CiscoWorks Common Services Auditing Directory Traversal Vulnerability

Bugtraq ID:	47905
Class:	Input Validation Error
CVE:	CVE-2011-0966
Remote:	Yes
Local:	No
Published:	May 18 2011 12:00AM
Updated:	May 18 2011 12:00AM
Credit:	Sense of Security Labs
Vulnerable:	Cisco CiscoWorks Common Services 3.1.1 Cisco CiscoWorks Common Services 3.0.6 Cisco CiscoWorks Common Services 3.0.5 Cisco CiscoWorks Common Services 3.0.4 Cisco CiscoWorks Common Services 3.0.3 Cisco CiscoWorks Common Services 2.2 Cisco CiscoWorks Common Services 3.6 Base Cisco CiscoWorks Common Services 3.3.0 Cisco CiscoWorks Common Services 3.3 Base Cisco CiscoWorks Common Services 3.3 Cisco CiscoWorks Common Services 3.2 Cisco CiscoWorks Common Services 3.1.1 Base Cisco CiscoWorks Common Services 3.1 Cisco CiscoWorks Common Services 3.0.6 Base Cisco CiscoWorks Common Services 3.0.5 Base Cisco CiscoWorks Common Services 3.0.4 Base Cisco CiscoWorks Common Services 3.0.3 Base Cisco CiscoWorks Common Services 3.0 Base Cisco CiscoWorks Common Services 3.0 Cisco CiscoWorks Common Services 2.3 Base Cisco CiscoWorks Common Services 2.3 Cisco CiscoWorks Common Services 2.2 Base Cisco CiscoWorks Common Services 2.2 Cisco CiscoWorks Common Services 1.0 Base Cisco CiscoWorks Common Services 1.0
Not Vulnerable:

CiscoWorks Common Services Auditing Directory Traversal Vulnerability

CiscoWorks Common Services is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.

A remote attacker could exploit this vulnerability using directory-traversal strings (such as '../') to gain access to arbitrary files on the targeted system. This may result in the disclosure of sensitive information or lead to a complete compromise of the affected computer.

This issue is being monitored by Cisco Bug ID CSCto35577.

CiscoWorks Common Services 3.3 and prior are vulnerable.

CiscoWorks Common Services Auditing Directory Traversal Vulnerability

Attackers can use a browser to exploit this issue.

The following example URIs are available:

• /data/vulnerabilities/exploits/47905.txt

CiscoWorks Common Services Auditing Directory Traversal Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

CiscoWorks Common Services Auditing Directory Traversal Vulnerability

References:

• Cisco Homepage (Cisco)
  
• Cisco Unified Operations Manager Multiple Vulnerabilities - SOS-11-006 (Sense of Security)
  
• CiscoWorks Common Services Auditing Directory Traversal Vulnerability (Cisco)