CVE-2013-6685 Information

Description

The firmware on Cisco Unified IP phones 8961 9951 and 9971 uses weak permissions for memory block devices which allows local users to gain privileges by mounting a device with a setuid file in its filesystem aka Bug ID CSCui04382.

Reference

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6685