Cisco Multiple Products CVE-2012-3073 Denial of Service Vulnerability

Bugtraq ID:	54382
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2012-3073
Remote:	Yes
Local:	No
Published:	Jul 11 2012 12:00AM
Updated:	Jul 11 2012 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Telepresence Recording Server 1.7.2 Cisco Telepresence Recording Server 1.6.2 Cisco Telepresence Recording Server 1.6.1 Cisco Telepresence Recording Server 1.6 Cisco Telepresence Recording Server 1.7.2.1 Cisco Telepresence Recording Server 1.7.1 Cisco TelePresence Multipoint Switch 1.7.1 Cisco TelePresence Multipoint Switch 1.7.0 Cisco TelePresence Multipoint Switch 1.6.0 Cisco TelePresence Manager 1.7 Cisco TelePresence Manager 1.6
Not Vulnerable:

Cisco Multiple Products CVE-2012-3073 Denial of Service Vulnerability

Multiple Cisco products are prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause an affected device to reload, denying service to legitimate users.

The following Cisco products are vulnerable:

Cisco TelePresence Multipoint Switch
Cisco TelePresence Manager
Cisco TelePresence Recording Server

This issue is being tracked by the following Cisco Bug IDs:

CSCty11219
CSCty11299
CSCty11323
CSCty11338
CSCti21851
CSCtj19100
CSCtj19078
CSCti21830

Cisco Multiple Products CVE-2012-3073 Denial of Service Vulnerability

To exploit this issue, attackers can use readily available network utilities.

Cisco Multiple Products CVE-2012-3073 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for details.

Cisco Multiple Products CVE-2012-3073 Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco)