CVE-2011-0388

Cisco TelePresence Recording Server 1.6.x and CTMS 1.0.x-1.6.x - Denial of Service via Java Servlet RMI Interface

Title source: llm

Description

Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x do not properly restrict remote access to the Java servlet RMI interface, which allows remote attackers to cause a denial of service (memory consumption and web outage) via multiple crafted requests, aka Bug IDs CSCtg35830 and CSCtg35825.

References (5)

Core 5

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1025114

Vendor Advisory vendor-advisory x_refsource_cisco

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/46523

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1025113

Scores

EPSS 0.0260

EPSS Percentile 83.7%

Details

CWE

CWE-399

Status published

Products (21)

cisco/telepresence_multipoint_switch

cisco/telepresence_multipoint_switch_software 1.0.4.0

cisco/telepresence_multipoint_switch_software 1.1.0

cisco/telepresence_multipoint_switch_software 1.1.1

cisco/telepresence_multipoint_switch_software 1.1.2

cisco/telepresence_multipoint_switch_software 1.5.0

cisco/telepresence_multipoint_switch_software 1.5.1

cisco/telepresence_multipoint_switch_software 1.5.2

cisco/telepresence_multipoint_switch_software 1.5.3

cisco/telepresence_multipoint_switch_software 1.5.4

... and 11 more

Published Feb 25, 2011

Tracked Since Feb 18, 2026