Cisco Unified Computing System CVE-2012-4093 Local Denial of Service Vulnerability

Bugtraq ID:	62456
Class:	Input Validation Error
CVE:	CVE-2012-4093
Remote:	No
Local:	Yes
Published:	Sep 17 2013 12:00AM
Updated:	Sep 21 2013 12:11AM
Credit:	The vendor reported this issue.
Vulnerable:	Cisco Unified Computing System (UCS) 2.0 Cisco Unified Computing System (UCS) 1.4(3s) Cisco Unified Computing System (UCS) 1.4(3q) Cisco Unified Computing System (UCS) 1.4(3m) Cisco Unified Computing System (UCS) 1.4(3l) Cisco Unified Computing System (UCS) 1.4(3i) Cisco Unified Computing System (UCS) 1.4(1m) Cisco Unified Computing System (UCS) 1.4(1j) Cisco Unified Computing System (UCS) 1.4(1i)
Not Vulnerable:

Cisco Unified Computing System CVE-2012-4093 Local Denial of Service Vulnerability

Cisco Unified Computing System is prone to a local denial-of-service vulnerability because it fails to fails to properly validate user-supplied input.

Local attacker can exploit this issue to cause denial-of-service conditions.

This issue is being tracked by Cisco Bug ID CSCtl00186.

Cisco Unified Computing System CVE-2012-4093 Local Denial of Service Vulnerability

Attackers can exploit this issue using readily available tools.

Cisco Unified Computing System CVE-2012-4093 Local Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Unified Computing System CVE-2012-4093 Local Denial of Service Vulnerability

References: