{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2014-01-15T00:00:00", "descriptions": [{"lang": "en", "value": "Directory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2(.1) and earlier on Windows allows remote attackers to upload arbitrary types of files, and consequently execute arbitrary code, via modified packets, aka Bug ID CSCug48056."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-28T12:57:01", "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco"}, "references": [{"name": "1029635", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1029635"}, {"name": "20140115 Cisco Jabber for Windows Remote Code Execution Vulnerability", "tags": ["vendor-advisory", "x_refsource_CISCO"], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0666"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=32451"}, {"name": "56331", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/56331"}, {"name": "64965", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/64965"}, {"name": "cisco-jabber-cve20140666-code-exec(90435)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90435"}, {"name": "102122", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/102122"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@cisco.com", "ID": "CVE-2014-0666", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Directory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2(.1) and earlier on Windows allows remote attackers to upload arbitrary types of files, and consequently execute arbitrary code, via modified packets, aka Bug ID CSCug48056."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "1029635", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1029635"}, {"name": "20140115 Cisco Jabber for Windows Remote Code Execution Vulnerability", "refsource": "CISCO", "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0666"}, {"name": "http://tools.cisco.com/security/center/viewAlert.x?alertId=32451", "refsource": "CONFIRM", "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=32451"}, {"name": "56331", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/56331"}, {"name": "64965", "refsource": "BID", "url": "http://www.securityfocus.com/bid/64965"}, {"name": "cisco-jabber-cve20140666-code-exec(90435)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90435"}, {"name": "102122", "refsource": "OSVDB", "url": "http://osvdb.org/102122"}]}}}}, "cveMetadata": {"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "assignerShortName": "cisco", "cveId": "CVE-2014-0666", "datePublished": "2014-01-16T19:00:00", "dateReserved": "2014-01-02T00:00:00", "dateUpdated": "2017-08-28T12:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:jabber:*:-:-:*:-:windows:*:*", "matchCriteriaId": "31D1EF03-FF40-421B-8930-D6FB357FE9E8", "versionEndIncluding": "9.2\\(.1\\)", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:jabber:9.0:-:-:*:-:windows:*:*", "matchCriteriaId": "9C1BAB84-6EC4-44AC-BC0F-EF0A4AED83E6", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:jabber:9.0\\(.0\\):-:-:*:-:windows:*:*", "matchCriteriaId": "CD53E475-7F41-4722-9DC8-2CA4E06BA3D2", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:jabber:9.0\\(.1\\):-:-:*:-:windows:*:*", "matchCriteriaId": "1AEEB642-4B2A-46A0-A007-00F5271FB007", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:jabber:9.0\\(.2\\):-:-:*:-:windows:*:*", "matchCriteriaId": "45EC995E-27E6-490A-B6FF-27E6A614D6A6", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:jabber:9.0\\(.3\\):-:-:*:-:windows:*:*", "matchCriteriaId": "1C8E025B-B512-4812-B893-6A91BA500B5B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:jabber:9.0\\(.4\\):-:-:*:-:windows:*:*", "matchCriteriaId": "39B05E17-DF9C-4FEE-963E-3F8EDC16A0DE", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:jabber:9.0\\(.5\\):-:-:*:-:windows:*:*", "matchCriteriaId": "EDDC24DC-08C4-40E7-BCD1-C8031AE46CEF", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:jabber:9.1:-:-:*:-:windows:*:*", "matchCriteriaId": "D976A52F-30A5-4390-9DEF-C196EFD72A9B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:jabber:9.1\\(.0\\):-:-:*:-:windows:*:*", "matchCriteriaId": "CF652900-65FF-4599-929A-3E3F9E07138D", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:jabber:9.1\\(.1\\):-:-:*:-:windows:*:*", "matchCriteriaId": "891CDFBD-8C70-4711-B90B-8734E39FA937", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:jabber:9.1\\(.2\\):-:-:*:-:windows:*:*", "matchCriteriaId": "19615E29-B957-4904-9937-472752842FD1", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:jabber:9.1\\(.3\\):-:-:*:-:windows:*:*", "matchCriteriaId": "41466543-F95C-48EC-BD65-65C1D20315CE", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:jabber:9.1\\(.4\\):-:-:*:-:windows:*:*", "matchCriteriaId": "1448DA4E-A06F-464E-8CDA-E2ADF3BB6429", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:jabber:9.1\\(.5\\):-:-:*:-:windows:*:*", "matchCriteriaId": "EC3FEAED-786F-41D7-A9F0-61ED0E9EAFBD", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:jabber:9.2:-:-:*:-:windows:*:*", "matchCriteriaId": "89F425F6-62A3-496E-ACF6-9C2504B7F5EA", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:jabber:9.2\\(.0\\):-:-:*:-:windows:*:*", "matchCriteriaId": "BD36095C-939A-4161-A0DA-DA514AA58A05", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Directory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2(.1) and earlier on Windows allows remote attackers to upload arbitrary types of files, and consequently execute arbitrary code, via modified packets, aka Bug ID CSCug48056."}, {"lang": "es", "value": "Vulnerbailidad d erecorrido de directorios en la implementaci\u00f3n de Send Screen Capture de Cisco Jabber 9.2(.1) y anteriores en Windows permite a atacantes remotos subir tipos de archivo arbitrarios, y consecuentemente ejecutar c\u00f3digo de forma arbitraria, a trav\u00e9s de paquetes modificados, tambien conocido como Bug ID CSCug48056."}], "id": "CVE-2014-0666", "lastModified": "2017-08-29T01:34:14.543", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2014-01-16T19:55:04.730", "references": [{"source": "ykramarz@cisco.com", "url": "http://osvdb.org/102122"}, {"source": "ykramarz@cisco.com", "url": "http://secunia.com/advisories/56331"}, {"source": "ykramarz@cisco.com", "tags": ["Vendor Advisory"], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0666"}, {"source": "ykramarz@cisco.com", "tags": ["Vendor Advisory"], "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=32451"}, {"source": "ykramarz@cisco.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/64965"}, {"source": "ykramarz@cisco.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1029635"}, {"source": "ykramarz@cisco.com", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90435"}], "sourceIdentifier": "ykramarz@cisco.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}