Cisco Network Building Mediator System Configuration File Information Disclosure Vulnerability

Bugtraq ID:	40384
Class:	Design Error
CVE:	CVE-2010-0600
Remote:	Yes
Local:	No
Published:	May 26 2010 12:00AM
Updated:	May 26 2010 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Network Building Mediator 3.0.8 Cisco Network Building Mediator 1.5.1 Cisco Network Building Mediator 3.0 Cisco Network Building Mediator 2.2 Cisco Network Building Mediator 1.5
Not Vulnerable:	Cisco Network Building Mediator 3.1.1

Cisco Network Building Mediator System Configuration File Information Disclosure Vulnerability

Cisco Network Building Mediator System (NBM) is prone to an information-disclosure vulnerability.

Attackers can exploit this issue to gain access to sensitive information contained in the system configuration file, including login credentials. Information obtained will allow attackers to gain administrative access to the affected device.

This issue is being tracked by Cisco Bugid CSCtb83512.

Cisco Network Building Mediator System Configuration File Information Disclosure Vulnerability

Attackers can exploit these issues using readily available tools.

Cisco Network Building Mediator System Configuration File Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references for more information.

Cisco Network Building Mediator System Configuration File Information Disclosure Vulnerability

References:

• Network Building Mediator Homepage (Cisco)
  
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Network Building Medi (Cisco)