Cisco Unified Communications Manager <= 8.0 - Invalid Argument Privilege Escalation Vulnerability

2010-11-03T00:00:00
ID EDB-ID:34954
Type exploitdb
Reporter Knud Erik Hjgaard
Modified 2010-11-03T00:00:00

Description

Cisco Unified Communications Manager 8.0 Invalid Argument Privilege Escalation Vulnerability. CVE-2010-3039. Local exploit for hardware platform

                                        
                                            source: http://www.securityfocus.com/bid/44672/info

Cisco Unified Communications Manager is prone to a local privilege-escalation vulnerability.

Attackers can exploit this issue to gain administrative access to the affected device and execute arbitrary code with superuser privileges. Successful exploits will lead to the complete compromise of the device.

This issue is tracked by Cisco Bug ID CSCti52041 and CSCti74930.

Cisco Unified Communications Manager 6, 7, and 8 are vulnerable. 

/usr/local/cm/bin/pktCap_protectData -i";id"