CVE:CVE-2009-1161
CNNVD:CNNVD-200905-260
CiscoWorks Common Services是CiscoWorks应用所共享的通用管理服务集。
如果启用了TFTP服务的话，远程攻击者可以通过向CiscoWorks Common Services的TFTP服务器提交恶意请求执行目录遍历攻击。成功利用这个漏洞可能允许攻击者获得非授权访问，查看或修改应用程序和主机操作系统文件。修改某些系统文件可能导致拒绝服务的情况。
solution:Upgrade cisco ciscoworks_common_services to a higher version than 3.0.3,3.0.4,3.0.5,3.0.6,3.1,3.1.1,3.2,and avoid the version 3.0.3,3.0.4,3.0.5,3.0.6,3.1,3.1.1,3.2; Upgrade cisco ciscoworks_health_and_utilization_monitor to a higher version than 1.0,1.1,and avoid the version 1.0,1.1; Upgrade cisco ciscoworks_lan_management_solution to a higher version than 2.5,2.6,3.0,3.1,and avoid the version 2.5,2.6,3.0,3.1; Upgrade cisco ciscoworks_qos_policy_manager to a higher version than 4.0,4.1,and avoid the version 4.0,4.1; Upgrade cisco ciscoworks_voice_manager to a higher version than 3.0,3.1,and avoid the version 3.0,3.1; Upgrade cisco security_manager to a higher version than 3.0,3.1,3.2,and avoid the version 3.0,3.1,3.2; Upgrade cisco telepresence_readiness_assessment_manager to a higher version than 1.0,and avoid the version 1.0; Upgrade cisco unified_operations_manager to a higher version than 1.0,1.1,2.0,2.1,and avoid the version 1.0,1.1,2.0,2.1; Upgrade cisco unified_provisioning_manager to a higher version than 1.0,1.1,1.2,1.3,and avoid the version 1.0,1.1,1.2,1.3; Upgrade cisco unified_service_monitor to a higher version than 1.0,1.1,2.0,2.1,and avoid the version 1.0,1.1,2.0,2.1