Cisco Unified MeetingPlace Multiple Vulnerabilities
BID:37965
Info
Cisco Unified MeetingPlace Multiple Vulnerabilities
| Bugtraq ID: | 37965 |
| Class: | Unknown |
| CVE: |
CVE-2010-0139 CVE-2010-0140 CVE-2010-0141 CVE-2010-0142 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 27 2010 12:00AM |
| Updated: | Jan 27 2010 12:00AM |
| Credit: | National Australia Bank's Security Assurance team and Credit Suisse |
| Vulnerable: |
Cisco Unified MeetingPlace Web Conferencing 7.0.2 Cisco Unified MeetingPlace Web Conferencing 6.0.517 .0 Cisco Unified MeetingPlace Web Conferencing 7.0 Cisco Unified MeetingPlace Web Conferencing 6.0 Cisco Unified MeetingPlace Web Conference 6.0.244 .1A Cisco Unified MeetingPlace Web Conference 5.4.156 .2E Cisco Unified MeetingPlace Web Conference 5.3.447 Cisco Unified MeetingPlace Web Conference 6.0.170.0 Cisco Unified MeetingPlace Web Conference 5.4.70.0 Cisco Unified MeetingPlace Web Conference 5.3.447.4 Cisco Unified MeetingPlace Web Conference 5.3.333.0 Cisco Unified MeetingPlace Web Conference 5.3.104.3 Cisco Unified MeetingPlace Web Conference 5.3.104.0 Cisco Unified MeetingPlace Web Conference 4.3.0.246.5 Cisco Unified MeetingPlace Web Conference 4.3.0.246 Cisco Unified MeetingPlace 7 Cisco Unified MeetingPlace 6 Cisco Unified MeetingPlace 5 Cisco Unified MeetingPlace 0 |
| Not Vulnerable: |
Cisco Unified MeetingPlace 6.0.639 .3 Cisco Unified MeetingPlace 6.0.639 .2 Cisco Unified MeetingPlace 7.0(2.3) hotfix 5F |
Discussion
Cisco Unified MeetingPlace Multiple Vulnerabilities
Cisco Unified MeetingPlace is prone to multiple security vulnerabilities:
- An SQL-injection issue
- An input-validation issue that permits account creation
- An information-disclosure issue
- A privilege-escalation issue
Cisco Unified MeetingPlace is prone to multiple security vulnerabilities:
- An SQL-injection issue
- An input-validation issue that permits account creation
- An information-disclosure issue
- A privilege-escalation issue
Exploit / POC
Cisco Unified MeetingPlace Multiple Vulnerabilities
Attackers can exploit these issues using readily available tools.
Attackers can exploit these issues using readily available tools.
Solution / Fix
Cisco Unified MeetingPlace Multiple Vulnerabilities
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
Cisco Unified MeetingPlace Multiple Vulnerabilities
References:
References:
- Cisco Unified MeetingPlace Home Page (Cisco )
- Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified MeetingPlace (Cisco Systems Product Security Incident Response Team
- Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified MeetingPlace (Cisco)