Cisco Unified Intelligent Contact Management Enterprise 'agent.exe' Multiple Vulnerabilities

Bugtraq ID:	44699
Class:	Boundary Condition Error
CVE:	CVE-2010-3040
Remote:	Yes
Local:	No
Published:	Nov 07 2010 12:00AM
Updated:	Nov 07 2010 12:00AM
Credit:	sb
Vulnerable:	Cisco Unified Intelligent Contact Management Enterprise 6.0 Cisco Unified Intelligent Contact Management Enterprise 5.0
Not Vulnerable:

Cisco Unified Intelligent Contact Management Enterprise 'agent.exe' Multiple Vulnerabilities

Cisco Unified Intelligent Contact Management Enterprise is prone to multiple buffer-overflow vulnerabilities.

Successful exploits may allow attackers to execute arbitrary code with SYSTEM-level privileges. This may result in a compromise of the underlying system. Failed attempts may lead to a denial-of-service condition.

Cisco Unified Intelligent Contact Management Enterprise 'agent.exe' Multiple Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Unified Intelligent Contact Management Enterprise 'agent.exe' Multiple Vulnerabilities

References:

• Cisco ICM Setup Manager Agent.exe AgentUpgrade Remote Code Execution Vulnerabili (TippingPoint)
  
• Cisco ICM Setup Manager Agent.exe HandleQueryNodeInfoReq Remote Code Execution V (TippingPoint)
  
• Cisco ICM Setup Manager Agent.exe HandleUpgradeAll Remote Code Execution Vulnera (TippingPoint)
  
• Cisco ICM Setup Manager Agent.exe HandleUpgradeTrace Remote Code Execution Vulne (TippingPoint)
  
• Cisco Unified Intelligent Contact Management Enterprise Homepage (Cisco)
  
• Cisco Intelligent Contact Manager Setup Manager agent.exe Arbitrary Code Executi (Cisco)