Unscored CVE-2010-4303 EUVD-2010-4276GHSA-w4wc-65m4-3m6g

Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is used, uses world-readable permissions for th…

Published Nov 22, 2010 · Updated Sep 16, 2024 · Assigned by mitre

Description

Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is used, uses world-readable permissions for the /etc/shadow file, which allows local users to discover encrypted passwords by reading this file, aka Bug ID CSCti54043.

References

http://www.trustmatta.com/advisories/MATTA-2010-001.txt
20101117 Multiple Vulnerabilities in Cisco Unified Videoconferencing Products vendor-advisory
20101117 Cisco Unified Videoconferencing multiple vulnerabilities - CVE-2010-3037 CVE-2010-3038 mailing-list