« Volver al listado

CVE-2014-0666

Estado: ModificadaMedia (4.3)—

Directory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2(.1) and earlier on Windows allows remote attackers to upload arbitrary types of files, and consequently execute arbitrary code, via modified packets, aka Bug ID CSCug48056.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cisco — Jabber

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-0666",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-01-16T19:55:04.730",
  "references": [
    {
      "url": "http://osvdb.org/102122",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://secunia.com/advisories/56331",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0666",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=32451",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/64965",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1029635",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90435",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://osvdb.org/102122",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/56331",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0666",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=32451",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/64965",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1029635",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90435",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Directory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2(.1) and earlier on Windows allows remote attackers to upload arbitrary types of files, and consequently execute arbitrary code, via modified packets, aka Bug ID CSCug48056."
    },
    {
      "lang": "es",
      "value": "Vulnerbailidad d erecorrido de directorios en la implementación de Send Screen Capture de Cisco Jabber 9.2(.1) y anteriores en Windows permite a atacantes remotos subir tipos de archivo arbitrarios, y consecuentemente ejecutar código de forma arbitraria, a través de paquetes modificados, tambien conocido como Bug ID CSCug48056."
    }
  ],
  "lastModified": "2026-06-17T00:03:27.770",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:jabber:*:-:-:*:-:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "31D1EF03-FF40-421B-8930-D6FB357FE9E8",
              "versionEndIncluding": "9.2\\(.1\\)"
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.0:-:-:*:-:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9C1BAB84-6EC4-44AC-BC0F-EF0A4AED83E6"
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.0\\(.0\\):-:-:*:-:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CD53E475-7F41-4722-9DC8-2CA4E06BA3D2"
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.0\\(.1\\):-:-:*:-:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1AEEB642-4B2A-46A0-A007-00F5271FB007"
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.0\\(.2\\):-:-:*:-:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "45EC995E-27E6-490A-B6FF-27E6A614D6A6"
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.0\\(.3\\):-:-:*:-:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1C8E025B-B512-4812-B893-6A91BA500B5B"
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.0\\(.4\\):-:-:*:-:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "39B05E17-DF9C-4FEE-963E-3F8EDC16A0DE"
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.0\\(.5\\):-:-:*:-:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EDDC24DC-08C4-40E7-BCD1-C8031AE46CEF"
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.1:-:-:*:-:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D976A52F-30A5-4390-9DEF-C196EFD72A9B"
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.1\\(.0\\):-:-:*:-:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CF652900-65FF-4599-929A-3E3F9E07138D"
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.1\\(.1\\):-:-:*:-:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "891CDFBD-8C70-4711-B90B-8734E39FA937"
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.1\\(.2\\):-:-:*:-:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "19615E29-B957-4904-9937-472752842FD1"
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.1\\(.3\\):-:-:*:-:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "41466543-F95C-48EC-BD65-65C1D20315CE"
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.1\\(.4\\):-:-:*:-:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1448DA4E-A06F-464E-8CDA-E2ADF3BB6429"
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.1\\(.5\\):-:-:*:-:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EC3FEAED-786F-41D7-A9F0-61ED0E9EAFBD"
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.2:-:-:*:-:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "89F425F6-62A3-496E-ACF6-9C2504B7F5EA"
            },
            {
              "criteria": "cpe:2.3:a:cisco:jabber:9.2\\(.0\\):-:-:*:-:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BD36095C-939A-4161-A0DA-DA514AA58A05"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}