Cisco CiscoWorks Common Services Web Server Module Buffer Overflow Vulnerability

Bugtraq ID:	44468
Class:	Boundary Condition Error
CVE:	CVE-2010-3036
Remote:	Yes
Local:	No
Published:	Oct 27 2010 12:00AM
Updated:	Dec 01 2010 11:15PM
Credit:	Cisco
Vulnerable:	Cisco TelePresence Readiness Assessment Manager (CTRAM) 1.0 Cisco CiscoWorks QoS Policy Manager 4.0.2 Cisco CiscoWorks QoS Policy Manager 4.0.1 Cisco CiscoWorks QoS Policy Manager 4.0 Cisco CiscoWorks Lan Management Solution 3.2 Cisco CiscoWorks Lan Management Solution 3.0 (Dec 2007 Update Cisco CiscoWorks Lan Management Solution 3.0 Cisco CiscoWorks Lan Management Solution 2.6 Update Cisco CiscoWorks Common Services 3.1.1 Cisco CiscoWorks Common Services 3.0.6 Cisco CiscoWorks Common Services 3.0.5 Cisco CiscoWorks Common Services 3.3.0 Cisco CiscoWorks Common Services 3.2 Cisco CiscoWorks Common Services 3.1 Cisco Cisco Unified Service Monitor 2.0.1 Cisco Cisco Unified Operations Manager (CUOM) 2.0.3 Cisco Cisco Unified Operations Manager (CUOM) 2.0.2 Cisco Cisco Unified Operations Manager (CUOM) 2.0.1 Cisco Cisco Security Manager (CSM) 4.0.1 Cisco Cisco Security Manager (CSM) 3.3.1 Cisco Cisco Security Manager (CSM) 3.1.1 Cisco Cisco Security Manager (CSM) 3.0.2 Cisco Cisco Security Manager (CSM) 4.0 Cisco Cisco Security Manager (CSM) 3.2 Cisco Cisco Security Manager (CSM) 3.1
Not Vulnerable:

Cisco CiscoWorks Common Services Web Server Module Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for details.


Cisco CiscoWorks Common Services 3.3.0

• Cisco cwcs33-sol-CSCti41352.tar
  Solaris
  http://tools.cisco.com/support/downloads/pub/Redirect.x?mdfid=26843947 7


• Cisco cwcs33-win-CSCti41352.zip
  Windows
  http://tools.cisco.com/support/downloads/pub/Redirect.x?mdfid=26843947 7

Cisco CiscoWorks Common Services Web Server Module Buffer Overflow Vulnerability

References:

• Cisco Security Advisory: CiscoWorks Common Services Arbitrary Code Execution Vul (Cisco Systems Product Security Incident Response Team )
  
• Cisco Security Advisory: CiscoWorks Common Services Arbitrary Code Execution Vul (Cisco)