Cisco has informed on a number uyazvimostey in production
Cisco has informed on a number uyazvimostey safety in production. Maintaining these of the vulnerability, attacking can take the control over system.
The problem reason is vulnerability in CiscoWorks Common Services which can be used for attack with the help specially generated URL. According to message Cisco, defect exists in versions 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.1.1 and 3.1 which are used in following products: Cisco Unified Operations Manager (CUOM) 1.1, 2.0, 2.0.1, 2.0.2 and 2.0.3; Cisco Unified Service Monitor (CUSM) 1.1, 2.0 and2.0.1; CiscoWorks QoS Policy Manager (QPM) 4.0, 4.0.1 and 4.0.2; CiscoWorks LAN Management Solution (LMS) 2.5, 2.5.1, 2.6, 3.0, 3.1; Cisco Security Manager (CSM) 3.0, 3.0.1, 3.0.2, 3.1, 3.1.1 and 3.2; Cisco TelePresence Readiness Assessment Manager (CTRAM) 1.0.
CiscoWorks Voice Manager (CVM) and Cisco Unified Intelligent Contact Management (ICM) also can be mentioned, informs CNews.
Cisco has manufactured version 3.2 CiscoWorks Common Services in which the error is corrected. There are also patches for Windows and Solaris.