EUVD-2012-4017

Malware in sbrugna...

CVE-2012-4073

The KVM subsystem in the client in Cisco Unified Computing System UCS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers, and read or modify KVM data, via a crafted certificate, aka Bug ID CSCte90332...

Code injection

The KVM subsystem in the client in Cisco Unified Computing System UCS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers, and read or modify KVM data, via a crafted certificate, aka Bug ID CSCte90332...

CVE-2012-4073

The CVE-2012-4073 issue affects the Cisco Unified Computing System (UCS) KVM client, where the KVM subsystem fails to verify X.509 certificates from SSL servers. Root cause: improper certificate validation in the KVM client, enabling a man-in-the-middle attacker to intercept a KVM connection and ...