GCVE - cpe:2.3:h:cisco:cs-mars:4.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:cisco:cs-mars:4.1:*:*:*:*:*:*:*

part: h version: 4.1 update: *

Vendor	Cisco (`e1b3baff-aaf9-56a6-a68a-41e28ce616a5`)
Product	Cs Mars (`c51d0a10-d2fb-5734-b34a-56a61e6af634`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-2977`	vulnerable	2026-06-08 04:51:31.623814	Details available The Cisco Security Monitoring, Analysis and Response System (CS-MARS) 6.0.4 and earlier stores cleartext passwords in log/sysbacktrace.## files within error-logs.tar.gz archives, which allows context-dependent attackers to obtain sensitive information by reading these files. Published: 2009-08-27T17:00:00.000Z Updated: 2024-08-07T06:07:37.399Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/36098 http://www.vupen.com/english/advisories/2009/2364 http://www.securityfocus.com/archive/1/505998/100/0/threaded http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtb52450 https://exchange.xforce.ibmcloud.com/vulnerabilities/52913	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3734`	vulnerable	2026-06-08 04:49:10.030284	Details available Multiple unspecified vulnerabilities in the Command Line Interface (CLI) for Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1, allow local CS-MARS administrators to execute arbitrary commands as root. Published: 2006-07-19T23:00:00.000Z Updated: 2024-08-07T18:39:54.011Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/19071 http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml http://secunia.com/advisories/21118 http://www.vupen.com/english/advisories/2006/2887 http://www.securityfocus.com/bid/19077	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3732`	vulnerable	2026-06-08 04:49:10.026549	Details available Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1 ships with an Oracle database that contains several default accounts and passwords, which allows attackers to obtain sensitive information. Published: 2006-07-19T23:00:00.000Z Updated: 2024-08-07T18:39:53.891Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/19071 http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml http://secunia.com/advisories/21118 http://www.vupen.com/english/advisories/2006/2887 https://exchange.xforce.ibmcloud.com/vulnerabilities/27810	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0181`	vulnerable	2026-06-08 04:48:46.127466	Details available Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.1.3 has an undocumented administrative account with a default password, which allows local users to gain privileges via the expert command. Published: 2006-01-12T11:00:00.000Z Updated: 2024-08-07T16:25:33.895Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/335 http://www.securityfocus.com/bid/16211 http://securitytracker.com/id?1015471 http://www.vupen.com/english/advisories/2006/0154 http://www.cisco.com/warp/public/707/cisco-sa-20060111-mars.shtml	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.