CVE-2010-4680

Public PoC / Exploit

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The WebVPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permits the viewing of CIFS shares even when CIFS file browsing has been disabled, which allows remote authenticated users to bypass intended access restrictions via CIFS requests, aka Bug ID CSCsz80777.

Weaknesses (CWE)

CWE-264

Affected Products (58)

cisco · adaptive_security_appliance_softwarevulnerable

cisco · adaptive_security_appliance_software

References (10)

http://secunia.com/advisories/42931

http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf

http://www.securityfocus.com/bid/45767

http://www.securitytracker.com/id?1024963

https://exchange.xforce.ibmcloud.com/vulnerabilities/64606

http://secunia.com/advisories/42931

http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf

http://www.securityfocus.com/bid/45767

http://www.securitytracker.com/id?1024963

https://exchange.xforce.ibmcloud.com/vulnerabilities/64606