Exploit for Cisco Unified Communications Manager 8.0 - Invalid Argument Privilege Escalation

CVE-2010-3039

exploitdb · 2010-11-03

Description

Cisco Unified Communications Manager 8.0 Privilege Escalatio

Entry point

Parameter-i · path

Path/usr/local/cm/bin/pktCap_protectData

Cisco CUCM vulnerable to remote command execution via shell metacharacters in a request to the administrative interface (PoC uses -i";id") allowing arbitrary code execution with superuser privileges.

Affected Cisco Unified Communications Manager versions

Cisco Unified Communications Manager= 6.0, 6.1\(1\), 6.1\(1a\), 6.1\(1b\), 6.1\(2\), 6.1\(2\)su1, 6.1\(2\)su1a, 6.1\(3\), 6.1\(3a\), 6.1\(3b\), 6.1\(3b\)su1, 6.1\(4\), 6.1\(4\)su1, 6.1\(4a\), 6.1\(4a\)su2, 6.1\(5\)

All known vulnerabilities by product

Cisco Unified Communications Manager

CVSS 6.8 for CVE-2010-3039

6.8

MEDIUM SEVERITY

Version 2.0

VectorAV:L/AC:L/Au:S/C:C/I:C/A:C

EPSS Score

0.7%higher than 79.7% of all CVEs

Updated 2024-12-27

Exploit Details

Modified:2014-10-14 00:00

Last Seen:2026-07-24 05:38

Reporter:Knud Erik Hjgaard

Other exploits for CVE-2010-3039

Cisco Unified Communications Manager Privilege Escalation

2010-11-05 KnudPACKETSTORM

Exploit Code

MARKDOWN12 lines

## https://sploitus.com/exploit?id=EDB-ID:34954
source: https://www.securityfocus.com/bid/44672/info

Cisco Unified Communications Manager is prone to a local privilege-escalation vulnerability.

Attackers can exploit this issue to gain administrative access to the affected device and execute arbitrary code with superuser privileges. Successful exploits will lead to the complete compromise of the device.

This issue is tracked by Cisco Bug ID CSCti52041 and CSCti74930.

Cisco Unified Communications Manager 6, 7, and 8 are vulnerable.

/usr/local/cm/bin/pktCap_protectData -i";id"

Exploit Code

Share

Share on social media: