Cisco Video Surveillance Manager CVE-2013-3429 Directory Traversal Vulnerability

Bugtraq ID:	61430
Class:	Input Validation Error
CVE:	CVE-2013-3429
Remote:	Yes
Local:	No
Published:	Jul 24 2013 12:00AM
Updated:	Jul 24 2013 12:00AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco Video Surveillance Manager CVE-2013-3429 Directory Traversal Vulnerability

Cisco Video Surveillance Manager is prone to a directory-traversal vulnerability.

Exploiting this issue can allow an attacker to gain access to arbitrary files. Information harvested may aid in launching further attacks.

This issue is being tracked by Cisco Bug ID CSCsv37163.

Versions prior to Cisco Video Surveillance Manager 7.0.0 are vulnerable.

Cisco Video Surveillance Manager CVE-2013-3429 Directory Traversal Vulnerability

An attacker can exploit the issue through a browser.

Cisco Video Surveillance Manager CVE-2013-3429 Directory Traversal Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Video Surveillance Manager CVE-2013-3429 Directory Traversal Vulnerability

References:

• Cisco Homepage (Cisco )