NVD

Id
46587  
Name
CVE-2012-5445  
Description
The kernel in Cisco Native Unix (CNU) on Cisco Unified IP Phone 7900 series devices (aka TNP phones) with software before 9.3.1-ES10 does not properly validate unspecified system calls, which allows attackers to execute arbitrary code or cause a denial of service (memory overwrite) via a crafted binary.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.1  
CVSS Vector
(AV:L/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-12-28  
Modified Date
2013-03-04  
Seq
2012-5445  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
233316 46587 CVE-2012-5445 http://events.ccc.de/congress/2012/Fahrplan/events/5400.en.html  View
233317 46587 CVE-2012-5445 20130109 Cisco Unified IP Phones Local Kernel System Call Input Validation Vulnerability  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30136 JVNDB-2012-005843 Cisco Unified IP Phone 7900 シリーズにおける任意のコードを実行される脆弱性 Cisco Unified IP Phone 7900 シリーズ上で稼働する Cisco Native Unix (CNU) のカーネルは、不特定のシステムコールを適切に検証しないため、任意のコードを実行される、またはサービス運用妨害 (メモリの上書き) 状態となる脆弱性が存在します。 CVE-2012-5445 58683 CVE-2012-5445 46587 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005843.html 2012-12-28 2013-02-07 View