Search
Find a vulnerability
Search criteria
14 vulnerabilities found for cs-mars by cisco
VAR-200908-0382
Vulnerability from variot - Updated: 2025-04-10 23:22The Cisco Security Monitoring, Analysis and Response System (CS-MARS) 6.0.4 and earlier stores cleartext passwords in log/sysbacktrace.## files within error-logs.tar.gz archives, which allows context-dependent attackers to obtain sensitive information by reading these files. Cisco Security Monitoring, Analysis, and Response System (MARS) is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that can aid in further attacks. This issue is being tracked by Cisco Bug CSCtb52450. Cisco Security MARS 6.0.4 and prior are vulnerable
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200908-0382",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "cs-mars",
"scope": "eq",
"trust": 1.9,
"vendor": "cisco",
"version": "4.1.5"
},
{
"model": "cs-mars",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "4.1.2"
},
{
"model": "cs-mars",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "4.1"
},
{
"model": "cs-mars",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "4.1.3"
},
{
"model": "cs-mars",
"scope": "lte",
"trust": 1.0,
"vendor": "cisco",
"version": "6.0.4"
},
{
"model": "cs-mars",
"scope": "eq",
"trust": 0.9,
"vendor": "cisco",
"version": "6.0.4"
},
{
"model": "security monitoring, analysis and response system",
"scope": "lte",
"trust": 0.8,
"vendor": "cisco",
"version": "6.0.4"
},
{
"model": "networks contivity vpn switch",
"scope": "eq",
"trust": 0.3,
"vendor": "nortel",
"version": "20004.1.3"
},
{
"model": "networks contivity vpn switch",
"scope": "eq",
"trust": 0.3,
"vendor": "nortel",
"version": "20004.1.2"
},
{
"model": "networks contivity vpn switch",
"scope": "eq",
"trust": 0.3,
"vendor": "nortel",
"version": "20004.1"
},
{
"model": "security mars",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "4.2.2"
},
{
"model": "cs-mars",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "4.2.3"
},
{
"model": "cs-mars",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "4.2.2"
},
{
"model": "cs-mars",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "4.2.1"
}
],
"sources": [
{
"db": "BID",
"id": "36098"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-002689"
},
{
"db": "CNNVD",
"id": "CNNVD-200908-447"
},
{
"db": "NVD",
"id": "CVE-2009-2977"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:cisco:security_monitoring_analysis_and_response_system",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2009-002689"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Ryan Wessels",
"sources": [
{
"db": "BID",
"id": "36098"
},
{
"db": "CNNVD",
"id": "CNNVD-200908-447"
}
],
"trust": 0.9
},
"cve": "CVE-2009-2977",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 6.5,
"id": "CVE-2009-2977",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "LOW",
"trust": 1.8,
"vectorString": "AV:A/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 6.5,
"id": "VHN-40423",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "LOW",
"trust": 0.1,
"vectorString": "AV:A/AC:L/AU:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2009-2977",
"trust": 1.0,
"value": "LOW"
},
{
"author": "NVD",
"id": "CVE-2009-2977",
"trust": 0.8,
"value": "Low"
},
{
"author": "CNNVD",
"id": "CNNVD-200908-447",
"trust": 0.6,
"value": "LOW"
},
{
"author": "VULHUB",
"id": "VHN-40423",
"trust": 0.1,
"value": "LOW"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-40423"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-002689"
},
{
"db": "CNNVD",
"id": "CNNVD-200908-447"
},
{
"db": "NVD",
"id": "CVE-2009-2977"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "The Cisco Security Monitoring, Analysis and Response System (CS-MARS) 6.0.4 and earlier stores cleartext passwords in log/sysbacktrace.## files within error-logs.tar.gz archives, which allows context-dependent attackers to obtain sensitive information by reading these files. Cisco Security Monitoring, Analysis, and Response System (MARS) is prone to a local information-disclosure vulnerability. \nLocal attackers can exploit this issue to obtain sensitive information that can aid in further attacks. \nThis issue is being tracked by Cisco Bug CSCtb52450. \nCisco Security MARS 6.0.4 and prior are vulnerable",
"sources": [
{
"db": "NVD",
"id": "CVE-2009-2977"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-002689"
},
{
"db": "BID",
"id": "36098"
},
{
"db": "VULHUB",
"id": "VHN-40423"
}
],
"trust": 1.98
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "BID",
"id": "36098",
"trust": 2.8
},
{
"db": "NVD",
"id": "CVE-2009-2977",
"trust": 2.5
},
{
"db": "VUPEN",
"id": "ADV-2009-2364",
"trust": 1.7
},
{
"db": "XF",
"id": "52913",
"trust": 1.4
},
{
"db": "JVNDB",
"id": "JVNDB-2009-002689",
"trust": 0.8
},
{
"db": "BUGTRAQ",
"id": "20090821 CLEAR TEXT STORAGE OF PASSWORD IN CS-MARS V6.0.4 AND EARLIER",
"trust": 0.6
},
{
"db": "BUGTRAQ",
"id": "20090821 RE: CLEAR TEXT STORAGE OF PASSWORD IN CS-MARS V6.0.4 AND EARLIER",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-200908-447",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-40423",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-40423"
},
{
"db": "BID",
"id": "36098"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-002689"
},
{
"db": "CNNVD",
"id": "CNNVD-200908-447"
},
{
"db": "NVD",
"id": "CVE-2009-2977"
}
]
},
"id": "VAR-200908-0382",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-40423"
}
],
"trust": 0.01
},
"last_update_date": "2025-04-10T23:22:14.220000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "http://www.cisco.com/web/JP/index.html"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2009-002689"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-310",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-40423"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-002689"
},
{
"db": "NVD",
"id": "CVE-2009-2977"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.5,
"url": "http://www.securityfocus.com/bid/36098"
},
{
"trust": 1.7,
"url": "http://www.vupen.com/english/advisories/2009/2364"
},
{
"trust": 1.6,
"url": "http://tools.cisco.com/support/bugtoolkit/search/getbugdetails.do?method=fetchbugdetails\u0026bugid=csctb52450"
},
{
"trust": 1.4,
"url": "http://xforce.iss.net/xforce/xfdb/52913"
},
{
"trust": 1.1,
"url": "http://www.securityfocus.com/archive/1/505995/100/0/threaded"
},
{
"trust": 1.1,
"url": "http://www.securityfocus.com/archive/1/505998/100/0/threaded"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52913"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-2977"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2009-2977"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/archive/1/archive/1/505998/100/0/threaded"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/archive/1/archive/1/505995/100/0/threaded"
},
{
"trust": 0.3,
"url": "http://www.cisco.com/en/us/products/ps6241/index.html"
},
{
"trust": 0.3,
"url": "/archive/1/505995"
},
{
"trust": 0.3,
"url": "/archive/1/505998"
},
{
"trust": 0.1,
"url": "http://tools.cisco.com/support/bugtoolkit/search/getbugdetails.do?method=fetchbugdetails\u0026amp;bugid=csctb52450"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-40423"
},
{
"db": "BID",
"id": "36098"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-002689"
},
{
"db": "CNNVD",
"id": "CNNVD-200908-447"
},
{
"db": "NVD",
"id": "CVE-2009-2977"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-40423"
},
{
"db": "BID",
"id": "36098"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-002689"
},
{
"db": "CNNVD",
"id": "CNNVD-200908-447"
},
{
"db": "NVD",
"id": "CVE-2009-2977"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2009-08-27T00:00:00",
"db": "VULHUB",
"id": "VHN-40423"
},
{
"date": "2009-08-21T00:00:00",
"db": "BID",
"id": "36098"
},
{
"date": "2011-09-21T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2009-002689"
},
{
"date": "2009-08-27T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200908-447"
},
{
"date": "2009-08-27T17:30:00.390000",
"db": "NVD",
"id": "CVE-2009-2977"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-10-10T00:00:00",
"db": "VULHUB",
"id": "VHN-40423"
},
{
"date": "2009-08-21T18:03:00",
"db": "BID",
"id": "36098"
},
{
"date": "2011-09-21T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2009-002689"
},
{
"date": "2009-08-28T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200908-447"
},
{
"date": "2025-04-09T00:30:58.490000",
"db": "NVD",
"id": "CVE-2009-2977"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "specific network environment",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200908-447"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cisco Security Monitoring Analysis and Response System Password Information Disclosure Vulnerability",
"sources": [
{
"db": "BID",
"id": "36098"
},
{
"db": "CNNVD",
"id": "CNNVD-200908-447"
}
],
"trust": 0.9
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "encryption problem",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200908-447"
}
],
"trust": 0.6
}
}
VAR-200701-0177
Vulnerability from variot - Updated: 2025-04-10 23:11The Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.3 and Adaptive Security Device Manager (ASDM) before 5.2(2.54) do not validate the SSL/TLS certificates or SSH public keys when connecting to devices, which allows remote attackers to spoof those devices to obtain sensitive information or generate incorrect information. This issue is tracked by Cisco Bug IDs CSCsf95930 and CSCsg78595. Cisco CS-MARS can receive event logs from various network devices, correlate and analyze the received security problem data, and report findings; ASDM can provide management and monitoring services for various Cisco security devices, and provide firewall services for Cisco switches and routers module. Cisco CS-MARS and ASDM have vulnerabilities in the implementation of communication authentication with managed devices. Because the certificate and public key provided by the device are not verified, if the certificate or public key changes, the affected product cannot determine whether the device it communicates with is legitimate, or whether the device is pretending to be a legitimate device.
Secunia is proud to announce the availability of the Secunia Software Inspector.
The Secunia Software Inspector is a free service that detects insecure versions of software that you may have installed in your system. When insecure versions are detected, the Secunia Software Inspector also provides thorough guidelines for updating the software to the latest secure version from the vendor. This can be exploited to conduct spoofing attacks and possibly gain knowledge of sensitive information.
SOLUTION: Update to the latest version. http://www.cisco.com/pcgi-bin/tablebuild.pl/asa-interim?psrtdcat20e2
PROVIDED AND/OR DISCOVERED BY: The vendor credits Jan Bervar, NIL Data Communications.
ORIGINAL ADVISORY: http://www.cisco.com/warp/public/707/cisco-sa-20070118-certs.shtml
About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Show details on source website
{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200701-0177",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "security monitoring analysis and response system",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "4.2.3"
},
{
"model": "adaptive security appliance device manager",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "5.2.53"
},
{
"model": "adaptive security device manager",
"scope": "lt",
"trust": 0.8,
"vendor": "cisco",
"version": "5.2(2.54)"
},
{
"model": "security monitoring, analysis and response system",
"scope": "lt",
"trust": 0.8,
"vendor": "cisco",
"version": "4.2.3"
},
{
"model": "adaptive security device manager",
"scope": "eq",
"trust": 0.6,
"vendor": "cisco",
"version": "5.2.53"
},
{
"model": "networks contivity vpn switch",
"scope": "eq",
"trust": 0.3,
"vendor": "nortel",
"version": "20004.1.3"
},
{
"model": "networks contivity vpn switch",
"scope": "eq",
"trust": 0.3,
"vendor": "nortel",
"version": "20004.1.2"
},
{
"model": "networks contivity vpn switch",
"scope": "eq",
"trust": 0.3,
"vendor": "nortel",
"version": "20004.1"
},
{
"model": "cs-mars",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "4.2.2"
},
{
"model": "cs-mars",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "4.2.1"
},
{
"model": "cs-mars",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "4.1.5"
},
{
"model": "asdm",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "5.0"
},
{
"model": "cs-mars",
"scope": "ne",
"trust": 0.3,
"vendor": "cisco",
"version": "4.2.3"
},
{
"model": "asdm",
"scope": "ne",
"trust": 0.3,
"vendor": "cisco",
"version": "5.2"
}
],
"sources": [
{
"db": "BID",
"id": "22111"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-001419"
},
{
"db": "CNNVD",
"id": "CNNVD-200701-320"
},
{
"db": "NVD",
"id": "CVE-2007-0397"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:cisco:adaptive_security_device_manager",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:cisco:security_monitoring_analysis_and_response_system",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2007-001419"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Jan Bervar",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200701-320"
}
],
"trust": 0.6
},
"cve": "CVE-2007-0397",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 6.4,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2007-0397",
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 6.4,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "VHN-23759",
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:P/I:P/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2007-0397",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2007-0397",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNNVD",
"id": "CNNVD-200701-320",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-23759",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-23759"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-001419"
},
{
"db": "CNNVD",
"id": "CNNVD-200701-320"
},
{
"db": "NVD",
"id": "CVE-2007-0397"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "The Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.3 and Adaptive Security Device Manager (ASDM) before 5.2(2.54) do not validate the SSL/TLS certificates or SSH public keys when connecting to devices, which allows remote attackers to spoof those devices to obtain sensitive information or generate incorrect information. \nThis issue is tracked by Cisco Bug IDs CSCsf95930 and CSCsg78595. Cisco CS-MARS can receive event logs from various network devices, correlate and analyze the received security problem data, and report findings; ASDM can provide management and monitoring services for various Cisco security devices, and provide firewall services for Cisco switches and routers module. Cisco CS-MARS and ASDM have vulnerabilities in the implementation of communication authentication with managed devices. Because the certificate and public key provided by the device are not verified, if the certificate or public key changes, the affected product cannot determine whether the device it communicates with is legitimate, or whether the device is pretending to be a legitimate device. \n\n----------------------------------------------------------------------\n\nSecunia is proud to announce the availability of the Secunia Software\nInspector. \n\nThe Secunia Software Inspector is a free service that detects insecure\nversions of software that you may have installed in your system. When\ninsecure versions are detected, the Secunia Software Inspector also\nprovides thorough guidelines for updating the software to the latest\nsecure version from the vendor. This can be exploited\nto conduct spoofing attacks and possibly gain knowledge of sensitive\ninformation. \n\nSOLUTION:\nUpdate to the latest version. \nhttp://www.cisco.com/pcgi-bin/tablebuild.pl/asa-interim?psrtdcat20e2\n\nPROVIDED AND/OR DISCOVERED BY:\nThe vendor credits Jan Bervar, NIL Data Communications. \n\nORIGINAL ADVISORY:\nhttp://www.cisco.com/warp/public/707/cisco-sa-20070118-certs.shtml\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2007-0397"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-001419"
},
{
"db": "BID",
"id": "22111"
},
{
"db": "VULHUB",
"id": "VHN-23759"
},
{
"db": "PACKETSTORM",
"id": "53759"
}
],
"trust": 2.07
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2007-0397",
"trust": 2.5
},
{
"db": "BID",
"id": "22111",
"trust": 2.0
},
{
"db": "SECUNIA",
"id": "23836",
"trust": 1.8
},
{
"db": "VUPEN",
"id": "ADV-2007-0245",
"trust": 1.7
},
{
"db": "SECTRACK",
"id": "1017536",
"trust": 1.7
},
{
"db": "SECTRACK",
"id": "1017535",
"trust": 1.7
},
{
"db": "OSVDB",
"id": "32720",
"trust": 1.7
},
{
"db": "JVNDB",
"id": "JVNDB-2007-001419",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-200701-320",
"trust": 0.7
},
{
"db": "XF",
"id": "31567",
"trust": 0.6
},
{
"db": "CISCO",
"id": "20070118 SSL/TLS CERTIFICATE AND SSH PUBLIC KEY VALIDATION VULNERABILITY",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-23759",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "53759",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-23759"
},
{
"db": "BID",
"id": "22111"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-001419"
},
{
"db": "PACKETSTORM",
"id": "53759"
},
{
"db": "CNNVD",
"id": "CNNVD-200701-320"
},
{
"db": "NVD",
"id": "CVE-2007-0397"
}
]
},
"id": "VAR-200701-0177",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-23759"
}
],
"trust": 0.01
},
"last_update_date": "2025-04-10T23:11:44.429000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "cisco-sa-20070118-certs",
"trust": 0.8,
"url": "http://www.cisco.com/en/US/products/csa/cisco-sa-20070118-certs.html"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2007-001419"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-Other",
"trust": 1.0
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2007-0397"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/22111"
},
{
"trust": 1.7,
"url": "http://www.cisco.com/en/us/products/products_security_advisory09186a00807c517f.shtml"
},
{
"trust": 1.7,
"url": "http://osvdb.org/32720"
},
{
"trust": 1.7,
"url": "http://securitytracker.com/id?1017535"
},
{
"trust": 1.7,
"url": "http://securitytracker.com/id?1017536"
},
{
"trust": 1.7,
"url": "http://secunia.com/advisories/23836"
},
{
"trust": 1.1,
"url": "http://www.vupen.com/english/advisories/2007/0245"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31567"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2007-0397"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2007-0397"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/31567"
},
{
"trust": 0.6,
"url": "http://www.frsirt.com/english/advisories/2007/0245"
},
{
"trust": 0.4,
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20070118-certs.shtml"
},
{
"trust": 0.3,
"url": "http://www.cisco.com/en/us/products/ps6121/index.html"
},
{
"trust": 0.3,
"url": "http://www.cisco.com/en/us/products/ps6241/index.html"
},
{
"trust": 0.3,
"url": "/archive/1/457291"
},
{
"trust": 0.1,
"url": "http://www.cisco.com/pcgi-bin/tablebuild.pl/asa-interim?psrtdcat20e2"
},
{
"trust": 0.1,
"url": "http://secunia.com/secunia_security_advisories/"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/6780/"
},
{
"trust": 0.1,
"url": "http://secunia.com/software_inspector/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/23836/"
},
{
"trust": 0.1,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/12574/"
},
{
"trust": 0.1,
"url": "http://secunia.com/about_secunia_advisories/"
},
{
"trust": 0.1,
"url": "http://www.cisco.com/pcgi-bin/tablebuild.pl/cs-mars?psrtdcat20e2"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-23759"
},
{
"db": "BID",
"id": "22111"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-001419"
},
{
"db": "PACKETSTORM",
"id": "53759"
},
{
"db": "CNNVD",
"id": "CNNVD-200701-320"
},
{
"db": "NVD",
"id": "CVE-2007-0397"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-23759"
},
{
"db": "BID",
"id": "22111"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-001419"
},
{
"db": "PACKETSTORM",
"id": "53759"
},
{
"db": "CNNVD",
"id": "CNNVD-200701-320"
},
{
"db": "NVD",
"id": "CVE-2007-0397"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2007-01-20T00:00:00",
"db": "VULHUB",
"id": "VHN-23759"
},
{
"date": "2007-01-18T00:00:00",
"db": "BID",
"id": "22111"
},
{
"date": "2012-06-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2007-001419"
},
{
"date": "2007-01-20T00:09:28",
"db": "PACKETSTORM",
"id": "53759"
},
{
"date": "2007-01-19T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200701-320"
},
{
"date": "2007-01-20T01:28:00",
"db": "NVD",
"id": "CVE-2007-0397"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-10-30T00:00:00",
"db": "VULHUB",
"id": "VHN-23759"
},
{
"date": "2007-01-18T20:10:00",
"db": "BID",
"id": "22111"
},
{
"date": "2012-06-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2007-001419"
},
{
"date": "2007-01-22T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200701-320"
},
{
"date": "2025-04-09T00:30:58.490000",
"db": "NVD",
"id": "CVE-2007-0397"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200701-320"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "CS-MARS Vulnerabilities that generate inaccurate information",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2007-001419"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Design Error",
"sources": [
{
"db": "BID",
"id": "22111"
},
{
"db": "CNNVD",
"id": "CNNVD-200701-320"
}
],
"trust": 0.9
}
}
VAR-200601-0175
Vulnerability from variot - Updated: 2025-04-03 22:21Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.1.3 has an undocumented administrative account with a default password, which allows local users to gain privileges via the expert command. This password is static across all installations of the software. It is possible for those running software release 4.1.3 and later to change a portion of the default administrative password, effectively addressing the vulnerability. However, earlier versions do not provide this option. In addition, CS-MARS can also perform automated tasks to alleviate safety issues. Successful exploitation of this vulnerability will allow the attacker to obtain full management rights of the CS-MARS device. The password for the account reportedly cannot be changed.
Successful exploitation requires logon to the administration command line interface with e.g. the "pnadmin" account.
The vulnerability has been reported in versions prior to 4.1.3.
SOLUTION: Update to version 4.1.3 or later and use the "passwd expert" command to change the root password. http://www.cisco.com/pcgi-bin/tablebuild.pl/cs-mars?psrtdcat20e2
PROVIDED AND/OR DISCOVERED BY: Reported by vendor.
ORIGINAL ADVISORY: http://www.cisco.com/warp/public/707/cisco-sa-20060111-mars.shtml
About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Show details on source website
{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200601-0175",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "cs-mars",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "4.1.2"
},
{
"model": "cs-mars",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "4.1"
},
{
"model": "security monitoring, analysis and response system",
"scope": "lt",
"trust": 0.8,
"vendor": "cisco",
"version": "4.1.3"
},
{
"model": "networks contivity vpn switch",
"scope": "eq",
"trust": 0.3,
"vendor": "nortel",
"version": "20004.1.2"
},
{
"model": "networks contivity vpn switch",
"scope": "eq",
"trust": 0.3,
"vendor": "nortel",
"version": "20004.1"
},
{
"model": "networks contivity vpn switch",
"scope": "ne",
"trust": 0.3,
"vendor": "nortel",
"version": "20004.1.3"
}
],
"sources": [
{
"db": "BID",
"id": "16211"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-003826"
},
{
"db": "CNNVD",
"id": "CNNVD-200601-124"
},
{
"db": "NVD",
"id": "CVE-2006-0181"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:cisco:security_monitoring_analysis_and_response_system",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2006-003826"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cisco Security bulletin",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200601-124"
}
],
"trust": 0.6
},
"cve": "CVE-2006-0181",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 7.2,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.9,
"id": "CVE-2006-0181",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 7.2,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.9,
"id": "VHN-16289",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:L/AC:L/AU:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2006-0181",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2006-0181",
"trust": 0.8,
"value": "High"
},
{
"author": "CNNVD",
"id": "CNNVD-200601-124",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "VULHUB",
"id": "VHN-16289",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-16289"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-003826"
},
{
"db": "CNNVD",
"id": "CNNVD-200601-124"
},
{
"db": "NVD",
"id": "CVE-2006-0181"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.1.3 has an undocumented administrative account with a default password, which allows local users to gain privileges via the expert command. This password is static across all installations of the software. \nIt is possible for those running software release 4.1.3 and later to change a portion of the default administrative password, effectively addressing the vulnerability. However, earlier versions do not provide this option. In addition, CS-MARS can also perform automated tasks to alleviate safety issues. Successful exploitation of this vulnerability will allow the attacker to obtain full management rights of the CS-MARS device. The password for the account\nreportedly cannot be changed. \n\nSuccessful exploitation requires logon to the administration command\nline interface with e.g. the \"pnadmin\" account. \n\nThe vulnerability has been reported in versions prior to 4.1.3. \n\nSOLUTION:\nUpdate to version 4.1.3 or later and use the \"passwd expert\" command\nto change the root password. \nhttp://www.cisco.com/pcgi-bin/tablebuild.pl/cs-mars?psrtdcat20e2\n\nPROVIDED AND/OR DISCOVERED BY:\nReported by vendor. \n\nORIGINAL ADVISORY:\nhttp://www.cisco.com/warp/public/707/cisco-sa-20060111-mars.shtml\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2006-0181"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-003826"
},
{
"db": "BID",
"id": "16211"
},
{
"db": "VULHUB",
"id": "VHN-16289"
},
{
"db": "PACKETSTORM",
"id": "43013"
}
],
"trust": 2.07
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2006-0181",
"trust": 2.5
},
{
"db": "BID",
"id": "16211",
"trust": 2.0
},
{
"db": "SECUNIA",
"id": "18424",
"trust": 1.8
},
{
"db": "OSVDB",
"id": "22346",
"trust": 1.7
},
{
"db": "SECTRACK",
"id": "1015471",
"trust": 1.7
},
{
"db": "SREASON",
"id": "335",
"trust": 1.7
},
{
"db": "VUPEN",
"id": "ADV-2006-0154",
"trust": 1.7
},
{
"db": "JVNDB",
"id": "JVNDB-2006-003826",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-200601-124",
"trust": 0.7
},
{
"db": "CISCO",
"id": "20060111 DEFAULT ADMINISTRATIVE PASSWORD IN CISCO SECURITY MONITORING, ANALYSIS AND RESPONSE SYSTEM (CS-MARS)",
"trust": 0.6
},
{
"db": "XF",
"id": "24065",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-16289",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "43013",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-16289"
},
{
"db": "BID",
"id": "16211"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-003826"
},
{
"db": "PACKETSTORM",
"id": "43013"
},
{
"db": "CNNVD",
"id": "CNNVD-200601-124"
},
{
"db": "NVD",
"id": "CVE-2006-0181"
}
]
},
"id": "VAR-200601-0175",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-16289"
}
],
"trust": 0.01
},
"last_update_date": "2025-04-03T22:21:42.977000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "16211",
"trust": 0.8,
"url": "http://www.securityfocus.com/bid/16211"
},
{
"title": "cisco-sa-20060111-mars.shtml",
"trust": 0.8,
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20060111-mars.shtml"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2006-003826"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-Other",
"trust": 1.0
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2006-0181"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.1,
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20060111-mars.shtml"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/16211"
},
{
"trust": 1.7,
"url": "http://www.osvdb.org/22346"
},
{
"trust": 1.7,
"url": "http://securitytracker.com/id?1015471"
},
{
"trust": 1.7,
"url": "http://secunia.com/advisories/18424"
},
{
"trust": 1.7,
"url": "http://securityreason.com/securityalert/335"
},
{
"trust": 1.1,
"url": "http://seclists.org/bugtraq/2006/jan/202"
},
{
"trust": 1.1,
"url": "http://www.vupen.com/english/advisories/2006/0154"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24065"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2006-0181"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2006-0181"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/24065"
},
{
"trust": 0.6,
"url": "http://www.frsirt.com/english/advisories/2006/0154"
},
{
"trust": 0.1,
"url": "http://secunia.com/secunia_security_advisories/"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/6780/"
},
{
"trust": 0.1,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.1,
"url": "http://secunia.com/about_secunia_advisories/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/18424/"
},
{
"trust": 0.1,
"url": "http://www.cisco.com/pcgi-bin/tablebuild.pl/cs-mars?psrtdcat20e2"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-16289"
},
{
"db": "BID",
"id": "16211"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-003826"
},
{
"db": "PACKETSTORM",
"id": "43013"
},
{
"db": "CNNVD",
"id": "CNNVD-200601-124"
},
{
"db": "NVD",
"id": "CVE-2006-0181"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-16289"
},
{
"db": "BID",
"id": "16211"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-003826"
},
{
"db": "PACKETSTORM",
"id": "43013"
},
{
"db": "CNNVD",
"id": "CNNVD-200601-124"
},
{
"db": "NVD",
"id": "CVE-2006-0181"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2006-01-12T00:00:00",
"db": "VULHUB",
"id": "VHN-16289"
},
{
"date": "2006-01-11T00:00:00",
"db": "BID",
"id": "16211"
},
{
"date": "2014-03-11T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2006-003826"
},
{
"date": "2006-01-12T16:56:50",
"db": "PACKETSTORM",
"id": "43013"
},
{
"date": "2006-01-12T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200601-124"
},
{
"date": "2006-01-12T06:02:00",
"db": "NVD",
"id": "CVE-2006-0181"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-07-20T00:00:00",
"db": "VULHUB",
"id": "VHN-16289"
},
{
"date": "2006-01-11T00:00:00",
"db": "BID",
"id": "16211"
},
{
"date": "2014-03-11T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2006-003826"
},
{
"date": "2006-01-13T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200601-124"
},
{
"date": "2025-04-03T01:03:51.193000",
"db": "NVD",
"id": "CVE-2006-0181"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "local",
"sources": [
{
"db": "BID",
"id": "16211"
},
{
"db": "PACKETSTORM",
"id": "43013"
},
{
"db": "CNNVD",
"id": "CNNVD-200601-124"
}
],
"trust": 1.0
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cisco Security Monitoring, Analysis and Response System Vulnerability gained in",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2006-003826"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Design Error",
"sources": [
{
"db": "BID",
"id": "16211"
},
{
"db": "CNNVD",
"id": "CNNVD-200601-124"
}
],
"trust": 0.9
}
}
VAR-200607-0505
Vulnerability from variot - Updated: 2025-04-03 20:33jmx-console/HtmlAdaptor in the jmx-console in the JBoss web application server, as shipped with Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1, allows remote attackers to gain privileges as the CS-MARS administrator and execute arbitrary Java code via an invokeOp action in the BSHDeployer jboss.scripts service name. A buffer overflow exists in the Snort Back Orifice preprocessor that may allow a remote, unauthenticated attacker to execute arbitrary code, possibly with elevated privileges. Cisco Security Monitoring, Analysis and Response System (CS-MARS) is prone to multiple vulnerabilities, including privilege-escalation, arbitrary command-execution, and information-disclosure issues. This may facilitate a remote compromise of affected computers. Cisco has released version 4.2.1 to address these issues; prior versions are reported vulnerable. Snort is susceptible to a remote buffer overflow vulnerability. This issue is due to a failure of the application to securely copy network-derived data into sensitive process buffers. The specific issue exists in the Back Orifice preprocessor. This may facilitate unauthorized access or privilege escalation. Due to the nature of this issue, attackers may exploit it by sending a single UDP packet with a potentially spoofed source address to an arbitrary destination address and port. As long as the application can sniff the packet, it may be exploited. These aspects of this issue may aid attackers in bypassing firewalls in order to compromise a wider number of computers. Reportedly, this issue is difficult to reliably exploit across differing operating systems and compiler versions. Failed exploit attempts likely result in crashing the application, thereby disabling detection of other attacks. Snort versions 2.4.0 through 2.4.2 are affected by this issue. Other versions may also be affected, but this has not been confirmed. There is a loophole when the server processes user requests. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
National Cyber Alert System
Technical Cyber Security Alert TA05-291A
Snort Back Orifice Preprocessor Buffer Overflow
Original release date: October 18, 2005 Last revised: -- Source: US-CERT
Systems Affected
* Snort versions 2.4.0 to 2.4.2
* Sourcefire Intrusion Sensors
Other products that use Snort or Snort components may be affected.
I. Description
Snort is a widely-deployed, open-source network intrusion detection system (IDS). Snort and its components are used in other IDS products, notably Sourcefire Intrusion Sensors, and Snort is included with a number of operating system distributions.
Snort preprocessors are modular plugins that extend functionality by operating on packets before the detection engine is run. The ping detection code does not adequately limit the amount of data that is read from the packet into a fixed-length buffer, thus creating the potential for a buffer overflow.
The vulnerable code will process any UDP packet that is not destined to or sourced from the default Back Orifice port (31337/udp). An attacker could exploit this vulnerability by sending a specially crafted UDP packet to a host or network monitored by Snort.
US-CERT is tracking this vulnerability as VU#175500. Further information is available in an advisory from Internet Security Systems (ISS).
II. Snort typically runs with root or SYSTEM privileges, so an attacker could take complete control of a vulnerable system. An attacker does not need to target a Snort sensor directly; the attacker can target any host or network monitored by Snort.
III. Solution
Upgrade
Sourcefire has released Snort 2.4.3 which is available from the Snort download site. For information about other vendors, please see the Systems Affected section of VU#175500.
Disable Back Orifice Preprocessor
To disable the Back Orifice preprocessor, comment out the line that loads the preprocessor in the Snort configuration file (typically /etc/snort.conf on UNIX and Linux systems):
[/etc/snort.conf]
...
#preprocessor bo
...
Restart Snort for the change to take effect.
Restrict Outbound Traffic
Consider preventing Snort sensors from initiating outbound connections and restricting outbound traffic to only those hosts and networks that have legitimate requirements to communicate with the sensors. While this will not prevent exploitation of the vulnerability, it may make it more difficult for an attacker to access a compromised system or reconnoiter other systems.
Appendix A. References
* US-CERT Vulnerability Note VU#175500 -
<http://www.kb.cert.org/vuls/id/177500>
* Fixes and Mitigation Instructions Available for Snort Back
Orifice Vulnerability -
<http://www.snort.org/pub-bin/snortnews.cgi#99>
* Snort downloads - <http://www.snort.org/dl/>
* Snort 2.4.3 Changelog -
<http://www.snort.org/docs/change_logs/2.4.3/Changelog.txt>
* Preprocessors -
<http://www.snort.org/docs/snort_htmanuals/htmanual_2.4/
node11.html#SECTION00310000000000000000>
* Snort Back Orifice Parsing Remote Code Execution -
<http://xforce.iss.net/xforce/alerts/id/207>
This vulnerability was researched and reported by Internet Security Systems (ISS).
The most recent version of this document can be found at:
<http://www.us-cert.gov/cas/techalerts/TA05-291A.html>
Feedback can be directed to US-CERT Technical Staff. Please send email to cert@cert.org with "TA05-291A Feedback VU#175500" in the subject.
For instructions on subscribing to or unsubscribing from this mailing list, visit http://www.us-cert.gov/cas/signup.html.
Produced 2005 by US-CERT, a government organization.
Terms of use:
<http://www.us-cert.gov/legal.html>
Revision History
Oct 18, 2005: Initial release
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux)
iQEVAwUBQ1VB130pj593lg50AQLY6wf+Kq/rI3wxG4rGr+OdVrpl3v+TfTMp6MX3 T0e99ybRSGKeWQCleMQYdBYrS+7UyCa28T1yE8ENe4SuYLPj7ttTqpd0AGxn7f8H +qOY0GnJwXvrWlKCfVtAhjo5JFDxgZQV9P/13MwjcsJrGTtHzhuJ8YZc4RtSMyVX 4nf2s4Nymjd2+jIEX9BnwRIe/E47TRdFLSsza36mhKZLZV1lxLdJYywCZSsQLWNM nL9gohRojR/6wQk8sLjef8LCv2JFu3btsqrrblcTWqfB6GhVR9OSUBhL+b8P/mme jVd9eE0OS5v8rzhaEMiYIMI+pEZEpATj4BnVoLwPkLAoD6ObGJKHkQ== =jjID -----END PGP SIGNATURE----- .
Hardcore Disassembler / Reverse Engineer Wanted!
Want to work with IDA and BinDiff? Want to write PoC's and Exploits?
Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation compensation package.
http://secunia.com/hardcore_disassembler_and_reverse_engineer/
TITLE: CS-MARS Multiple Vulnerabilities
SECUNIA ADVISORY ID: SA21118
VERIFY ADVISORY: http://secunia.com/advisories/21118/
CRITICAL: Moderately critical
IMPACT: Security Bypass, Exposure of system information, System access
WHERE:
From local network
OPERATING SYSTEM: Cisco Security Monitoring, Analysis and Response System (CS-MARS) 4.x http://secunia.com/product/6780/
DESCRIPTION: Multiple vulnerabilities have been reported in CS-MARS, which can be exploited by malicious, local users to bypass certain security restrictions and malicious people to gain knowledge of system information and compromise a vulnerable system.
2) The included JBoss web application server is also affected by an information disclosure weakness.
CS-MARS also ships with an Oracle database containing several default Oracle accounts with well-known passwords.
SOLUTION: Update to version 4.2.1 or later.
PROVIDED AND/OR DISCOVERED BY: 1+2) Jon Hart 3) Reported by the vendor.
ORIGINAL ADVISORY: http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml
OTHER REFERENCES: SA15746: http://secunia.com/advisories/15746/
About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
.
The vulnerability is caused due to a boundary error in the handling of Back Orifice packets.
Alternatively, disable the Back Orifice pre-processor
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200607-0505",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "security monitoring analysis and response system",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "4.2.0"
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "freebsd",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "nortel",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "suse linux",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "snort",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "sourcefire",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "ubuntu",
"version": null
},
{
"model": "security monitoring, analysis and response system",
"scope": "lt",
"trust": 0.8,
"vendor": "cisco",
"version": "4.2.1"
},
{
"model": "networks contivity vpn switch",
"scope": "eq",
"trust": 0.6,
"vendor": "nortel",
"version": "20004.1.3"
},
{
"model": "networks contivity vpn switch",
"scope": "eq",
"trust": 0.6,
"vendor": "nortel",
"version": "20004.1.2"
},
{
"model": "networks contivity vpn switch",
"scope": "eq",
"trust": 0.6,
"vendor": "nortel",
"version": "20004.1"
},
{
"model": "cs-mars",
"scope": "eq",
"trust": 0.6,
"vendor": "cisco",
"version": "4.1.5"
},
{
"model": "cs-mars",
"scope": "ne",
"trust": 0.6,
"vendor": "cisco",
"version": "4.2.1"
},
{
"model": "project snort",
"scope": "eq",
"trust": 0.3,
"vendor": "snort",
"version": "2.4.2"
},
{
"model": "project snort",
"scope": "eq",
"trust": 0.3,
"vendor": "snort",
"version": "2.4.1"
},
{
"model": "project snort",
"scope": "eq",
"trust": 0.3,
"vendor": "snort",
"version": "2.4.0"
},
{
"model": "networks threat protection system intrusion sensor",
"scope": "eq",
"trust": 0.3,
"vendor": "nortel",
"version": "4.1"
},
{
"model": "networks threat protection system defense center",
"scope": "eq",
"trust": 0.3,
"vendor": "nortel",
"version": "4.1"
},
{
"model": "project snort",
"scope": "ne",
"trust": 0.3,
"vendor": "snort",
"version": "2.4.3"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#175500"
},
{
"db": "BID",
"id": "19075"
},
{
"db": "BID",
"id": "19071"
},
{
"db": "BID",
"id": "15131"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-002836"
},
{
"db": "CNNVD",
"id": "CNNVD-200607-343"
},
{
"db": "NVD",
"id": "CVE-2006-3733"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:cisco:security_monitoring_analysis_and_response_system",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2006-002836"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "These issues were disclosed by the vendor.",
"sources": [
{
"db": "BID",
"id": "19075"
},
{
"db": "BID",
"id": "19071"
}
],
"trust": 0.6
},
"cve": "CVE-2006-3733",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2006-3733",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "VHN-19841",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2006-3733",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "CARNEGIE MELLON",
"id": "VU#175500",
"trust": 0.8,
"value": "31.05"
},
{
"author": "NVD",
"id": "CVE-2006-3733",
"trust": 0.8,
"value": "High"
},
{
"author": "CNNVD",
"id": "CNNVD-200607-343",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "VULHUB",
"id": "VHN-19841",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#175500"
},
{
"db": "VULHUB",
"id": "VHN-19841"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-002836"
},
{
"db": "CNNVD",
"id": "CNNVD-200607-343"
},
{
"db": "NVD",
"id": "CVE-2006-3733"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "jmx-console/HtmlAdaptor in the jmx-console in the JBoss web application server, as shipped with Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1, allows remote attackers to gain privileges as the CS-MARS administrator and execute arbitrary Java code via an invokeOp action in the BSHDeployer jboss.scripts service name. A buffer overflow exists in the Snort Back Orifice preprocessor that may allow a remote, unauthenticated attacker to execute arbitrary code, possibly with elevated privileges. Cisco Security Monitoring, Analysis and Response System (CS-MARS) is prone to multiple vulnerabilities, including privilege-escalation, arbitrary command-execution, and information-disclosure issues. This may facilitate a remote compromise of affected computers. \nCisco has released version 4.2.1 to address these issues; prior versions are reported vulnerable. Snort is susceptible to a remote buffer overflow vulnerability. This issue is due to a failure of the application to securely copy network-derived data into sensitive process buffers. The specific issue exists in the Back Orifice preprocessor. This may facilitate unauthorized access or privilege escalation. \nDue to the nature of this issue, attackers may exploit it by sending a single UDP packet with a potentially spoofed source address to an arbitrary destination address and port. As long as the application can sniff the packet, it may be exploited. These aspects of this issue may aid attackers in bypassing firewalls in order to compromise a wider number of computers. \nReportedly, this issue is difficult to reliably exploit across differing operating systems and compiler versions. Failed exploit attempts likely result in crashing the application, thereby disabling detection of other attacks. \nSnort versions 2.4.0 through 2.4.2 are affected by this issue. Other versions may also be affected, but this has not been confirmed. There is a loophole when the server processes user requests. \n-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\n\n National Cyber Alert System\n\n Technical Cyber Security Alert TA05-291A\n\n\nSnort Back Orifice Preprocessor Buffer Overflow\n\n Original release date: October 18, 2005\n Last revised: --\n Source: US-CERT\n\n\nSystems Affected\n\n * Snort versions 2.4.0 to 2.4.2\n * Sourcefire Intrusion Sensors\n\n Other products that use Snort or Snort components may be affected. \n\n\nI. Description\n\n Snort is a widely-deployed, open-source network intrusion detection\n system (IDS). Snort and its components are used in other IDS\n products, notably Sourcefire Intrusion Sensors, and Snort is\n included with a number of operating system distributions. \n\n Snort preprocessors are modular plugins that extend functionality\n by operating on packets before the detection engine is run. The ping detection code does\n not adequately limit the amount of data that is read from the\n packet into a fixed-length buffer, thus creating the potential for\n a buffer overflow. \n\n The vulnerable code will process any UDP packet that is not\n destined to or sourced from the default Back Orifice port\n (31337/udp). An attacker could exploit this vulnerability by\n sending a specially crafted UDP packet to a host or network\n monitored by Snort. \n\n US-CERT is tracking this vulnerability as VU#175500. Further\n information is available in an advisory from Internet Security\n Systems (ISS). \n\n\nII. Snort typically runs with root or\n SYSTEM privileges, so an attacker could take complete control of a\n vulnerable system. An attacker does not need to target a Snort\n sensor directly; the attacker can target any host or network\n monitored by Snort. \n\n\nIII. Solution\n\nUpgrade\n\n Sourcefire has released Snort 2.4.3 which is available from the\n Snort download site. For information about other vendors, please\n see the Systems Affected section of VU#175500. \n\nDisable Back Orifice Preprocessor\n\n To disable the Back Orifice preprocessor, comment out the line that\n loads the preprocessor in the Snort configuration file (typically\n /etc/snort.conf on UNIX and Linux systems):\n\n [/etc/snort.conf]\n ... \n #preprocessor bo\n ... \n \n Restart Snort for the change to take effect. \n\nRestrict Outbound Traffic\n\n Consider preventing Snort sensors from initiating outbound\n connections and restricting outbound traffic to only those hosts\n and networks that have legitimate requirements to communicate with\n the sensors. While this will not prevent exploitation of the\n vulnerability, it may make it more difficult for an attacker to\n access a compromised system or reconnoiter other systems. \n\n\nAppendix A. References\n\n * US-CERT Vulnerability Note VU#175500 -\n \u003chttp://www.kb.cert.org/vuls/id/177500\u003e\n\n * Fixes and Mitigation Instructions Available for Snort Back\n Orifice Vulnerability -\n \u003chttp://www.snort.org/pub-bin/snortnews.cgi#99\u003e\n\n * Snort downloads - \u003chttp://www.snort.org/dl/\u003e\n\n * Snort 2.4.3 Changelog -\n \u003chttp://www.snort.org/docs/change_logs/2.4.3/Changelog.txt\u003e\n\n * Preprocessors -\n \u003chttp://www.snort.org/docs/snort_htmanuals/htmanual_2.4/\n node11.html#SECTION00310000000000000000\u003e\n\n * Snort Back Orifice Parsing Remote Code Execution -\n \u003chttp://xforce.iss.net/xforce/alerts/id/207\u003e\n\n\n ____________________________________________________________________\n\n This vulnerability was researched and reported by Internet Security\n Systems (ISS). \n ____________________________________________________________________\n\n The most recent version of this document can be found at:\n\n \u003chttp://www.us-cert.gov/cas/techalerts/TA05-291A.html\u003e\n ____________________________________________________________________\n\n Feedback can be directed to US-CERT Technical Staff. Please send\n email to \u003ccert@cert.org\u003e with \"TA05-291A Feedback VU#175500\" in the\n subject. \n ____________________________________________________________________\n\n For instructions on subscribing to or unsubscribing from this\n mailing list, visit \u003chttp://www.us-cert.gov/cas/signup.html\u003e. \n ____________________________________________________________________\n\n Produced 2005 by US-CERT, a government organization. \n\n Terms of use:\n\n \u003chttp://www.us-cert.gov/legal.html\u003e\n ____________________________________________________________________\n\n\nRevision History\n\n Oct 18, 2005: Initial release\n\n\n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1.2.1 (GNU/Linux)\n\niQEVAwUBQ1VB130pj593lg50AQLY6wf+Kq/rI3wxG4rGr+OdVrpl3v+TfTMp6MX3\nT0e99ybRSGKeWQCleMQYdBYrS+7UyCa28T1yE8ENe4SuYLPj7ttTqpd0AGxn7f8H\n+qOY0GnJwXvrWlKCfVtAhjo5JFDxgZQV9P/13MwjcsJrGTtHzhuJ8YZc4RtSMyVX\n4nf2s4Nymjd2+jIEX9BnwRIe/E47TRdFLSsza36mhKZLZV1lxLdJYywCZSsQLWNM\nnL9gohRojR/6wQk8sLjef8LCv2JFu3btsqrrblcTWqfB6GhVR9OSUBhL+b8P/mme\njVd9eE0OS5v8rzhaEMiYIMI+pEZEpATj4BnVoLwPkLAoD6ObGJKHkQ==\n=jjID\n-----END PGP SIGNATURE-----\n. \n\n----------------------------------------------------------------------\n\nHardcore Disassembler / Reverse Engineer Wanted!\n\nWant to work with IDA and BinDiff?\nWant to write PoC\u0027s and Exploits?\n\nYour nationality is not important. \nWe will get you a work permit, find an apartment, and offer a\nrelocation compensation package. \n\nhttp://secunia.com/hardcore_disassembler_and_reverse_engineer/\n\n----------------------------------------------------------------------\n\nTITLE:\nCS-MARS Multiple Vulnerabilities\n\nSECUNIA ADVISORY ID:\nSA21118\n\nVERIFY ADVISORY:\nhttp://secunia.com/advisories/21118/\n\nCRITICAL:\nModerately critical\n\nIMPACT:\nSecurity Bypass, Exposure of system information, System access\n\nWHERE:\n\u003eFrom local network\n\nOPERATING SYSTEM:\nCisco Security Monitoring, Analysis and Response System (CS-MARS) 4.x\nhttp://secunia.com/product/6780/\n\nDESCRIPTION:\nMultiple vulnerabilities have been reported in CS-MARS, which can be\nexploited by malicious, local users to bypass certain security\nrestrictions and malicious people to gain knowledge of system\ninformation and compromise a vulnerable system. \n\n2) The included JBoss web application server is also affected by an\ninformation disclosure weakness. \n\nCS-MARS also ships with an Oracle database containing several default\nOracle accounts with well-known passwords. \n\nSOLUTION:\nUpdate to version 4.2.1 or later. \n\nPROVIDED AND/OR DISCOVERED BY:\n1+2) Jon Hart\n3) Reported by the vendor. \n\nORIGINAL ADVISORY:\nhttp://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml\n\nOTHER REFERENCES:\nSA15746:\nhttp://secunia.com/advisories/15746/\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n. \n\nThe vulnerability is caused due to a boundary error in the handling\nof Back Orifice packets. \n\nAlternatively, disable the Back Orifice pre-processor",
"sources": [
{
"db": "NVD",
"id": "CVE-2006-3733"
},
{
"db": "CERT/CC",
"id": "VU#175500"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-002836"
},
{
"db": "BID",
"id": "19075"
},
{
"db": "BID",
"id": "19071"
},
{
"db": "BID",
"id": "15131"
},
{
"db": "VULHUB",
"id": "VHN-19841"
},
{
"db": "PACKETSTORM",
"id": "40869"
},
{
"db": "PACKETSTORM",
"id": "48383"
},
{
"db": "PACKETSTORM",
"id": "40766"
}
],
"trust": 3.51
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-19841",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-19841"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2006-3733",
"trust": 2.5
},
{
"db": "BID",
"id": "19071",
"trust": 2.0
},
{
"db": "BID",
"id": "19075",
"trust": 2.0
},
{
"db": "SECUNIA",
"id": "21118",
"trust": 1.8
},
{
"db": "OSVDB",
"id": "27419",
"trust": 1.7
},
{
"db": "SECTRACK",
"id": "1016537",
"trust": 1.7
},
{
"db": "VUPEN",
"id": "ADV-2006-2887",
"trust": 1.7
},
{
"db": "CERT/CC",
"id": "VU#175500",
"trust": 1.2
},
{
"db": "SECUNIA",
"id": "17220",
"trust": 1.0
},
{
"db": "JVNDB",
"id": "JVNDB-2006-002836",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-200607-343",
"trust": 0.7
},
{
"db": "BUGTRAQ",
"id": "20060720 CISCO MARS \u003c 4.2.1 REMOTE COMPROMISE",
"trust": 0.6
},
{
"db": "CISCO",
"id": "20060719 MULTIPLE VULNERABILITIES IN CISCO SECURITY MONITORING, ANALYSIS AND RESPONSE SYSTEM (CS-MARS)",
"trust": 0.6
},
{
"db": "FULLDISC",
"id": "20060720 CISCO MARS \u003c 4.2.1 REMOTE COMPROMISE",
"trust": 0.6
},
{
"db": "XF",
"id": "27811",
"trust": 0.6
},
{
"db": "USCERT",
"id": "TA05-291A",
"trust": 0.4
},
{
"db": "BID",
"id": "15131",
"trust": 0.3
},
{
"db": "EXPLOIT-DB",
"id": "28245",
"trust": 0.1
},
{
"db": "SEEBUG",
"id": "SSVID-81819",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-19841",
"trust": 0.1
},
{
"db": "CERT/CC",
"id": "VU#177500",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "40869",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "48383",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "40766",
"trust": 0.1
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#175500"
},
{
"db": "VULHUB",
"id": "VHN-19841"
},
{
"db": "BID",
"id": "19075"
},
{
"db": "BID",
"id": "19071"
},
{
"db": "BID",
"id": "15131"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-002836"
},
{
"db": "PACKETSTORM",
"id": "40869"
},
{
"db": "PACKETSTORM",
"id": "48383"
},
{
"db": "PACKETSTORM",
"id": "40766"
},
{
"db": "CNNVD",
"id": "CNNVD-200607-343"
},
{
"db": "NVD",
"id": "CVE-2006-3733"
}
]
},
"id": "VAR-200607-0505",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-19841"
}
],
"trust": 0.01
},
"last_update_date": "2025-04-03T20:33:56.145000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "cisco-sa-20060719-mars",
"trust": 0.8,
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20060719-mars"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2006-002836"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-264",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-19841"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-002836"
},
{
"db": "NVD",
"id": "CVE-2006-3733"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.4,
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/19071"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/19075"
},
{
"trust": 1.7,
"url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0424.html"
},
{
"trust": 1.7,
"url": "http://www.osvdb.org/27419"
},
{
"trust": 1.7,
"url": "http://securitytracker.com/id?1016537"
},
{
"trust": 1.7,
"url": "http://secunia.com/advisories/21118"
},
{
"trust": 1.2,
"url": "http://xforce.iss.net/xforce/alerts/id/207"
},
{
"trust": 1.1,
"url": "http://www.securityfocus.com/archive/1/440641/100/100/threaded"
},
{
"trust": 1.1,
"url": "http://www.vupen.com/english/advisories/2006/2887"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27811"
},
{
"trust": 0.9,
"url": "http://www.snort.org/pub-bin/snortnews.cgi#99"
},
{
"trust": 0.9,
"url": "http://secunia.com/advisories/17220/"
},
{
"trust": 0.8,
"url": "http://www.snort.org/docs/change_logs/2.4.3/changelog.txt"
},
{
"trust": 0.8,
"url": "http://www.snort.org/docs/snort_htmanuals/htmanual_2.4/node11.html#section00310000000000000000"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2006-3733"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2006-3733"
},
{
"trust": 0.6,
"url": "http://www.cisco.com/en/us/products/sw/voicesw/ps4625/index.html"
},
{
"trust": 0.6,
"url": "http://www.cisco.com/en/us/products/ps6241/index.html"
},
{
"trust": 0.6,
"url": "/archive/1/440580"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/27811"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/archive/1/archive/1/440641/100/100/threaded"
},
{
"trust": 0.6,
"url": "http://www.frsirt.com/english/advisories/2006/2887"
},
{
"trust": 0.4,
"url": "http://www.kb.cert.org/vuls/id/175500"
},
{
"trust": 0.3,
"url": "http://wiki.jboss.org/wiki/wiki.jsp?page=securejboss"
},
{
"trust": 0.3,
"url": "/archive/1/440641"
},
{
"trust": 0.3,
"url": "http://www.snort.org/rules/advisories/snort_update_20051018.html"
},
{
"trust": 0.3,
"url": "http://www.snort.org/"
},
{
"trust": 0.3,
"url": "http://www.snort.org/pub-bin/snortnews.cgi"
},
{
"trust": 0.3,
"url": "http://www.us-cert.gov/cas/techalerts/ta05-291a.html"
},
{
"trust": 0.3,
"url": "http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=bltndetail\u0026documentoid=362187\u0026renditionid="
},
{
"trust": 0.2,
"url": "http://secunia.com/secunia_security_advisories/"
},
{
"trust": 0.2,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.2,
"url": "http://secunia.com/about_secunia_advisories/"
},
{
"trust": 0.1,
"url": "http://xforce.iss.net/xforce/alerts/id/207\u003e"
},
{
"trust": 0.1,
"url": "http://www.snort.org/docs/snort_htmanuals/htmanual_2.4/"
},
{
"trust": 0.1,
"url": "http://www.us-cert.gov/cas/techalerts/ta05-291a.html\u003e"
},
{
"trust": 0.1,
"url": "http://www.snort.org/docs/change_logs/2.4.3/changelog.txt\u003e"
},
{
"trust": 0.1,
"url": "http://www.snort.org/dl/\u003e"
},
{
"trust": 0.1,
"url": "http://www.us-cert.gov/cas/signup.html\u003e."
},
{
"trust": 0.1,
"url": "http://www.us-cert.gov/legal.html\u003e"
},
{
"trust": 0.1,
"url": "http://www.snort.org/pub-bin/snortnews.cgi#99\u003e"
},
{
"trust": 0.1,
"url": "http://www.kb.cert.org/vuls/id/177500\u003e"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/6780/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/15746/"
},
{
"trust": 0.1,
"url": "http://secunia.com/hardcore_disassembler_and_reverse_engineer/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/21118/"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/5691/"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#175500"
},
{
"db": "VULHUB",
"id": "VHN-19841"
},
{
"db": "BID",
"id": "19075"
},
{
"db": "BID",
"id": "19071"
},
{
"db": "BID",
"id": "15131"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-002836"
},
{
"db": "PACKETSTORM",
"id": "40869"
},
{
"db": "PACKETSTORM",
"id": "48383"
},
{
"db": "PACKETSTORM",
"id": "40766"
},
{
"db": "CNNVD",
"id": "CNNVD-200607-343"
},
{
"db": "NVD",
"id": "CVE-2006-3733"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#175500"
},
{
"db": "VULHUB",
"id": "VHN-19841"
},
{
"db": "BID",
"id": "19075"
},
{
"db": "BID",
"id": "19071"
},
{
"db": "BID",
"id": "15131"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-002836"
},
{
"db": "PACKETSTORM",
"id": "40869"
},
{
"db": "PACKETSTORM",
"id": "48383"
},
{
"db": "PACKETSTORM",
"id": "40766"
},
{
"db": "CNNVD",
"id": "CNNVD-200607-343"
},
{
"db": "NVD",
"id": "CVE-2006-3733"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2005-10-18T00:00:00",
"db": "CERT/CC",
"id": "VU#175500"
},
{
"date": "2006-07-21T00:00:00",
"db": "VULHUB",
"id": "VHN-19841"
},
{
"date": "2006-07-19T00:00:00",
"db": "BID",
"id": "19075"
},
{
"date": "2006-07-19T00:00:00",
"db": "BID",
"id": "19071"
},
{
"date": "2005-10-18T00:00:00",
"db": "BID",
"id": "15131"
},
{
"date": "2012-12-20T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2006-002836"
},
{
"date": "2005-10-24T23:41:37",
"db": "PACKETSTORM",
"id": "40869"
},
{
"date": "2006-07-20T08:48:26",
"db": "PACKETSTORM",
"id": "48383"
},
{
"date": "2005-10-18T22:10:31",
"db": "PACKETSTORM",
"id": "40766"
},
{
"date": "2006-07-21T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200607-343"
},
{
"date": "2006-07-21T14:03:00",
"db": "NVD",
"id": "CVE-2006-3733"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2005-11-11T00:00:00",
"db": "CERT/CC",
"id": "VU#175500"
},
{
"date": "2018-10-17T00:00:00",
"db": "VULHUB",
"id": "VHN-19841"
},
{
"date": "2006-07-20T21:57:00",
"db": "BID",
"id": "19075"
},
{
"date": "2006-07-20T18:52:00",
"db": "BID",
"id": "19071"
},
{
"date": "2005-10-18T00:00:00",
"db": "BID",
"id": "15131"
},
{
"date": "2012-12-20T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2006-002836"
},
{
"date": "2006-08-02T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200607-343"
},
{
"date": "2025-04-03T01:03:51.193000",
"db": "NVD",
"id": "CVE-2006-3733"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "network",
"sources": [
{
"db": "BID",
"id": "19075"
},
{
"db": "BID",
"id": "19071"
},
{
"db": "BID",
"id": "15131"
}
],
"trust": 0.9
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Snort Back Orifice preprocessor buffer overflow",
"sources": [
{
"db": "CERT/CC",
"id": "VU#175500"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Access Validation Error",
"sources": [
{
"db": "BID",
"id": "19075"
},
{
"db": "BID",
"id": "19071"
}
],
"trust": 0.6
}
}
VAR-200607-0506
Vulnerability from variot - Updated: 2025-04-03 19:57Multiple unspecified vulnerabilities in the Command Line Interface (CLI) for Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1, allow local CS-MARS administrators to execute arbitrary commands as root. A buffer overflow exists in the Snort Back Orifice preprocessor that may allow a remote, unauthenticated attacker to execute arbitrary code, possibly with elevated privileges. This may facilitate a remote compromise of affected computers. Cisco has released version 4.2.1 to address these issues; prior versions are reported vulnerable. Snort is susceptible to a remote buffer overflow vulnerability. This issue is due to a failure of the application to securely copy network-derived data into sensitive process buffers. The specific issue exists in the Back Orifice preprocessor. This may facilitate unauthorized access or privilege escalation. Due to the nature of this issue, attackers may exploit it by sending a single UDP packet with a potentially spoofed source address to an arbitrary destination address and port. As long as the application can sniff the packet, it may be exploited. These aspects of this issue may aid attackers in bypassing firewalls in order to compromise a wider number of computers. Reportedly, this issue is difficult to reliably exploit across differing operating systems and compiler versions. Failed exploit attempts likely result in crashing the application, thereby disabling detection of other attacks. Snort versions 2.4.0 through 2.4.2 are affected by this issue. Other versions may also be affected, but this has not been confirmed. The CS-MARS CLI is a restricted shell environment that allows authenticated administrators to perform system maintenance tasks. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
National Cyber Alert System
Technical Cyber Security Alert TA05-291A
Snort Back Orifice Preprocessor Buffer Overflow
Original release date: October 18, 2005 Last revised: -- Source: US-CERT
Systems Affected
* Snort versions 2.4.0 to 2.4.2
* Sourcefire Intrusion Sensors
Other products that use Snort or Snort components may be affected.
I. Description
Snort is a widely-deployed, open-source network intrusion detection system (IDS). Snort and its components are used in other IDS products, notably Sourcefire Intrusion Sensors, and Snort is included with a number of operating system distributions.
Snort preprocessors are modular plugins that extend functionality by operating on packets before the detection engine is run. The ping detection code does not adequately limit the amount of data that is read from the packet into a fixed-length buffer, thus creating the potential for a buffer overflow.
The vulnerable code will process any UDP packet that is not destined to or sourced from the default Back Orifice port (31337/udp). An attacker could exploit this vulnerability by sending a specially crafted UDP packet to a host or network monitored by Snort.
US-CERT is tracking this vulnerability as VU#175500. Further information is available in an advisory from Internet Security Systems (ISS).
II. Snort typically runs with root or SYSTEM privileges, so an attacker could take complete control of a vulnerable system. An attacker does not need to target a Snort sensor directly; the attacker can target any host or network monitored by Snort.
III. Solution
Upgrade
Sourcefire has released Snort 2.4.3 which is available from the Snort download site. For information about other vendors, please see the Systems Affected section of VU#175500.
Disable Back Orifice Preprocessor
To disable the Back Orifice preprocessor, comment out the line that loads the preprocessor in the Snort configuration file (typically /etc/snort.conf on UNIX and Linux systems):
[/etc/snort.conf]
...
#preprocessor bo
...
Restart Snort for the change to take effect.
Restrict Outbound Traffic
Consider preventing Snort sensors from initiating outbound connections and restricting outbound traffic to only those hosts and networks that have legitimate requirements to communicate with the sensors. While this will not prevent exploitation of the vulnerability, it may make it more difficult for an attacker to access a compromised system or reconnoiter other systems.
Appendix A. References
* US-CERT Vulnerability Note VU#175500 -
<http://www.kb.cert.org/vuls/id/177500>
* Fixes and Mitigation Instructions Available for Snort Back
Orifice Vulnerability -
<http://www.snort.org/pub-bin/snortnews.cgi#99>
* Snort downloads - <http://www.snort.org/dl/>
* Snort 2.4.3 Changelog -
<http://www.snort.org/docs/change_logs/2.4.3/Changelog.txt>
* Preprocessors -
<http://www.snort.org/docs/snort_htmanuals/htmanual_2.4/
node11.html#SECTION00310000000000000000>
* Snort Back Orifice Parsing Remote Code Execution -
<http://xforce.iss.net/xforce/alerts/id/207>
This vulnerability was researched and reported by Internet Security Systems (ISS).
The most recent version of this document can be found at:
<http://www.us-cert.gov/cas/techalerts/TA05-291A.html>
Feedback can be directed to US-CERT Technical Staff. Please send email to cert@cert.org with "TA05-291A Feedback VU#175500" in the subject.
For instructions on subscribing to or unsubscribing from this mailing list, visit http://www.us-cert.gov/cas/signup.html.
Produced 2005 by US-CERT, a government organization.
Terms of use:
<http://www.us-cert.gov/legal.html>
Revision History
Oct 18, 2005: Initial release
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux)
iQEVAwUBQ1VB130pj593lg50AQLY6wf+Kq/rI3wxG4rGr+OdVrpl3v+TfTMp6MX3 T0e99ybRSGKeWQCleMQYdBYrS+7UyCa28T1yE8ENe4SuYLPj7ttTqpd0AGxn7f8H +qOY0GnJwXvrWlKCfVtAhjo5JFDxgZQV9P/13MwjcsJrGTtHzhuJ8YZc4RtSMyVX 4nf2s4Nymjd2+jIEX9BnwRIe/E47TRdFLSsza36mhKZLZV1lxLdJYywCZSsQLWNM nL9gohRojR/6wQk8sLjef8LCv2JFu3btsqrrblcTWqfB6GhVR9OSUBhL+b8P/mme jVd9eE0OS5v8rzhaEMiYIMI+pEZEpATj4BnVoLwPkLAoD6ObGJKHkQ== =jjID -----END PGP SIGNATURE----- .
Hardcore Disassembler / Reverse Engineer Wanted!
Want to work with IDA and BinDiff? Want to write PoC's and Exploits?
Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation compensation package.
http://secunia.com/hardcore_disassembler_and_reverse_engineer/
TITLE: CS-MARS Multiple Vulnerabilities
SECUNIA ADVISORY ID: SA21118
VERIFY ADVISORY: http://secunia.com/advisories/21118/
CRITICAL: Moderately critical
IMPACT: Security Bypass, Exposure of system information, System access
WHERE:
From local network
OPERATING SYSTEM: Cisco Security Monitoring, Analysis and Response System (CS-MARS) 4.x http://secunia.com/product/6780/
DESCRIPTION: Multiple vulnerabilities have been reported in CS-MARS, which can be exploited by malicious, local users to bypass certain security restrictions and malicious people to gain knowledge of system information and compromise a vulnerable system.
2) The included JBoss web application server is also affected by an information disclosure weakness.
CS-MARS also ships with an Oracle database containing several default Oracle accounts with well-known passwords.
SOLUTION: Update to version 4.2.1 or later.
PROVIDED AND/OR DISCOVERED BY: 1+2) Jon Hart 3) Reported by the vendor.
ORIGINAL ADVISORY: http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml
OTHER REFERENCES: SA15746: http://secunia.com/advisories/15746/
About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
.
The vulnerability is caused due to a boundary error in the handling of Back Orifice packets.
Alternatively, disable the Back Orifice pre-processor
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200607-0506",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "cs-mars",
"scope": "eq",
"trust": 2.2,
"vendor": "cisco",
"version": "4.1.5"
},
{
"model": "cs-mars",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "4.1.3"
},
{
"model": "cs-mars",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "4.1.2"
},
{
"model": "cs-mars",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "4.1"
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "freebsd",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "nortel",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "suse linux",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "snort",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "sourcefire",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "ubuntu",
"version": null
},
{
"model": "security monitoring, analysis and response system",
"scope": "lt",
"trust": 0.8,
"vendor": "cisco",
"version": "4.2.1"
},
{
"model": "networks contivity vpn switch",
"scope": "eq",
"trust": 0.6,
"vendor": "nortel",
"version": "20004.1.3"
},
{
"model": "networks contivity vpn switch",
"scope": "eq",
"trust": 0.6,
"vendor": "nortel",
"version": "20004.1.2"
},
{
"model": "networks contivity vpn switch",
"scope": "eq",
"trust": 0.6,
"vendor": "nortel",
"version": "20004.1"
},
{
"model": "cs-mars",
"scope": "ne",
"trust": 0.6,
"vendor": "cisco",
"version": "4.2.1"
},
{
"model": "project snort",
"scope": "eq",
"trust": 0.3,
"vendor": "snort",
"version": "2.4.2"
},
{
"model": "project snort",
"scope": "eq",
"trust": 0.3,
"vendor": "snort",
"version": "2.4.1"
},
{
"model": "project snort",
"scope": "eq",
"trust": 0.3,
"vendor": "snort",
"version": "2.4.0"
},
{
"model": "networks threat protection system intrusion sensor",
"scope": "eq",
"trust": 0.3,
"vendor": "nortel",
"version": "4.1"
},
{
"model": "networks threat protection system defense center",
"scope": "eq",
"trust": 0.3,
"vendor": "nortel",
"version": "4.1"
},
{
"model": "project snort",
"scope": "ne",
"trust": 0.3,
"vendor": "snort",
"version": "2.4.3"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#175500"
},
{
"db": "BID",
"id": "19077"
},
{
"db": "BID",
"id": "19071"
},
{
"db": "BID",
"id": "15131"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-002837"
},
{
"db": "CNNVD",
"id": "CNNVD-200607-291"
},
{
"db": "NVD",
"id": "CVE-2006-3734"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:cisco:security_monitoring_analysis_and_response_system",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2006-002837"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "These issues were disclosed by the vendor.",
"sources": [
{
"db": "BID",
"id": "19077"
},
{
"db": "BID",
"id": "19071"
}
],
"trust": 0.6
},
"cve": "CVE-2006-3734",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 7.2,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.9,
"id": "CVE-2006-3734",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 7.2,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.9,
"id": "VHN-19842",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:L/AC:L/AU:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2006-3734",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "CARNEGIE MELLON",
"id": "VU#175500",
"trust": 0.8,
"value": "31.05"
},
{
"author": "NVD",
"id": "CVE-2006-3734",
"trust": 0.8,
"value": "High"
},
{
"author": "CNNVD",
"id": "CNNVD-200607-291",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "VULHUB",
"id": "VHN-19842",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#175500"
},
{
"db": "VULHUB",
"id": "VHN-19842"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-002837"
},
{
"db": "CNNVD",
"id": "CNNVD-200607-291"
},
{
"db": "NVD",
"id": "CVE-2006-3734"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Multiple unspecified vulnerabilities in the Command Line Interface (CLI) for Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1, allow local CS-MARS administrators to execute arbitrary commands as root. A buffer overflow exists in the Snort Back Orifice preprocessor that may allow a remote, unauthenticated attacker to execute arbitrary code, possibly with elevated privileges. This may facilitate a remote compromise of affected computers. \nCisco has released version 4.2.1 to address these issues; prior versions are reported vulnerable. Snort is susceptible to a remote buffer overflow vulnerability. This issue is due to a failure of the application to securely copy network-derived data into sensitive process buffers. The specific issue exists in the Back Orifice preprocessor. This may facilitate unauthorized access or privilege escalation. \nDue to the nature of this issue, attackers may exploit it by sending a single UDP packet with a potentially spoofed source address to an arbitrary destination address and port. As long as the application can sniff the packet, it may be exploited. These aspects of this issue may aid attackers in bypassing firewalls in order to compromise a wider number of computers. \nReportedly, this issue is difficult to reliably exploit across differing operating systems and compiler versions. Failed exploit attempts likely result in crashing the application, thereby disabling detection of other attacks. \nSnort versions 2.4.0 through 2.4.2 are affected by this issue. Other versions may also be affected, but this has not been confirmed. The CS-MARS CLI is a restricted shell environment that allows authenticated administrators to perform system maintenance tasks. \n-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\n\n National Cyber Alert System\n\n Technical Cyber Security Alert TA05-291A\n\n\nSnort Back Orifice Preprocessor Buffer Overflow\n\n Original release date: October 18, 2005\n Last revised: --\n Source: US-CERT\n\n\nSystems Affected\n\n * Snort versions 2.4.0 to 2.4.2\n * Sourcefire Intrusion Sensors\n\n Other products that use Snort or Snort components may be affected. \n\n\nI. Description\n\n Snort is a widely-deployed, open-source network intrusion detection\n system (IDS). Snort and its components are used in other IDS\n products, notably Sourcefire Intrusion Sensors, and Snort is\n included with a number of operating system distributions. \n\n Snort preprocessors are modular plugins that extend functionality\n by operating on packets before the detection engine is run. The ping detection code does\n not adequately limit the amount of data that is read from the\n packet into a fixed-length buffer, thus creating the potential for\n a buffer overflow. \n\n The vulnerable code will process any UDP packet that is not\n destined to or sourced from the default Back Orifice port\n (31337/udp). An attacker could exploit this vulnerability by\n sending a specially crafted UDP packet to a host or network\n monitored by Snort. \n\n US-CERT is tracking this vulnerability as VU#175500. Further\n information is available in an advisory from Internet Security\n Systems (ISS). \n\n\nII. Snort typically runs with root or\n SYSTEM privileges, so an attacker could take complete control of a\n vulnerable system. An attacker does not need to target a Snort\n sensor directly; the attacker can target any host or network\n monitored by Snort. \n\n\nIII. Solution\n\nUpgrade\n\n Sourcefire has released Snort 2.4.3 which is available from the\n Snort download site. For information about other vendors, please\n see the Systems Affected section of VU#175500. \n\nDisable Back Orifice Preprocessor\n\n To disable the Back Orifice preprocessor, comment out the line that\n loads the preprocessor in the Snort configuration file (typically\n /etc/snort.conf on UNIX and Linux systems):\n\n [/etc/snort.conf]\n ... \n #preprocessor bo\n ... \n \n Restart Snort for the change to take effect. \n\nRestrict Outbound Traffic\n\n Consider preventing Snort sensors from initiating outbound\n connections and restricting outbound traffic to only those hosts\n and networks that have legitimate requirements to communicate with\n the sensors. While this will not prevent exploitation of the\n vulnerability, it may make it more difficult for an attacker to\n access a compromised system or reconnoiter other systems. \n\n\nAppendix A. References\n\n * US-CERT Vulnerability Note VU#175500 -\n \u003chttp://www.kb.cert.org/vuls/id/177500\u003e\n\n * Fixes and Mitigation Instructions Available for Snort Back\n Orifice Vulnerability -\n \u003chttp://www.snort.org/pub-bin/snortnews.cgi#99\u003e\n\n * Snort downloads - \u003chttp://www.snort.org/dl/\u003e\n\n * Snort 2.4.3 Changelog -\n \u003chttp://www.snort.org/docs/change_logs/2.4.3/Changelog.txt\u003e\n\n * Preprocessors -\n \u003chttp://www.snort.org/docs/snort_htmanuals/htmanual_2.4/\n node11.html#SECTION00310000000000000000\u003e\n\n * Snort Back Orifice Parsing Remote Code Execution -\n \u003chttp://xforce.iss.net/xforce/alerts/id/207\u003e\n\n\n ____________________________________________________________________\n\n This vulnerability was researched and reported by Internet Security\n Systems (ISS). \n ____________________________________________________________________\n\n The most recent version of this document can be found at:\n\n \u003chttp://www.us-cert.gov/cas/techalerts/TA05-291A.html\u003e\n ____________________________________________________________________\n\n Feedback can be directed to US-CERT Technical Staff. Please send\n email to \u003ccert@cert.org\u003e with \"TA05-291A Feedback VU#175500\" in the\n subject. \n ____________________________________________________________________\n\n For instructions on subscribing to or unsubscribing from this\n mailing list, visit \u003chttp://www.us-cert.gov/cas/signup.html\u003e. \n ____________________________________________________________________\n\n Produced 2005 by US-CERT, a government organization. \n\n Terms of use:\n\n \u003chttp://www.us-cert.gov/legal.html\u003e\n ____________________________________________________________________\n\n\nRevision History\n\n Oct 18, 2005: Initial release\n\n\n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1.2.1 (GNU/Linux)\n\niQEVAwUBQ1VB130pj593lg50AQLY6wf+Kq/rI3wxG4rGr+OdVrpl3v+TfTMp6MX3\nT0e99ybRSGKeWQCleMQYdBYrS+7UyCa28T1yE8ENe4SuYLPj7ttTqpd0AGxn7f8H\n+qOY0GnJwXvrWlKCfVtAhjo5JFDxgZQV9P/13MwjcsJrGTtHzhuJ8YZc4RtSMyVX\n4nf2s4Nymjd2+jIEX9BnwRIe/E47TRdFLSsza36mhKZLZV1lxLdJYywCZSsQLWNM\nnL9gohRojR/6wQk8sLjef8LCv2JFu3btsqrrblcTWqfB6GhVR9OSUBhL+b8P/mme\njVd9eE0OS5v8rzhaEMiYIMI+pEZEpATj4BnVoLwPkLAoD6ObGJKHkQ==\n=jjID\n-----END PGP SIGNATURE-----\n. \n\n----------------------------------------------------------------------\n\nHardcore Disassembler / Reverse Engineer Wanted!\n\nWant to work with IDA and BinDiff?\nWant to write PoC\u0027s and Exploits?\n\nYour nationality is not important. \nWe will get you a work permit, find an apartment, and offer a\nrelocation compensation package. \n\nhttp://secunia.com/hardcore_disassembler_and_reverse_engineer/\n\n----------------------------------------------------------------------\n\nTITLE:\nCS-MARS Multiple Vulnerabilities\n\nSECUNIA ADVISORY ID:\nSA21118\n\nVERIFY ADVISORY:\nhttp://secunia.com/advisories/21118/\n\nCRITICAL:\nModerately critical\n\nIMPACT:\nSecurity Bypass, Exposure of system information, System access\n\nWHERE:\n\u003eFrom local network\n\nOPERATING SYSTEM:\nCisco Security Monitoring, Analysis and Response System (CS-MARS) 4.x\nhttp://secunia.com/product/6780/\n\nDESCRIPTION:\nMultiple vulnerabilities have been reported in CS-MARS, which can be\nexploited by malicious, local users to bypass certain security\nrestrictions and malicious people to gain knowledge of system\ninformation and compromise a vulnerable system. \n\n2) The included JBoss web application server is also affected by an\ninformation disclosure weakness. \n\nCS-MARS also ships with an Oracle database containing several default\nOracle accounts with well-known passwords. \n\nSOLUTION:\nUpdate to version 4.2.1 or later. \n\nPROVIDED AND/OR DISCOVERED BY:\n1+2) Jon Hart\n3) Reported by the vendor. \n\nORIGINAL ADVISORY:\nhttp://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml\n\nOTHER REFERENCES:\nSA15746:\nhttp://secunia.com/advisories/15746/\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n. \n\nThe vulnerability is caused due to a boundary error in the handling\nof Back Orifice packets. \n\nAlternatively, disable the Back Orifice pre-processor",
"sources": [
{
"db": "NVD",
"id": "CVE-2006-3734"
},
{
"db": "CERT/CC",
"id": "VU#175500"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-002837"
},
{
"db": "BID",
"id": "19077"
},
{
"db": "BID",
"id": "19071"
},
{
"db": "BID",
"id": "15131"
},
{
"db": "VULHUB",
"id": "VHN-19842"
},
{
"db": "PACKETSTORM",
"id": "40869"
},
{
"db": "PACKETSTORM",
"id": "48383"
},
{
"db": "PACKETSTORM",
"id": "40766"
}
],
"trust": 3.51
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-19842",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-19842"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2006-3734",
"trust": 2.5
},
{
"db": "BID",
"id": "19071",
"trust": 2.0
},
{
"db": "BID",
"id": "19077",
"trust": 2.0
},
{
"db": "SECUNIA",
"id": "21118",
"trust": 1.8
},
{
"db": "SECTRACK",
"id": "1016537",
"trust": 1.7
},
{
"db": "VUPEN",
"id": "ADV-2006-2887",
"trust": 1.7
},
{
"db": "CERT/CC",
"id": "VU#175500",
"trust": 1.2
},
{
"db": "SECUNIA",
"id": "17220",
"trust": 1.0
},
{
"db": "JVNDB",
"id": "JVNDB-2006-002837",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-200607-291",
"trust": 0.7
},
{
"db": "XF",
"id": "27812",
"trust": 0.6
},
{
"db": "CISCO",
"id": "20060719 MULTIPLE VULNERABILITIES IN CISCO SECURITY MONITORING, ANALYSIS AND RESPONSE SYSTEM (CS-MARS)",
"trust": 0.6
},
{
"db": "USCERT",
"id": "TA05-291A",
"trust": 0.4
},
{
"db": "BID",
"id": "15131",
"trust": 0.3
},
{
"db": "EXPLOIT-DB",
"id": "2048",
"trust": 0.1
},
{
"db": "SEEBUG",
"id": "SSVID-63733",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-19842",
"trust": 0.1
},
{
"db": "CERT/CC",
"id": "VU#177500",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "40869",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "48383",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "40766",
"trust": 0.1
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#175500"
},
{
"db": "VULHUB",
"id": "VHN-19842"
},
{
"db": "BID",
"id": "19077"
},
{
"db": "BID",
"id": "19071"
},
{
"db": "BID",
"id": "15131"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-002837"
},
{
"db": "PACKETSTORM",
"id": "40869"
},
{
"db": "PACKETSTORM",
"id": "48383"
},
{
"db": "PACKETSTORM",
"id": "40766"
},
{
"db": "CNNVD",
"id": "CNNVD-200607-291"
},
{
"db": "NVD",
"id": "CVE-2006-3734"
}
]
},
"id": "VAR-200607-0506",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-19842"
}
],
"trust": 0.01
},
"last_update_date": "2025-04-03T19:57:53.601000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "cisco-sa-20060719-mars",
"trust": 0.8,
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20060719-mars"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2006-002837"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-Other",
"trust": 1.0
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2006-3734"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.4,
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/19071"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/19077"
},
{
"trust": 1.7,
"url": "http://securitytracker.com/id?1016537"
},
{
"trust": 1.7,
"url": "http://secunia.com/advisories/21118"
},
{
"trust": 1.2,
"url": "http://xforce.iss.net/xforce/alerts/id/207"
},
{
"trust": 1.1,
"url": "http://www.vupen.com/english/advisories/2006/2887"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27812"
},
{
"trust": 0.9,
"url": "http://www.snort.org/pub-bin/snortnews.cgi#99"
},
{
"trust": 0.9,
"url": "http://secunia.com/advisories/17220/"
},
{
"trust": 0.8,
"url": "http://www.snort.org/docs/change_logs/2.4.3/changelog.txt"
},
{
"trust": 0.8,
"url": "http://www.snort.org/docs/snort_htmanuals/htmanual_2.4/node11.html#section00310000000000000000"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2006-3734"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2006-3734"
},
{
"trust": 0.6,
"url": "http://www.cisco.com/en/us/products/sw/voicesw/ps4625/index.html"
},
{
"trust": 0.6,
"url": "http://www.cisco.com/en/us/products/ps6241/index.html"
},
{
"trust": 0.6,
"url": "/archive/1/440580"
},
{
"trust": 0.6,
"url": "http://www.frsirt.com/english/advisories/2006/2887"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/27812"
},
{
"trust": 0.4,
"url": "http://www.kb.cert.org/vuls/id/175500"
},
{
"trust": 0.3,
"url": "http://www.snort.org/rules/advisories/snort_update_20051018.html"
},
{
"trust": 0.3,
"url": "http://www.snort.org/"
},
{
"trust": 0.3,
"url": "http://www.snort.org/pub-bin/snortnews.cgi"
},
{
"trust": 0.3,
"url": "http://www.us-cert.gov/cas/techalerts/ta05-291a.html"
},
{
"trust": 0.3,
"url": "http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=bltndetail\u0026documentoid=362187\u0026renditionid="
},
{
"trust": 0.2,
"url": "http://secunia.com/secunia_security_advisories/"
},
{
"trust": 0.2,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.2,
"url": "http://secunia.com/about_secunia_advisories/"
},
{
"trust": 0.1,
"url": "http://xforce.iss.net/xforce/alerts/id/207\u003e"
},
{
"trust": 0.1,
"url": "http://www.snort.org/docs/snort_htmanuals/htmanual_2.4/"
},
{
"trust": 0.1,
"url": "http://www.us-cert.gov/cas/techalerts/ta05-291a.html\u003e"
},
{
"trust": 0.1,
"url": "http://www.snort.org/docs/change_logs/2.4.3/changelog.txt\u003e"
},
{
"trust": 0.1,
"url": "http://www.snort.org/dl/\u003e"
},
{
"trust": 0.1,
"url": "http://www.us-cert.gov/cas/signup.html\u003e."
},
{
"trust": 0.1,
"url": "http://www.us-cert.gov/legal.html\u003e"
},
{
"trust": 0.1,
"url": "http://www.snort.org/pub-bin/snortnews.cgi#99\u003e"
},
{
"trust": 0.1,
"url": "http://www.kb.cert.org/vuls/id/177500\u003e"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/6780/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/15746/"
},
{
"trust": 0.1,
"url": "http://secunia.com/hardcore_disassembler_and_reverse_engineer/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/21118/"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/5691/"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#175500"
},
{
"db": "VULHUB",
"id": "VHN-19842"
},
{
"db": "BID",
"id": "19077"
},
{
"db": "BID",
"id": "19071"
},
{
"db": "BID",
"id": "15131"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-002837"
},
{
"db": "PACKETSTORM",
"id": "40869"
},
{
"db": "PACKETSTORM",
"id": "48383"
},
{
"db": "PACKETSTORM",
"id": "40766"
},
{
"db": "CNNVD",
"id": "CNNVD-200607-291"
},
{
"db": "NVD",
"id": "CVE-2006-3734"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#175500"
},
{
"db": "VULHUB",
"id": "VHN-19842"
},
{
"db": "BID",
"id": "19077"
},
{
"db": "BID",
"id": "19071"
},
{
"db": "BID",
"id": "15131"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-002837"
},
{
"db": "PACKETSTORM",
"id": "40869"
},
{
"db": "PACKETSTORM",
"id": "48383"
},
{
"db": "PACKETSTORM",
"id": "40766"
},
{
"db": "CNNVD",
"id": "CNNVD-200607-291"
},
{
"db": "NVD",
"id": "CVE-2006-3734"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2005-10-18T00:00:00",
"db": "CERT/CC",
"id": "VU#175500"
},
{
"date": "2006-07-21T00:00:00",
"db": "VULHUB",
"id": "VHN-19842"
},
{
"date": "2006-07-19T00:00:00",
"db": "BID",
"id": "19077"
},
{
"date": "2006-07-19T00:00:00",
"db": "BID",
"id": "19071"
},
{
"date": "2005-10-18T00:00:00",
"db": "BID",
"id": "15131"
},
{
"date": "2012-12-20T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2006-002837"
},
{
"date": "2005-10-24T23:41:37",
"db": "PACKETSTORM",
"id": "40869"
},
{
"date": "2006-07-20T08:48:26",
"db": "PACKETSTORM",
"id": "48383"
},
{
"date": "2005-10-18T22:10:31",
"db": "PACKETSTORM",
"id": "40766"
},
{
"date": "2006-07-21T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200607-291"
},
{
"date": "2006-07-21T14:03:00",
"db": "NVD",
"id": "CVE-2006-3734"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2005-11-11T00:00:00",
"db": "CERT/CC",
"id": "VU#175500"
},
{
"date": "2017-07-20T00:00:00",
"db": "VULHUB",
"id": "VHN-19842"
},
{
"date": "2006-07-20T18:27:00",
"db": "BID",
"id": "19077"
},
{
"date": "2006-07-20T18:52:00",
"db": "BID",
"id": "19071"
},
{
"date": "2005-10-18T00:00:00",
"db": "BID",
"id": "15131"
},
{
"date": "2012-12-20T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2006-002837"
},
{
"date": "2006-08-09T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200607-291"
},
{
"date": "2025-04-03T01:03:51.193000",
"db": "NVD",
"id": "CVE-2006-3734"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "local",
"sources": [
{
"db": "BID",
"id": "19077"
},
{
"db": "PACKETSTORM",
"id": "48383"
},
{
"db": "CNNVD",
"id": "CNNVD-200607-291"
}
],
"trust": 1.0
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Snort Back Orifice preprocessor buffer overflow",
"sources": [
{
"db": "CERT/CC",
"id": "VU#175500"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Design Error",
"sources": [
{
"db": "BID",
"id": "19077"
},
{
"db": "CNNVD",
"id": "CNNVD-200607-291"
}
],
"trust": 0.9
}
}
VAR-200607-0504
Vulnerability from variot - Updated: 2025-04-03 19:40Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1 ships with an Oracle database that contains several default accounts and passwords, which allows attackers to obtain sensitive information. A buffer overflow exists in the Snort Back Orifice preprocessor that may allow a remote, unauthenticated attacker to execute arbitrary code, possibly with elevated privileges. This may facilitate a remote compromise of affected computers. Cisco has released version 4.2.1 to address these issues; prior versions are reported vulnerable. Snort is susceptible to a remote buffer overflow vulnerability. This issue is due to a failure of the application to securely copy network-derived data into sensitive process buffers. The specific issue exists in the Back Orifice preprocessor. This may facilitate unauthorized access or privilege escalation. Due to the nature of this issue, attackers may exploit it by sending a single UDP packet with a potentially spoofed source address to an arbitrary destination address and port. As long as the application can sniff the packet, it may be exploited. These aspects of this issue may aid attackers in bypassing firewalls in order to compromise a wider number of computers. Reportedly, this issue is difficult to reliably exploit across differing operating systems and compiler versions. Failed exploit attempts likely result in crashing the application, thereby disabling detection of other attacks. Snort versions 2.4.0 through 2.4.2 are affected by this issue. Other versions may also be affected, but this has not been confirmed. CS-MARS uses an Oracle database to store sensitive network events and configuration data. Information in the database may include authentication credentials for network devices, such as firewalls, routers and IPS devices, and details of network security events. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
National Cyber Alert System
Technical Cyber Security Alert TA05-291A
Snort Back Orifice Preprocessor Buffer Overflow
Original release date: October 18, 2005 Last revised: -- Source: US-CERT
Systems Affected
* Snort versions 2.4.0 to 2.4.2
* Sourcefire Intrusion Sensors
Other products that use Snort or Snort components may be affected.
I. Description
Snort is a widely-deployed, open-source network intrusion detection system (IDS). Snort and its components are used in other IDS products, notably Sourcefire Intrusion Sensors, and Snort is included with a number of operating system distributions.
Snort preprocessors are modular plugins that extend functionality by operating on packets before the detection engine is run. The ping detection code does not adequately limit the amount of data that is read from the packet into a fixed-length buffer, thus creating the potential for a buffer overflow.
The vulnerable code will process any UDP packet that is not destined to or sourced from the default Back Orifice port (31337/udp). An attacker could exploit this vulnerability by sending a specially crafted UDP packet to a host or network monitored by Snort.
US-CERT is tracking this vulnerability as VU#175500. Further information is available in an advisory from Internet Security Systems (ISS).
II. Snort typically runs with root or SYSTEM privileges, so an attacker could take complete control of a vulnerable system. An attacker does not need to target a Snort sensor directly; the attacker can target any host or network monitored by Snort.
III. Solution
Upgrade
Sourcefire has released Snort 2.4.3 which is available from the Snort download site. For information about other vendors, please see the Systems Affected section of VU#175500.
Disable Back Orifice Preprocessor
To disable the Back Orifice preprocessor, comment out the line that loads the preprocessor in the Snort configuration file (typically /etc/snort.conf on UNIX and Linux systems):
[/etc/snort.conf]
...
#preprocessor bo
...
Restart Snort for the change to take effect.
Restrict Outbound Traffic
Consider preventing Snort sensors from initiating outbound connections and restricting outbound traffic to only those hosts and networks that have legitimate requirements to communicate with the sensors. While this will not prevent exploitation of the vulnerability, it may make it more difficult for an attacker to access a compromised system or reconnoiter other systems.
Appendix A. References
* US-CERT Vulnerability Note VU#175500 -
<http://www.kb.cert.org/vuls/id/177500>
* Fixes and Mitigation Instructions Available for Snort Back
Orifice Vulnerability -
<http://www.snort.org/pub-bin/snortnews.cgi#99>
* Snort downloads - <http://www.snort.org/dl/>
* Snort 2.4.3 Changelog -
<http://www.snort.org/docs/change_logs/2.4.3/Changelog.txt>
* Preprocessors -
<http://www.snort.org/docs/snort_htmanuals/htmanual_2.4/
node11.html#SECTION00310000000000000000>
* Snort Back Orifice Parsing Remote Code Execution -
<http://xforce.iss.net/xforce/alerts/id/207>
This vulnerability was researched and reported by Internet Security Systems (ISS).
The most recent version of this document can be found at:
<http://www.us-cert.gov/cas/techalerts/TA05-291A.html>
Feedback can be directed to US-CERT Technical Staff. Please send email to cert@cert.org with "TA05-291A Feedback VU#175500" in the subject.
For instructions on subscribing to or unsubscribing from this mailing list, visit http://www.us-cert.gov/cas/signup.html.
Produced 2005 by US-CERT, a government organization.
Terms of use:
<http://www.us-cert.gov/legal.html>
Revision History
Oct 18, 2005: Initial release
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux)
iQEVAwUBQ1VB130pj593lg50AQLY6wf+Kq/rI3wxG4rGr+OdVrpl3v+TfTMp6MX3 T0e99ybRSGKeWQCleMQYdBYrS+7UyCa28T1yE8ENe4SuYLPj7ttTqpd0AGxn7f8H +qOY0GnJwXvrWlKCfVtAhjo5JFDxgZQV9P/13MwjcsJrGTtHzhuJ8YZc4RtSMyVX 4nf2s4Nymjd2+jIEX9BnwRIe/E47TRdFLSsza36mhKZLZV1lxLdJYywCZSsQLWNM nL9gohRojR/6wQk8sLjef8LCv2JFu3btsqrrblcTWqfB6GhVR9OSUBhL+b8P/mme jVd9eE0OS5v8rzhaEMiYIMI+pEZEpATj4BnVoLwPkLAoD6ObGJKHkQ== =jjID -----END PGP SIGNATURE----- .
Hardcore Disassembler / Reverse Engineer Wanted!
Want to work with IDA and BinDiff? Want to write PoC's and Exploits?
Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation compensation package.
http://secunia.com/hardcore_disassembler_and_reverse_engineer/
TITLE: CS-MARS Multiple Vulnerabilities
SECUNIA ADVISORY ID: SA21118
VERIFY ADVISORY: http://secunia.com/advisories/21118/
CRITICAL: Moderately critical
IMPACT: Security Bypass, Exposure of system information, System access
WHERE:
From local network
OPERATING SYSTEM: Cisco Security Monitoring, Analysis and Response System (CS-MARS) 4.x http://secunia.com/product/6780/
DESCRIPTION: Multiple vulnerabilities have been reported in CS-MARS, which can be exploited by malicious, local users to bypass certain security restrictions and malicious people to gain knowledge of system information and compromise a vulnerable system.
2) The included JBoss web application server is also affected by an information disclosure weakness.
SOLUTION: Update to version 4.2.1 or later.
PROVIDED AND/OR DISCOVERED BY: 1+2) Jon Hart 3) Reported by the vendor.
ORIGINAL ADVISORY: http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml
OTHER REFERENCES: SA15746: http://secunia.com/advisories/15746/
About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
.
The vulnerability is caused due to a boundary error in the handling of Back Orifice packets.
Alternatively, disable the Back Orifice pre-processor
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200607-0504",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "cs-mars",
"scope": "eq",
"trust": 2.2,
"vendor": "cisco",
"version": "4.1.5"
},
{
"model": "cs-mars",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "4.1.3"
},
{
"model": "cs-mars",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "4.1.2"
},
{
"model": "cs-mars",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "4.1"
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "freebsd",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "nortel",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "suse linux",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "snort",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "sourcefire",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "ubuntu",
"version": null
},
{
"model": "security monitoring, analysis and response system",
"scope": "lt",
"trust": 0.8,
"vendor": "cisco",
"version": "4.2.1"
},
{
"model": "networks contivity vpn switch",
"scope": "eq",
"trust": 0.6,
"vendor": "nortel",
"version": "20004.1.3"
},
{
"model": "networks contivity vpn switch",
"scope": "eq",
"trust": 0.6,
"vendor": "nortel",
"version": "20004.1.2"
},
{
"model": "networks contivity vpn switch",
"scope": "eq",
"trust": 0.6,
"vendor": "nortel",
"version": "20004.1"
},
{
"model": "cs-mars",
"scope": "ne",
"trust": 0.6,
"vendor": "cisco",
"version": "4.2.1"
},
{
"model": "project snort",
"scope": "eq",
"trust": 0.3,
"vendor": "snort",
"version": "2.4.2"
},
{
"model": "project snort",
"scope": "eq",
"trust": 0.3,
"vendor": "snort",
"version": "2.4.1"
},
{
"model": "project snort",
"scope": "eq",
"trust": 0.3,
"vendor": "snort",
"version": "2.4.0"
},
{
"model": "networks threat protection system intrusion sensor",
"scope": "eq",
"trust": 0.3,
"vendor": "nortel",
"version": "4.1"
},
{
"model": "networks threat protection system defense center",
"scope": "eq",
"trust": 0.3,
"vendor": "nortel",
"version": "4.1"
},
{
"model": "project snort",
"scope": "ne",
"trust": 0.3,
"vendor": "snort",
"version": "2.4.3"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#175500"
},
{
"db": "BID",
"id": "19073"
},
{
"db": "BID",
"id": "19071"
},
{
"db": "BID",
"id": "15131"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-002835"
},
{
"db": "CNNVD",
"id": "CNNVD-200607-315"
},
{
"db": "NVD",
"id": "CVE-2006-3732"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:cisco:security_monitoring_analysis_and_response_system",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2006-002835"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cisco Security bulletin",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200607-315"
}
],
"trust": 0.6
},
"cve": "CVE-2006-3732",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2006-3732",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "VHN-19840",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2006-3732",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "CARNEGIE MELLON",
"id": "VU#175500",
"trust": 0.8,
"value": "31.05"
},
{
"author": "NVD",
"id": "CVE-2006-3732",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNNVD",
"id": "CNNVD-200607-315",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-19840",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#175500"
},
{
"db": "VULHUB",
"id": "VHN-19840"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-002835"
},
{
"db": "CNNVD",
"id": "CNNVD-200607-315"
},
{
"db": "NVD",
"id": "CVE-2006-3732"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1 ships with an Oracle database that contains several default accounts and passwords, which allows attackers to obtain sensitive information. A buffer overflow exists in the Snort Back Orifice preprocessor that may allow a remote, unauthenticated attacker to execute arbitrary code, possibly with elevated privileges. This may facilitate a remote compromise of affected computers. \nCisco has released version 4.2.1 to address these issues; prior versions are reported vulnerable. Snort is susceptible to a remote buffer overflow vulnerability. This issue is due to a failure of the application to securely copy network-derived data into sensitive process buffers. The specific issue exists in the Back Orifice preprocessor. This may facilitate unauthorized access or privilege escalation. \nDue to the nature of this issue, attackers may exploit it by sending a single UDP packet with a potentially spoofed source address to an arbitrary destination address and port. As long as the application can sniff the packet, it may be exploited. These aspects of this issue may aid attackers in bypassing firewalls in order to compromise a wider number of computers. \nReportedly, this issue is difficult to reliably exploit across differing operating systems and compiler versions. Failed exploit attempts likely result in crashing the application, thereby disabling detection of other attacks. \nSnort versions 2.4.0 through 2.4.2 are affected by this issue. Other versions may also be affected, but this has not been confirmed. CS-MARS uses an Oracle database to store sensitive network events and configuration data. Information in the database may include authentication credentials for network devices, such as firewalls, routers and IPS devices, and details of network security events. \n-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\n\n National Cyber Alert System\n\n Technical Cyber Security Alert TA05-291A\n\n\nSnort Back Orifice Preprocessor Buffer Overflow\n\n Original release date: October 18, 2005\n Last revised: --\n Source: US-CERT\n\n\nSystems Affected\n\n * Snort versions 2.4.0 to 2.4.2\n * Sourcefire Intrusion Sensors\n\n Other products that use Snort or Snort components may be affected. \n\n\nI. Description\n\n Snort is a widely-deployed, open-source network intrusion detection\n system (IDS). Snort and its components are used in other IDS\n products, notably Sourcefire Intrusion Sensors, and Snort is\n included with a number of operating system distributions. \n\n Snort preprocessors are modular plugins that extend functionality\n by operating on packets before the detection engine is run. The ping detection code does\n not adequately limit the amount of data that is read from the\n packet into a fixed-length buffer, thus creating the potential for\n a buffer overflow. \n\n The vulnerable code will process any UDP packet that is not\n destined to or sourced from the default Back Orifice port\n (31337/udp). An attacker could exploit this vulnerability by\n sending a specially crafted UDP packet to a host or network\n monitored by Snort. \n\n US-CERT is tracking this vulnerability as VU#175500. Further\n information is available in an advisory from Internet Security\n Systems (ISS). \n\n\nII. Snort typically runs with root or\n SYSTEM privileges, so an attacker could take complete control of a\n vulnerable system. An attacker does not need to target a Snort\n sensor directly; the attacker can target any host or network\n monitored by Snort. \n\n\nIII. Solution\n\nUpgrade\n\n Sourcefire has released Snort 2.4.3 which is available from the\n Snort download site. For information about other vendors, please\n see the Systems Affected section of VU#175500. \n\nDisable Back Orifice Preprocessor\n\n To disable the Back Orifice preprocessor, comment out the line that\n loads the preprocessor in the Snort configuration file (typically\n /etc/snort.conf on UNIX and Linux systems):\n\n [/etc/snort.conf]\n ... \n #preprocessor bo\n ... \n \n Restart Snort for the change to take effect. \n\nRestrict Outbound Traffic\n\n Consider preventing Snort sensors from initiating outbound\n connections and restricting outbound traffic to only those hosts\n and networks that have legitimate requirements to communicate with\n the sensors. While this will not prevent exploitation of the\n vulnerability, it may make it more difficult for an attacker to\n access a compromised system or reconnoiter other systems. \n\n\nAppendix A. References\n\n * US-CERT Vulnerability Note VU#175500 -\n \u003chttp://www.kb.cert.org/vuls/id/177500\u003e\n\n * Fixes and Mitigation Instructions Available for Snort Back\n Orifice Vulnerability -\n \u003chttp://www.snort.org/pub-bin/snortnews.cgi#99\u003e\n\n * Snort downloads - \u003chttp://www.snort.org/dl/\u003e\n\n * Snort 2.4.3 Changelog -\n \u003chttp://www.snort.org/docs/change_logs/2.4.3/Changelog.txt\u003e\n\n * Preprocessors -\n \u003chttp://www.snort.org/docs/snort_htmanuals/htmanual_2.4/\n node11.html#SECTION00310000000000000000\u003e\n\n * Snort Back Orifice Parsing Remote Code Execution -\n \u003chttp://xforce.iss.net/xforce/alerts/id/207\u003e\n\n\n ____________________________________________________________________\n\n This vulnerability was researched and reported by Internet Security\n Systems (ISS). \n ____________________________________________________________________\n\n The most recent version of this document can be found at:\n\n \u003chttp://www.us-cert.gov/cas/techalerts/TA05-291A.html\u003e\n ____________________________________________________________________\n\n Feedback can be directed to US-CERT Technical Staff. Please send\n email to \u003ccert@cert.org\u003e with \"TA05-291A Feedback VU#175500\" in the\n subject. \n ____________________________________________________________________\n\n For instructions on subscribing to or unsubscribing from this\n mailing list, visit \u003chttp://www.us-cert.gov/cas/signup.html\u003e. \n ____________________________________________________________________\n\n Produced 2005 by US-CERT, a government organization. \n\n Terms of use:\n\n \u003chttp://www.us-cert.gov/legal.html\u003e\n ____________________________________________________________________\n\n\nRevision History\n\n Oct 18, 2005: Initial release\n\n\n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1.2.1 (GNU/Linux)\n\niQEVAwUBQ1VB130pj593lg50AQLY6wf+Kq/rI3wxG4rGr+OdVrpl3v+TfTMp6MX3\nT0e99ybRSGKeWQCleMQYdBYrS+7UyCa28T1yE8ENe4SuYLPj7ttTqpd0AGxn7f8H\n+qOY0GnJwXvrWlKCfVtAhjo5JFDxgZQV9P/13MwjcsJrGTtHzhuJ8YZc4RtSMyVX\n4nf2s4Nymjd2+jIEX9BnwRIe/E47TRdFLSsza36mhKZLZV1lxLdJYywCZSsQLWNM\nnL9gohRojR/6wQk8sLjef8LCv2JFu3btsqrrblcTWqfB6GhVR9OSUBhL+b8P/mme\njVd9eE0OS5v8rzhaEMiYIMI+pEZEpATj4BnVoLwPkLAoD6ObGJKHkQ==\n=jjID\n-----END PGP SIGNATURE-----\n. \n\n----------------------------------------------------------------------\n\nHardcore Disassembler / Reverse Engineer Wanted!\n\nWant to work with IDA and BinDiff?\nWant to write PoC\u0027s and Exploits?\n\nYour nationality is not important. \nWe will get you a work permit, find an apartment, and offer a\nrelocation compensation package. \n\nhttp://secunia.com/hardcore_disassembler_and_reverse_engineer/\n\n----------------------------------------------------------------------\n\nTITLE:\nCS-MARS Multiple Vulnerabilities\n\nSECUNIA ADVISORY ID:\nSA21118\n\nVERIFY ADVISORY:\nhttp://secunia.com/advisories/21118/\n\nCRITICAL:\nModerately critical\n\nIMPACT:\nSecurity Bypass, Exposure of system information, System access\n\nWHERE:\n\u003eFrom local network\n\nOPERATING SYSTEM:\nCisco Security Monitoring, Analysis and Response System (CS-MARS) 4.x\nhttp://secunia.com/product/6780/\n\nDESCRIPTION:\nMultiple vulnerabilities have been reported in CS-MARS, which can be\nexploited by malicious, local users to bypass certain security\nrestrictions and malicious people to gain knowledge of system\ninformation and compromise a vulnerable system. \n\n2) The included JBoss web application server is also affected by an\ninformation disclosure weakness. \n\nSOLUTION:\nUpdate to version 4.2.1 or later. \n\nPROVIDED AND/OR DISCOVERED BY:\n1+2) Jon Hart\n3) Reported by the vendor. \n\nORIGINAL ADVISORY:\nhttp://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml\n\nOTHER REFERENCES:\nSA15746:\nhttp://secunia.com/advisories/15746/\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n. \n\nThe vulnerability is caused due to a boundary error in the handling\nof Back Orifice packets. \n\nAlternatively, disable the Back Orifice pre-processor",
"sources": [
{
"db": "NVD",
"id": "CVE-2006-3732"
},
{
"db": "CERT/CC",
"id": "VU#175500"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-002835"
},
{
"db": "BID",
"id": "19073"
},
{
"db": "BID",
"id": "19071"
},
{
"db": "BID",
"id": "15131"
},
{
"db": "VULHUB",
"id": "VHN-19840"
},
{
"db": "PACKETSTORM",
"id": "40869"
},
{
"db": "PACKETSTORM",
"id": "48383"
},
{
"db": "PACKETSTORM",
"id": "40766"
}
],
"trust": 3.51
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2006-3732",
"trust": 2.5
},
{
"db": "BID",
"id": "19071",
"trust": 2.0
},
{
"db": "BID",
"id": "19073",
"trust": 2.0
},
{
"db": "SECUNIA",
"id": "21118",
"trust": 1.8
},
{
"db": "SECTRACK",
"id": "1016537",
"trust": 1.7
},
{
"db": "VUPEN",
"id": "ADV-2006-2887",
"trust": 1.7
},
{
"db": "CERT/CC",
"id": "VU#175500",
"trust": 1.2
},
{
"db": "SECUNIA",
"id": "17220",
"trust": 1.0
},
{
"db": "JVNDB",
"id": "JVNDB-2006-002835",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-200607-315",
"trust": 0.7
},
{
"db": "CISCO",
"id": "20060719 MULTIPLE VULNERABILITIES IN CISCO SECURITY MONITORING, ANALYSIS AND RESPONSE SYSTEM (CS-MARS)",
"trust": 0.6
},
{
"db": "XF",
"id": "27810",
"trust": 0.6
},
{
"db": "USCERT",
"id": "TA05-291A",
"trust": 0.4
},
{
"db": "BID",
"id": "15131",
"trust": 0.3
},
{
"db": "VULHUB",
"id": "VHN-19840",
"trust": 0.1
},
{
"db": "CERT/CC",
"id": "VU#177500",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "40869",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "48383",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "40766",
"trust": 0.1
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#175500"
},
{
"db": "VULHUB",
"id": "VHN-19840"
},
{
"db": "BID",
"id": "19073"
},
{
"db": "BID",
"id": "19071"
},
{
"db": "BID",
"id": "15131"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-002835"
},
{
"db": "PACKETSTORM",
"id": "40869"
},
{
"db": "PACKETSTORM",
"id": "48383"
},
{
"db": "PACKETSTORM",
"id": "40766"
},
{
"db": "CNNVD",
"id": "CNNVD-200607-315"
},
{
"db": "NVD",
"id": "CVE-2006-3732"
}
]
},
"id": "VAR-200607-0504",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-19840"
}
],
"trust": 0.01
},
"last_update_date": "2025-04-03T19:40:27.726000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "cisco-sa-20060719-mars",
"trust": 0.8,
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20060719-mars"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2006-002835"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-Other",
"trust": 1.0
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2006-3732"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.4,
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/19071"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/19073"
},
{
"trust": 1.7,
"url": "http://securitytracker.com/id?1016537"
},
{
"trust": 1.7,
"url": "http://secunia.com/advisories/21118"
},
{
"trust": 1.2,
"url": "http://xforce.iss.net/xforce/alerts/id/207"
},
{
"trust": 1.1,
"url": "http://www.vupen.com/english/advisories/2006/2887"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27810"
},
{
"trust": 0.9,
"url": "http://www.snort.org/pub-bin/snortnews.cgi#99"
},
{
"trust": 0.9,
"url": "http://secunia.com/advisories/17220/"
},
{
"trust": 0.8,
"url": "http://www.snort.org/docs/change_logs/2.4.3/changelog.txt"
},
{
"trust": 0.8,
"url": "http://www.snort.org/docs/snort_htmanuals/htmanual_2.4/node11.html#section00310000000000000000"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2006-3732"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2006-3732"
},
{
"trust": 0.6,
"url": "http://www.cisco.com/en/us/products/sw/voicesw/ps4625/index.html"
},
{
"trust": 0.6,
"url": "http://www.cisco.com/en/us/products/ps6241/index.html"
},
{
"trust": 0.6,
"url": "/archive/1/440580"
},
{
"trust": 0.6,
"url": "http://www.frsirt.com/english/advisories/2006/2887"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/27810"
},
{
"trust": 0.4,
"url": "http://www.kb.cert.org/vuls/id/175500"
},
{
"trust": 0.3,
"url": "http://www.snort.org/rules/advisories/snort_update_20051018.html"
},
{
"trust": 0.3,
"url": "http://www.snort.org/"
},
{
"trust": 0.3,
"url": "http://www.snort.org/pub-bin/snortnews.cgi"
},
{
"trust": 0.3,
"url": "http://www.us-cert.gov/cas/techalerts/ta05-291a.html"
},
{
"trust": 0.3,
"url": "http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=bltndetail\u0026documentoid=362187\u0026renditionid="
},
{
"trust": 0.2,
"url": "http://secunia.com/secunia_security_advisories/"
},
{
"trust": 0.2,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.2,
"url": "http://secunia.com/about_secunia_advisories/"
},
{
"trust": 0.1,
"url": "http://xforce.iss.net/xforce/alerts/id/207\u003e"
},
{
"trust": 0.1,
"url": "http://www.snort.org/docs/snort_htmanuals/htmanual_2.4/"
},
{
"trust": 0.1,
"url": "http://www.us-cert.gov/cas/techalerts/ta05-291a.html\u003e"
},
{
"trust": 0.1,
"url": "http://www.snort.org/docs/change_logs/2.4.3/changelog.txt\u003e"
},
{
"trust": 0.1,
"url": "http://www.snort.org/dl/\u003e"
},
{
"trust": 0.1,
"url": "http://www.us-cert.gov/cas/signup.html\u003e."
},
{
"trust": 0.1,
"url": "http://www.us-cert.gov/legal.html\u003e"
},
{
"trust": 0.1,
"url": "http://www.snort.org/pub-bin/snortnews.cgi#99\u003e"
},
{
"trust": 0.1,
"url": "http://www.kb.cert.org/vuls/id/177500\u003e"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/6780/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/15746/"
},
{
"trust": 0.1,
"url": "http://secunia.com/hardcore_disassembler_and_reverse_engineer/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/21118/"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/5691/"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#175500"
},
{
"db": "VULHUB",
"id": "VHN-19840"
},
{
"db": "BID",
"id": "19073"
},
{
"db": "BID",
"id": "19071"
},
{
"db": "BID",
"id": "15131"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-002835"
},
{
"db": "PACKETSTORM",
"id": "40869"
},
{
"db": "PACKETSTORM",
"id": "48383"
},
{
"db": "PACKETSTORM",
"id": "40766"
},
{
"db": "CNNVD",
"id": "CNNVD-200607-315"
},
{
"db": "NVD",
"id": "CVE-2006-3732"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#175500"
},
{
"db": "VULHUB",
"id": "VHN-19840"
},
{
"db": "BID",
"id": "19073"
},
{
"db": "BID",
"id": "19071"
},
{
"db": "BID",
"id": "15131"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-002835"
},
{
"db": "PACKETSTORM",
"id": "40869"
},
{
"db": "PACKETSTORM",
"id": "48383"
},
{
"db": "PACKETSTORM",
"id": "40766"
},
{
"db": "CNNVD",
"id": "CNNVD-200607-315"
},
{
"db": "NVD",
"id": "CVE-2006-3732"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2005-10-18T00:00:00",
"db": "CERT/CC",
"id": "VU#175500"
},
{
"date": "2006-07-21T00:00:00",
"db": "VULHUB",
"id": "VHN-19840"
},
{
"date": "2006-07-19T00:00:00",
"db": "BID",
"id": "19073"
},
{
"date": "2006-07-19T00:00:00",
"db": "BID",
"id": "19071"
},
{
"date": "2005-10-18T00:00:00",
"db": "BID",
"id": "15131"
},
{
"date": "2012-12-20T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2006-002835"
},
{
"date": "2005-10-24T23:41:37",
"db": "PACKETSTORM",
"id": "40869"
},
{
"date": "2006-07-20T08:48:26",
"db": "PACKETSTORM",
"id": "48383"
},
{
"date": "2005-10-18T22:10:31",
"db": "PACKETSTORM",
"id": "40766"
},
{
"date": "2006-07-21T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200607-315"
},
{
"date": "2006-07-21T14:03:00",
"db": "NVD",
"id": "CVE-2006-3732"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2005-11-11T00:00:00",
"db": "CERT/CC",
"id": "VU#175500"
},
{
"date": "2017-07-20T00:00:00",
"db": "VULHUB",
"id": "VHN-19840"
},
{
"date": "2006-07-20T18:28:00",
"db": "BID",
"id": "19073"
},
{
"date": "2006-07-20T18:52:00",
"db": "BID",
"id": "19071"
},
{
"date": "2005-10-18T00:00:00",
"db": "BID",
"id": "15131"
},
{
"date": "2012-12-20T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2006-002835"
},
{
"date": "2006-08-09T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200607-315"
},
{
"date": "2025-04-03T01:03:51.193000",
"db": "NVD",
"id": "CVE-2006-3732"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "PACKETSTORM",
"id": "40869"
},
{
"db": "CNNVD",
"id": "CNNVD-200607-315"
}
],
"trust": 0.7
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Snort Back Orifice preprocessor buffer overflow",
"sources": [
{
"db": "CERT/CC",
"id": "VU#175500"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Access Validation Error",
"sources": [
{
"db": "BID",
"id": "19073"
},
{
"db": "BID",
"id": "19071"
}
],
"trust": 0.6
}
}
CVE-2009-2977 (GCVE-0-2009-2977)
Vulnerability from nvd – Published: 2009-08-27 17:00 – Updated: 2024-08-07 06:07
VLAI
EPSS
VEX
Summary
The Cisco Security Monitoring, Analysis and Response System (CS-MARS) 6.0.4 and earlier stores cleartext passwords in log/sysbacktrace.## files within error-logs.tar.gz archives, which allows context-dependent attackers to obtain sensitive information by reading these files.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/36098 | vdb-entryx_refsource_BID |
| http://www.vupen.com/english/advisories/2009/2364 | vdb-entryx_refsource_VUPEN |
| http://www.securityfocus.com/archive/1/505998/100… | mailing-listx_refsource_BUGTRAQ |
| http://tools.cisco.com/Support/BugToolKit/search/… | x_refsource_CONFIRM |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/archive/1/505995/100… | mailing-listx_refsource_BUGTRAQ |
Date Public
2009-08-21 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T06:07:37.399Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "36098",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/36098"
},
{
"name": "ADV-2009-2364",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2009/2364"
},
{
"name": "20090821 Re: Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/505998/100/0/threaded"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails\u0026bugId=CSCtb52450"
},
{
"name": "csmars-sysbacktrace-info-disclosure(52913)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52913"
},
{
"name": "20090821 Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/505995/100/0/threaded"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2009-08-21T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The Cisco Security Monitoring, Analysis and Response System (CS-MARS) 6.0.4 and earlier stores cleartext passwords in log/sysbacktrace.## files within error-logs.tar.gz archives, which allows context-dependent attackers to obtain sensitive information by reading these files."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-10T18:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "36098",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/36098"
},
{
"name": "ADV-2009-2364",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2009/2364"
},
{
"name": "20090821 Re: Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/505998/100/0/threaded"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails\u0026bugId=CSCtb52450"
},
{
"name": "csmars-sysbacktrace-info-disclosure(52913)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52913"
},
{
"name": "20090821 Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/505995/100/0/threaded"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2009-2977",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Cisco Security Monitoring, Analysis and Response System (CS-MARS) 6.0.4 and earlier stores cleartext passwords in log/sysbacktrace.## files within error-logs.tar.gz archives, which allows context-dependent attackers to obtain sensitive information by reading these files."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "36098",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/36098"
},
{
"name": "ADV-2009-2364",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2009/2364"
},
{
"name": "20090821 Re: Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/505998/100/0/threaded"
},
{
"name": "http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails\u0026bugId=CSCtb52450",
"refsource": "CONFIRM",
"url": "http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails\u0026bugId=CSCtb52450"
},
{
"name": "csmars-sysbacktrace-info-disclosure(52913)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52913"
},
{
"name": "20090821 Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/505995/100/0/threaded"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2009-2977",
"datePublished": "2009-08-27T17:00:00.000Z",
"dateReserved": "2009-08-27T00:00:00.000Z",
"dateUpdated": "2024-08-07T06:07:37.399Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-3732 (GCVE-0-2006-3732)
Vulnerability from nvd – Published: 2006-07-19 23:00 – Updated: 2024-08-07 18:39
VLAI
EPSS
VEX
Summary
Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1 ships with an Oracle database that contains several default accounts and passwords, which allows attackers to obtain sensitive information.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/19071 | vdb-entryx_refsource_BID |
| http://www.cisco.com/warp/public/707/cisco-sa-200… | vendor-advisoryx_refsource_CISCO |
| http://secunia.com/advisories/21118 | third-party-advisoryx_refsource_SECUNIA |
| http://www.vupen.com/english/advisories/2006/2887 | vdb-entryx_refsource_VUPEN |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://securitytracker.com/id?1016537 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/bid/19073 | vdb-entryx_refsource_BID |
Date Public
2006-07-19 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T18:39:53.891Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "19071",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/19071"
},
{
"name": "20060719 Multiple Vulnerabilities in Cisco Security Monitoring, Analysis and Response System (CS-MARS)",
"tags": [
"vendor-advisory",
"x_refsource_CISCO",
"x_transferred"
],
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml"
},
{
"name": "21118",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/21118"
},
{
"name": "ADV-2006-2887",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/2887"
},
{
"name": "cisco-csmars-oracle-account(27810)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27810"
},
{
"name": "1016537",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1016537"
},
{
"name": "19073",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/19073"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-07-19T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1 ships with an Oracle database that contains several default accounts and passwords, which allows attackers to obtain sensitive information."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-19T15:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "19071",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/19071"
},
{
"name": "20060719 Multiple Vulnerabilities in Cisco Security Monitoring, Analysis and Response System (CS-MARS)",
"tags": [
"vendor-advisory",
"x_refsource_CISCO"
],
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml"
},
{
"name": "21118",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/21118"
},
{
"name": "ADV-2006-2887",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/2887"
},
{
"name": "cisco-csmars-oracle-account(27810)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27810"
},
{
"name": "1016537",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1016537"
},
{
"name": "19073",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/19073"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-3732",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1 ships with an Oracle database that contains several default accounts and passwords, which allows attackers to obtain sensitive information."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "19071",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/19071"
},
{
"name": "20060719 Multiple Vulnerabilities in Cisco Security Monitoring, Analysis and Response System (CS-MARS)",
"refsource": "CISCO",
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml"
},
{
"name": "21118",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21118"
},
{
"name": "ADV-2006-2887",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/2887"
},
{
"name": "cisco-csmars-oracle-account(27810)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27810"
},
{
"name": "1016537",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1016537"
},
{
"name": "19073",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/19073"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-3732",
"datePublished": "2006-07-19T23:00:00.000Z",
"dateReserved": "2006-07-19T00:00:00.000Z",
"dateUpdated": "2024-08-07T18:39:53.891Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-3734 (GCVE-0-2006-3734)
Vulnerability from nvd – Published: 2006-07-19 23:00 – Updated: 2024-08-07 18:39
VLAI
EPSS
VEX
Summary
Multiple unspecified vulnerabilities in the Command Line Interface (CLI) for Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1, allow local CS-MARS administrators to execute arbitrary commands as root.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/19071 | vdb-entryx_refsource_BID |
| http://www.cisco.com/warp/public/707/cisco-sa-200… | vendor-advisoryx_refsource_CISCO |
| http://secunia.com/advisories/21118 | third-party-advisoryx_refsource_SECUNIA |
| http://www.vupen.com/english/advisories/2006/2887 | vdb-entryx_refsource_VUPEN |
| http://www.securityfocus.com/bid/19077 | vdb-entryx_refsource_BID |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://securitytracker.com/id?1016537 | vdb-entryx_refsource_SECTRACK |
Date Public
2006-07-19 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T18:39:54.011Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "19071",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/19071"
},
{
"name": "20060719 Multiple Vulnerabilities in Cisco Security Monitoring, Analysis and Response System (CS-MARS)",
"tags": [
"vendor-advisory",
"x_refsource_CISCO",
"x_transferred"
],
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml"
},
{
"name": "21118",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/21118"
},
{
"name": "ADV-2006-2887",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/2887"
},
{
"name": "19077",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/19077"
},
{
"name": "cisco-cli-command-execution(27812)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27812"
},
{
"name": "1016537",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1016537"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-07-19T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple unspecified vulnerabilities in the Command Line Interface (CLI) for Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1, allow local CS-MARS administrators to execute arbitrary commands as root."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-19T15:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "19071",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/19071"
},
{
"name": "20060719 Multiple Vulnerabilities in Cisco Security Monitoring, Analysis and Response System (CS-MARS)",
"tags": [
"vendor-advisory",
"x_refsource_CISCO"
],
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml"
},
{
"name": "21118",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/21118"
},
{
"name": "ADV-2006-2887",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/2887"
},
{
"name": "19077",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/19077"
},
{
"name": "cisco-cli-command-execution(27812)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27812"
},
{
"name": "1016537",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1016537"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-3734",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple unspecified vulnerabilities in the Command Line Interface (CLI) for Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1, allow local CS-MARS administrators to execute arbitrary commands as root."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "19071",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/19071"
},
{
"name": "20060719 Multiple Vulnerabilities in Cisco Security Monitoring, Analysis and Response System (CS-MARS)",
"refsource": "CISCO",
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml"
},
{
"name": "21118",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21118"
},
{
"name": "ADV-2006-2887",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/2887"
},
{
"name": "19077",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/19077"
},
{
"name": "cisco-cli-command-execution(27812)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27812"
},
{
"name": "1016537",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1016537"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-3734",
"datePublished": "2006-07-19T23:00:00.000Z",
"dateReserved": "2006-07-19T00:00:00.000Z",
"dateUpdated": "2024-08-07T18:39:54.011Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-0181 (GCVE-0-2006-0181)
Vulnerability from nvd – Published: 2006-01-12 11:00 – Updated: 2024-08-07 16:25
VLAI
EPSS
VEX
Summary
Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.1.3 has an undocumented administrative account with a default password, which allows local users to gain privileges via the expert command.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://securityreason.com/securityalert/335 | third-party-advisoryx_refsource_SREASON |
| http://www.securityfocus.com/bid/16211 | vdb-entryx_refsource_BID |
| http://securitytracker.com/id?1015471 | vdb-entryx_refsource_SECTRACK |
| http://www.vupen.com/english/advisories/2006/0154 | vdb-entryx_refsource_VUPEN |
| http://www.cisco.com/warp/public/707/cisco-sa-200… | vendor-advisoryx_refsource_CISCO |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://secunia.com/advisories/18424 | third-party-advisoryx_refsource_SECUNIA |
| http://seclists.org/bugtraq/2006/Jan/202 | mailing-listx_refsource_BUGTRAQ |
| http://www.osvdb.org/22346 | vdb-entryx_refsource_OSVDB |
Date Public
2006-01-11 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:25:33.895Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "335",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/335"
},
{
"name": "16211",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/16211"
},
{
"name": "1015471",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015471"
},
{
"name": "ADV-2006-0154",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0154"
},
{
"name": "20060111 Default Administrative Password in Cisco Security Monitoring, Analysis and Response System (CS-MARS)",
"tags": [
"vendor-advisory",
"x_refsource_CISCO",
"x_transferred"
],
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20060111-mars.shtml"
},
{
"name": "cisco-csmars-default-password(24065)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24065"
},
{
"name": "18424",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/18424"
},
{
"name": "20060112 Cisco, haven\u0027t we learned anything? (technician reset)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://seclists.org/bugtraq/2006/Jan/202"
},
{
"name": "22346",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22346"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-01-11T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.1.3 has an undocumented administrative account with a default password, which allows local users to gain privileges via the expert command."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-19T15:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "335",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/335"
},
{
"name": "16211",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/16211"
},
{
"name": "1015471",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015471"
},
{
"name": "ADV-2006-0154",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0154"
},
{
"name": "20060111 Default Administrative Password in Cisco Security Monitoring, Analysis and Response System (CS-MARS)",
"tags": [
"vendor-advisory",
"x_refsource_CISCO"
],
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20060111-mars.shtml"
},
{
"name": "cisco-csmars-default-password(24065)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24065"
},
{
"name": "18424",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/18424"
},
{
"name": "20060112 Cisco, haven\u0027t we learned anything? (technician reset)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://seclists.org/bugtraq/2006/Jan/202"
},
{
"name": "22346",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22346"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-0181",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.1.3 has an undocumented administrative account with a default password, which allows local users to gain privileges via the expert command."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "335",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/335"
},
{
"name": "16211",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/16211"
},
{
"name": "1015471",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015471"
},
{
"name": "ADV-2006-0154",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0154"
},
{
"name": "20060111 Default Administrative Password in Cisco Security Monitoring, Analysis and Response System (CS-MARS)",
"refsource": "CISCO",
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20060111-mars.shtml"
},
{
"name": "cisco-csmars-default-password(24065)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24065"
},
{
"name": "18424",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/18424"
},
{
"name": "20060112 Cisco, haven\u0027t we learned anything? (technician reset)",
"refsource": "BUGTRAQ",
"url": "http://seclists.org/bugtraq/2006/Jan/202"
},
{
"name": "22346",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22346"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-0181",
"datePublished": "2006-01-12T11:00:00.000Z",
"dateReserved": "2006-01-12T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:25:33.895Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2009-2977 (GCVE-0-2009-2977)
Vulnerability from cvelistv5 – Published: 2009-08-27 17:00 – Updated: 2024-08-07 06:07
VLAI
EPSS
VEX
Summary
The Cisco Security Monitoring, Analysis and Response System (CS-MARS) 6.0.4 and earlier stores cleartext passwords in log/sysbacktrace.## files within error-logs.tar.gz archives, which allows context-dependent attackers to obtain sensitive information by reading these files.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/36098 | vdb-entryx_refsource_BID |
| http://www.vupen.com/english/advisories/2009/2364 | vdb-entryx_refsource_VUPEN |
| http://www.securityfocus.com/archive/1/505998/100… | mailing-listx_refsource_BUGTRAQ |
| http://tools.cisco.com/Support/BugToolKit/search/… | x_refsource_CONFIRM |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/archive/1/505995/100… | mailing-listx_refsource_BUGTRAQ |
Date Public
2009-08-21 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T06:07:37.399Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "36098",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/36098"
},
{
"name": "ADV-2009-2364",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2009/2364"
},
{
"name": "20090821 Re: Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/505998/100/0/threaded"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails\u0026bugId=CSCtb52450"
},
{
"name": "csmars-sysbacktrace-info-disclosure(52913)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52913"
},
{
"name": "20090821 Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/505995/100/0/threaded"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2009-08-21T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The Cisco Security Monitoring, Analysis and Response System (CS-MARS) 6.0.4 and earlier stores cleartext passwords in log/sysbacktrace.## files within error-logs.tar.gz archives, which allows context-dependent attackers to obtain sensitive information by reading these files."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-10T18:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "36098",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/36098"
},
{
"name": "ADV-2009-2364",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2009/2364"
},
{
"name": "20090821 Re: Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/505998/100/0/threaded"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails\u0026bugId=CSCtb52450"
},
{
"name": "csmars-sysbacktrace-info-disclosure(52913)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52913"
},
{
"name": "20090821 Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/505995/100/0/threaded"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2009-2977",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Cisco Security Monitoring, Analysis and Response System (CS-MARS) 6.0.4 and earlier stores cleartext passwords in log/sysbacktrace.## files within error-logs.tar.gz archives, which allows context-dependent attackers to obtain sensitive information by reading these files."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "36098",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/36098"
},
{
"name": "ADV-2009-2364",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2009/2364"
},
{
"name": "20090821 Re: Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/505998/100/0/threaded"
},
{
"name": "http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails\u0026bugId=CSCtb52450",
"refsource": "CONFIRM",
"url": "http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails\u0026bugId=CSCtb52450"
},
{
"name": "csmars-sysbacktrace-info-disclosure(52913)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52913"
},
{
"name": "20090821 Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/505995/100/0/threaded"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2009-2977",
"datePublished": "2009-08-27T17:00:00.000Z",
"dateReserved": "2009-08-27T00:00:00.000Z",
"dateUpdated": "2024-08-07T06:07:37.399Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-3732 (GCVE-0-2006-3732)
Vulnerability from cvelistv5 – Published: 2006-07-19 23:00 – Updated: 2024-08-07 18:39
VLAI
EPSS
VEX
Summary
Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1 ships with an Oracle database that contains several default accounts and passwords, which allows attackers to obtain sensitive information.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/19071 | vdb-entryx_refsource_BID |
| http://www.cisco.com/warp/public/707/cisco-sa-200… | vendor-advisoryx_refsource_CISCO |
| http://secunia.com/advisories/21118 | third-party-advisoryx_refsource_SECUNIA |
| http://www.vupen.com/english/advisories/2006/2887 | vdb-entryx_refsource_VUPEN |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://securitytracker.com/id?1016537 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/bid/19073 | vdb-entryx_refsource_BID |
Date Public
2006-07-19 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T18:39:53.891Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "19071",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/19071"
},
{
"name": "20060719 Multiple Vulnerabilities in Cisco Security Monitoring, Analysis and Response System (CS-MARS)",
"tags": [
"vendor-advisory",
"x_refsource_CISCO",
"x_transferred"
],
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml"
},
{
"name": "21118",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/21118"
},
{
"name": "ADV-2006-2887",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/2887"
},
{
"name": "cisco-csmars-oracle-account(27810)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27810"
},
{
"name": "1016537",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1016537"
},
{
"name": "19073",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/19073"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-07-19T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1 ships with an Oracle database that contains several default accounts and passwords, which allows attackers to obtain sensitive information."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-19T15:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "19071",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/19071"
},
{
"name": "20060719 Multiple Vulnerabilities in Cisco Security Monitoring, Analysis and Response System (CS-MARS)",
"tags": [
"vendor-advisory",
"x_refsource_CISCO"
],
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml"
},
{
"name": "21118",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/21118"
},
{
"name": "ADV-2006-2887",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/2887"
},
{
"name": "cisco-csmars-oracle-account(27810)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27810"
},
{
"name": "1016537",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1016537"
},
{
"name": "19073",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/19073"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-3732",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1 ships with an Oracle database that contains several default accounts and passwords, which allows attackers to obtain sensitive information."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "19071",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/19071"
},
{
"name": "20060719 Multiple Vulnerabilities in Cisco Security Monitoring, Analysis and Response System (CS-MARS)",
"refsource": "CISCO",
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml"
},
{
"name": "21118",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21118"
},
{
"name": "ADV-2006-2887",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/2887"
},
{
"name": "cisco-csmars-oracle-account(27810)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27810"
},
{
"name": "1016537",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1016537"
},
{
"name": "19073",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/19073"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-3732",
"datePublished": "2006-07-19T23:00:00.000Z",
"dateReserved": "2006-07-19T00:00:00.000Z",
"dateUpdated": "2024-08-07T18:39:53.891Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-3734 (GCVE-0-2006-3734)
Vulnerability from cvelistv5 – Published: 2006-07-19 23:00 – Updated: 2024-08-07 18:39
VLAI
EPSS
VEX
Summary
Multiple unspecified vulnerabilities in the Command Line Interface (CLI) for Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1, allow local CS-MARS administrators to execute arbitrary commands as root.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/19071 | vdb-entryx_refsource_BID |
| http://www.cisco.com/warp/public/707/cisco-sa-200… | vendor-advisoryx_refsource_CISCO |
| http://secunia.com/advisories/21118 | third-party-advisoryx_refsource_SECUNIA |
| http://www.vupen.com/english/advisories/2006/2887 | vdb-entryx_refsource_VUPEN |
| http://www.securityfocus.com/bid/19077 | vdb-entryx_refsource_BID |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://securitytracker.com/id?1016537 | vdb-entryx_refsource_SECTRACK |
Date Public
2006-07-19 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T18:39:54.011Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "19071",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/19071"
},
{
"name": "20060719 Multiple Vulnerabilities in Cisco Security Monitoring, Analysis and Response System (CS-MARS)",
"tags": [
"vendor-advisory",
"x_refsource_CISCO",
"x_transferred"
],
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml"
},
{
"name": "21118",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/21118"
},
{
"name": "ADV-2006-2887",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/2887"
},
{
"name": "19077",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/19077"
},
{
"name": "cisco-cli-command-execution(27812)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27812"
},
{
"name": "1016537",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1016537"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-07-19T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple unspecified vulnerabilities in the Command Line Interface (CLI) for Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1, allow local CS-MARS administrators to execute arbitrary commands as root."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-19T15:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "19071",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/19071"
},
{
"name": "20060719 Multiple Vulnerabilities in Cisco Security Monitoring, Analysis and Response System (CS-MARS)",
"tags": [
"vendor-advisory",
"x_refsource_CISCO"
],
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml"
},
{
"name": "21118",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/21118"
},
{
"name": "ADV-2006-2887",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/2887"
},
{
"name": "19077",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/19077"
},
{
"name": "cisco-cli-command-execution(27812)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27812"
},
{
"name": "1016537",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1016537"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-3734",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple unspecified vulnerabilities in the Command Line Interface (CLI) for Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1, allow local CS-MARS administrators to execute arbitrary commands as root."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "19071",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/19071"
},
{
"name": "20060719 Multiple Vulnerabilities in Cisco Security Monitoring, Analysis and Response System (CS-MARS)",
"refsource": "CISCO",
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml"
},
{
"name": "21118",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21118"
},
{
"name": "ADV-2006-2887",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/2887"
},
{
"name": "19077",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/19077"
},
{
"name": "cisco-cli-command-execution(27812)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27812"
},
{
"name": "1016537",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1016537"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-3734",
"datePublished": "2006-07-19T23:00:00.000Z",
"dateReserved": "2006-07-19T00:00:00.000Z",
"dateUpdated": "2024-08-07T18:39:54.011Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-0181 (GCVE-0-2006-0181)
Vulnerability from cvelistv5 – Published: 2006-01-12 11:00 – Updated: 2024-08-07 16:25
VLAI
EPSS
VEX
Summary
Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.1.3 has an undocumented administrative account with a default password, which allows local users to gain privileges via the expert command.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://securityreason.com/securityalert/335 | third-party-advisoryx_refsource_SREASON |
| http://www.securityfocus.com/bid/16211 | vdb-entryx_refsource_BID |
| http://securitytracker.com/id?1015471 | vdb-entryx_refsource_SECTRACK |
| http://www.vupen.com/english/advisories/2006/0154 | vdb-entryx_refsource_VUPEN |
| http://www.cisco.com/warp/public/707/cisco-sa-200… | vendor-advisoryx_refsource_CISCO |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://secunia.com/advisories/18424 | third-party-advisoryx_refsource_SECUNIA |
| http://seclists.org/bugtraq/2006/Jan/202 | mailing-listx_refsource_BUGTRAQ |
| http://www.osvdb.org/22346 | vdb-entryx_refsource_OSVDB |
Date Public
2006-01-11 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:25:33.895Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "335",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/335"
},
{
"name": "16211",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/16211"
},
{
"name": "1015471",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015471"
},
{
"name": "ADV-2006-0154",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0154"
},
{
"name": "20060111 Default Administrative Password in Cisco Security Monitoring, Analysis and Response System (CS-MARS)",
"tags": [
"vendor-advisory",
"x_refsource_CISCO",
"x_transferred"
],
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20060111-mars.shtml"
},
{
"name": "cisco-csmars-default-password(24065)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24065"
},
{
"name": "18424",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/18424"
},
{
"name": "20060112 Cisco, haven\u0027t we learned anything? (technician reset)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://seclists.org/bugtraq/2006/Jan/202"
},
{
"name": "22346",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22346"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-01-11T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.1.3 has an undocumented administrative account with a default password, which allows local users to gain privileges via the expert command."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-19T15:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "335",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/335"
},
{
"name": "16211",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/16211"
},
{
"name": "1015471",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015471"
},
{
"name": "ADV-2006-0154",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0154"
},
{
"name": "20060111 Default Administrative Password in Cisco Security Monitoring, Analysis and Response System (CS-MARS)",
"tags": [
"vendor-advisory",
"x_refsource_CISCO"
],
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20060111-mars.shtml"
},
{
"name": "cisco-csmars-default-password(24065)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24065"
},
{
"name": "18424",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/18424"
},
{
"name": "20060112 Cisco, haven\u0027t we learned anything? (technician reset)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://seclists.org/bugtraq/2006/Jan/202"
},
{
"name": "22346",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22346"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-0181",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.1.3 has an undocumented administrative account with a default password, which allows local users to gain privileges via the expert command."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "335",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/335"
},
{
"name": "16211",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/16211"
},
{
"name": "1015471",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015471"
},
{
"name": "ADV-2006-0154",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0154"
},
{
"name": "20060111 Default Administrative Password in Cisco Security Monitoring, Analysis and Response System (CS-MARS)",
"refsource": "CISCO",
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20060111-mars.shtml"
},
{
"name": "cisco-csmars-default-password(24065)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24065"
},
{
"name": "18424",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/18424"
},
{
"name": "20060112 Cisco, haven\u0027t we learned anything? (technician reset)",
"refsource": "BUGTRAQ",
"url": "http://seclists.org/bugtraq/2006/Jan/202"
},
{
"name": "22346",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22346"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-0181",
"datePublished": "2006-01-12T11:00:00.000Z",
"dateReserved": "2006-01-12T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:25:33.895Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}