Executive Summary

Informations
NameCVE-2008-3820First vendor Publication2009-01-22
VendorCveLast vendor Modification2011-03-07

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P)
Cvss Base Score6.8Attack RangeNetwork
Cvss Impact Score6.4Attack ComplexityMedium
Cvss Expoit Score8.6AuthenticationNone Required
Calculate full CVSS 2.0 Vectors scores

Security Protection

ImpactsProvides unauthorized access : Allows partial confidentiality, integrity, and availability violation; Allows unauthorized disclosure of information; Allows disruption of service.

Detail

Cisco Security Manager 3.1 and 3.2 before 3.2.2, when Cisco IPS Event Viewer (IEV) is used, exposes TCP ports used by the MySQL daemon and IEV server, which allows remote attackers to obtain "root access" to IEV via unspecified use of TCP sessions to these ports.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3820

CPE : Common Platform Enumeration

TypeDescriptionCount
Application8

Open Source Vulnerability Database (OSVDB)

idDescription
52316Cisco Security Manager IPS Event Viewer (IEV) Unspecified TCP Port Exposure R...

Information Assurance Vulnerability Management (IAVM)

DateDescription
2009-01-29IAVM : 2009-A-0011 - Cisco Security Manager Vulnerability
Severity : Category I - VMSKEY : V0018224

Nessus® Vulnerability Scanner

DateDescription
2013-08-12Name : The remote database server can be accessed without a password.
File : cisco-sa-20090121-csm.nasl - Type : ACT_GATHER_INFO

Internal Sources (Detail)

SourceUrl
BIDhttp://www.securityfocus.com/bid/33381
CISCOhttp://www.cisco.com/en/US/products/products_security_advisory09186a0080a6192...
SECTRACKhttp://www.securitytracker.com/id?1021619
SECUNIAhttp://secunia.com/advisories/33633
VUPENhttp://www.vupen.com/english/advisories/2009/0214
XFhttp://xforce.iss.net/xforce/xfdb/48134

Alert History

If you want to see full details history, please login or register.
0
1
2
DateInformations
2014-02-17 10:46:16
  • Multiple Updates
2013-11-11 12:38:02
  • Multiple Updates
2013-05-11 00:24:43
  • Multiple Updates