Unscored CVE-2008-3820 EUVD-2008-3806GHSA-fr66-q3h8-gpgg

Cisco Security Manager 3.1 and 3.2 before 3.2.2, when Cisco IPS Event Viewer (IEV) is used, exposes TCP ports used by the MySQL daemon and …

Published Jan 22, 2009 · Updated Aug 7, 2024 · Assigned by cisco

Description

Cisco Security Manager 3.1 and 3.2 before 3.2.2, when Cisco IPS Event Viewer (IEV) is used, exposes TCP ports used by the MySQL daemon and IEV server, which allows remote attackers to obtain "root access" to IEV via unspecified use of TCP sessions to these ports.

References

33381 vdb-entry
cisco-securitymanager-iev-weak-security(48134) vdb-entry
1021619 vdb-entry
ADV-2009-0214 vdb-entry
33633 third-party-advisory
20090121 Cisco Security Manager Vulnerability vendor-advisory