CVE-2013-1179: Buffer Overflow

Published Apr 25, 2013

Updated

Multiple buffer overflows in the (1) SNMP and (2) License Manager implementations in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(5) and 6.x before 6.1(1) and MDS 9000 devices 4.x and 5.x before 5.2(5) allow remote authenticated users to execute arbitrary code via a crafted SNMP request, aka Bug ID CSCtx54830.

Affected Software

76 affected components

Cisco NX-OS=4.0

Cisco NX-OS=4.0\(0\)n1\(1a\)

Cisco NX-OS=4.0\(0\)n1\(2\)

Cisco NX-OS=4.0\(0\)n1\(2a\)

Cisco NX-OS=4.0\(1a\)n1\(1\)

Cisco NX-OS=4.0\(1a\)n1\(1a\)

Cisco NX-OS=4.0\(1a\)n2\(1\)

Cisco NX-OS=4.0\(1a\)n2\(1a\)

Cisco NX-OS=4.0\(4\)sv1\(1\)

Cisco NX-OS=4.0\(4\)sv1\(2\)

Cisco NX-OS=4.0\(4\)sv1\(3\)

Cisco NX-OS=4.0\(4\)sv1\(3a\)

Cisco NX-OS=4.0\(4\)sv1\(3b\)

Cisco NX-OS=4.0\(4\)sv1\(3c\)

Cisco NX-OS=4.0\(4\)sv1\(3d\)

Cisco NX-OS=4.1\(3\)n1\(1\)

Cisco NX-OS=4.1\(3\)n1\(1a\)

Cisco NX-OS=4.1\(3\)n2\(1\)

Cisco NX-OS=4.1\(3\)n2\(1a\)

Cisco NX-OS=4.1.\(2\)

Cisco NX-OS=4.1.\(3\)

Cisco NX-OS=4.1.\(4\)

Cisco NX-OS=4.1.\(5\)

Cisco NX-OS=4.2

Cisco NX-OS=4.2\(1\)

Cisco NX-OS=4.2\(1\)n1\(1\)

Cisco NX-OS=4.2\(1\)n2\(1\)

Cisco NX-OS=4.2\(1\)n2\(1a\)

Cisco NX-OS=4.2\(1\)sv1\(4\)

Cisco NX-OS=4.2\(1\)sv1\(4a\)

Cisco NX-OS=4.2\(1\)sv1\(5.1\)

Cisco NX-OS=4.2\(2\)

Cisco NX-OS=4.2\(3\)

Cisco NX-OS=4.2\(4\)

Cisco NX-OS=4.2\(6\)

Cisco NX-OS=4.2\(8\)

Cisco NX-OS=4.2.\(2a\)

Cisco NX-OS=5.0

Cisco NX-OS=5.0\(2\)

Cisco NX-OS=5.0\(2\)n1\(1\)

Cisco NX-OS=5.0\(2\)n2\(1\)

Cisco NX-OS=5.0\(2\)n2\(1a\)

Cisco NX-OS=5.0\(2a\)

Cisco NX-OS=5.0\(3\)

Cisco NX-OS=5.0\(3\)n1\(1\)

Cisco NX-OS=5.0\(3\)n1\(1a\)

Cisco NX-OS=5.0\(3\)n1\(1b\)

Cisco NX-OS=5.0\(3\)n1\(1c\)

Cisco NX-OS=5.0\(3\)n2\(1\)

Cisco NX-OS=5.0\(3\)n2\(2\)

Cisco NX-OS=5.0\(3\)n2\(2a\)

Cisco NX-OS=5.0\(3\)n2\(2b\)

Cisco NX-OS=5.0\(5\)

Cisco NX-OS=5.1

Cisco NX-OS=5.1\(1\)

Cisco NX-OS=5.1\(1a\)

Cisco NX-OS=5.1\(2\)

Cisco NX-OS=5.1\(3\)

Cisco NX-OS=5.1\(3\)n1\(1\)

Cisco NX-OS=5.1\(3\)n1\(1a\)

Cisco NX-OS=5.1\(4\)

Cisco NX-OS=5.1\(5\)

Cisco NX-OS=5.1\(6\)

Cisco NX-OS=5.2

Cisco NX-OS=5.2\(1\)

Cisco NX-OS=5.2\(3\)

Cisco NX-OS=5.2\(3a\)

Cisco NX-OS=5.2\(4\)

Cisco NX-OS=6.0\(1\)

Cisco NX-OS=6.0\(2\)

Cisco NX-OS=6.1

Cisco Nexus 7000

Cisco Nexus 7000 10-slot

Cisco Nexus 7000 18-slot

Cisco Nexus 7000 9-slot

Cisco MDS 9000

Event History

Apr 25, 2013

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-1179?

CVE-2013-1179 has a critical severity rating due to its ability to allow remote authenticated users to execute arbitrary code.

How do I fix CVE-2013-1179?

To fix CVE-2013-1179, upgrade your Cisco NX-OS to a version later than 5.2(5) or 6.1(1) as specified by Cisco's security advisory.

Which Cisco devices are affected by CVE-2013-1179?

CVE-2013-1179 affects Cisco Nexus 7000 and MDS 9000 devices running NX-OS versions 4.x and 5.x before 5.2(5) and 6.x before 6.1(1).

What attacks can exploit CVE-2013-1179?

CVE-2013-1179 can be exploited via crafted SNMP requests by authenticated remote users, leading to arbitrary code execution.

Is there a workaround for CVE-2013-1179 while I prepare to update?

Cisco does not recommend any workarounds for CVE-2013-1179, emphasizing the importance of upgrading to a patched version.

CVE-2013-1179: Buffer Overflow

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2013-1179?

How do I fix CVE-2013-1179?

Which Cisco devices are affected by CVE-2013-1179?

What attacks can exploit CVE-2013-1179?

Is there a workaround for CVE-2013-1179 while I prepare to update?

Company

Resources

Contact