Multiple Cisco products Remote Code Execution Vulnerability

Release date:
Updated on:

Affected Systems:
Cisco TelePresence Manager 1.6
Cisco Telepresence Recording Server 1.6
Cisco TelePresence Multipoint Switch 1.7.0
Description:
--------------------------------------------------------------------------------
Bugtraq id: 54384

Cisco TelePresence is a Cisco TelePresence solution that collaborates with colleagues, partners, and customers around the world in a timely manner.

The implementation of Cisco TelePresence Manager, Cisco TelePresence Recording Server, Cisco TelePresence Multipoint Switch, and Cisco TelePresence Immersive Endpoint System has a remote code execution vulnerability, attackers can exploit this vulnerability to execute arbitrary code with elevated permissions.

<* Source: Cisco
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Cisco
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.cisco.com/warp/public/707/advisory.html