Description
Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 creates a process that executes a command shell and listens on a randomly chosen TCP port, which allows remote attackers to execute arbitrary commands.
References
- 20080313 CiscoWorks Internetwork Performance Monitor Remote Command Execution Vulnerability vendor-advisory
- ADV-2008-0876 vdb-entry
- cisco-ciscoworks-ipm-command-execution(41208) vdb-entry
- 1019611 vdb-entry
- 28249 vdb-entry
- 29376 third-party-advisory