Guest

Preview Tool

Cisco Bug: CSCur05320 - Video Distribution Suite evaluation for CVE-2014-6271 and CVE-2014-7169

Last Modified

Jun 24, 2020

Products (1)

  • Cisco Content Delivery Engine Series

Known Affected Releases

3.1(1)ES1 3.3(1) 4.0(0)

Description (partial) 

Symptom:
The following Cisco products

Video Distribution Suite 

includes a version of bash that is affected by the vulnerabilities identified by the Common Vulnerability and Exposures (CVE) IDs:

CVE-2014-6271 
CVE-2014-6277
CVE-2014-6278
CVE-2014-7169
CVE-2014-7186
CVE-2014-7187

This bug has been opened to address the potential impact on this product.

Conditions:
for SSH, Devices with default configuration. Exposure is not configuration dependent.
for dhcp client, when some network interface configured as dhcp enable.

Related Community Discussions

New BASH ShellShock Security Bug - bigger than Heartbleed!
Woke up this morning to this: http://www.theregister.co.uk/2014/09/24/bash_shell_vuln/ A bug discovered in the widely used Bash command interpreter poses a critical security risk to Unix and Linux systems. You can check if you're vulnerable by running the following lines in your default shell, which on many systems will be Bash. If you see the words "busted", then you're at risk. If not, then either your Bash is fixed or your shell is using another interpreter. env X="() { :;} ; echo busted" /bin/sh ...
Latest activity: Oct 29, 2014
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.