[c-nsp] [2.0 Update] Cisco Security Advisory: Cisco Prime Data Center Network Manager Remote Command Execution Vulnerability

[Cisco Systems Product Security Incident Response Team]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Cisco Security Advisory: Cisco Prime Data Center Network Manager Remote
Command Execution Vulnerability

Advisory ID: cisco-sa-20121031-dcnm

Revision 2.0

Last Updated 2013 May 08 16:00  UTC (GMT)

For Public Release 2012 October 31 16:00  UTC (GMT)

+---------------------------------------------------------------------

Summary
=======

Cisco Prime Data Center Network Manager (DCNM) contains a remote command
execution vulnerability that could allow an unauthenticated, remote
attacker to execute arbitrary commands on the computer that is running
the Cisco Prime DCNM application.

Cisco has released free software updates that address this
vulnerability.

This advisory is available at the following link:

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121031-dcnm

Note: After this advisory was initially published, it was found
that in addition to the DCNM SAN server component that is part of
the DCNM solution, the DCNM LAN server is also affected by the same
vulnerability. This advisory has been updated to revision 2.0 to
indicate that the DCNM LAN server component is also vulnerable, to
provide the Cisco bug ID that tracks the vulnerability in the DCNM LAN
server component, and to update fixed software information.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iF4EAREIAAYFAlGKc/0ACgkQUddfH3/BbTr51AD/e7nVceiqF36VT7LQ5YmcjMax
RMkX04N8wsdOgdZRyXkA+gMSU94ERrtaerlOHWlBBnhmFnLNcXYyCuS9Suobtcvc
=eECl
-----END PGP SIGNATURE-----