背景：
阅读新闻
Cisco Unified Communications Manager SCCP SQL注入漏洞(CVE-2011-4487)
[日期：2012-03-02] 来源：Linux社区 作者：Linux [字体：]
发布日期：2012-02-29
更新日期：2012-03-01
受影响系统：
Cisco Unified Communications Manager Not Vulnerable: 8.6(2a)su1
Cisco Unified Communications Manager 8.x
Cisco Unified Communications Manager 8.x
Cisco Unified Communications Manager 8.6
Cisco Unified Communications Manager 8.6
Cisco Unified Communications Manager 8.5(1)SU2
Cisco Unified Communications Manager 8.5(1)SU2
Cisco Unified Communications Manager 8.5(1)SU2
Cisco Unified Communications Manager 8.5(1)SU1
Cisco Unified Communications Manager 8.5(1)
Cisco Unified Communications Manager 8.5(1)
Cisco Unified Communications Manager 8.5
Cisco Unified Communications Manager 8.0(3a)su3
Cisco Unified Communications Manager 8.0(3a)su3
Cisco Unified Communications Manager 8.0(3a)SU2
Cisco Unified Communications Manager 8.0(3a)SU2
Cisco Unified Communications Manager 8.0(3a)su1
Cisco Unified Communications Manager 8.0(3a)
Cisco Unified Communications Manager 8.0(3a)
Cisco Unified Communications Manager 8.0(3)
Cisco Unified Communications Manager 8.0(3)
Cisco Unified Communications Manager 8.0(2C)Su1
Cisco Unified Communications Manager 8.0(2C)
Cisco Unified Communications Manager 8.0(1)
Cisco Unified Communications Manager 8.0(0.98000.106)
Cisco Unified Communications Manager 7.1(5b)su5
Cisco Unified Communications Manager 7.1(5b)SU4
Cisco Unified Communications Manager 7.1(5b)SU4
Cisco Unified Communications Manager 7.1(5b)su3
Cisco Unified Communications Manager 7.1(5b)SU2
Cisco Unified Communications Manager 7.1(5b)SU2
Cisco Unified Communications Manager 7.1(5b)SU2
Cisco Unified Communications Manager 7.1(5B)
Cisco Unified Communications Manager 7.1(5A)
Cisco Unified Communications Manager 7.1(5)Su1a
Cisco Unified Communications Manager 7.1(5)Su1
Cisco Unified Communications Manager 7.1(5)
Cisco Unified Communications Manager 7.1(3b)su2
Cisco Unified Communications Manager 7.1(3b)su1
Cisco Unified Communications Manager 7.1(3B)
Cisco Unified Communications Manager 7.1(3A)Su1a
Cisco Unified Communications Manager 7.1(3a)su1
Cisco Unified Communications Manager 7.1(3A)
Cisco Unified Communications Manager 7.1(3)
Cisco Unified Communications Manager 7.1(2B)Su1
Cisco Unified Communications Manager 7.1(2B)
Cisco Unified Communications Manager 7.1(2a)su1
Cisco Unified Communications Manager 7.1(2a)SU1
Cisco Unified Communications Manager 7.1(2A)
Cisco Unified Communications Manager 7.1(2)
Cisco Unified Communications Manager 7.1(2)
Cisco Unified Communications Manager 7.1
Cisco Unified Communications Manager 7.0(3g)
Cisco Unified Communications Manager 7.0(2a)SU3
Cisco Unified Communications Manager 7.0(2a)SU3
Cisco Unified Communications Manager 7.0(2A)Su2
Cisco Unified Communications Manager 7.0(2a)su1
Cisco Unified Communications Manager 7.0(2A)
Cisco Unified Communications Manager 7.0(2)
Cisco Unified Communications Manager 7.0(2)
Cisco Unified Communications Manager 7.0(2)
Cisco Unified Communications Manager 7.0(1)Su1a
Cisco Unified Communications Manager 7.0(1)Su1
Cisco Unified Communications Manager 7.0
Cisco Unified Communications Manager 6.1(5)SU3
Cisco Unified Communications Manager 6.1(5)SU3
Cisco Unified Communications Manager 6.1(5)SU2
Cisco Unified Communications Manager 6.1(5)SU2
Cisco Unified Communications Manager 6.1(5)SU1
Cisco Unified Communications Manager 6.1(5)SU1
Cisco Unified Communications Manager 6.1(5)
Cisco Unified Communications Manager 6.1(4A)Su2
Cisco Unified Communications Manager 6.1(4A)
Cisco Unified Communications Manager 6.1(4)Su1
Cisco Unified Communications Manager 6.1(4)
Cisco Unified Communications Manager 6.1(4)
Cisco Unified Communications Manager 6.1(3B)
Cisco Unified Communications Manager 6.1(3A)
Cisco Unified Communications Manager 6.1(3)
Cisco Unified Communications Manager 6.1(3)
Cisco Unified Communications Manager 6.1(3)
Cisco Unified Communications Manager 6.1(3)
Cisco Unified Communications Manager 6.1(2)Su1a
Cisco Unified Communications Manager 6.1(2)SU1
Cisco Unified Communications Manager 6.1(2)
Cisco Unified Communications Manager 6.1(2)
Cisco Unified Communications Manager 6.1(1B)
Cisco Unified Communications Manager 6.1(1a)
Cisco Unified Communications Manager 6.1(1)
Cisco Unified Communications Manager 6.1(1)
Cisco Unified Communications Manager 6.1 (3b)su1
Cisco Unified Communications Manager 6.1 (2)su1
Cisco Unified Communications Manager 6.1
Cisco Unified Communications Manager 6.0(1)
Cisco Unified Communications Manager 6.0 (1a)
Cisco Unified Communications Manager 5.1(3g)
Cisco Unified Communications Manager 5.1(3e)
Cisco Unified Communications Manager 5.1(3e)
Cisco Unified Communications Manager 5.1(3d)
Cisco Unified Communications Manager 5.1(3)
Cisco Unified Communications Manager 4.3(2)SR1b
Cisco Unified Communications Manager 4.3(2)sr1a
Cisco Unified Communications Manager 4.3(2)SR1
Cisco Unified Communications Manager 4.3(2)
Cisco Unified Communications Manager 4.2(3)SR4b
不受影响系统：
Cisco Unified Communications Manager 8.0(3)
Cisco Unified Communications Manager 7.1(5b)SU4
Cisco Unified Communications Manager 7.1(5b)SU2
Cisco Unified Communications Manager 6.1(5)SU2
描述：
--------------------------------------------------------------------------------
BUGTRAQ ID: 52213
CVE ID: CVE-2011-4487
Cisco Unified Communications Manager是Cisco IP Telephony解决方案的呼叫处理组件。
Cisco Unified Communications Manager在注册期间处理特制的SCCP消息时存在SQL代码盲注执行漏洞，可使攻击者修改某些SQL数据库的某些段，控制受影响设备。
<*来源：Sandro Gauci
链接：
*>
建议：
--------------------------------------------------------------------------------
厂商补丁：
Cisco
-----
Cisco已经为此发布了一个安全公告（cisco-sa-20120229-cucm#details）以及相应补丁:
cisco-sa-20120229-cucm#details：Cisco Unified Communications Manager Skinny Client Control Protocol Vulnerabilities
链接：
Linux Kernel 'apparmor_setprocattr()'本地拒绝服务漏洞
Cisco Unity Connection TCP段拒绝服务漏洞
相关资讯 cisco漏洞
本文评论 查看全部评论 (0)
尊重网上道德，遵守中华人民共和国的各项有关法律法规 承担一切因您的行为而直接或间接导致的民事或刑事法律责任 本站管理人员有权保留或删除其管辖留言中的任意内容 本站有权在网站内转载或引用您的评论 参与本评论即表明您已经阅读并接受上述条款
评论声明
最新资讯