CVE-2010-1577

HighCVSS 7.8/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in Cisco Internet Streamer, as used in Cisco Content Delivery System (CDS) 2.2.x, 2.3.x, 2.4.x, and 2.5.x before 2.5.7 allows remote attackers to read arbitrary files via a crafted URL.

Metrics

CVSS 2.0 7.8/10AV:N/AC:L/Au:N/C:C/I:N/A:N

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://osvdb.org/66508
http://secunia.com/advisories/40701Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3bd1c.shtmlPatch, Vendor Advisory
http://www.securitytracker.com/id?1024234
http://www.vupen.com/english/advisories/2010/1881Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/60567
http://osvdb.org/66508
http://secunia.com/advisories/40701Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3bd1c.shtmlPatch, Vendor Advisory
http://www.securitytracker.com/id?1024234
http://www.vupen.com/english/advisories/2010/1881Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/60567

Timeline

Published: Jul 28, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-15787.8Unspecified vulnerability in the SunRPC inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 CVE-2010-15797.8Unspecified vulnerability in the SunRPC inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 CVE-2010-15807.8Unspecified vulnerability in the SunRPC inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 CVE-2010-15817.8Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devic CVE-2010-15837.5SQL injection vulnerability in the loadByKey function in the TznDbConnection class in tzn_mysql.php in Tirzen (aka TZN) Framework 1.5, as us CVE-2010-15842.1Cross-site scripting (XSS) vulnerability in the Context module before 6.x-2.0-rc4 for Drupal allows remote authenticated users, with Adminis CVE-2010-15859.3The nsIScriptableUnescapeHTML.parseFragment method in the ParanoidFragmentSink protection mechanism in Mozilla Firefox before 3.5.17 and 3.6 CVE-2010-15864.3Open redirect vulnerability in red2301.html in HP System Management Homepage (SMH) 2.x.x.x allows remote attackers to redirect users to arbi CVE-2010-15875.0The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP source code via a /CVE-2010-15887.5SQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlie CVE-2010-15895.0Directory traversal vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might allow remote CVE-2010-15904.3Cross-site scripting (XSS) vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might allow