CVE-2011-2042
Severity Score
5.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The Sybase SQL Anywhere database component in Cisco CiscoWorks Common Services 3.x and 4.x before 4.1 allows remote attackers to obtain potentially sensitive information about the engine name and database port via an unspecified request to UDP port 2638, aka Bug ID CSCsk35018.
El componente de base de datos Sybase SQL Anywhere de Cisco CiscoWorks Common Services v3.x y v4.x anterior a v4.1 permite a atacantes remotos obtener información potencialmente sensible acerca del nombre del motor y el puerto de la base de datos a través de una petición no especificada para el puerto UDP 2638, también conocido como Bug ID CSCsk35018.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-05-10 CVE Reserved
- 2011-10-22 CVE Published
- 2024-09-17 CVE Updated
- 2024-09-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_common_services_software/3.3/release/notes/cs33rel.html | X_refsource_confirm |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Ciscoworks Common Services Search vendor "Cisco" for product "Ciscoworks Common Services" | 3.0 Search vendor "Cisco" for product "Ciscoworks Common Services" and version "3.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ciscoworks Common Services Search vendor "Cisco" for product "Ciscoworks Common Services" | 3.0.3 Search vendor "Cisco" for product "Ciscoworks Common Services" and version "3.0.3" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ciscoworks Common Services Search vendor "Cisco" for product "Ciscoworks Common Services" | 3.0.4 Search vendor "Cisco" for product "Ciscoworks Common Services" and version "3.0.4" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ciscoworks Common Services Search vendor "Cisco" for product "Ciscoworks Common Services" | 3.0.5 Search vendor "Cisco" for product "Ciscoworks Common Services" and version "3.0.5" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ciscoworks Common Services Search vendor "Cisco" for product "Ciscoworks Common Services" | 3.0.6 Search vendor "Cisco" for product "Ciscoworks Common Services" and version "3.0.6" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ciscoworks Common Services Search vendor "Cisco" for product "Ciscoworks Common Services" | 3.1 Search vendor "Cisco" for product "Ciscoworks Common Services" and version "3.1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ciscoworks Common Services Search vendor "Cisco" for product "Ciscoworks Common Services" | 3.1.1 Search vendor "Cisco" for product "Ciscoworks Common Services" and version "3.1.1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ciscoworks Common Services Search vendor "Cisco" for product "Ciscoworks Common Services" | 3.2 Search vendor "Cisco" for product "Ciscoworks Common Services" and version "3.2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ciscoworks Common Services Search vendor "Cisco" for product "Ciscoworks Common Services" | 3.3 Search vendor "Cisco" for product "Ciscoworks Common Services" and version "3.3" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ciscoworks Common Services Search vendor "Cisco" for product "Ciscoworks Common Services" | 4.0.1 Search vendor "Cisco" for product "Ciscoworks Common Services" and version "4.0.1" | - |
Affected
| ||||||