Retired: Cisco Security Monitoring Analysis and Response System Multiple Vulnerabilities
BID:19071
CVE-2006-3732 | CVE-2006-3733 | CVE-2006-3734 |Info
Retired: Cisco Security Monitoring Analysis and Response System Multiple Vulnerabilities
| Bugtraq ID: | 19071 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jul 19 2006 12:00AM |
| Updated: | Jul 20 2006 06:52PM |
| Credit: | These issues were disclosed by the vendor. |
| Vulnerable: |
Nortel Networks Contivity 2000 VPN Switch 4.1.3 Nortel Networks Contivity 2000 VPN Switch 4.1.2 Nortel Networks Contivity 2000 VPN Switch 4.1 Cisco CS-MARS 4.1.5 |
| Not Vulnerable: |
Cisco CS-MARS 4.2.1 |
Discussion
Retired: Cisco Security Monitoring Analysis and Response System Multiple Vulnerabilities
Cisco Security Monitoring, Analysis and Response System (CS-MARS) is prone to multiple vulnerabilities, including privilege-escalation, arbitrary command-execution, and information-disclosure issues.
An attacker could exploit these issues to retrieve potentially sensitive information and possibly execute arbitrary commands with superuser privileges. This may facilitate a remote compromise of affected computers.
Cisco has released version 4.2.1 to address these issues; prior versions are reported vulnerable.
This BID has been separated into the following individual records and is therefore being retired:
BID 19073 (Cisco Security Monitoring Analysis and Response System Information Disclosure Vulnerabilities)
BID 19075 (Cisco Security Monitoring Analysis and Response System Arbitrary Command Execution Vulnerability)
BID 19077 (Cisco Security Monitoring Analysis and Response System Multiple Privilege Escalation Vulnerabilities)
Cisco Security Monitoring, Analysis and Response System (CS-MARS) is prone to multiple vulnerabilities, including privilege-escalation, arbitrary command-execution, and information-disclosure issues.
An attacker could exploit these issues to retrieve potentially sensitive information and possibly execute arbitrary commands with superuser privileges. This may facilitate a remote compromise of affected computers.
Cisco has released version 4.2.1 to address these issues; prior versions are reported vulnerable.
This BID has been separated into the following individual records and is therefore being retired:
BID 19073 (Cisco Security Monitoring Analysis and Response System Information Disclosure Vulnerabilities)
BID 19075 (Cisco Security Monitoring Analysis and Response System Arbitrary Command Execution Vulnerability)
BID 19077 (Cisco Security Monitoring Analysis and Response System Multiple Privilege Escalation Vulnerabilities)
Exploit / POC
Retired: Cisco Security Monitoring Analysis and Response System Multiple Vulnerabilities
Attackers can exploit these issues using standard networking and command-line tools.
Attackers can exploit these issues using standard networking and command-line tools.
Solution / Fix
Retired: Cisco Security Monitoring Analysis and Response System Multiple Vulnerabilities
Solution:
Fixes are available. Please see the referenced Cisco advisory for details.
Solution:
Fixes are available. Please see the referenced Cisco advisory for details.
References
Retired: Cisco Security Monitoring Analysis and Response System Multiple Vulnerabilities
References:
References: