Cisco视频监控产品远程拒绝服务漏洞

受影响系统:

Cisco Video Surveillance Services Platform 5.2
Cisco Video Surveillance Integrated Services Platform 5.2

不受影响系统:

Cisco Video Surveillance Services Platform 5.3
Cisco Video Surveillance Integrated Services Platform 5.3

描述:


BUGTRAQ  ID: 35479
CVE(CAN) ID: CVE-2009-2045

Cisco Video Surveillance Stream Manager是Cisco视频监控产品所使用的视频切换和记录软件。

Cisco视频监控服务平台和Cisco视频监控集成服务平台所使用的Video Surveillance Stream Manager存在拒绝服务漏洞,攻击者可以通过向UDP 37000端口发送特制报文来利用这个漏洞,可能导致重要进程崩溃,造成系统重启。

<*来源:Cisco
  
  链接:http://www.cisco.com/warp/public/707/cisco-sa-20090624-video.shtml
*>

建议:


厂商补丁:

Cisco
—–
Cisco已经为此发布了一个安全公告(cisco-sa-20090624-video)以及相应补丁:
cisco-sa-20090624-video:Vulnerabilities in Cisco Video Surveillance
链接:http://www.cisco.com/warp/public/707/cisco-sa-20090624-video.shtml

补丁下载:
http://tools.cisco.com/support/downloads/go/ReleaseType.x?optPlat=Linux&isPlatform=Y&mdfid=281158836&sftType=Video+Surveillance+Stream+Manager+Services+Platform+Firmware&treeName=Cisco+Physical+Security&modelName=Cisco+Video+Surveillance+Services+Platform&mdfLevel=Model&treeMdfId=280588231&modifmdfid=null&imname=&hybrid=Y&imst=N
http://tools.cisco.com/support/downloads/go/ReleaseType.x?optPlat=Linux&isPlatform=Y&mdfid=281158834&sftType=Video+Surveillance+Stream+Manager+Services+Platform+Firmware&treeName=Cisco+Physical+Security&modelName=Cisco+Video+Surveillance+Integrated+Services+Platform&mdfLevel=Model&treeMdfId=280588231&modifmdfid=null&imname=&hybrid=Y&imst=N

发表评论?

0 条评论。

发表评论