Cisco ASA VNMC Command Input Validation Vulnerability (cisco-sa-20141008-asa) (CVE-2014-3390)

A vulnerability in the Virtual Network Management Center (VNMC) policy code of Cisco ASA Software could allow an authenticated, local attacker to access the underlying Linux operating system with the privileges of the root user.

思科ASA软件中虚拟网络管理中心（VNMC）策略代码存在漏洞，该漏洞可能允许经过身份验证的本地攻击者以root用户的权限访问其底层的Linux操作系统。