CVE-2009-2977
published 2009-08-27CVE-2009-2977: The Cisco Security Monitoring, Analysis and Response System (CS-MARS) 6.0.4 and earlier stores cleartext passwords in log/sysbacktrace.## files within…
PriorityP46low3.3CVSS 2.0
AVAACLAuNCPINAN
EPSS
0.53%
41.0th percentile
The Cisco Security Monitoring, Analysis and Response System (CS-MARS) 6.0.4 and earlier stores cleartext passwords in log/sysbacktrace.## files within error-logs.tar.gz archives, which allows context-dependent attackers to obtain sensitive information by reading these files.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | cs-mars | <= 6.0.4 | — |
| cisco | cs-mars | — | — |
| cisco | cs-mars | — | — |
| cisco | cs-mars | — | — |
| cisco | cs-mars | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtb52450http://www.securityfocus.com/archive/1/505995/100/0/threadedhttp://www.securityfocus.com/archive/1/505998/100/0/threadedhttp://www.securityfocus.com/bid/36098http://www.vupen.com/english/advisories/2009/2364https://exchange.xforce.ibmcloud.com/vulnerabilities/52913http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtb52450http://www.securityfocus.com/archive/1/505995/100/0/threadedhttp://www.securityfocus.com/archive/1/505998/100/0/threadedhttp://www.securityfocus.com/bid/36098http://www.vupen.com/english/advisories/2009/2364https://exchange.xforce.ibmcloud.com/vulnerabilities/52913
2009-08-27
Published