CVE-2011-0383
First published: Fri Feb 25 2011(Updated: )
The Java Servlet framework on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not require administrative authentication for unspecified actions, which allows remote attackers to execute arbitrary code via a crafted request, aka Bug IDs CSCtf42005 and CSCtf42008.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco TelePresence Recording Server | =1.6.1 | |
| Cisco TelePresence Recording Server software | ||
| Cisco TelePresence Multipoint Switch software | =1.0.4.0 | |
| Cisco TelePresence Multipoint Switch software | =1.1.0 | |
| Cisco TelePresence Multipoint Switch software | =1.1.1 | |
| Cisco TelePresence Multipoint Switch software | =1.1.2 | |
| Cisco TelePresence Multipoint Switch software | =1.5.0 | |
| Cisco TelePresence Multipoint Switch software | =1.5.1 | |
| Cisco TelePresence Multipoint Switch software | =1.5.2 | |
| Cisco TelePresence Multipoint Switch software | =1.5.3 | |
| Cisco TelePresence Multipoint Switch software | =1.5.4 | |
| Cisco TelePresence Multipoint Switch software | =1.5.5 | |
| Cisco TelePresence Multipoint Switch software | =1.5.6 | |
| Cisco TelePresence Multipoint Switch software | =1.6.0 | |
| Cisco TelePresence Multipoint Switch software | =1.6.1 | |
| Cisco TelePresence Multipoint Switch software | =1.6.2 | |
| Cisco TelePresence Multipoint Switch software | =1.6.3 | |
| Cisco TelePresence Multipoint Switch software | =1.6.4 | |
| Cisco TelePresence Multipoint Switch software |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml
- http://www.securityfocus.com/bid/46519
- http://www.securitytracker.com/id?1025113
- http://www.securitytracker.com/id?1025114
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65602
Frequently Asked Questions
What is the severity of CVE-2011-0383?
CVE-2011-0383 is rated as high severity due to the potential for unauthorized access to administrative functions.
How do I fix CVE-2011-0383?
To fix CVE-2011-0383, upgrade Cisco TelePresence Recording Server and Multipoint Switch software to the latest versions provided by Cisco.
What devices are affected by CVE-2011-0383?
CVE-2011-0383 affects Cisco TelePresence Recording Server and Multipoint Switch devices running specified versions prior to the latest updates.
What actions are not authenticated in CVE-2011-0383?
CVE-2011-0383 does not require administrative authentication for unspecified actions, allowing remote users to potentially exploit the system.
When was CVE-2011-0383 disclosed?
CVE-2011-0383 was disclosed in January 2011, highlighting vulnerabilities in older versions of Cisco's telepresence systems.
- collector/nvd-historical
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/author
- agent/severity
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco telepresence recording server
- version/cisco telepresence recording server/1.6.1
- canonical/cisco telepresence recording server software
- canonical/cisco telepresence multipoint switch software
- version/cisco telepresence multipoint switch software/1.0.4.0
- version/cisco telepresence multipoint switch software/1.1.0
- version/cisco telepresence multipoint switch software/1.1.1
- version/cisco telepresence multipoint switch software/1.1.2
- version/cisco telepresence multipoint switch software/1.5.0
- version/cisco telepresence multipoint switch software/1.5.1
- version/cisco telepresence multipoint switch software/1.5.2
- version/cisco telepresence multipoint switch software/1.5.3
- version/cisco telepresence multipoint switch software/1.5.4
- version/cisco telepresence multipoint switch software/1.5.5
- version/cisco telepresence multipoint switch software/1.5.6
- version/cisco telepresence multipoint switch software/1.6.0
- version/cisco telepresence multipoint switch software/1.6.1
- version/cisco telepresence multipoint switch software/1.6.2
- version/cisco telepresence multipoint switch software/1.6.3
- version/cisco telepresence multipoint switch software/1.6.4