Cisco StarOS CVE-2018-0122 Local Arbitrary File Overwrite Vulnerability

Bugtraq ID:	103028
Class:	Input Validation Error
CVE:	CVE-2018-0122
Remote:	No
Local:	Yes
Published:	Feb 15 2018 12:00AM
Updated:	Feb 15 2018 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Cisco StarOS 0 Cisco ASR 5000 Series Software 0
Not Vulnerable:

Cisco StarOS CVE-2018-0122 Local Arbitrary File Overwrite Vulnerability

Cisco StarOS for ASR 5000 Series Aggregation Services Routers are prone to local arbitrary file-overwrite vulnerability because it fails to properly sanitize user-supplied data.

Attackers can overwrite arbitrary files on an unsuspecting user's computer in the context of the vulnerable application.

This issue is being tracked by Cisco Bug ID CSCvf93335.

Cisco StarOS CVE-2018-0122 Local Arbitrary File Overwrite Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco StarOS CVE-2018-0122 Local Arbitrary File Overwrite Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco StarOS CVE-2018-0122 Local Arbitrary File Overwrite Vulnerability

References:

• Cisco Homepage (Cisco)
  
• cisco-sa-20180207-asr: Cisco StarOS for Cisco ASR 5000 Series Aggregation Servic (Cisco)