CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0CVE-2016-1339
https://notcve.org/view.php?id=CVE-2016-1339
Cisco Unified Computing System (UCS) Platform Emulator 2.5(2)TS4, 3.0(2c)A, and 3.0(2c)TS9 allows local users to gain privileges via crafted arguments on a ucspe-copy command line, aka Bug ID CSCux68832. "Cisco Unified Computing System (UCS) Platform Emulator 2.5(2)TS4, 3.0(2c)A y 3.0(2c)TS9 permite a usuarios locales obtener privilegios a través de argumentos manipulados en una línea de comandos ucspe-copy, también conocida como Bug ID CSCux68832. Publicado: 15/4/2016 9:59:04 PM" • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160414-ucspe1 http://www.securitytracker.com/id/1035581 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 8.4EPSS: 0%CPEs: 3EXPL: 0CVE-2016-1340
https://notcve.org/view.php?id=CVE-2016-1340
Heap-based buffer overflow in Cisco Unified Computing System (UCS) Platform Emulator 2.5(2)TS4, 3.0(2c)A, and 3.0(2c)TS9 allows local users to gain privileges via crafted libclimeta.so filename arguments, aka Bug ID CSCux68837. Desbordamiento de buffer basado en memoria dinámica en Cisco Unified Computing System (UCS) Platform Emulator 2.5(2)TS4, 3.0(2c)A y 3.0(2c)TS9 permite a usuarios locales obtener privilegios a través de argumentos de nombre de archivo libclimeta.so manipulados, también conocida como Bug ID CSCux68837. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160414-ucspe2 http://www.securitytracker.com/id/1035582 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •