Boletines de Vulnerabilidades

Cisco NX-OS Software TACACS+ Command Authorization Vulnerability


Información sobre el sistema

   
Software afectado Cisco

Descripción

A vulnerability in the TACACS+ command authorization feature of Cisco NX-OS Software could allow an authenticated, local attacker to cause the system to reset.The vulnerability is due to incorrect processing of very long command-line interface (CLI) commands by the TACACS+ command authorization feature. An attacker could exploit this vulnerability by being locally authenticated and executing a long CLI command that is subject to command authorization. An exploit could allow the attacker to

More info:

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150202-CVE-2014-8013?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20NX-OS%20Software%20TACACS+%20Command%20Authorization%20Vulne

Identificadores estándar

Propiedad Valor
CVE CVE-2014-8013.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2015-10-04

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT