NVD

Id
88036  
Name
CVE-2017-6708  
Description
A vulnerability in the symbolic link (symlink) creation functionality of the AutoVNF tool for the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to read sensitive files or execute malicious code on an affected system. The vulnerability is due to the absence of validation checks for the input that is used to create symbolic links. This vulnerability affects all releases of the Cisco Ultra Services Framework prior to Releases 5.0.3 and 5.1. Cisco Bug IDs: CSCvc76654.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2017-07-05  
Modified Date
2017-07-12  
Seq
2017-6708  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
422124 88036 CVE-2017-8418 http://www.openwall.com/lists/oss-security/2017/05/01/14  View
422125 88036 CVE-2017-8418 https://github.com/bbatsov/rubocop/issues/4336  View
422126 88036 CVE-2017-8418 http://www.openwall.com/lists/oss-security/2017/05/01/14  View
422127 88036 CVE-2017-8418 https://github.com/bbatsov/rubocop/issues/4336  View

Related JVN