Cisco Unified Communications Manager Multiple Local Privilege Escalation Vulnerabilities
BID:61291
Info
Cisco Unified Communications Manager Multiple Local Privilege Escalation Vulnerabilities
| Bugtraq ID: | 61291 |
| Class: | Design Error |
| CVE: |
CVE-2013-3403 |
| Remote: | No |
| Local: | Yes |
| Published: | Jul 17 2013 12:00AM |
| Updated: | Mar 19 2015 09:30AM |
| Credit: | This issue was disclosed by Lexfo security firm during the SSTIC 2013 IT security conference. |
| Vulnerable: |
Cisco Unified Communications Manager 8.6.3 Cisco Unified Communications Manager 8.6(2a)su1 Cisco Unified Communications Manager 8.6 Cisco Unified Communications Manager 8.5(1)SU2 Cisco Unified Communications Manager 8.5(1)SU1 Cisco Unified Communications Manager 8.5(1) Cisco Unified Communications Manager 8.5 Cisco Unified Communications Manager 8.0(3a)su3 Cisco Unified Communications Manager 8.0(3a)SU2 Cisco Unified Communications Manager 8.0(3a)su1 Cisco Unified Communications Manager 8.0(3a) Cisco Unified Communications Manager 8.0(3) Cisco Unified Communications Manager 8.0(2C)Su1 Cisco Unified Communications Manager 8.0(2C) Cisco Unified Communications Manager 8.0(1) Cisco Unified Communications Manager 8.0(0.98000.106) Cisco Unified Communications Manager 7.1(5b)su5 Cisco Unified Communications Manager 7.1(5b)SU4 Cisco Unified Communications Manager 7.1(5b)su3 Cisco Unified Communications Manager 7.1(5b)SU2 Cisco Unified Communications Manager 7.1(5B) Cisco Unified Communications Manager 7.1(5A) Cisco Unified Communications Manager 7.1(5)Su1a Cisco Unified Communications Manager 7.1(5)Su1 Cisco Unified Communications Manager 7.1(5) Cisco Unified Communications Manager 7.1(3b)su2 Cisco Unified Communications Manager 7.1(3b)su1 Cisco Unified Communications Manager 7.1(3B) Cisco Unified Communications Manager 7.1(3A)Su1a Cisco Unified Communications Manager 7.1(3a)su1 Cisco Unified Communications Manager 7.1(3A) Cisco Unified Communications Manager 7.1(3) |
| Not Vulnerable: | |
Discussion
Cisco Unified Communications Manager Multiple Local Privilege Escalation Vulnerabilities
Cisco Unified Communications Manager is prone to multiple local privilege-escalation vulnerabilities.
Local attackers can exploit these issues to gain elevated privileges. Successful exploits will result in the complete compromise of affected computers.
This issue is being tracked by Cisco Bug IDs CSCuh73454 and CSCuh87042.
Cisco Unified Communications Manager is prone to multiple local privilege-escalation vulnerabilities.
Local attackers can exploit these issues to gain elevated privileges. Successful exploits will result in the complete compromise of affected computers.
This issue is being tracked by Cisco Bug IDs CSCuh73454 and CSCuh87042.
Exploit / POC
Cisco Unified Communications Manager Multiple Local Privilege Escalation Vulnerabilities
The researcher who discovered this issue has developed exploit code to demonstrate this issue.
The researcher who discovered this issue has developed exploit code to demonstrate this issue.
Solution / Fix
Cisco Unified Communications Manager Multiple Local Privilege Escalation Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Cisco Unified Communications Manager Multiple Local Privilege Escalation Vulnerabilities
References:
References: