Cisco WebEx Meeting Center lengthy Server Error Response Remote Information Leakage Vulnerability

Release date:
Updated on:

Affected Systems:
Cisco WebEx Meetings Server
Description:
--------------------------------------------------------------------------------
Bugtraq id: 64306
CVE (CAN) ID: CVE-2013-6970

Cisco WebEx Meetings is a network conferencing solution.

A security vulnerability exists in the Server Error Response Message of the Cisco WebEx Meeting Center. unauthenticated remote attackers can exploit these lengthy error messages to obtain sensitive information and plan the next attack.

<* Source: Cisco

Link: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6970
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Cisco
-----
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.cisco.com/go/psirt