Cisco Nexus OS 'section' and 'less' Local Command Injection Vulnerabilities
BID:50347
Info
Cisco Nexus OS 'section' and 'less' Local Command Injection Vulnerabilities
| Bugtraq ID: | 50347 |
| Class: | Input Validation Error |
| CVE: |
CVE-2011-2569 |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 24 2011 12:00AM |
| Updated: | Mar 19 2015 08:37AM |
| Credit: | Peter Adkins |
| Vulnerable: |
Cisco Unified Computing System (UCS) 2.0 Cisco Unified Computing System (UCS) 1.4(3s) Cisco Unified Computing System (UCS) 1.4(3q) Cisco Unified Computing System (UCS) 1.4(3m) Cisco Unified Computing System (UCS) 1.4(3l) Cisco Unified Computing System (UCS) 1.4(3i) Cisco Unified Computing System (UCS) 1.4(1m) Cisco Unified Computing System (UCS) 1.4(1j) Cisco Unified Computing System (UCS) 1.4(1i) Cisco Unified Computing System (UCS) 0 Cisco NX-OS 5.0(3)U1(2a) Cisco NX-OS 5.0(3)N2(1) Cisco NX-OS 5.0(3) Cisco NX-OS 5.0(2) Cisco NX-OS 5.0(0.54) Cisco NX-OS 5.0 Cisco NX-OS 4.2.1 Cisco NX-OS 4.2(5) Cisco NX-OS 4.2(4) Cisco NX-OS 4.2(3) Cisco NX-OS 4.2(2) Cisco NX-OS 4.1(4) Cisco NX-OS 4.1(3)N2(1a) Cisco NX-OS 4.0(1a)N2(1) Cisco NX-OS 0 Cisco Nexus 7000 0 Cisco Nexus 5000 0 Cisco Nexus 4000 0 Cisco Nexus 3000 0 Cisco Nexus 2000 0 Cisco Nexus 1000V 0 Cisco MDS 9000 Cisco MDS 0 |
| Not Vulnerable: |
Cisco Unified Computing System (UCS) 2.0(1m) Cisco NX-OS 5.2(1) Cisco NX-OS 5.1(3)N1(1) Cisco NX-OS 5.1(1) Cisco NX-OS 5.0(3)U2(1) Cisco NX-OS 4.2(6) Cisco NX-OS 4.2(1)SV1(5.1) Cisco NX-OS 4.2(1)N2(1) Cisco NX-OS 4.1(1)N2(1) |
Discussion
Cisco Nexus OS 'section' and 'less' Local Command Injection Vulnerabilities
Cisco Nexus OS is prone to multiple local command-injection vulnerabilities.
A local attacker can exploit these issues to execute arbitrary commands with administrative privileges. Successful exploits may compromise the affected computer.
Cisco MDS, UCS, Nexus 7000, 5000, 4000, 3000, 2000, and 1000V are vulnerable; other versions may also be affected.
Cisco Nexus OS is prone to multiple local command-injection vulnerabilities.
A local attacker can exploit these issues to execute arbitrary commands with administrative privileges. Successful exploits may compromise the affected computer.
Cisco MDS, UCS, Nexus 7000, 5000, 4000, 3000, 2000, and 1000V are vulnerable; other versions may also be affected.
Exploit / POC
Cisco Nexus OS 'section' and 'less' Local Command Injection Vulnerabilities
Attackers require local interactive access to exploit.
Attackers require local interactive access to exploit.
Solution / Fix
Cisco Nexus OS 'section' and 'less' Local Command Injection Vulnerabilities
Solution:
Vendor updates are available. Please contact the vendor for more information.
Solution:
Vendor updates are available. Please contact the vendor for more information.
References
Cisco Nexus OS 'section' and 'less' Local Command Injection Vulnerabilities
References:
References: