First published: Sat Sep 17 2011(Updated: )
Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and CiscoWorks LAN Management Solution 3.x and 4.x before 4.1; and multiple EMC Ionix products including Application Connectivity Monitor (Ionix ACM) 2.3 and earlier, Adapter for Alcatel-Lucent 5620 SAM EMS (Ionix ASAM) 3.2.0.2 and earlier, IP Management Suite (Ionix IP) 8.1.1.1 and earlier, and other Ionix products; allow remote attackers to execute arbitrary code via crafted packets to TCP port 9002, aka Bug IDs CSCtn42961 and CSCtn64922, related to a buffer overflow.
Credit: security_alert@emc.com
Affected Software | Affected Version | How to fix |
---|---|---|
EMC Ionix IP | <=8.1.1.1 | |
EMC Ionix ACM | <=2.3 | |
EMC Ionix ASAM | <=3.2.0.2 | |
Cisco Unified Service Monitor | <=8.5 | |
Cisco Unified Service Monitor | =1.1 | |
Cisco Unified Service Monitor | =2.0 | |
Cisco Unified Service Monitor | =2.0.1 | |
Cisco Unified Service Monitor | =2.1 | |
Cisco Unified Service Monitor | =2.2 | |
Cisco Unified Service Monitor | =2.3 | |
Cisco Unified Service Monitor | =8.0 | |
Cisco Ciscoworks LAN Management Solution | =3.0 | |
Cisco Ciscoworks LAN Management Solution | =3.0-december_2007 | |
Cisco Ciscoworks LAN Management Solution | =3.1 | |
Cisco Ciscoworks LAN Management Solution | =3.2 | |
Cisco Ciscoworks LAN Management Solution | =4.0 | |
Cisco Ciscoworks LAN Management Solution | =4.0.1 | |
Cisco Unified Operations Manager | <=8.5 | |
Cisco Unified Operations Manager | =1.0 | |
Cisco Unified Operations Manager | =1.1 | |
Cisco Unified Operations Manager | =2.0 | |
Cisco Unified Operations Manager | =2.0.1 | |
Cisco Unified Operations Manager | =2.0.2 | |
Cisco Unified Operations Manager | =2.0.3 | |
Cisco Unified Operations Manager | =2.1 | |
Cisco Unified Operations Manager | =2.2 | |
Cisco Unified Operations Manager | =2.3 | |
Cisco Unified Operations Manager | =8.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The CVE-2011-2738 vulnerability has a moderate severity rating due to its potential risk of unauthorized access and exposure of sensitive data.
CVE-2011-2738 affects multiple versions of Cisco Unified Service Monitor prior to 8.6, CiscoWorks LAN Management Solution 3.x and 4.x before 4.1, and various EMC Ionix products.
To fix CVE-2011-2738, upgrade Cisco Unified Service Monitor to version 8.6 or later, and ensure that all affected EMC Ionix products are updated to their latest available versions.
CVE-2011-2738 impacts Cisco Unified Service Monitor, Unified Operations Manager, Ciscoworks LAN Management Solution, and several EMC Ionix products.
As of the latest updates, there is no public information indicating that CVE-2011-2738 is actively being exploited in the wild.