Vulnerability CVE-2011-0388
Published: 2011-02-25   Modified: 2012-02-13

Description:
Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x do not properly restrict remote access to the Java servlet RMI interface, which allows remote attackers to cause a denial of service (memory consumption and web outage) via multiple crafted requests, aka Bug IDs CSCtg35830 and CSCtg35825.

Type:

CWE-399

 (Resource Management Errors)

CVSS2 => (AV:N/AC:L/Au:N/C:N/I:N/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.8/10
6.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Complete
Affected software
Cisco -> Telepresence multipoint switch software 
Cisco -> Telepresence recording server software 
Cisco -> Telepresence multipoint switch 
Cisco -> Telepresence recording server 

 References:
http://www.securitytracker.com/id?1025114
http://www.securitytracker.com/id?1025113
http://www.securityfocus.com/bid/46523
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml
Copyright 2024, cxsecurity.com

 

Back to Top