Cisco NX-OS CVE-2012-4077 Local Arbitrary Command Execution Vulnerability

Bugtraq ID:	62849
Class:	Input Validation Error
CVE:	CVE-2012-4077
Remote:	No
Local:	Yes
Published:	Oct 04 2013 12:00AM
Updated:	Oct 10 2013 06:43AM
Credit:	Cisco
Vulnerable:	Cisco NX-OS 4.2(4) Cisco NX-OS 4.2(3) Cisco NX-OS 4.0(1a)N2(1)
Not Vulnerable:

Cisco NX-OS CVE-2012-4077 Local Arbitrary Command Execution Vulnerability

Cisco NX-OS is prone to a local arbitrary command-execution vulnerability.

Local attackers can exploit this issue to execute arbitrary shell commands on the underlying operating system with administrative privileges.

This issue is being tracked by Cisco bug IDs CSCtf25457 and CSCtf27651.

Cisco NX-OS CVE-2012-4077 Local Arbitrary Command Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco NX-OS CVE-2012-4077 Local Arbitrary Command Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco NX-OS CVE-2012-4077 Local Arbitrary Command Execution Vulnerability

References: