Buffer overflow in Cisco Ciscoworks Internetwork Performance Monitor
CVE-2010-0138
Buffer overflow in Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 and earlier on Windows, as distributed in CiscoWorks LAN Management Solution (LMS), allows remote attackers to execute arbitrary code via a malformed getProcessName CORBA General Inter-ORB Protocol (GIOP) request, related to a "third-party component," aka Bug ID CSCsv62350.
Vulnerability class: Buffer Overflow
EPSS: 0.085 (94.5th percentile) — read the EPSS interpretation.
Affected products
- Cisco Ciscoworks_internetwork_performance_monitor — versions 2.5, 2.4
- Microsoft Windows
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_BID)
- psirt@cisco.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- psirt@cisco.com (x_refsource_MISC)
- psirt@cisco.com (vdb-entry, x_refsource_XF)