CVE-2010-0138

Buffer overflow in Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 and earlier on Windows, as distributed in CiscoWorks LAN Management Solution (LMS), allows remote attackers to execute arbitrary code via a malformed getProcessName CORBA General Inter-ORB Protocol (GIOP) request, related to a "third-party component," aka Bug ID CSCsv62350.

• CWE-119

• http://secunia.com/advisories/38230Vendor Advisory
• http://securitytracker.com/id?1023484
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1351d.shtmlVendor Advisory
• http://www.securityfocus.com/bid/37879
• http://www.vupen.com/english/advisories/2010/0184Vendor Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-10-004/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55768
• http://secunia.com/advisories/38230Vendor Advisory
• http://securitytracker.com/id?1023484
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1351d.shtmlVendor Advisory
• http://www.securityfocus.com/bid/37879
• http://www.vupen.com/english/advisories/2010/0184Vendor Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-10-004/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55768

Published

Jan 21, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-0132Cross-site scripting (XSS) vulnerability in ViewVC 1.1 befor…
• CVE-2010-0133Multiple stack-based buffer overflows in the SpreadSheet Lot…
• CVE-2010-0134Integer signedness error in rtfsr.dll in Autonomy KeyView 10…
• CVE-2010-0135Heap-based buffer overflow in the WordPerfect 5.x reader (wo…
• CVE-2010-0136OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not proper…
• CVE-2010-0137Unspecified vulnerability in the sshd_child_handler process …
• CVE-2010-0139Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 be…
• CVE-2010-0140Multiple unspecified vulnerabilities in the web server in Ci…
• CVE-2010-0141MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and …
• CVE-2010-0142MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and …
• CVE-2010-0143Unspecified vulnerability in the administrative interface in…
• CVE-2010-0144Unspecified vulnerability in the WebSafe DistributorServlet …