CVEvulnerability
CVE-2010-0138
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-01-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 and earlier on Windows, as distributed in CiscoWorks LAN Management Solution (LMS), allows remote attackers to execute arbitrary code via a malformed getProcessName CORBA General Inter-ORB Protocol (GIOP) request, related to a "third-party component," aka Bug ID CSCsv62350.
Affected configurations
• cisco ciscoworks internetwork performance monitor (<= 2.6)
• cisco ciscoworks internetwork performance monitor 2.4
• cisco ciscoworks internetwork performance monitor 2.5
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/38230 Vendor Advisory
- http://securitytracker.com/id?1023484 securitytracker.com
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1351d.shtml Vendor Advisory
- http://www.securityfocus.com/bid/37879 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/0184 Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-10-004/ www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55768 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/38230 Vendor Advisory
- http://securitytracker.com/id?1023484 securitytracker.com
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1351d.shtml Vendor Advisory
- http://www.securityfocus.com/bid/37879 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/0184 Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-10-004/ www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55768 exchange.xforce.ibmcloud.com