CERTA-2005-AVI-259
Vulnerability from certfr_avis - Published: 2005-07-13 - Updated: 2005-07-13None
Description
Cisco Call Manager (CCM) est un logiciel CISCO de traitement d'appels téléphoniques. Il fournit des fonctions de téléphonie aux réseaux locaux d'entreprise et aux équipements réseau de téléphonie par paquets.
Plusieurs vulnérabilités ont été identifiées dans CISCO Call Manager. Ces vulnérabilités sont présentes aux niveaux de RISDC (Realtime Information Server Data Collection), CTI Manager, ccm.exe, MLA (Multi Level Admin) et aupai.exe.
Elles pourraient être exploitées par un utilisateur mal intentionné afin de causer un déni de service ou exécuter du code arbitraire à distance.
Solution
Se référer au bulletin de sécurité CISCO suivant les versions de CCM :
http://www.cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml#software
None
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Cisco | N/A | Cisco Call manager versions 3.2 et précédentes ; | ||
| Cisco | N/A | Cisco Call manager 3.3, versions précédentes à la version 3.3(5) ; | ||
| Cisco | N/A | Cisco Call manager 4.0, versions précédentes à la version 4.0(2a)SR2b ; | ||
| Cisco | N/A | Cisco Call manager 4.1, versions précédentes à la version 4.1(3)SR1. |
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Cisco Call manager versions 3.2 et pr\u00e9c\u00e9dentes ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Cisco Call manager 3.3, versions pr\u00e9c\u00e9dentes \u00e0 la version 3.3(5) ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Cisco Call manager 4.0, versions pr\u00e9c\u00e9dentes \u00e0 la version 4.0(2a)SR2b ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Cisco Call manager 4.1, versions pr\u00e9c\u00e9dentes \u00e0 la version 4.1(3)SR1.",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nCisco Call Manager (CCM) est un logiciel CISCO de traitement d\u0027appels\nt\u00e9l\u00e9phoniques. Il fournit des fonctions de t\u00e9l\u00e9phonie aux r\u00e9seaux locaux\nd\u0027entreprise et aux \u00e9quipements r\u00e9seau de t\u00e9l\u00e9phonie par paquets. \n\nPlusieurs vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 identifi\u00e9es dans CISCO Call Manager.\nCes vuln\u00e9rabilit\u00e9s sont pr\u00e9sentes aux niveaux de RISDC (Realtime\nInformation Server Data Collection), CTI Manager, ccm.exe, MLA (Multi\nLevel Admin) et aupai.exe. \n\nElles pourraient \u00eatre exploit\u00e9es par un utilisateur mal intentionn\u00e9 afin\nde causer un d\u00e9ni de service ou ex\u00e9cuter du code arbitraire \u00e0 distance.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 CISCO suivant les versions de CCM :\n\n http://www.cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml#software\n",
"cves": [],
"initial_release_date": "2005-07-13T00:00:00",
"last_revision_date": "2005-07-13T00:00:00",
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 CISCO du 12 juillet 2005:",
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml"
}
],
"reference": "CERTA-2005-AVI-259",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2005-07-13T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "D\u00e9ni de service"
}
],
"summary": null,
"title": "Vuln\u00e9rabilit\u00e9s dans CISCO Call Manager",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Cisco du 12 juillet 2005",
"url": null
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…