Path Traversal in Cisco Content Delivery System
CVE-2010-1577
Directory traversal vulnerability in Cisco Internet Streamer, as used in Cisco Content Delivery System (CDS) 2.2.x, 2.3.x, 2.4.x, and 2.5.x before 2.5.7 allows remote attackers to read arbitrary files via a crafted URL.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.034 (87.5th percentile) — read the EPSS interpretation.
Affected products
- Cisco Content_delivery_system
- Cisco Internet_streamer — versions 2.2\(1\), 2.3\(9\), 2.3\(7\)
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_XF)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (x_refsource_OSVDB, vdb-entry)
- psirt@cisco.com (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)