Cisco Network Building Mediator CVE-2010-0596 Remote Privilege Escalation Vulnerability

Bugtraq ID:	40383
Class:	Access Validation Error
CVE:	CVE-2010-0596
Remote:	Yes
Local:	No
Published:	May 26 2010 12:00AM
Updated:	May 31 2010 05:00PM
Credit:	Cisco
Vulnerable:	Cisco Richards-Zeta Mediator 0 Cisco Network Building Mediator 3.0.8 Cisco Network Building Mediator 2.2
Not Vulnerable:	Cisco Network Building Mediator 3.1.1

Cisco Network Building Mediator CVE-2010-0596 Remote Privilege Escalation Vulnerability

Cisco Network Building Mediator is prone to a remote privilege-escalation vulnerability. This issue is tracked by Cisco Bug ID CSCtb83607.

An authenticated attacker can exploit this issue to read and modify configuration settings, gaining elevated privileges. This may lead to a full compromise of the affected computer or aid in further attacks.

Network Building Mediator products running software releases prior to 3.1.1 are affected.

Cisco Network Building Mediator CVE-2010-0596 Remote Privilege Escalation Vulnerability

Attackers can exploit this issue using readily available tools.

Cisco Network Building Mediator CVE-2010-0596 Remote Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references for details.

Cisco Network Building Mediator CVE-2010-0596 Remote Privilege Escalation Vulnerability

References:

• Network Building Mediator Homepage (Cisco)
  
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Network Building Medi (Cisco)