CVE-2019-1778 Cisco NX-OS Software Command Injection Vulnerability

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a specific CLI comman...

CVE-2019-1778 Cisco NX-OS Software Command Injection Vulnerability

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a specific CLI comman...

CVE-2019-1778

CVE-2019-1778 affects Cisco NX-OS Software CLI. A vulnerable component is CLI argument handling, allowing an authenticated local attacker with administrator credentials to inject and execute arbitrary commands on the underlying Linux OS with root privileges. Impact is elevated command execution (...

CVE-2019-1770

CVE-2019-1770 describes a vulnerability in the CLI of Cisco NX-OS Software where an authenticated local attacker with administrator credentials can exploit insufficient validation of arguments to a specific CLI command to execute arbitrary commands on the underlying Linux OS with root privileges....

Cisco NX-OS Software Arbitrary File Overwrite Vulnerability

A vulnerability in the CLI implementation of a specific command used for image maintenance for Cisco NX-OS Software could allow an authenticated, local attacker to overwrite any file on the file system including system files. These file overwrites by the attacker are accomplished at the root...

Cisco NX-OS Software Command Injection Vulnerability (CVE-2019-1776)

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with a privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a specific CLI command ...

PT-2019-2448 · Cisco +1 · Cisco Nx-Os +3

Name of the Vulnerable Software and Affected Versions: Cisco FXOS Software versions affected versions not specified Cisco NX-OS Software versions affected versions not specified Description: The issue is related to insufficient validation of input data in the command-line interface CLI of Cisco...

PT-2019-2453

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software affected versions not specified Description A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the...

PT-2019-2451

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software affected versions not specified Description The issue is related to insufficient validation of arguments passed to a specific CLI command, allowing an authenticated, local attacker with administrator credentials to execute...

PT-2019-2219

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software affected versions not specified Description A vulnerability in the CLI implementation of a specific command used for image maintenance could allow an authenticated, local attacker to overwrite any file on the file system,...

CVE-2019-1795: Improper Neutralization of Special Elements used in a Command

A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient validation of arguments passed ...

CVE-2019-1769: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying Linux operating system of an attached line card with the privilege level of root. The vulnerability is due to insufficient...

CVE-2019-1784: Improper Neutralization of Special Elements used in a Command

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a specific CLI comman...

CVE-2019-1776: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with a privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a specific CLI command ...

CVE-2019-1770: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient validation of arguments...

CVE-2019-1783: Improper Neutralization of Special Elements used in a Command

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient validation of arguments...

CVE-2019-1729: Improper Input Validation

A vulnerability in the CLI implementation of a specific command used for image maintenance for Cisco NX-OS Software could allow an authenticated, local attacker to overwrite any file on the file system including system files. These file overwrites by the attacker are accomplished at the root...

DEBIAN-CVE-2019-11675

The groonga-httpd package 6.1.5-1 for Debian sets the /var/log/groonga ownership to the groonga account, which might let local users obtain root access because of unsafe interaction with logrotate. For example, an attacker can exploit a race condition to insert a symlink from /var/log/groonga/htt...

Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Root Privilege Escalation Vulnerability

A vulnerability in the filesystem management for the Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an authenticated, local attacker with administrator rights to gain elevated privileges as the root user on an affected device. The vulnerability is...

GLSA-201904-22 : OpenDKIM: Root privilege escalation

The remote host is affected by the vulnerability described in GLSA-201904-22 OpenDKIM: Root privilege escalation It was discovered that Gentoos OpenDKIM ebuild does not properly set permissions or place the pid file in a safe directory. Impact : A local attacker could escalate privileges...