Cisco Unity Connection CVE-2013-5534 Directory Traversal Vulnerability
BID:63206
Info
Cisco Unity Connection CVE-2013-5534 Directory Traversal Vulnerability
| Bugtraq ID: | 63206 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-5534 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 17 2013 12:00AM |
| Updated: | Oct 21 2013 12:18AM |
| Credit: | Emerging Defense, LLC |
| Vulnerable: |
Cisco Unity Connection 8.6 Cisco Unity Connection 8.5 Cisco Unity Connection 7.1 |
| Not Vulnerable: | |
Discussion
Cisco Unity Connection CVE-2013-5534 Directory Traversal Vulnerability
Cisco Unity Connection is prone to a directory-traversal vulnerability.
Exploiting this issue may allow an attacker to upload arbitrary files to arbitrary locations that could aid in further attacks.
This issue is being tracked by Cisco Bug ID CSCuj22948.
Cisco Unity Connection is prone to a directory-traversal vulnerability.
Exploiting this issue may allow an attacker to upload arbitrary files to arbitrary locations that could aid in further attacks.
This issue is being tracked by Cisco Bug ID CSCuj22948.
Exploit / POC
Cisco Unity Connection CVE-2013-5534 Directory Traversal Vulnerability
An attacker can exploit this issue using a web browser.
An attacker can exploit this issue using a web browser.
Solution / Fix
Cisco Unity Connection CVE-2013-5534 Directory Traversal Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Cisco Unity Connection CVE-2013-5534 Directory Traversal Vulnerability
References:
References:
- Cisco Homepage (Cisco )
- Unity Connection Homepage (Cisco)