CVE-2010-3039

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-11-09 · updated 2026-06-16
Weakness: CWE-78

Description

/usr/local/cm/bin/pktCap_protectData in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6, 7, and 8 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in a request to the administrative interface, aka Bug IDs CSCti52041 and CSCti74930.

Affected products

Cisco Unified Communications Manager: 6.0, 6.1(1), 6.1(1a), 6.1(1b), 6.1(2), 6.1(2)su1 (+37)

References

http://seclists.org/fulldisclosure/2010/Nov/40
http://secunia.com/advisories/42129
http://tools.cisco.com/security/center/viewAlert.x?alertId=21656
http://www.nsense.fi/advisories/nsense_2010_003.txt
http://www.securityfocus.com/archive/1/514668/100/0/threaded
http://www.securityfocus.com/bid/44672
http://www.securitytracker.com/id?1024694
http://www.vupen.com/english/advisories/2010/2915
http://seclists.org/fulldisclosure/2010/Nov/40
http://secunia.com/advisories/42129
http://tools.cisco.com/security/center/viewAlert.x?alertId=21656
http://www.nsense.fi/advisories/nsense_2010_003.txt

Get alerted when CVE-2010-3039 or the next vulnerability affects your stack