The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.8 and earlier allows remote attackers to cause a denial of service (networking outage or process crash) via (1) malformed IP packets, (2) a high rate of TCP connection requests, or (3) a high rate of TCP connection terminations, aka Bug IDs CSCti21830, CSCti21851, CSCtj19100, CSCtj19086, CSCtj19078, CSCty11219, CSCty11299, CSCty11323, and CSCty11338.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Telepresence_multipoint_switch_software | Cisco | * | 1.8.0(1026) (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.0.4.0 (including) | 1.0.4.0 (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.0.4.0(21) (including) | 1.0.4.0(21) (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.1.0 (including) | 1.1.0 (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.1.0(254) (including) | 1.1.0(254) (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.1.1 (including) | 1.1.1 (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.1.1(30) (including) | 1.1.1(30) (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.1.2 (including) | 1.1.2 (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.1.2(6) (including) | 1.1.2(6) (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.5.0 (including) | 1.5.0 (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.5.0(222) (including) | 1.5.0(222) (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.5.1 (including) | 1.5.1 (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.5.1(2) (including) | 1.5.1(2) (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.5.2 (including) | 1.5.2 (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.5.2(21) (including) | 1.5.2(21) (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.5.3 (including) | 1.5.3 (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.5.3.12 (including) | 1.5.3.12 (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.5.4 (including) | 1.5.4 (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.5.4(4) (including) | 1.5.4(4) (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.5.5 (including) | 1.5.5 (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.5.5(1) (including) | 1.5.5(1) (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.5.6 (including) | 1.5.6 (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.5.6(1) (including) | 1.5.6(1) (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.6.0 (including) | 1.6.0 (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.6.0(108) (including) | 1.6.0(108) (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.6.1 (including) | 1.6.1 (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.6.1(2) (including) | 1.6.1(2) (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.6.2 (including) | 1.6.2 (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.6.2(3) (including) | 1.6.2(3) (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.6.3 (including) | 1.6.3 (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.6.3(2) (including) | 1.6.3(2) (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.6.4 (including) | 1.6.4 (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.6.4(3) (including) | 1.6.4(3) (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.7.0 (including) | 1.7.0 (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.7.0.1(5) (including) | 1.7.0.1(5) (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.7.1(15) (including) | 1.7.1(15) (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.7.2(75) (including) | 1.7.2(75) (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.7.3(2) (including) | 1.7.3(2) (including) |
| Telepresence_multipoint_switch_software | Cisco | 1.8.0 (including) | 1.8.0 (including) |
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctms
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctrs
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctsman
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctms
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctrs
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctsman