Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence TC and TE Software
From: Cisco Systems Product Security Incident Response Team <psirt () cisco com>
Date: Wed, 19 Jun 2013 12:00:14 -0400

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence TC and TE Software

Advisory ID: cisco-sa-20130619-tpc

Revision 1.0

For Public Release 2013 June 19 16:00  UTC (GMT)

+---------------------------------------------------------------------

Summary
=======

Cisco TelePresence TC and TE Software contain two vulnerabilities in the implementation of the Session Initiation 
Protocol (SIP) that could allow an unauthenticated remote attacker to cause a denial of service (DoS) condition.

Additionally, Cisco TelePresence TC Software contain an adjacent root access vulnerability that could allow an attacker 
on the same physical or logical Layer-2 network as the affected system to gain an unauthenticated root shell.

Cisco has released free software updates that address these vulnerabilities. Workarounds that mitigate the Cisco 
TelePresence TC and TE Software SIP Denial of Service vulnerabilities are available. This advisory is available at the 
following link:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130619-tpc
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.18 (Darwin)

iF4EAREKAAYFAlHBtlQACgkQUddfH3/BbTpOdwEAiBS9DSSPEUee26GiAHsj2UbF
ts/iwI6PsKqrsZ8PWzsA/iY2dCpNgpMvtw7uCT6oUu6jj6DumUhebUKjh2TkotFO
=4gGi
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


  By Date           By Thread  

Current thread:
  • Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence TC and TE Software Cisco Systems Product Security Incident Response Team (Jun 19)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]