CVE-2010-1577

Опубликовано: 28 июл. 2010

Источник: nvd

CVSS2: 7.8

EPSS Низкий

Описание

Directory traversal vulnerability in Cisco Internet Streamer, as used in Cisco Content Delivery System (CDS) 2.2.x, 2.3.x, 2.4.x, and 2.5.x before 2.5.7 allows remote attackers to read arbitrary files via a crafted URL.

Ссылки

http://osvdb.org/66508
http://secunia.com/advisories/40701
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3bd1c.shtml
Patch
Vendor Advisory
http://www.securitytracker.com/id?1024234
http://www.vupen.com/english/advisories/2010/1881
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/60567
http://osvdb.org/66508
http://secunia.com/advisories/40701
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3bd1c.shtml
Patch
Vendor Advisory
http://www.securitytracker.com/id?1024234
http://www.vupen.com/english/advisories/2010/1881
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/60567

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:cisco:internet_streamer:2.2\(1\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:internet_streamer:2.3\(1\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:internet_streamer:2.3\(3\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:internet_streamer:2.3\(5\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:internet_streamer:2.3\(7\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:internet_streamer:2.3\(9\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:internet_streamer:2.4\(1\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:internet_streamer:2.4\(3\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:internet_streamer:2.4\(5\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:internet_streamer:2.5\(1\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:internet_streamer:2.5\(3\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:content_delivery_system:*:*:*:*:*:*:*:*

EPSS

Процентиль: 75%

0.0086

Низкий

7.8 High

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-9jrf-h5mr-3fgp

github

больше 3 лет назад