CVE-2012-4077

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via the sed e option, aka Bug IDs CSCtf25457 and CSCtf27651...

Code injection

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via the sed e option, aka Bug IDs CSCtf25457 and CSCtf27651...

CVE-2012-4077

Cisco NX-OS Software contains a vulnerability (CVE-2012-4077) due to improper filtering of parameters passed to the sed -e option. An authenticated, local attacker can exploit this to gain access to the bash shell and execute arbitrary commands with administrative privileges, effectively enabling...