PT-2011-4050 · Cisco+2 · Ciscoworks Lan Management Solution+5

Published 2011-09-17 · Updated 2018-10-09 · CVE-2011-2738

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Unified Service Monitor versions prior to 8.6 CiscoWorks LAN Management Solution versions 3.x and 4.x prior to 4.1 EMC Ionix Application Connectivity Monitor (Ionix ACM) version 2.3 and earlier EMC Ionix Adapter for Alcatel-Lucent 5620 SAM EMS (Ionix ASAM) version 3.2.0.2 and earlier EMC Ionix IP Management Suite (Ionix IP) version 8.1.1.1 and earlier

Description The issue allows remote attackers to execute arbitrary code via crafted packets to TCP port 9002, related to a buffer overflow. This can be exploited by sending specially crafted packets to the vulnerable system.

Recommendations For Cisco Unified Service Monitor versions prior to 8.6, update to version 8.6 or later. For CiscoWorks LAN Management Solution versions 3.x and 4.x prior to 4.1, update to version 4.1 or later. For EMC Ionix Application Connectivity Monitor (Ionix ACM) version 2.3 and earlier, update to a version later than 2.3. For EMC Ionix Adapter for Alcatel-Lucent 5620 SAM EMS (Ionix ASAM) version 3.2.0.2 and earlier, update to a version later than 3.2.0.2. For EMC Ionix IP Management Suite (Ionix IP) version 8.1.1.1 and earlier, update to a version later than 8.1.1.1. As a temporary workaround, consider restricting access to TCP port 9002 until a patch is available.

Fix

Related Identifiers

CVE-2011-2738

ZDI-11-291

ZDI-11-292

Affected Products

Alcatel-Lucent 5620 Sam Ems

Cisco Unified Service Monitor

Ciscoworks Lan Management Solution

Emc Ionix Adapter For Alcatel-Lucent 5620 Sam Ems

Emc Ionix Application Connectivity Monitor

Emc Ionix Ip Management Suite

References · 18

• https://zerodayinitiative.com/advisories/ZDI-11-291 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a0080b9351f.shtml · Vendor Advisory
• http://secunia.com/advisories/46052 · Vendor Advisory
• http://cisco.com/en/US/products/products_security_advisory09186a0080b9351e.shtml · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-11-292 · Security Note
• http://secunia.com/advisories/46016 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-2738 · Security Note
• http://secunia.com/advisories/46053 · Vendor Advisory
• http://secunia.com/advisories/45979 · Vendor Advisory
• http://securityfocus.com/bid/49627 · Note
• http://securitytracker.com/id?1026048 · Note
• http://securitytracker.com/id?1026047 · Note
• http://securitytracker.com/id?1026059 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/69828 · Note
• http://securityfocus.com/bid/49644 · Note