Kod programskog paketa Cisco TelePresence Manager uočene su sigurnosne nepravilnosti. Zloćudni napadači ih mogu iskoristiti za napad uskraćivanjem usluga i proizvoljno izvršavanje programskog koda s povećanim ovlastima.
Paket:
Cisco TelePresence Manager
Operacijski sustavi:
Cisco TelePresence Systems (CTS)
Problem:
neodgovarajuća provjera ulaznih podataka, pogreška u programskoj komponenti
Iskorištavanje:
udaljeno
Posljedica:
dobivanje većih privilegija, proizvoljno izvršavanje programskog koda, uskraćivanje usluga (DoS)
Rješenje:
programska zakrpa proizvođača
Izvorni ID preporuke:
cisco-sa-20120711-ctsman
Izvor:
Cisco
Problem:
Uočeni su nedostaci u obradi IP i CDP paketa.
Posljedica:
Propuste napadači mogu iskoristiti za napad uskraćivanjem usluga (eng. Denial of Service, DoS) onemogućujući stvaranje novih konekcija i proizvoljno izvršavanje programskog koda s povećanim privilegijama.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Multiple Vulnerabilities in Cisco TelePresence Manager
Advisory ID: cisco-sa-20120711-ctsman
Revision 1.0
For Public Release 2012 July 11 16:00 UTC (GMT)
+---------------------------------------------------------------------
Summary
=======
Cisco TelePresence Manager contains the following vulnerabilities:
Cisco TelePresence Malformed IP Packets Denial of Service Vulnerability
Cisco TelePresence Cisco Discovery Protocol Remote Code Execution
Vulnerability
Exploitation of the Cisco TelePresence Malformed IP Packets Denial of
Service Vulnerability may allow an unauthenticated, remote attacker to
create a denial of service (DoS) condition, causing the product to
become unresponsive to new connection requests and potentially leading
to termination services and processes.
Exploitation of the Cisco TelePresence Cisco Discovery Protocol Remote
Code Execution Vulnerability may allow an unauthenticated, adjacent
attacker to execute arbitrary code with elevated privileges.
Cisco has released free software updates that address these
vulnerabilities. There are no workarounds that mitigate these
vulnerabilities. This advisory is available at the following link:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctsman
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.18 (Darwin)
Comment: GPGTools - http://gpgtools.org
iF4EAREIAAYFAk/9izgACgkQUddfH3/BbTqUmwD/ZHYuMyBcriiQf7IBPNheFjzy
OySQwMyhLAwkM2ZZAIoA/3E0ipbO8bISXYel/QLCIigHSAuCfrNcXOuW8K6Py9M8
=VLwY
-----END PGP SIGNATURE-----
_______________________________________________
cust-security-announce mailing list
Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
To unsubscribe, send the command "unsubscribe" in the subject of your message to
Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
Posljednje sigurnosne preporuke