CVE-2012-4081: Buffer Overflow

Published Sep 20, 2013

Updated

MCServer in the Cisco Management Controller in Cisco Unified Computing System (UCS) allows local users to cause a denial of service (application crash) via invalid MCTools parameters, aka Bug ID CSCtg20734.

Affected Software

17 affected components

Cisco Unified Computing System=1.0\(2k\)

Cisco Unified Computing System=1.0_base

Cisco Unified Computing System=1.1_base

Cisco Unified Computing System=1.2\(1d\)

Cisco Unified Computing System=1.2_base

Cisco Unified Computing System=1.3\(1c\)

Cisco Unified Computing System=1.3\(1m\)

Cisco Unified Computing System=1.3\(1n\)

Cisco Unified Computing System=1.3\(1o\)

Cisco Unified Computing System=1.3\(1p\)

Cisco Unified Computing System=1.3\(1q\)

Cisco Unified Computing System=1.3\(1t\)

Cisco Unified Computing System=1.3\(1w\)

Cisco Unified Computing System=1.3\(1y\)

Cisco Unified Computing System=1.3_base

Cisco Unified Computing System=1.4\(1m\)

Cisco Unified Computing System=1.4_base

Event History

Sep 20, 2013

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-4081?

CVE-2012-4081 is classified as a denial of service vulnerability, which can cause an application crash.

How do I fix CVE-2012-4081?

To fix CVE-2012-4081, update your Cisco Unified Computing System software to the latest patched version provided by Cisco.

What versions of Cisco Unified Computing System are affected by CVE-2012-4081?

CVE-2012-4081 affects Cisco Unified Computing System versions 1.0(2k), 1.0_base, 1.1_base, 1.2(1d), 1.2_base, and several 1.3 and 1.4 variations.

Who can exploit CVE-2012-4081?

CVE-2012-4081 can be exploited by local users who have access to the system.

What are the consequences of exploiting CVE-2012-4081?

Exploiting CVE-2012-4081 can lead to denial of service, resulting in an application crash and potential service disruption.