FKIE_CVE-2014-0666

Vulnerability from fkie_nvd - Published: 2014-01-16 19:55 - Updated: 2025-04-11 00:51
Severity ?
Summary
Directory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2(.1) and earlier on Windows allows remote attackers to upload arbitrary types of files, and consequently execute arbitrary code, via modified packets, aka Bug ID CSCug48056.
References
psirt@cisco.comhttp://osvdb.org/102122
psirt@cisco.comhttp://secunia.com/advisories/56331
psirt@cisco.comhttp://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0666Vendor Advisory
psirt@cisco.comhttp://tools.cisco.com/security/center/viewAlert.x?alertId=32451Vendor Advisory
psirt@cisco.comhttp://www.securityfocus.com/bid/64965Third Party Advisory, VDB Entry
psirt@cisco.comhttp://www.securitytracker.com/id/1029635Third Party Advisory, VDB Entry
psirt@cisco.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/90435
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/102122
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/56331
af854a3a-2127-422b-91ae-364da2661108http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0666Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://tools.cisco.com/security/center/viewAlert.x?alertId=32451Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/64965Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id/1029635Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/90435
Impacted products
Vendor Product Version
cisco jabber *
cisco jabber 9.0
cisco jabber 9.0\(.0\)
cisco jabber 9.0\(.1\)
cisco jabber 9.0\(.2\)
cisco jabber 9.0\(.3\)
cisco jabber 9.0\(.4\)
cisco jabber 9.0\(.5\)
cisco jabber 9.1
cisco jabber 9.1\(.0\)
cisco jabber 9.1\(.1\)
cisco jabber 9.1\(.2\)
cisco jabber 9.1\(.3\)
cisco jabber 9.1\(.4\)
cisco jabber 9.1\(.5\)
cisco jabber 9.2
cisco jabber 9.2\(.0\)
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:jabber:*:-:-:*:-:windows:*:*",
              "matchCriteriaId": "31D1EF03-FF40-421B-8930-D6FB357FE9E8",
              "versionEndIncluding": "9.2\\(.1\\)",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.0:-:-:*:-:windows:*:*",
              "matchCriteriaId": "9C1BAB84-6EC4-44AC-BC0F-EF0A4AED83E6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.0\\(.0\\):-:-:*:-:windows:*:*",
              "matchCriteriaId": "CD53E475-7F41-4722-9DC8-2CA4E06BA3D2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.0\\(.1\\):-:-:*:-:windows:*:*",
              "matchCriteriaId": "1AEEB642-4B2A-46A0-A007-00F5271FB007",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.0\\(.2\\):-:-:*:-:windows:*:*",
              "matchCriteriaId": "45EC995E-27E6-490A-B6FF-27E6A614D6A6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.0\\(.3\\):-:-:*:-:windows:*:*",
              "matchCriteriaId": "1C8E025B-B512-4812-B893-6A91BA500B5B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.0\\(.4\\):-:-:*:-:windows:*:*",
              "matchCriteriaId": "39B05E17-DF9C-4FEE-963E-3F8EDC16A0DE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.0\\(.5\\):-:-:*:-:windows:*:*",
              "matchCriteriaId": "EDDC24DC-08C4-40E7-BCD1-C8031AE46CEF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.1:-:-:*:-:windows:*:*",
              "matchCriteriaId": "D976A52F-30A5-4390-9DEF-C196EFD72A9B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.1\\(.0\\):-:-:*:-:windows:*:*",
              "matchCriteriaId": "CF652900-65FF-4599-929A-3E3F9E07138D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.1\\(.1\\):-:-:*:-:windows:*:*",
              "matchCriteriaId": "891CDFBD-8C70-4711-B90B-8734E39FA937",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.1\\(.2\\):-:-:*:-:windows:*:*",
              "matchCriteriaId": "19615E29-B957-4904-9937-472752842FD1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.1\\(.3\\):-:-:*:-:windows:*:*",
              "matchCriteriaId": "41466543-F95C-48EC-BD65-65C1D20315CE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.1\\(.4\\):-:-:*:-:windows:*:*",
              "matchCriteriaId": "1448DA4E-A06F-464E-8CDA-E2ADF3BB6429",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.1\\(.5\\):-:-:*:-:windows:*:*",
              "matchCriteriaId": "EC3FEAED-786F-41D7-A9F0-61ED0E9EAFBD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.2:-:-:*:-:windows:*:*",
              "matchCriteriaId": "89F425F6-62A3-496E-ACF6-9C2504B7F5EA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.2\\(.0\\):-:-:*:-:windows:*:*",
              "matchCriteriaId": "BD36095C-939A-4161-A0DA-DA514AA58A05",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Directory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2(.1) and earlier on Windows allows remote attackers to upload arbitrary types of files, and consequently execute arbitrary code, via modified packets, aka Bug ID CSCug48056."
    },
    {
      "lang": "es",
      "value": "Vulnerbailidad d erecorrido de directorios en la implementaci\u00f3n de Send Screen Capture de Cisco Jabber 9.2(.1) y anteriores en Windows permite a atacantes remotos subir tipos de archivo arbitrarios, y consecuentemente ejecutar c\u00f3digo de forma arbitraria, a trav\u00e9s de paquetes modificados, tambien conocido como Bug ID CSCug48056."
    }
  ],
  "id": "CVE-2014-0666",
  "lastModified": "2025-04-11T00:51:21.963",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2014-01-16T19:55:04.730",
  "references": [
    {
      "source": "psirt@cisco.com",
      "url": "http://osvdb.org/102122"
    },
    {
      "source": "psirt@cisco.com",
      "url": "http://secunia.com/advisories/56331"
    },
    {
      "source": "psirt@cisco.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0666"
    },
    {
      "source": "psirt@cisco.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=32451"
    },
    {
      "source": "psirt@cisco.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/64965"
    },
    {
      "source": "psirt@cisco.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1029635"
    },
    {
      "source": "psirt@cisco.com",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90435"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/102122"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/56331"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0666"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=32451"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/64965"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1029635"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90435"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.