|
Description
|
|
A vulnerability has been identified in Cisco Content Delivery System (CDS), which could be exploited by attackers to gain unauthorized access to arbitrary files on a vulnerable system. This issue is caused by an input validation error in the web server component of the Internet Streamer application, which could be exploited to disclose the contents of arbitrary files (e.g. password files and system logs) via directory traversal attacks.
|
|
|
|
|
|
Vulnerable Products
|
|
Vulnerable Software:
Cisco Content Delivery System (CDS) versions 2.2.xCisco Content Delivery System (CDS) versions 2.3.xCisco Content Delivery System (CDS) versions 2.4.xCisco Content Delivery System (CDS) versions 2.2.x
|
|
|
|
|
|
Solution
|
|
Upgrade to version 2.5.7 or later :
http://www.cisco.com/en/US/docs/video/cds/cda/is/2_5/release_notes/CDS_RelNotes2_5_9.html#wp100128
|
|
|
|
|
|
CVE
|
|
CVE-2010-1577
|
|
|
|
|
|
References
|
|
http://www.cisco.com/warp/public/707/cisco-sa-20100721-spcdn.shtml
|
|
|
|
|
|
Vulnerability Manager Detection
|
|
No
|
|
|
|
|
|
IPS Protection
|
|
|
|
|
|
|
