CVE-2010-4303

 

Published at: - 22-11-2010 09:00

Last modified: - 23-01-2023 07:44

Total changes: - 8

Description

Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is used, uses world-readable permissions for the /etc/shadow file, which allows local users to discover encrypted passwords by reading this file, aka Bug ID CSCti54043.

Common Vulnerability Scoring System (CVSS)

AV:L/AC:L/Au:N/C:C/I:N/A:N

 

Verification logic

 

Reference

• 20101117 Cisco Unified Videoconferencing multiple vulnerabilities - CVE-2010-3037 CVE-2010-3038-
• 20101117 Multiple Vulnerabilities in Cisco Unified Videoconferencing Products-Vendor Advisory
• http://www.trustmatta.com/advisories/MATTA-2010-001.txt

 

Keywords

NVD

 

CVE-2010-4303

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures