Cisco TelePresence Products Multiple Vulnerabilities
RISK: Medium Risk
TYPE: Servers - Other Servers
![TYPE: Other Servers](/f/bulletin_type/100016/37p37/servers-other-servers.png)
Multiple vulnerabilities have been identified in Cisco TelePresence products, which could be exploited by attackers to bypass restrictions, gain knowledge of sensitive information or unauthorized access, upload arbitrary files, cause a denial of service or execute arbitrary code. These issues are caused by errors related to Java Servlets, administrative web interface, Cisco Discovery Protocol, RMI interface, Real-Time Transport Control Protocol (RTCP), XML-RPC, SOAP interface, CGI commands, Ad Hoc recording, and TFTP requests.
Impact
- Denial of Service
- Security Restriction Bypass
- Information Disclosure
System / Technologies affected
- Cisco TelePresence Multipoint Switch versions prior to 1.7.1
- Cisco TelePresence Manager versions prior to 1.7.0
- Cisco TelePresence Recording Server versions prior to 1.7.0
- Cisco TelePresence Endpoint Devices versions prior to 1.7.0
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Upgrade to patched versions :
http://www.cisco.com/warp/public/707/cisco-sa-20110223-telepresence-ctms.shtml
http://www.cisco.com/warp/public/707/cisco-sa-20110223-telepresence-ctsman.shtml
http://www.cisco.com/warp/public/707/cisco-sa-20110223-telepresence-ctrs.shtml
http://www.cisco.com/warp/public/707/cisco-sa-20110223-telepresence-cts.shtml
Vulnerability Identifier
- CVE-2011-0372
- CVE-2011-0373
- CVE-2011-0374
- CVE-2011-0375
- CVE-2011-0376
- CVE-2011-0377
- CVE-2011-0378
- CVE-2011-0379
- CVE-2011-0380
- CVE-2011-0381
- CVE-2011-0382
- CVE-2011-0383
- CVE-2011-0384
- CVE-2011-0385
- CVE-2011-0386
- CVE-2011-0387
- CVE-2011-0388
Source
Related Link
- http://www.vupen.com/english/advisories/2011/0495
- http://www.cisco.com/warp/public/707/cisco-sa-20110223-telepresence-ctms.shtml
- http://www.cisco.com/warp/public/707/cisco-sa-20110223-telepresence-ctsman.shtml
- http://www.cisco.com/warp/public/707/cisco-sa-20110223-telepresence-ctrs.shtml
- http://www.cisco.com/warp/public/707/cisco-sa-20110223-telepresence-cts.shtml
Share with