Cisco Webex MeetMeNow CVE-2014-3340 Local Directory Traversal Vulnerability

Bugtraq ID:	69285
Class:	Input Validation Error
CVE:	CVE-2014-3340
Remote:	No
Local:	Yes
Published:	Aug 19 2014 12:00AM
Updated:	Aug 19 2014 12:00AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco Webex MeetMeNow CVE-2014-3340 Local Directory Traversal Vulnerability

Cisco Webex MeetMeNow is prone to a local directory-traversal vulnerability because it fails to prperly sanitize user-supplied input.

Exploiting this issue will allow a local attacker to view the contents of arbitrary files on the affected system.

This issue is tracked by Cisco BugID CSCuo16166.

Cisco Webex MeetMeNow CVE-2014-3340 Local Directory Traversal Vulnerability

Attackers can use standard, readily available tools to exploit this issue.

Cisco Webex MeetMeNow CVE-2014-3340 Local Directory Traversal Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Webex MeetMeNow CVE-2014-3340 Local Directory Traversal Vulnerability

References:

• Cisco Homepage (Cisco )