Description
Multiple stack-based buffer overflows in agent.exe in Setup Manager in Cisco Intelligent Contact Manager (ICM) before 7.0 allow remote attackers to execute arbitrary code via a long parameter in a (1) HandleUpgradeAll, (2) AgentUpgrade, (3) HandleQueryNodeInfoReq, or (4) HandleUpgradeTrace TCP packet, aka Bug IDs CSCti45698, CSCti45715, CSCti45726, and CSCti46164.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.zerodayinitiative.com/advisories/ZDI-10-233/ ↗
- http://www.zerodayinitiative.com/advisories/ZDI-10-234/ ↗
- http://securitytracker.com/id?1024693 ↗
- http://tools.cisco.com/security/center/viewAlert.x?alertId=21726 ↗
- http://www.zerodayinitiative.com/advisories/ZDI-10-232/ ↗
- http://www.vupen.com/english/advisories/2010/2914 ↗
- http://secunia.com/advisories/42146 ↗
- http://www.securityfocus.com/bid/44699 ↗
- http://www.zerodayinitiative.com/advisories/ZDI-10-235/ ↗