PT-2011-4371 · Cisco · Cisco Unified Presence

Published 2011-10-06 · Updated 2024-02-15 · CVE-2011-3288

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Unified Presence versions prior to 8.5(4)

Description The issue allows remote attackers to cause a denial of service, consuming memory and CPU, and potentially crashing the process. This is achieved by sending a crafted XML document that contains a large number of nested entity references, which the system fails to properly detect due to recursion during entity expansion.

Recommendations For versions prior to 8.5(4), update to version 8.5(4) or later to resolve the issue.

Fix

XML Entity Expansion

Weakness Enumeration

CWE-776

Related Identifiers

CVE-2011-3288

Affected Products

Cisco Unified Presence

References · 3

• https://cisco.com/c/en/us/support/docs/csa/cisco-sa-20110928-xcpcupsxml.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-3288 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a0080b95d47.shtml · Vendor Advisory