Vulnerability CVE-2013-3467
Published: 2013-08-29   Modified: 2013-08-30

Description:
Memory leak in the CLI component on Cisco Unified Computing System (UCS) 6100 Fabric Interconnect devices, in certain situations that lack a SPAN session, allows local users to cause a denial of service (memory consumption and device reset) via a (1) "show monitor session all" or (2) "show monitor session" command, aka Bug ID CSCug20103.

CVSS2 => (AV:L/AC:L/Au:S/C:N/I:N/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4.6/10
6.9/10
3.1/10
Exploit range
Attack complexity
Authentication
Local
Low
Single time
Confidentiality impact
Integrity impact
Availability impact
None
None
Complete
Affected software
Cisco -> Unified computing system 6120xp fabric interconnect 
Cisco -> Unified computing system 6140xp fabric interconnect 

 References:
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3467
http://www.securityfocus.com/bid/62065
http://www.securitytracker.com/id/1028960
Copyright 2024, cxsecurity.com

 

Back to Top