CVE-2009-1161

CVSS V2 High 10 CVSS V3 None
Description
Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessment Manager, Unified Operations Manager, Unified Provisioning Manager, and other products, allows remote attackers to access arbitrary files via unspecified vectors.
Overview
  • CVE ID
  • CVE-2009-1161
  • Assigner
  • ykramarz@cisco.com
  • Vulnerability Status
  • Modified
  • Published Version
  • 2009-05-21T14:30:00
  • Last Modified Date
  • 2009-06-09T05:33:31
Weakness Enumerations
CWE URL
CWE-22 http://cwe.mitre.org/data/definitions/22.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:a:cisco:ciscoworks_common_services:3.0.3:*:windows:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:ciscoworks_common_services:3.0.4:*:windows:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:ciscoworks_common_services:3.0.5:*:windows:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:ciscoworks_common_services:3.0.6:*:windows:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:ciscoworks_common_services:3.1:*:windows:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:ciscoworks_common_services:3.1.1:*:windows:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:ciscoworks_common_services:3.2:*:windows:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:ciscoworks_health_and_utilization_monitor:1.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:ciscoworks_health_and_utilization_monitor:1.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:ciscoworks_lan_management_solution:2.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:ciscoworks_lan_management_solution:2.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:ciscoworks_lan_management_solution:3.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:ciscoworks_lan_management_solution:3.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:ciscoworks_qos_policy_manager:4.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:ciscoworks_qos_policy_manager:4.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:ciscoworks_voice_manager:3.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:ciscoworks_voice_manager:3.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:security_manager:3.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:security_manager:3.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:security_manager:3.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:telepresence_readiness_assessment_manager:1.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:unified_operations_manager:1.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:unified_operations_manager:1.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:unified_operations_manager:2.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:unified_operations_manager:2.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:unified_provisioning_manager:1.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:unified_provisioning_manager:1.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:unified_provisioning_manager:1.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:unified_provisioning_manager:1.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:unified_service_monitor:1.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:unified_service_monitor:1.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:unified_service_monitor:2.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cisco:unified_service_monitor:2.1:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:L/Au:N/C:C/I:C/A:C
  • Access Vector
  • NETWORK
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • COMPLETE
  • Integrity Impact
  • COMPLETE
  • Availability Impact
  • COMPLETE
  • Base Score
  • 10
  • Severity
  • HIGH
  • Exploitability Score
  • 10
  • Impact Score
  • 10
References
Reference URL Reference Tags
http://www.cisco.com/en/US/products/products_security_advisory09186a0080ab7b56.shtml Patch Vendor Advisory
http://securitytracker.com/id?1022263
http://www.securityfocus.com/bid/35040
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000032.html
http://jvn.jp/en/jp/JVN62527913/index.html
http://secunia.com/advisories/35179
http://osvdb.org/54616
http://www.vupen.com/english/advisories/2009/1390
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2009-1161
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1161
History
Created Old Value New Value Data Type Notes
2022-05-10 11:15:10 Added to TrackCVE