CVE-2012-4131
Directory traversal vulnerability in tar in Cisco NX-OS allows local users to access arbitrary files via crafted command-line arguments, aka Bug IDs CSCty07157, CSCty07159, CSCty07162, and CSCty07164.
Published
2013-12-21T14:22:56.033
Last Modified
2025-04-11T00:51:21.963
Status
Deferred
Source
[email protected]
Severity
CVSSv2: 4.6 (MEDIUM)
CVSSv2 Vector
AV:L/AC:L/Au:S/C:C/I:N/A:N
- Access Vector: LOCAL
- Access Complexity: LOW
- Authentication: SINGLE
- Confidentiality Impact: COMPLETE
- Integrity Impact: NONE
- Availability Impact: NONE
Exploitability Score
3.1
Impact Score
6.9
Weaknesses
Affected Vendors & Products
Type |
Vendor |
Product |
Version/Range |
Vulnerable? |
Operating System |
cisco
|
nx-os
|
- |
Yes
|
References