PT-2011-2308 · Cisco · Cisco Telepresence Recording Server

Publicado 2011-02-25 · Atualizado 2017-08-17 · CVE-2011-0386

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Recording Server versions 1.6.x through 1.7.x before 1.7.1

Description The issue allows remote attackers to overwrite files and execute arbitrary code via a malformed request.

Recommendations For versions 1.6.x through 1.7.x before 1.7.1, update to version 1.7.1 or later to resolve the issue.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2011-0386

Produtos afetados

Cisco Telepresence Recording Server

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2011-0386 · Nota de Segurança
• http://cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml · Aviso do Fabricante
• http://securitytracker.com/id?1025114 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65605 · Nota
• http://securityfocus.com/bid/46522 · Nota