Cisco Unified MeetingPlace Web Conferencing Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Cisco Unified MeetingPlace Web Conferencing, which can be exploited by remote user to cause a DoS (Denial of Service) and disclose sensitive information.

1. A remote user can send specially crafted HTTP POST data to trigger a buffer overflow and cause the Web Conferencing server to become unresponsive.
2. The software does not properly validate user-supplied input in HTTP POST requests. A remote user can supply a specially crafted parameter value to execute SQL commands on the underlying database.