Cisco Unified Computing System CVE-2012-4105 Local Denial of Service Vulnerability

Bugtraq ID:	62980
Class:	Input Validation Error
CVE:	CVE-2012-4105
Remote:	No
Local:	Yes
Published:	Oct 11 2013 12:00AM
Updated:	Oct 16 2013 01:45AM
Credit:	The vendor reported this issue.
Vulnerable:	Cisco Unified Computing System (UCS) 2.0 Cisco Unified Computing System (UCS) 1.4(3s) Cisco Unified Computing System (UCS) 1.4(3q) Cisco Unified Computing System (UCS) 1.4(3m) Cisco Unified Computing System (UCS) 1.4(3l) Cisco Unified Computing System (UCS) 1.4(3i) Cisco Unified Computing System (UCS) 1.4(1m) Cisco Unified Computing System (UCS) 1.4(1j) Cisco Unified Computing System (UCS) 1.4(1i)
Not Vulnerable:

Cisco Unified Computing System CVE-2012-4105 Local Denial of Service Vulnerability

Cisco Unified Computing System is prone to a local denial-of-service vulnerability because it fails to properly validate the user-supplied input.

Local attacker can exploit this issue to crash the application and cause denial-of-service condition.

This issue is being tracked by Cisco Bug ID CSCtq86468.

Cisco Unified Computing System CVE-2012-4105 Local Denial of Service Vulnerability

Attackers can exploit this issue using readily available tools.

Cisco Unified Computing System CVE-2012-4105 Local Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Unified Computing System CVE-2012-4105 Local Denial of Service Vulnerability

References: