Cisco NX-OS CVE-2012-4121 Arbitrary File Access Vulnerability

Bugtraq ID:	62846
Class:	Input Validation Error
CVE:	CVE-2012-4121
Remote:	No
Local:	Yes
Published:	Oct 04 2013 12:00AM
Updated:	Oct 10 2013 12:13AM
Credit:	Cisco
Vulnerable:	Cisco NX-OS 5.2(1) Cisco NX-OS 5.1(3)N1(1) Cisco NX-OS 5.1(1) Cisco NX-OS 5.0(3)U2(1) Cisco NX-OS 5.0(3)U1(2a) Cisco NX-OS 5.0(3)N2(1) Cisco NX-OS 5.0(3) Cisco NX-OS 4.2(6) Cisco NX-OS 4.2(5) Cisco NX-OS 4.2(4) Cisco NX-OS 4.2(3) Cisco NX-OS 0 Cisco Nexus 7000 0 Cisco Nexus 5000 0 Cisco Nexus 3000 0
Not Vulnerable:

Cisco NX-OS CVE-2012-4121 Arbitrary File Access Vulnerability

Cisco NX-OS is prone to a local arbitrary file-access vulnerability.

Local attackers can exploit this issue to read and modify arbitrary files on the device. This may lead to further attacks.

This issue is being tracked by Cisco bug IDs CSCts56559, CSCts56565, CSCts56570, and CSCts56574.

Cisco NX-OS CVE-2012-4121 Arbitrary File Access Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco NX-OS CVE-2012-4121 Arbitrary File Access Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco NX-OS CVE-2012-4121 Arbitrary File Access Vulnerability

References: