Cisco Intercompany Media Engine SAF Packets Handling Multiple Denial of Service Vulnerabilities

Bugtraq ID:	49300
Class:	Unknown
CVE:	CVE-2011-2563 CVE-2011-2564
Remote:	Yes
Local:	No
Published:	Aug 24 2011 12:00AM
Updated:	Aug 24 2011 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Intercompany Media Engine 8.0
Not Vulnerable:	Cisco Intercompany Media Engine 8.5(1)

Cisco Intercompany Media Engine SAF Packets Handling Multiple Denial of Service Vulnerabilities

Cisco Intercompany Media Engine is prone to multiple remote denial-of-service vulnerabilities.

An attacker can exploit these issues to cause an affected device to reload, denying service to legitimate users.

These issues are being tracked by Cisco Bug IDs CSCth26669 and CSCth19417.

Intercompany Media Engine versions 8.0.x are affected

Cisco Intercompany Media Engine SAF Packets Handling Multiple Denial of Service Vulnerabilities

To exploit this issue, attackers can use readily available network utilities.

Cisco Intercompany Media Engine SAF Packets Handling Multiple Denial of Service Vulnerabilities

Solution:
Updates are available. Please see the references for details.

Cisco Intercompany Media Engine SAF Packets Handling Multiple Denial of Service Vulnerabilities

References:

• Cisco Homepage (Cisco )
  
• Cisco Security Advisory: Denial of Service Vulnerabilities in Cisco Intercompany (Cisco)