Cisco Network Building Mediator CVE-2010-0597 Remote Privilege Escalation Vulnerability

Bugtraq ID:	40386
Class:	Access Validation Error
CVE:	CVE-2010-0597
Remote:	Yes
Local:	No
Published:	May 26 2010 12:00AM
Updated:	May 26 2010 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Richards-Zeta Mediator 0 Cisco Network Building Mediator 3.0.8 Cisco Network Building Mediator 1.5.1 Cisco Network Building Mediator 2.2
Not Vulnerable:	Cisco Network Building Mediator 3.1.1

Cisco Network Building Mediator CVE-2010-0597 Remote Privilege Escalation Vulnerability

Cisco Network Building Mediator is prone to a remote privilege-escalation vulnerability. This issue is tracked by Cisco Bug ID CSCtb83618.

An authenticated attacker can exploit this issue to read and modify configuration settings, gaining elevated privileges. This may lead to a full compromise of the affected device. In addition, attackers can leverage this issue to cause the device to reload; successive attacks will result in a prolonged denial-of-service.

Network Building Mediator products running software releases prior to 3.1.1 are affected.

Cisco Network Building Mediator CVE-2010-0597 Remote Privilege Escalation Vulnerability

Attackers can exploit this issue using readily available tools.

Cisco Network Building Mediator CVE-2010-0597 Remote Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references for details.

Cisco Network Building Mediator CVE-2010-0597 Remote Privilege Escalation Vulnerability

References:

• Network Building Mediator Homepage (Cisco)
  
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Network Building Medi (Cisco)