Details of VAR-200110-0032

ID

VAR-200110-0032

CVE

CVE-2001-0753

TITLE

Cisco CBOS Password get elevated privilege vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200110-113

DESCRIPTION

Cisco CBOS 2.3.8 and earlier stores the passwords for (1) exec and (2) enable in cleartext in the NVRAM and a configuration file, which could allow unauthorized users to obtain the passwords and gain privileges. CBOS is prone to a remote security vulnerability

Trust: 1.26

sources: NVD: CVE-2001-0753 // BID: 89090 // VULHUB: VHN-3561

AFFECTED PRODUCTS

vendor:	cisco	model:	cbos	scope:	lte	version:	2.3.8	Trust: 1.0
vendor:	cisco	model:	cbos	scope:	eq	version:	2.3.8	Trust: 0.9

sources: BID: 89090 // CNNVD: CNNVD-200110-113 // NVD: CVE-2001-0753

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2001-0753
value:	HIGH
Trust: 1.0
CNNVD:	CNNVD-200110-113
value:	HIGH
Trust: 0.6
VULHUB:	VHN-3561
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2001-0753
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
VULHUB:	VHN-3561
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-3561 // CNNVD: CNNVD-200110-113 // NVD: CVE-2001-0753

PROBLEMTYPE DATA

problemtype:

NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2001-0753

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200110-113

TYPE

unknown

Trust: 0.6

sources: CNNVD: CNNVD-200110-113

EXTERNAL IDS

db:	NVD	id:	CVE-2001-0753	Trust: 2.0
db:	XF	id:	44544	Trust: 0.9
db:	CNNVD	id:	CNNVD-200110-113	Trust: 0.7
db:	CISCO	id:	20010522 MORE MULTIPLE VULNERABILITIES IN CBOS	Trust: 0.6
db:	BID	id:	89090	Trust: 0.4
db:	VULHUB	id:	VHN-3561	Trust: 0.1

sources: VULHUB: VHN-3561 // BID: 89090 // CNNVD: CNNVD-200110-113 // NVD: CVE-2001-0753

REFERENCES

url:	http://www.cisco.com/warp/public/707/cbos-multiple2-pub.html	Trust: 3.0
url:	https://exchange.xforce.ibmcloud.com/vulnerabilities/44544	Trust: 2.1
url:	http://xforce.iss.net/xforce/xfdb/44544	Trust: 0.9

sources: VULHUB: VHN-3561 // BID: 89090 // CNNVD: CNNVD-200110-113 // NVD: CVE-2001-0753

CREDITS

Unknown

Trust: 0.3

sources: BID: 89090

SOURCES

db:	VULHUB	id:	VHN-3561
db:	BID	id:	89090
db:	CNNVD	id:	CNNVD-200110-113
db:	NVD	id:	CVE-2001-0753

LAST UPDATE DATE

2024-11-22T21:32:07.448000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-3561	date:	2017-07-11T00:00:00
db:	BID	id:	89090	date:	2001-10-18T00:00:00
db:	CNNVD	id:	CNNVD-200110-113	date:	2005-10-20T00:00:00
db:	NVD	id:	CVE-2001-0753	date:	2024-11-20T23:36:04.643

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-3561	date:	2001-10-18T00:00:00
db:	BID	id:	89090	date:	2001-10-18T00:00:00
db:	CNNVD	id:	CNNVD-200110-113	date:	2001-10-18T00:00:00
db:	NVD	id:	CVE-2001-0753	date:	2001-10-18T04:00:00