CVE-2012-4135: Path Traversal
Published Dec 21, 2013
·Updated
Directory traversal vulnerability in filesys in Cisco NX-OS 6.1(2) and earlier allows local users to access arbitrary files via crafted command-line arguments during a delete action, aka Bug IDs CSCty07270, CSCty07271, CSCty07273, and CSCty07275.
Affected Software
98 affected components
Cisco NX-OS<=6.1\(2\)
Cisco NX-OS=4.0
Cisco NX-OS=4.0\(0\)n1\(1a\)
Cisco NX-OS=4.0\(0\)n1\(2\)
Cisco NX-OS=4.0\(0\)n1\(2a\)
Cisco NX-OS=4.0\(1a\)n1\(1\)
Cisco NX-OS=4.0\(1a\)n1\(1a\)
Cisco NX-OS=4.0\(1a\)n2\(1\)
Cisco NX-OS=4.0\(1a\)n2\(1a\)
Cisco NX-OS=4.0\(4\)sv1\(1\)
Cisco NX-OS=4.0\(4\)sv1\(2\)
Cisco NX-OS=4.0\(4\)sv1\(3\)
Cisco NX-OS=4.0\(4\)sv1\(3a\)
Cisco NX-OS=4.0\(4\)sv1\(3b\)
Cisco NX-OS=4.0\(4\)sv1\(3c\)
Cisco NX-OS=4.0\(4\)sv1\(3d\)
Cisco NX-OS=4.1\(3\)n1\(1\)
Cisco NX-OS=4.1\(3\)n1\(1a\)
Cisco NX-OS=4.1\(3\)n2\(1\)
Cisco NX-OS=4.1\(3\)n2\(1a\)
Cisco NX-OS=4.1.\(2\)
Cisco NX-OS=4.1.\(3\)
Cisco NX-OS=4.1.\(4\)
Cisco NX-OS=4.1.\(5\)
Cisco NX-OS=4.2
Cisco NX-OS=4.2\(1\)
Cisco NX-OS=4.2\(1\)n1\(1\)
Cisco NX-OS=4.2\(1\)n2\(1\)
Cisco NX-OS=4.2\(1\)n2\(1a\)
Cisco NX-OS=4.2\(1\)sv1\(4\)
Cisco NX-OS=4.2\(1\)sv1\(4a\)
Cisco NX-OS=4.2\(1\)sv1\(5.1\)
Cisco NX-OS=4.2\(2\)
Cisco NX-OS=4.2\(3\)
Cisco NX-OS=4.2\(4\)
Cisco NX-OS=4.2\(6\)
Cisco NX-OS=4.2\(8\)
Cisco NX-OS=4.2.\(2a\)
Cisco NX-OS=5.0
Cisco NX-OS=5.0\(2\)
Cisco NX-OS=5.0\(2\)n1\(1\)
Cisco NX-OS=5.0\(2\)n2\(1\)
Cisco NX-OS=5.0\(2\)n2\(1a\)
Cisco NX-OS=5.0\(2a\)
Cisco NX-OS=5.0\(3\)
Cisco NX-OS=5.0\(3\)n1\(1\)
Cisco NX-OS=5.0\(3\)n1\(1a\)
Cisco NX-OS=5.0\(3\)n1\(1b\)
Cisco NX-OS=5.0\(3\)n1\(1c\)
Cisco NX-OS=5.0\(3\)n2\(1\)
Cisco NX-OS=5.0\(3\)n2\(2\)
Cisco NX-OS=5.0\(3\)n2\(2a\)
Cisco NX-OS=5.0\(3\)n2\(2b\)
Cisco NX-OS=5.0\(3\)u1\(1a\)
Cisco NX-OS=5.0\(3\)u1\(1b\)
Cisco NX-OS=5.0\(3\)u1\(1d\)
Cisco NX-OS=5.0\(3\)u1\(2\)
Cisco NX-OS=5.0\(3\)u1\(2a\)
Cisco NX-OS=5.0\(3\)u2\(1\)
Cisco NX-OS=5.0\(3\)u2\(2\)
Cisco NX-OS=5.0\(3\)u2\(2a\)
Cisco NX-OS=5.0\(3\)u2\(2b\)
Cisco NX-OS=5.0\(3\)u2\(2c\)
Cisco NX-OS=5.0\(3\)u2\(2d\)
Cisco NX-OS=5.0\(3\)u3\(1\)
Cisco NX-OS=5.0\(3\)u3\(2\)
Cisco NX-OS=5.0\(3\)u3\(2a\)
Cisco NX-OS=5.0\(3\)u3\(2b\)
Cisco NX-OS=5.0\(3\)u4\(1\)
Cisco NX-OS=5.0\(3\)u5\(1\)
Cisco NX-OS=5.0\(3\)u5\(1a\)
Cisco NX-OS=5.0\(3\)u5\(1b\)
Cisco NX-OS=5.0\(3\)u5\(1c\)
Cisco NX-OS=5.0\(3\)u5\(1d\)
Cisco NX-OS=5.0\(3\)u5\(1e\)
Cisco NX-OS=5.0\(5\)
Cisco NX-OS=5.1
Cisco NX-OS=5.1\(1\)
Cisco NX-OS=5.1\(1a\)
Cisco NX-OS=5.1\(2\)
Cisco NX-OS=5.1\(3\)
Cisco NX-OS=5.1\(3\)n1\(1\)
Cisco NX-OS=5.1\(3\)n1\(1a\)
Cisco NX-OS=5.1\(4\)
Cisco NX-OS=5.1\(5\)
Cisco NX-OS=5.1\(6\)
Cisco NX-OS=5.2
Cisco NX-OS=5.2\(1\)
Cisco NX-OS=5.2\(3\)
Cisco NX-OS=5.2\(3a\)
Cisco NX-OS=5.2\(4\)
Cisco NX-OS=5.2\(5\)
Cisco NX-OS=5.2\(7\)
Cisco NX-OS=5.2\(9\)
Cisco NX-OS=6.0\(1\)
Cisco NX-OS=6.0\(2\)
Cisco NX-OS=6.1
Cisco NX-OS=6.1\(1\)
Event History
Dec 21, 2013
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-4135?
CVE-2012-4135 is classified as a medium severity vulnerability allowing local users to access arbitrary files.
2
How do I fix CVE-2012-4135?
To fix CVE-2012-4135, update your Cisco NX-OS to version 6.1(3) or later.
3
Who is affected by CVE-2012-4135?
CVE-2012-4135 affects users running Cisco NX-OS versions 6.1(2) and earlier, along with other specified versions.
4
What type of vulnerability is CVE-2012-4135?
CVE-2012-4135 is a directory traversal vulnerability that can be exploited through crafted command-line arguments.
5
Can CVE-2012-4135 be exploited remotely?
No, CVE-2012-4135 requires local access to the system for exploitation.