Cisco Unified Computing System CVE-2013-5550 Local Denial of Service Vulnerability

Bugtraq ID:	63246
Class:	Input Validation Error
CVE:	CVE-2013-5550
Remote:	No
Local:	Yes
Published:	Oct 21 2013 12:00AM
Updated:	Oct 21 2013 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Cisco Unified Computing System (UCS) 2.0 Cisco Unified Computing System (UCS) 1.4(3s) Cisco Unified Computing System (UCS) 1.4(3q) Cisco Unified Computing System (UCS) 1.4(3m) Cisco Unified Computing System (UCS) 1.4(3l) Cisco Unified Computing System (UCS) 1.4(3i) Cisco Unified Computing System (UCS) 1.4(1m) Cisco Unified Computing System (UCS) 1.4(1j) Cisco Unified Computing System (UCS) 1.4(1i)
Not Vulnerable:

Cisco Unified Computing System CVE-2013-5550 Local Denial of Service Vulnerability

Cisco Unified Computing System is prone to a local denial-of-service vulnerability because it fails to properly validate the user-supplied input.

Local attacker can exploit this issue to crash the device and cause denial-of-service condition.

This issue is being tracked by Cisco Bug ID CSCtq86549.

Cisco Unified Computing System CVE-2013-5550 Local Denial of Service Vulnerability

An attacker can exploit this issue using readily available tools and commands.

Cisco Unified Computing System CVE-2013-5550 Local Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Unified Computing System CVE-2013-5550 Local Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )