CVE:CVE-2010-1577
CNNVD:CNNVD-201007-280
使用在Cisco Content Delivery System (CDS) 2.2.x, 2.3.x, 2.4.x以及2.5.7之前2.5.x 版本中中的Cisco Internet Streamer存在目录遍历漏洞。远程攻击者可以借助畸形的URL读取任意文件。
solution:Upgrade cisco internet_streamer to a higher version than 2.2(1,2.3(1,2.3(3,2.3(5,2.3(7,2.3(9,2.4(1,2.4(3,2.4(5,2.5(1,2.5(3,and avoid the version 2.2(1),2.3(1),2.3(3),2.3(5),2.3(7),2.3(9),2.4(1),2.4(3),2.4(5),2.5(1),2.5(3); Upgrade cisco content_delivery_system to a higher version than *