CVE:CVE-2010-3036
CNNVD:CNNVD-201010-425
CiscoWorks Common Services是CiscoWorks应用所共享的通用管理服务集。
Cisco CiscoWorks Common Services 4.0之前版本中的web-server模块中的认证功能中存在多个缓冲区溢出漏洞。远程攻击者可以借助TCP端口(1)443或(2)1741上的会话执行任意代码。
solution:Upgrade cisco ciscoworks_common_services to a higher version than 3.0.5,3.0.6,3.1,3.1.1,3.2,3.3,and avoid the version 3.0.5,3.0.6,3.1,3.1.1,3.2,3.3; Upgrade cisco ciscoworks_lan_management_solution to a higher version than 2.6:update,3.0,3.0:december_2007,3.1,3.2,and avoid the version 2.6:update,3.0,3.0:december_2007,3.1,3.2; Upgrade cisco qos_policy_manager to a higher version than 4.0,4.0.1,4.0.2,and avoid the version 4.0,4.0.1,4.0.2; Upgrade cisco security_manager to a higher version than 3.0.2,3.2,and avoid the version 3.0.2,3.2; Upgrade cisco telepresence_readiness_assessment_manager to a higher version than 1.0,and avoid the version 1.0; Upgrade cisco unified_operations_manager to a higher version than 2.0.1,2.0.2,2.0.3,and avoid the version 2.0.1,2.0.2,2.0.3; Upgrade cisco unified_service_monitor to a higher version than 2.0.1,and avoid the version 2.0.1