CVE-2010-3036

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary code via a session on TCP port (1) 443 or (2) 1741, aka Bug ID CSCti41352.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://osvdb.org/68927
http://secunia.com/advisories/42011Vendor Advisory
http://securitytracker.com/id?1024646
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b51501.shtmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/44468Patch
http://www.vupen.com/english/advisories/2010/2793Vendor Advisory
http://osvdb.org/68927
http://secunia.com/advisories/42011Vendor Advisory
http://securitytracker.com/id?1024646
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b51501.shtmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/44468Patch
http://www.vupen.com/english/advisories/2010/2793Vendor Advisory

Timeline

Published: Oct 29, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-30378.5goform/websXMLAdminRequestCgi.cgi in Cisco Unified Videoconferencing (UVC) System 5110 and 5115, and possibly Unified Videoconferencing Syst CVE-2010-303810.0Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is used, has a default password for the (1) root CVE-2010-30396.8/usr/local/cm/bin/pktCap_protectData in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6, 7, and 8 allows remote auth CVE-2010-304010.0Multiple stack-based buffer overflows in agent.exe in Setup Manager in Cisco Intelligent Contact Manager (ICM) before 7.0 allow remote attac CVE-2010-30419.3Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T2 CVE-2010-30429.3Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T2 CVE-2010-30439.3Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T2 CVE-2010-30449.3Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T2 CVE-2010-30487.5Cisco Unified Personal Communicator 7.0 (1.13056) does not free allocated memory for received data and does not perform validation if memory CVE-2010-30495.5Cisco IOS before 12.2(33)SXI allows local users to cause a denial of service (device reboot).CVE-2010-30506.5Cisco IOS before 12.2(33)SXI allows remote authenticated users to cause a denial of service (device reboot).CVE-2010-30534.3bdf/bdflib.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) via a crafted BDF font file,