Cisco UCS Central Software 1.2(1a) allows local users to gain privileges for OS command execution via a crafted CLI parameter, aka Bug ID CSCut32795.
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
Link | Tags |
---|---|
http://tools.cisco.com/security/center/viewAlert.x?alertId=39324 | vendor advisory |
http://www.securityfocus.com/bid/75205 | vdb entry |
http://www.securitytracker.com/id/1032584 | vdb entry |