Cisco Unified, EMC Ionix

ソフト名：Cisco Unified Operations Manager (CUOM) 8.6/Service Monitor (CUSM) 8.6, CiscoWorks Prime LAN Management Solution (LMS) 3.1/3.2/4.0, EMC Ionix Application Connectivity Monitor (ACM) 2.x/Adapter for Alcatel-Lucent 5620 SAM EMS (ASAM) 3.x/IP Management Suite 2.x/8.x/Service Assurance Management Suite (SAM) 8.x/VoIP Availability Management Suite (VoIP AM) 4.x/MPLS Management Suite 4.x/Multicast Manager (MCAST) 2.x/Network Protocol Management Suite (NPM) 3.x/Optical Transport Management Suite (OTM) 5.x/Server Manager (EISM) 3.x/Storage Insight for Availability Suite (SIA) 2.x

回避策：アップデートにて対応, ESA-2011-029にて対応

脆弱性：システムアクセス, 不特定のエラー, 不正パケット, ローカルコード実行, バッファオーバーフロー

ソース：

http://www.cisco.com/en/US/products/ps6535/index.html

http://www.cisco.com/en/US/products/ps6536/index.html

http://www.cisco.com/en/US/products/sw/cscowork/ps2425/index.html

http://www.cisco.com/en/US/products/ps11200/index.html

http://www.emc.com/products/family/ionix-family.htm

http://www.cisco.com/warp/public/707/cisco-sa-20110914-lms.shtml

http://www.cisco.com/warp/public/707/cisco-sa-20110914-cusm.shtml

http://archives.neohapsis.com/archives/bugtraq/2011-09/att-0099/ESA-2011-029.txt

http://secunia.com/advisories/45979/

http://secunia.com/advisories/46016/

http://secunia.com/advisories/46052/

http://secunia.com/advisories/46053/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2738

CVE：CVE-2011-2738

危険性：Medium Risk