First published: Fri Feb 25 2011(Updated: )
Cisco TelePresence Recording Server devices with software 1.6.x allow remote attackers to cause a denial of service (thread consumption and device outage) via a malformed request, related to an "ad hoc recording" issue, aka Bug ID CSCtf97205.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco TelePresence Recording Server | =1.6.1 | |
Cisco TelePresence Recording Server | =1.6.2 | |
Cisco TelePresence Recording Server | =1.6.3 | |
Cisco TelePresence Recording Server software |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2011-0391 is considered high, as it allows remote attackers to cause a denial of service.
To fix CVE-2011-0391, upgrade to a patched version of the Cisco TelePresence Recording Server software, specifically 1.6.4 or later.
CVE-2011-0391 affects Cisco TelePresence Recording Server devices running versions 1.6.1, 1.6.2, and 1.6.3.
The impact of CVE-2011-0391 is increased thread consumption that can lead to device outages and service interruptions.
Yes, CVE-2011-0391 specifically affects Cisco TelePresence Recording Server software versions 1.6.1, 1.6.2, and 1.6.3.