CVE-2013-3433: Medium severity Cisco Unified Communications Manager vulnerability
Published Jul 18, 2013
·Updated
Untrusted search path vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(1a) allows local users to gain privileges by leveraging unspecified file-permission and environment-variable issues for privileged programs, aka Bug ID CSCui02276.
Affected Software
56 affected components
Cisco Unified Communications Manager=7.1\(2a\)
Cisco Unified Communications Manager=7.1\(2a\)su1
Cisco Unified Communications Manager=7.1\(2b\)
Cisco Unified Communications Manager=7.1\(2b\)su1
Cisco Unified Communications Manager=7.1\(3\)
Cisco Unified Communications Manager=7.1\(3a\)
Cisco Unified Communications Manager=7.1\(3a\)su1
Cisco Unified Communications Manager=7.1\(3a\)su1a
Cisco Unified Communications Manager=7.1\(3b\)
Cisco Unified Communications Manager=7.1\(3b\)su1
Cisco Unified Communications Manager=7.1\(3b\)su2
Cisco Unified Communications Manager=7.1\(5\)
Cisco Unified Communications Manager=7.1\(5\)su1
Cisco Unified Communications Manager=7.1\(5\)su1a
Cisco Unified Communications Manager=7.1\(5a\)
Cisco Unified Communications Manager=7.1\(5b\)
Cisco Unified Communications Manager=7.1\(5b\)su1
Cisco Unified Communications Manager=7.1\(5b\)su1a
Cisco Unified Communications Manager=7.1\(5b\)su2
Cisco Unified Communications Manager=7.1\(5b\)su3
Cisco Unified Communications Manager=7.1\(5b\)su4
Cisco Unified Communications Manager=7.1\(5b\)su5
Cisco Unified Communications Manager=7.1\(5b\)su6
Cisco Unified Communications Manager=8.0
Cisco Unified Communications Manager=8.0\(1\)
Cisco Unified Communications Manager=8.0\(2\)
Cisco Unified Communications Manager=8.0\(2a\)
Cisco Unified Communications Manager=8.0\(2b\)
Cisco Unified Communications Manager=8.0\(2c\)
Cisco Unified Communications Manager=8.0\(2c\)su1
Cisco Unified Communications Manager=8.0\(3\)
Cisco Unified Communications Manager=8.0\(3a\)
Cisco Unified Communications Manager=8.0\(3a\)su1
Cisco Unified Communications Manager=8.0\(3a\)su2
Cisco Unified Communications Manager=8.0\(3a\)su3
Cisco Unified Communications Manager=8.5
Cisco Unified Communications Manager=8.5\(1\)
Cisco Unified Communications Manager=8.5\(1\)su1
Cisco Unified Communications Manager=8.5\(1\)su2
Cisco Unified Communications Manager=8.5\(1\)su3
Cisco Unified Communications Manager=8.5\(1\)su4
Cisco Unified Communications Manager=8.5\(1\)su5
Cisco Unified Communications Manager=8.6
Cisco Unified Communications Manager=8.6\(1\)
Cisco Unified Communications Manager=8.6\(1a\)
Cisco Unified Communications Manager=8.6\(2\)
Cisco Unified Communications Manager=8.6\(2a\)
Cisco Unified Communications Manager=8.6\(2a\)su1
Cisco Unified Communications Manager=8.6\(2a\)su2
Cisco Unified Communications Manager=8.6\(2a\)su3
Cisco Unified Communications Manager=8.6\(3\)
Cisco Unified Communications Manager=8.6\(4\)
Cisco Unified Communications Manager=9.0\(1\)
Cisco Unified Communications Manager=9.1\(1\)
Cisco Unified Communications Manager=9.1\(1a\)
Cisco Unified Communications Manager=9.1.1\(a\)
Event History
Jul 18, 2013
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-3433?
CVE-2013-3433 has a moderate severity rating due to the potential privilege escalation it allows for local users.
2
How do I fix CVE-2013-3433?
To fix CVE-2013-3433, ensure that you upgrade your Cisco Unified Communications Manager to the latest version provided by Cisco.
3
Which versions of Cisco Unified Communications Manager are affected by CVE-2013-3433?
CVE-2013-3433 affects Cisco Unified Communications Manager versions 7.1(x) through 9.1(1a).
4
What type of vulnerability is CVE-2013-3433?
CVE-2013-3433 is an untrusted search path vulnerability that can lead to privilege escalation.
5
Can CVE-2013-3433 be exploited remotely?
No, CVE-2013-3433 can only be exploited by local users with access to the affected systems.