Multiple Vulnerabilities in Cisco Unified IP Phones 7900 Series.

[learnsec]

hy all,

Cisco generated an indication about the above vulnerability on June 01, 2011

they mention :

Cisco has released free software updates that address these vulnerabilities. There are no workarounds available to mitigate these vulnerabilities.

bug ID:  CSCtf07426    &    CSCtn65815

is there any information about severity and how this vulnerability can be exploit?

regards,

[Jaime Valencia]

Edit: sorry, thought you were looking for the fix.

I reviewed the bug info from the links you posted and, not sure how much info you can see, but there's a small explanation of how the exploit could be used and the severity assigned to it.

HTH

java

If this helps, please rate

www.cisco.com/go/pdihelpdesk

[learnsec]

Yes little info provided about the bugs,

so i thought if someone has additional explanation or prevention to this vulnerability.

regards,

[Leo Laohoo]

so i thought if someone has additional explanation or prevention to this vulnerability.

Upgrade the CUCM?

[learnsec]

Upgrading is a big step, if case requiring upgrade is not severe it 's preferred to stay with the current running version,

Thanks anyway,