PT-2012-1891
CVE-2011-4487
·
تاريخ النشر
2012-03-01
·
تاريخ التحديث
2012-03-05
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Cisco Unified Communications Manager (CUCM) versions 6.x through 7.x before 7.1(5b)su5
Cisco Unified Communications Manager (CUCM) versions 8.0 through 8.0 before 8.0(3a)su3
Cisco Unified Communications Manager (CUCM) versions 8.5 through 8.6 before 8.6(2a)su1
Cisco Business Edition 3000 version before 8.6.3
Cisco Business Edition 5000 and 6000 versions before 8.6(2a)su1
Description
A SQL injection issue allows remote attackers to execute arbitrary SQL commands via a crafted SCCP registration.
Recommendations
For Cisco Unified Communications Manager (CUCM) versions 6.x through 7.x before 7.1(5b)su5, update to version 7.1(5b)su5 or later.
For Cisco Unified Communications Manager (CUCM) versions 8.0 through 8.0 before 8.0(3a)su3, update to version 8.0(3a)su3 or later.
For Cisco Unified Communications Manager (CUCM) versions 8.5 through 8.6 before 8.6(2a)su1, update to version 8.6(2a)su1 or later.
For Cisco Business Edition 3000 version before 8.6.3, update to version 8.6.3 or later.
For Cisco Business Edition 5000 and 6000 versions before 8.6(2a)su1, update to version 8.6(2a)su1 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾