CVE-2011-0388

CVE-2011-0388 affects Cisco TelePresence Recording Server (software 1.6.x) and Cisco TelePresence Multipoint Switch (CTMS) (software 1.0.x, 1.1.x, 1.5.x, 1.6.x). The issue is that remote access to the Java servlet RMI interface is not properly restricted, enabling unauthenticated remote attackers...

CVE-2011-0389

CVE-2011-0389 is a vulnerability in Cisco TelePresence Multipoint Switch (CTMS) devices affecting software 1.0.x, 1.1.x, 1.5.x and 1.6.x. A remote, unauthenticated attacker can crash the call control process by sending a crafted RTCP UDP packet, causing a denial of service. The Cisco advisory and...

PT-2011-2307

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Recording Server versions 1.6.x Cisco TelePresence Multipoint Switch CTMS versions 1.0.x through 1.6.x Description The administrative web interface allows remote attackers to create or overwrite arbitrary files, and possibly...

Joomla XCloner Remote Command Execution

!/usr/bin/python Joomla component comxcloner-backupandrestore remote code execution exploit Vendor: http://www.xcloner.com/ "Our true divinity is in our ability to create. And armed with the understanding of the symbiotic connections of life, while being guided by the emergent nature of reality,...

PT-2011-2305

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Recording Server versions 1.6.x before 1.6.2 Cisco TelePresence Multipoint Switch CTMS versions 1.0.x, 1.1.x, 1.5.x, and 1.6.x Description The Java Servlet framework does not require administrative authentication for certain...

PT-2011-2310

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Recording Server devices version 1.6.x Cisco TelePresence Multipoint Switch CTMS devices versions 1.0.x through 1.6.x Description The issue is related to improper restriction of remote access to the Java servlet RMI interfac...

PT-2011-2306

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Multipoint Switch CTMS versions 1.0.x through 1.6.x Description The Java Servlet framework does not require administrative authentication for certain actions, allowing remote attackers to execute arbitrary code via a crafted...

PT-2011-2301

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliances ASA 5500 series devices versions 1.6.x Cisco TelePresence Multipoint Switch CTMS devices versions 1.0.x through 1.6.x Cisco TelePresence endpoint devices versions 1.2.x through 1.6.x Cisco TelePresence Manage...

PT-2011-2312

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Multipoint Switch CTMS versions 1.0.x through 1.7.0 Description The issue concerns the XML-RPC implementation, which allows remote attackers to cause a denial of service by sending a crafted request, resulting in a process...

PT-2011-2309

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Multipoint Switch CTMS versions 1.0.x through 1.6.x Description The administrative web interface on CTMS devices allows remote authenticated users to cause a denial of service or have unspecified other impact via vectors...

CVE-2011-0389: Undefined Security Weakness

Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allow remote attackers to cause a denial of service process crash via a crafted Real-Time Transport Control Protocol RTCP UDP packet, aka Bug ID CSCth60993...

CVE-2011-0379: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow on Cisco Adaptive Security Appliances ASA 5500 series devices with software 1.6.x; Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x; Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x; and Cisco TelePresence Manager...

CVE-2011-0388: Undefined Security Weakness

Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x do not properly restrict remote access to the Java servlet RMI interface, which allows remote attackers to cause a denial of service...

CVE-2011-0383: Improper Authentication

The Java Servlet framework on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 and Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions, which allows remote...

CVE-2011-0390: Undefined Security Weakness

The XML-RPC implementation on Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, 1.6.x, and 1.7.0 allows remote attackers to cause a denial of service process crash via a crafted request, aka Bug ID CSCtj44534...

CVE-2011-0384: Improper Authentication

The Java Servlet framework on Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions, which allows remote attackers to execute arbitrary code via a crafted request, aka Bug ID CSCtf01253...

CVE-2011-0385: Undefined Security Weakness

The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allows remote attackers to create or overwrite arbitrary files, and possibly execute arbitrary cod...

CVE-2011-0387: Undefined Security Weakness

The administrative web interface on Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allows remote authenticated users to cause a denial of service or have unspecified other impact via vectors involving access to a servlet, aka Bug ID CSCtf97164...

PT-2011-2311

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Multipoint Switch CTMS versions 1.0.x through 1.6.x Description The issue allows remote attackers to cause a denial of service, resulting in a process crash, by sending a crafted Real-Time Transport Control Protocol RTCP UDP...

Multiple Vulnerabilities in Cisco TelePresence Multipoint Switch

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...