Directory traversal vulnerability in the CLI parser in Cisco NX-OS allows local users to create arbitrary script files via a relative pathname in the "file name" parameter, aka Bug IDs CSCua71557 and CSCua71551.
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
Link | Tags |
---|---|
http://osvdb.org/98122 | vdb entry |
http://www.securityfocus.com/bid/62839 | vdb entry third party advisory |
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4141 | vendor advisory |
http://www.securitytracker.com/id/1029160 | vdb entry third party advisory |