|
|
|
|
| |
Credit:
The original article can be found at: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3315
The information has been provided by Vulnerability Research Team of Digital Defense, Inc.
|
| |
.Vulnerable Systems:
*Cisco UCCX version 6.0(x)
*Cisco UCCX version 7.0(x)
*Cisco UCCX version 8.0(x)
*Cisco UCCX version 8.5(x)
*Cisco Unified IP Interactive Voice Response version 6.0(x)
*Cisco Unified IP Interactive Voice Response version 7.0(x)
*Cisco Unified IP Interactive Voice Response version 8.0(x)
*Cisco Unified IP Interactive Voice Response version 8.5(x)
Immune System:
*Cisco Unified Communications Manager
Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x before 7.1(5b)SU2, and 8.x before 8.0(3), and Cisco Unified Contact Center Express (aka Unified CCX or UCCX) and Cisco Unified IP Interactive Voice Response (Unified IP-IVR) before 6.0(1)SR1ES8, 7.0(x) before 7.0(2)ES1, 8.0(x) through 8.0(2)SU3, and 8.5(x) before 8.5(1)SU2, allows remote attackers to read arbitrary files via a crafted URL, aka Bug IDs CSCth09343 and CSCts44049.
Vendor Status:
Cisco has issued an update to correct this vulnerability
Patch Availability:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111026-uccx
CVE Information:
CVE-2011-3315
Disclosure Timeline:
2011-October-26 Initial public release
|
|
|
|
|
