S-300: CiscoWorks Common Services Vulnerability


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-300: CiscoWorks Common Services Vulnerability
# 1  
Old 05-29-2008
S-300: CiscoWorks Common Services Vulnerability

CiscoWorks Common Services contains a vulnerability that could allow a remote attacker to execute arbitrary code. The risk is HIGH. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the user client machine.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

1 More Discussions You Might Find Interesting

1. IP Networking

Common Vulnerability

Hi there, I am trying to find info about the commonly used ports and how it can be vulnerable and to identify them? For example, I would like to identify how to man-in-the-middle using these ports 21(FTP),22(SSH),23(TELNET), (1 Reply)
Discussion started by: alvinoo
1 Replies
Login or Register to Ask a Question
ris(8)							      System Manager's Manual							    ris(8)

Name
       ris - remote installation services utility

Syntax
       /etc/ris

Description
       The  utility performs remote installation services which install system software to a client machine through the TCP/IP local network.  The
       client machine can be a VAX or a RISC machine.

       The server on which the remote installation services area is located can be either a VAX or a RISC machine.

       The remote installation services utility uses the directory as a base.  When you install the first product to the utility creates a  remote
       installation services area.  The area is called either or

       The  area contains one or more ULTRIX software products.  Each product contains the subsets of the kits that can be installed to clients on
       a network.  Clients registered for an area install software over the network to their processor.

       The utility performs the following functions:

       a -  Add client

       r -  Remove client

       s -  Show products in remote installation environments

       m -  Modify client

       i -  Install software

       You must use the utility interactively to set up a remote installation services area.  After you have set up a remote installation services
       area on the server, you can use the utility either interactively or from the command line to manage clients.

       The directory also holds a subdirectory, This directory contains a database file, that you can use to manage multiple clients.

Examples
       The example that follows invokes the utility interactively:
       # /etc/ris

       A menu appears from which you can select options to perform functions.

       The examples that follow manage the client using the command line.

       The syntax of the command to add a client follows:
       /etc/ris -a <clientname> -h <Ethernet_address> -p path,product[,product]

       The following command adds client and allows that client to install a product over the network:
       # /etc/ris -a bergal -h 08-00-2B-03-05-8B -p ris0.mips,product_1

       The syntax of the command to modify a client follows:
       /etc/ris -a <clientname> [-h <Ethernet_address>] [-p <path,product,product>]

       The following command modifies client and allows that client to install a product over the network:
       # /etc/ris -m bergal -p ris0.mips,product_2

       The syntax of the command to remove a client follows:
       /etc/ris -r <clientname>

       The following command removes client
       # /etc/ris -r bergal

Files
See Also
       setld(8)
       Guide to the Remote Installation Services
       Guide to Server Setup

																	    ris(8)