Multiple Cisco Products CVE-2011-2738 Remote Code Execution Vulnerability

Bugtraq ID:	49627
Class:	Design Error
CVE:	CVE-2011-2738
Remote:	Yes
Local:	No
Published:	Sep 14 2011 12:00AM
Updated:	Oct 18 2011 07:01PM
Credit:	AbdulAziz Hariri working with Zero Day Initiative
Vulnerable:	Cisco CiscoWorks Lan Management Solution 4.0 Cisco CiscoWorks Lan Management Solution 3.2 Cisco CiscoWorks Lan Management Solution 3.1 Cisco Cisco Unified Service Monitor 2.1 Cisco Cisco Unified Service Monitor 2.0.1 Cisco Cisco Unified Service Monitor 2.0 Cisco Cisco Unified Service Monitor 1.1 Cisco Cisco Unified Service Monitor 1.0 Cisco Cisco Unified Service Manager (CUSM) 2.0.1 Cisco Cisco Unified Service Manager (CUSM) 2.0 Cisco Cisco Unified Service Manager (CUSM) 1.1 Cisco Cisco Unified Operations Manager (CUOM) 2.0.3 Cisco Cisco Unified Operations Manager (CUOM) 2.0.2 Cisco Cisco Unified Operations Manager (CUOM) 2.0.1 Cisco Cisco Unified Operations Manager (CUOM) 8.5 Cisco Cisco Unified Operations Manager (CUOM) 8.0 Cisco Cisco Unified Operations Manager (CUOM) 2.3 Cisco Cisco Unified Operations Manager (CUOM) 2.2 Cisco Cisco Unified Operations Manager (CUOM) 2.1 SP1 Cisco Cisco Unified Operations Manager (CUOM) 2.1 Cisco Cisco Unified Operations Manager (CUOM) 2.0 Cisco Cisco Unified Operations Manager (CUOM) 1.1 Cisco Cisco Unified Operations Manager (CUOM) 1.0
Not Vulnerable:	Cisco CiscoWorks Lan Management Solution 4.1 Cisco Cisco Unified Server Manager 8.6 Cisco Cisco Unified Operations Manager (CUOM) 8.6

Multiple Cisco Products CVE-2011-2738 Remote Code Execution Vulnerability

Multiple Cisco products are prone to multiple remote code-execution vulnerabilities.

An attacker can exploit these issues to execute arbitrary code within the context of the affected devices. Failed exploit attempts may result in a denial of service.

The following products are affected:

Cisco Unified Service Monitor prior to version 8.6
Cisco Unified Operations Manager prior to version 8.6
CiscoWorks LAN Management Solution software releases 3.1, 3.2, and 4.0

These issues are being tracked by Cisco Bug ID CSCtn42961.

Multiple Cisco Products CVE-2011-2738 Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Cisco Products CVE-2011-2738 Remote Code Execution Vulnerability

Solution:
A vendor advisory detailing fixes is available. Please see the referenced vendor advisory for details.

Multiple Cisco Products CVE-2011-2738 Remote Code Execution Vulnerability

References:

• Cisco Applied Mitigation Bulletin: Identifying and Mitigating Exploitation of th (Cisco)
  
• Cisco Homepage (Cisco )
  
• Cisco Unified Service Monitor brstart add_dm Remote Code Execution Vulnerability (TippingPoint Zero Day Initiative)
  
• Cisco Unified Service Monitor brstart sm_read_string_length Remote Code Executio (TippingPoint Zero Day Initiative)
  
• Cisco Security Advisory: Cisco Unified Service Monitor and Cisco Unified Operati (Cisco)
  
• Cisco Security Advisory: CiscoWorks LAN Management Solution Remote Code Executio (Cisco)