3.0.4 | |
| Cisco CiscoWorks Common Services | =3.0.5 | |
| Cisco CiscoWorks Common Services | =3.0.6 | |
| Cisco CiscoWorks Common Services | =3.1 | |
| Cisco CiscoWorks Common Services | =3.1.1 | |
| Cisco CiscoWorks Common Services | =3.2 | |
| Cisco Ciscoworks Health And Utilization Monitor | =1.0 | |
| Cisco Ciscoworks Health And Utilization Monitor | =1.1 | |
| Cisco Ciscoworks Lan Management Solution | =2.5 | |
| Cisco Ciscoworks Lan Management Solution | =2.6 | |
| Cisco Ciscoworks Lan Management Solution | =3.0 | |
| Cisco Ciscoworks Lan Management Solution | =3.1 | |
| Cisco Ciscoworks Qos Policy Manager | =4.0 | |
| Cisco Ciscoworks Qos Policy Manager | =4.1 | |
| Cisco Ciscoworks Voice Manager | =3.0 | |
| Cisco Ciscoworks Voice Manager | =3.1 | |
| Cisco Security Manager | =3.0 | |
| Cisco Security Manager | =3.1 | |
| Cisco Security Manager | =3.2 | |
| Cisco Telepresence Readiness Assessment Manager | =1.0 | |
| Cisco Unified Operations Manager | =1.0 | |
| Cisco Unified Operations Manager | =1.1 | |
| Cisco Unified Operations Manager | =2.0 | |
| Cisco Unified Operations Manager | =2.1 | |
| Cisco Unified Provisioning Manager | =1.0 | |
| Cisco Unified Provisioning Manager | =1.1 | |
| Cisco Unified Provisioning Manager | =1.2 | |
| Cisco Unified Provisioning Manager | =1.3 | |
| Cisco Unified Service Monitor | =1.0 | |
| Cisco Unified Service Monitor | =1.1 | |
| Cisco Unified Service Monitor | =2.0 | |
| Cisco Unified Service Monitor | =2.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080ab7b56.shtml
- http://securitytracker.com/id?1022263
- http://www.securityfocus.com/bid/35040
- http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000032.html
- http://jvn.jp/en/jp/JVN62527913/index.html
- http://secunia.com/advisories/35179
- http://osvdb.org/54616
- http://www.vupen.com/english/advisories/2009/1390
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/remedy
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/cisco
- canonical/cisco ciscoworks common services
- version/cisco ciscoworks common services/3.0.3
- version/cisco ciscoworks common services/3.0.4
- version/cisco ciscoworks common services/3.0.5
- version/cisco ciscoworks common services/3.0.6
- version/cisco ciscoworks common services/3.1
- version/cisco ciscoworks common services/3.1.1
- version/cisco ciscoworks common services/3.2
- canonical/cisco ciscoworks health and utilization monitor
- version/cisco ciscoworks health and utilization monitor/1.0
- version/cisco ciscoworks health and utilization monitor/1.1
- canonical/cisco ciscoworks lan management solution
- version/cisco ciscoworks lan management solution/2.5
- version/cisco ciscoworks lan management solution/2.6
- version/cisco ciscoworks lan management solution/3.0
- version/cisco ciscoworks lan management solution/3.1
- canonical/cisco ciscoworks qos policy manager
- version/cisco ciscoworks qos policy manager/4.0
- version/cisco ciscoworks qos policy manager/4.1
- canonical/cisco ciscoworks voice manager
- version/cisco ciscoworks voice manager/3.0
- version/cisco ciscoworks voice manager/3.1
- canonical/cisco security manager
- version/cisco security manager/3.0
- version/cisco security manager/3.1
- version/cisco security manager/3.2
- canonical/cisco telepresence readiness assessment manager
- version/cisco telepresence readiness assessment manager/1.0
- canonical/cisco unified operations manager
- version/cisco unified operations manager/1.0
- version/cisco unified operations manager/1.1
- version/cisco unified operations manager/2.0
- version/cisco unified operations manager/2.1
- canonical/cisco unified provisioning manager
- version/cisco unified provisioning manager/1.0
- version/cisco unified provisioning manager/1.1
- version/cisco unified provisioning manager/1.2
- version/cisco unified provisioning manager/1.3
- canonical/cisco unified service monitor
- version/cisco unified service monitor/1.0
- version/cisco unified service monitor/1.1
- version/cisco unified service monitor/2.0
- version/cisco unified service monitor/2.1