The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server allows a intruder to enhance their privileges.

The vulnerability of the process-management microprogramming system used in Cisco TelePresence Video Communication Servers is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow an intruder, operating locally, to enhance their privileges by...

Cisco TelePresence VCS Expressway 8.5.1 / 8.5.2 request-xconfdump Symbolic Link Local File Manipulation (cisco-sa-20141007-vcs)

According to its self-reported version, the instance of Cisco TelePresence Video Communication Server VCS Expressway running on the remote host is affected by a file manipulation vulnerability in request-xconfdump due to insufficient protection of files. An authenticated, local attacker can explo...

Cisco TelePresence Video Communication Server Expressway File Modification Vulnerability (cisco-sa-20151007-vcs)

A vulnerability in the symbolic link operation of the Cisco TelePresence Video Communication Server VCS Expressway could allow an authenticated, local attacker to perform a symbolic link attack on the affected system. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be...

CVE-2015-6318

Cisco TelePresence Video Communication Server VCS Expressway X8.5.1 and X8.5.2 allows local users to write to arbitrary files via an unspecified symlink attack, aka Bug ID CSCuv11969...

CVE-2015-4325

The process-management implementation in Cisco TelePresence Video Communication Server VCS Expressway X8.5.2 allows local users to gain privileges by terminating a firestarter.py supervised process and then triggering the restart of a process by the root account, aka Bug ID CSCuv12272...

Command injection

The process-management implementation in Cisco TelePresence Video Communication Server VCS Expressway X8.5.2 allows local users to gain privileges by terminating a firestarter.py supervised process and then triggering the restart of a process by the root account, aka Bug ID CSCuv12272...

Code injection

Cisco TelePresence Video Communication Server VCS Expressway X8.5.1 and X8.5.2 allows local users to write to arbitrary files via an unspecified symlink attack, aka Bug ID CSCuv11969...

CVE-2015-6318

Cisco TelePresence VCS Expressway X8.5.1/X8.5.2 is affected by a local, authenticated symbolic-link attack in the file handling of the request-xconfdump path, enabling write access to arbitrary linked files due to insufficient protection. Exploitation can allow insertion of arbitrary content into...

CVE-2015-4325

The process-management implementation in Cisco TelePresence Video Communication Server VCS Expressway X8.5.2 allows local users to gain privileges by terminating a firestarter.py supervised process and then triggering the restart of a process by the root account, aka Bug ID CSCuv12272...

CVE-2015-4325

CVE-2015-4325 affects Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2. The issue is in the process-management code: terminating a firestarter.py supervised process and triggering a restart via the root account allows local attackers to gain elevated privileges. The Cisco adv...

Cisco TelePresence Server DoS

Conference Control Protocol API buffer overflow...

Cisco TelePresence VCS Expressway Process Management Elevation of Privilege Vulnerability

Cisco TelePresence VCS Expressway is a video conferencing application. A security vulnerability in the Cisco TelePresence VCS Expressway process management code allows local users to exploit the vulnerability to execute arbitrary commands with ROOT privileges...

Cisco TelePresence Video Communication Server Expressway File Modification Vulnerability

Cisco TelePresence is a Cisco TelePresence solution. A security vulnerability exists in the symbolic link operation of Cisco TelePresence Video Communication Server VCS X8.5.2. A local attacker could exploit this vulnerability to perform a symbolic link attack on an affected system...

Cisco Telepresence Video Communication Server Expressway Call Policy Configuration Page DOS攻击

No description provided by source...

Cisco TelePresence Video Communication Server Expressway File Modification Vulnerability

A vulnerability in the symbolic link operation of the Cisco TelePresence Video Communication Server VCS Expressway could allow an authenticated, local attacker to perform a symbolic link attack on the affected system. The vulnerability is due to insufficient protection of files. An attacker could...

The vulnerability of the microprogramming software of the Cisco TelePresence Server allows a perpetrator to circumvent the authentication process for arbitrary users.

The vulnerability of the microprogramming software of the Cisco TelePresence Server device is related to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to bypass the authentication procedures for arbitrary users...

Cisco TelePresence Video Communication Server (VCS) Expressway Privilege Escalation Vulnerability

A vulnerability in the process management code of the Cisco TelePresence Video Communication Server VCS Expressway could allow an authenticated, local attacker to run arbitrary programs with elevated privileges. The vulnerability is due to the failure to protect a supervised process. An attacker...

Cisco TelePresence Server Software Cross-Site Request Forgery Vulnerability

Cisco TelePresence Server Software is a videoconferencing solution known as a "telepresence" system. A cross-site request forgery vulnerability exists in Cisco TelePresence Server Software that could allow a remote attacker to construct a malicious URI, trick a user into resolving it, and perform...

CVE-2015-6304

Cross-site request forgery CSRF vulnerability in Cisco TelePresence Server software 3.02.24 allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCut63718, CSCut63724, and CSCut63760...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco TelePresence Server software 3.02.24 allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCut63718, CSCut63724, and CSCut63760...