Lucene search

[email protected]CVE-2011-1602

HistoryJun 02, 2011 - 8:55 p.m.

CVE-2011-1602

2011-06-0220:55:00

CWE-264

[email protected]

web.nvd.nist.gov

su utility

cisco unified ip phones

tnp phones

privilege escalation

cve-2011-1602

nvd

6.8 Medium

AI Score

Confidence

Low

6.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:S/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

The su utility on Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.0.3 allows local users to gain privileges via unspecified vectors, aka Bug ID CSCtf07426.

CPENameOperatorVersion
cisco:unified_ip_phone_7906cisco unified ip phone 7906eq*
cisco:unified_ip_phone_7911gcisco unified ip phone 7911geq*
cisco:unified_ip_phone_7931gcisco unified ip phone 7931geq*
cisco:unified_ip_phone_7941gcisco unified ip phone 7941geq*
cisco:unified_ip_phone_7941g-gecisco unified ip phone 7941g-geeq*
cisco:unified_ip_phone_7942gcisco unified ip phone 7942geq*
cisco:unified_ip_phone_7945gcisco unified ip phone 7945geq*
cisco:unified_ip_phone_7961gcisco unified ip phone 7961geq*
cisco:unified_ip_phone_7961g-gecisco unified ip phone 7961g-geeq*
cisco:unified_ip_phone_7962gcisco unified ip phone 7962geq*

CPE	Name	Operator	Version
cisco:unified_ip_phone_7906	cisco unified ip phone 7906	eq	*
cisco:unified_ip_phone_7911g	cisco unified ip phone 7911g	eq	*
cisco:unified_ip_phone_7931g	cisco unified ip phone 7931g	eq	*
cisco:unified_ip_phone_7941g	cisco unified ip phone 7941g	eq	*
cisco:unified_ip_phone_7941g-ge	cisco unified ip phone 7941g-ge	eq	*
cisco:unified_ip_phone_7942g	cisco unified ip phone 7942g	eq	*
cisco:unified_ip_phone_7945g	cisco unified ip phone 7945g	eq	*
cisco:unified_ip_phone_7961g	cisco unified ip phone 7961g	eq	*
cisco:unified_ip_phone_7961g-ge	cisco unified ip phone 7961g-ge	eq	*
cisco:unified_ip_phone_7962g	cisco unified ip phone 7962g	eq	*

Rows per page:

1-10 of 1291

References

osvdb.org/72717

secunia.com/advisories/44814/

www.cisco.com/en/US/products/products_security_advisory09186a0080b80111.shtml

www.securityfocus.com/bid/48074

www.securitytracker.com/id?1025588

6.8 Medium

AI Score

Confidence

Low

6.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:S/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

Related for CVE-2011-1602

cvelist1 prion1 nessus2 securityvulns2