Executive Summary

Informations
NameCVE-2008-3820First vendor Publication2009-01-22
VendorCveLast vendor Modification2011-03-07

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P)
Cvss Base Score6.8Attack RangeNetwork
Cvss Impact Score6.4Attack ComplexityMedium
Cvss Expoit Score8.6AuthentificationNone Required
Calculate full CVSS 2.0 Vectors scores

Security Protection

ImpactsProvides unauthorized access : Allows partial confidentiality, integrity, and availability violation; Allows unauthorized disclosure of information; Allows disruption of service.

Detail

Cisco Security Manager 3.1 and 3.2 before 3.2.2, when Cisco IPS Event Viewer (IEV) is used, exposes TCP ports used by the MySQL daemon and IEV server, which allows remote attackers to obtain "root access" to IEV via unspecified use of TCP sessions to these ports.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3820

CPE : Common Platform Enumeration

TypeDescriptionCount
Application8

Open Source Vulnerability Database (OSVDB)

idDescription
52316Cisco Security Manager IPS Event Viewer (IEV) Unspecified TCP Port Exposure R...

Internal Sources (Detail)

SourceUrl
BIDhttp://www.securityfocus.com/bid/33381
CISCOhttp://www.cisco.com/en/US/products/products_security_advisory09186a0080a6192...
SECTRACKhttp://www.securitytracker.com/id?1021619
SECUNIAhttp://secunia.com/advisories/33633
VUPENhttp://www.vupen.com/english/advisories/2009/0214
XFhttp://xforce.iss.net/xforce/xfdb/48134

Alert History

If you want to see full details history, please login or register.
0
DateInformations
2013-05-11 00:24:43
  • Multiple Updates