CVE-2011-0391

CVE-2011-0391 affects Cisco TelePresence Recording Server devices running software 1.6.x. The issue is a denial-of-service condition caused by a malformed request related to the ad hoc recording feature, enabling an unauthenticated remote attacker to exhaust threads and cause device outage. Cisco...

CVE-2011-0385

The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allows remote attackers to create or overwrite arbitrary files, and possibly execute arbitrary cod...

CVE-2011-0387

The administrative web interface on Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allows remote authenticated users to cause a denial of service or have unspecified other impact via vectors involving access to a servlet, aka Bug ID CSCtf97164...

CVE-2011-0383

The Java Servlet framework on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 and Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions, which allows remote...

CVE-2011-0386: Improper Control of Generation of Code

The XML-RPC implementation on Cisco TelePresence Recording Server devices with software 1.6.x and 1.7.x before 1.7.1 allows remote attackers to overwrite files and consequently execute arbitrary code via a malformed request, aka Bug ID CSCti50739...

CVE-2011-0374: Improper Neutralization of Special Elements used in an OS Command

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31659...

CVE-2011-0381: Improper Neutralization of Special Elements used in an OS Command

Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to perform unspecified actions and consequently execute arbitrary code via a crafted request to the Java RMI interface, related to a "command injection vulnerability," aka Bug ID CSCtf97085...

CVE-2011-0387: Undefined Security Weakness

The administrative web interface on Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allows remote authenticated users to cause a denial of service or have unspecified other impact via vectors involving access to a servlet, aka Bug ID CSCtf97164...

PT-2011-2305

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Recording Server versions 1.6.x before 1.6.2 Cisco TelePresence Multipoint Switch CTMS versions 1.0.x, 1.1.x, 1.5.x, and 1.6.x Description The Java Servlet framework does not require administrative authentication for certain...

PT-2011-2307

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Recording Server versions 1.6.x Cisco TelePresence Multipoint Switch CTMS versions 1.0.x through 1.6.x Description The administrative web interface allows remote attackers to create or overwrite arbitrary files, and possibly...

CVE-2011-0379: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow on Cisco Adaptive Security Appliances ASA 5500 series devices with software 1.6.x; Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x; Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x; and Cisco TelePresence Manager...

PT-2011-2294

Name of the Vulnerable Software and Affected Versions Cisco TelePresence endpoint devices versions 1.2.x through 1.5.x Description The issue allows remote attackers to execute arbitrary commands via a malformed request, related to command injection vulnerabilities. Recommendations For versions...

CVE-2011-0372: Improper Neutralization of Special Elements used in an OS Command

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31640...

CVE-2011-0377: Undefined Security Weakness

Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allow remote attackers to cause a denial of service service crash via a malformed SOAP request in conjunction with a spoofed TelePresence Manager that supplies an invalid IP address, aka Bug ID CSCth03605...

CVE-2011-0376: Exposure of Sensitive Information to an Unauthorized Actor

The TFTP implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x, 1.6.0, and 1.6.1 allows remote attackers to obtain sensitive information via a GET request, aka Bug ID CSCte43876...

PT-2011-2301

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliances ASA 5500 series devices versions 1.6.x Cisco TelePresence Multipoint Switch CTMS devices versions 1.0.x through 1.6.x Cisco TelePresence endpoint devices versions 1.2.x through 1.6.x Cisco TelePresence Manage...

CVE-2011-0390: Undefined Security Weakness

The XML-RPC implementation on Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, 1.6.x, and 1.7.0 allows remote attackers to cause a denial of service process crash via a crafted request, aka Bug ID CSCtj44534...

PT-2011-2309

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Multipoint Switch CTMS versions 1.0.x through 1.6.x Description The administrative web interface on CTMS devices allows remote authenticated users to cause a denial of service or have unspecified other impact via vectors...

PT-2011-2304

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Recording Server versions 1.6.x before 1.6.2 Description The issue allows remote attackers to execute arbitrary commands on the device. This is related to a command injection vulnerability in the CGI subsystem when a request...

CVE-2011-0384: Improper Authentication

The Java Servlet framework on Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions, which allows remote attackers to execute arbitrary code via a crafted request, aka Bug ID CSCtf01253...