CVE-2008-1157

Published: Mar 14, 2008Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 creates a process that executes a command shell and listens on a randomly chosen TCP port, which allows remote attackers to execute arbitrary commands.

Affected (1)

Products: Cisco: Ciscoworks Internetwork Performance Monitor

Cisco

1 product

Ciscoworks Internetwork Performance Monitor

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cisco Ciscoworks Internetwork Performance Monitor	Version 2.6

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (12)

http://secunia.com/advisories/29376

Source: psirt@cisco.com

Vendor Advisory

http://www.cisco.com/warp/public/707/cisco-sa-20080313-ipm.shtml

Source: psirt@cisco.com

PatchVendor Advisory

http://www.securityfocus.com/bid/28249

Source: psirt@cisco.com

Patch

http://www.securitytracker.com/id?1019611

Source: psirt@cisco.com

http://www.vupen.com/english/advisories/2008/0876/references

Source: psirt@cisco.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/41208

Source: psirt@cisco.com

http://secunia.com/advisories/29376