Vulnerability in Cisco Unified Videoconferencing System 5110
CVE-2010-4303
Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is used, uses world-readable permissions for the /etc/shadow file, which allows local users to discover encrypted passwords by reading this file, aka Bug ID CSCti54043.
EPSS: 0.004 (27.9th percentile) — read the EPSS interpretation.
Affected products
- Cisco Unified_videoconferencing_system_5110
- Cisco Unified_videoconferencing_system_5110_firmware — versions 7.0.1.13.3
- Cisco Unified_videoconferencing_system_5115
- Cisco Unified_videoconferencing_system_5115_firmware — versions 7.0.1.13.3
- Linux Linux_kernel
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)