Cisco NX-OS 'file name' Parameter Arbitrary File Write Vulnerability

Bugtraq ID:	62839
Class:	Input Validation Error
CVE:	CVE-2012-4141
Remote:	No
Local:	Yes
Published:	Oct 04 2013 12:00AM
Updated:	Oct 10 2013 12:13AM
Credit:	Cisco
Vulnerable:	Cisco NX-OS 5.2(1) Cisco NX-OS 5.1(1) Cisco NX-OS 5.0(3)N2(1) Cisco NX-OS 5.0(3) Cisco NX-OS 5.0(2)N1(1) Cisco NX-OS 4.2(6) Cisco NX-OS 4.2(4) Cisco NX-OS 4.2(3) Cisco NX-OS 4.2(1)N2(1) Cisco NX-OS 4.1(3)N2(1a) Cisco NX-OS 4.0(1a)N2(1) Cisco NX-OS 0 Cisco Nexus 7000 0 Cisco Nexus 5000 0
Not Vulnerable:

Cisco NX-OS 'file name' Parameter Arbitrary File Write Vulnerability

Cisco NX-OS is prone to an arbitrary file-write vulnerability.

An attacker can exploit this issue to write arbitrary scripts to the file system on the device running the affected application. This may aid in further attacks.

This issue is being tracked by Cisco bug IDs CSCua71557 and CSCua71551.

Cisco NX-OS 'file name' Parameter Arbitrary File Write Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco NX-OS 'file name' Parameter Arbitrary File Write Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco NX-OS 'file name' Parameter Arbitrary File Write Vulnerability

References: