Cisco Unified Computing System CVE-2012-4104 Local Directory Traversal Vulnerability

Bugtraq ID:	62732
Class:	Input Validation Error
CVE:	CVE-2012-4104
Remote:	No
Local:	Yes
Published:	Sep 30 2013 12:00AM
Updated:	Oct 04 2013 12:13AM
Credit:	Cisco
Vulnerable:	Cisco Unified Computing System (UCS) 2.0 Cisco Unified Computing System (UCS) 1.4(3s) Cisco Unified Computing System (UCS) 1.4(3q) Cisco Unified Computing System (UCS) 1.4(3m) Cisco Unified Computing System (UCS) 1.4(3l) Cisco Unified Computing System (UCS) 1.4(3i) Cisco Unified Computing System (UCS) 1.4(1m) Cisco Unified Computing System (UCS) 1.4(1j) Cisco Unified Computing System (UCS) 1.4(1i)
Not Vulnerable:

Cisco Unified Computing System CVE-2012-4104 Local Directory Traversal Vulnerability

Cisco Unified Computing System is prone to a directory-traversal vulnerability.

Exploiting this issue will allow a local attacker to modify or delete arbitrary files on the filesystem.

This issue is tracked by Cisco BugID CSCtq02706.

Cisco Unified Computing System CVE-2012-4104 Local Directory Traversal Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Unified Computing System CVE-2012-4104 Local Directory Traversal Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.