NVD

Id
50194  
Name
CVE-2009-2977  
Description
The Cisco Security Monitoring, Analysis and Response System (CS-MARS) 6.0.4 and earlier stores cleartext passwords in log/sysbacktrace.## files within error-logs.tar.gz archives, which allows context-dependent attackers to obtain sensitive information by reading these files.  
Reject
 
CVSS Version
2  
CVSS Score
3.3  
Severity
Low  
CVSS Base Score
3.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.5  
CVSS Vector
(AV:A/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-08-27  
Modified Date
2009-09-04  
Seq
2009-2977  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
254060 50194 CVE-2009-2977 http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtb52450  View
254061 50194 CVE-2009-2977 20090821 Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier  View
254062 50194 CVE-2009-2977 20090821 Re: Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier  View
254063 50194 CVE-2009-2977 36098  View
254064 50194 CVE-2009-2977 ADV-2009-2364  View
254065 50194 CVE-2009-2977 csmars-sysbacktrace-info-disclosure(52913)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41682 JVNDB-2009-002689 Cisco Security Monitoring, Analysis and Response System における重要な情報を取得される脆弱性 Cisco Security Monitoring, Analysis and Response System は、error-logs.tar.gz アーカイブの log/sysbacktrace.## ファイル 内に平文パスワードを格納するため、重要な情報を取得される脆弱性が存在します。 CVE-2009-2977 40408 CVE-2009-2977 50194 3.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002689.html 2009-08-27 2011-09-21 View