Cisco TelePresence Multipoint Switch Multiple Vulnerabilities

Bugtraq ID:	46520
Class:	Unknown
CVE:	CVE-2011-0384 CVE-2011-0387 CVE-2011-0389 CVE-2011-0390
Remote:	Yes
Local:	No
Published:	Feb 23 2011 12:00AM
Updated:	Mar 09 2011 09:07PM
Credit:	Cisco
Vulnerable:	Cisco CTMS 1.7 Cisco CTMS 1.6 Cisco CTMS 1.5 Cisco CTMS 1.1 Cisco CTMS 1.0
Not Vulnerable:	Cisco CTMS 1.7.1

Cisco TelePresence Multipoint Switch Multiple Vulnerabilities

Cisco TelePresence Multipoint Switch is prone to multiple vulnerabilities, including:

1. Multiple denial-of-service vulnerabilities
2. A security-bypass vulnerability
3. An unauthorized-access vulnerability

An attacker can exploit these issues to bypass certain security restrictions and cause a denial-of-service condition. Other attacks are also possible.

These issues are being tracked by the following Cisco Bug IDs:

CSCtf01253
CSCtf97164
CSCth60993
CSCtj44534

Cisco TelePresence Multipoint Switch Multiple Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Some of these issues may be trivial to exploit and may not require specific exploit code.

Cisco TelePresence Multipoint Switch Multiple Vulnerabilities

Solution:
Vendor updates are available. Please see the referenced advisory for details.

Cisco TelePresence Multipoint Switch Multiple Vulnerabilities

References:

• Cisco Homepage (Cisco)
  
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Multipoi (Cisco)