CVE-2010-4303

Published: Nov 22, 2010Modified: Apr 29, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:C/I:N/A:N

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is used, uses world-readable permissions for the /etc/shadow file, which allows local users to discover encrypted passwords by reading this file, aka Bug ID CSCti54043.

Affected (4)

Products: Cisco: Unified Videoconferencing System 5110 Firmware, Unified Videoconferencing System 5115 Firmware, Unified Videoconferencing System 5110, Unified Videoconferencing System 5115

Cisco

4 products

Unified Videoconferencing System 5110 Firmware

Unified Videoconferencing System 5115 Firmware

Unified Videoconferencing System 5110

Unified Videoconferencing System 5115

Configuration A

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cisco Unified Videoconferencing System 5110 Firmware	Version 7.0.1.13.3
Cisco Unified Videoconferencing System 5115 Firmware	Version 7.0.1.13.3
Cisco Unified Videoconferencing System 5110	All versions
Cisco Unified Videoconferencing System 5115	All versions