CVE-2011-4487

Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus

SecuriTeam™
Beyond Security®

SecuriTeam™ Home
Ask the Team
Mailing Lists
Advertising Info
Blogs

	SecuriTeam™ in Your Inbox

	E-mail this CVE-2011-4487 to a friend

New vulnerability?
New tool?
Tell us

Credit:
The information has been provided by Felix Lindner and Sandro Gauci.
The original article can be found at: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-4487

Website Security Scan	Code Vulnerability Test	Network Assessment Tool
Detect hidden vulnerabilities	Exhaustive automated testing	Real-time, continuous security
Get guidance from professionals	of internal or 3rd party code.	scanning for your entire network

Check for CVE-2011-4487

Vulnerability Assessment and Management.
Automated Pen Testing for 50 to 50,000 nodes
beyondsecurity.com/vulnerability-scanner

Vulnerable Systems:
* Cisco Unified Communications Manager Software versions 6.x
* Cisco Unified Communications Manager Software versions 7.x
* Cisco Unified Communications Manager Software versions 8.x
*Cisco Business Edition 3000
* Cisco Business Edition 5000
* Cisco Business Edition 6000

SQL injection vulnerability in Cisco Unified Communications Manager (CUCM) with software 6.x and 7.x before 7.1(5b)su5, 8.0 before 8.0(3a)su3, and 8.5 and 8.6 before 8.6(2a)su1 and Cisco Business Edition 3000 with software before 8.6.3 and 5000 and 6000 with software before 8.6(2a)su1 allows remote attackers to execute arbitrary SQL commands via a crafted SCCP registration, aka Bug ID CSCtu73538.

Vendor Status:
Cisco has released free software updates that address this vulnerability.

Patch Availability:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-cucm

CVE Information:
CVE-2011-4487

Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus