CVE-2010-0440
Published Feb 3, 2010
Last updated a year ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in +CSCOT+/translation in Cisco Secure Desktop 3.4.2048, and other versions before 3.5; as used in Cisco ASA appliance before 8.2(1), 8.1(2.7), and 8.0(5); allows remote attackers to inject arbitrary web script or HTML via a crafted POST parameter, which is not properly handled by an eval statement in binary/mainv.js that writes to start.html.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Evaluator
- Comment
- -
- Impact
- Per: http://tools.cisco.com/security/center/viewAlert.x?alertId=19843 "Cisco Secure Desktop versions prior to 3.5 are vulnerable. Cisco Secure Desktop is a component of Cisco ASA 5500 Series Adaptive Security Appliances. Cisco ASA appliances are vulnerable only if the Cisco Secure Desktop feature has been enabled. Cisco ASA appliance versions prior to 8.2(1), 8.1(2.7), and 8.0(5) are vulnerable."
- Solution
- Per: http://tools.cisco.com/security/center/viewAlert.x?alertId=19843 "Cisco Secure Desktop versions prior to 3.5 are vulnerable. Cisco Secure Desktop is a component of Cisco ASA 5500 Series Adaptive Security Appliances. Cisco ASA appliances are vulnerable only if the Cisco Secure Desktop feature has been enabled. Cisco ASA appliance versions prior to 8.2(1), 8.1(2.7), and 8.0(5) are vulnerable."
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:secure_desktop:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2DC48C90-696C-482D-B660-492F8BBECEC0",
"versionEndExcluding": "3.5"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "94AC3E6A-FB01-49C9-A544-7EC0F2C65BD7",
"versionEndExcluding": "8.1\\(2.7\\)",
"versionStartIncluding": "8.1"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A2AA086-59B1-40A1-9FF5-53A1E55038B7",
"versionEndExcluding": "8.0\\(5\\)",
"versionStartIncluding": "8.0"
},
{
"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8EA8D2A3-7F68-44E6-9E8E-D64A0C920772",
"versionEndExcluding": "8.2\\(1\\)",
"versionStartIncluding": "8.2"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:asa_5500:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7018906A-ACDF-4D7B-B816-ED9C235BF04E"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]