PT-2014-4530
CVE-2014-2172
·
تاريخ النشر
2014-05-02
·
تاريخ التحديث
2014-05-02
الوصف من
CVSS 2.0
6.6
متوسطةالمقاييسAV:L/AC:M/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Cisco TelePresence TC Software versions 4.x through 5.x
Cisco TelePresence TE Software versions 4.x through 6.0
Description
The issue is related to a buffer overflow that allows local users to gain privileges. This is due to the improper handling of the u-boot compiler flag for internal executable files.
Recommendations
For Cisco TelePresence TC Software versions 4.x through 5.x, update to a version that properly handles the u-boot compiler flag.
For Cisco TelePresence TE Software versions 4.x through 6.0, update to a version that properly handles the u-boot compiler flag.
As a temporary workaround, consider restricting access to internal executable files until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾