CVE:CVE-2010-3039
CNNVD:CNNVD-201011-104
Cisco Unified Communications Manager 是Cisco IP电话解决方案中的呼叫处理组件。
Cisco Unified Communications Manager(又名CUCM, CallManager)6，7，8中的/usr/local/cm/bin/pktCap_protectData路径中存在操作系统命令注入漏洞。远程认证管理员可以借助向管理界面发送的请求中的shell元字符执行任意命令。
solution:Upgrade cisco unified_communications_manager to a higher version than 6.0,6.1(1,6.1(1a,6.1(1b,6.1(2,6.1(2su1,6.1(2su1a,6.1(3,6.1(3a,6.1(3b,6.1(3bsu1,6.1(4,6.1(4su1,6.1(4a,6.1(4asu2,6.1(5,7.0,7.0(1su1,7.0(1su1a,7.0(2,7.0(2a,7.0(2asu1,7.0(2asu2,7.1(2a,7.1(2asu1,7.1(2b,7.1(2bsu1,7.1(3,7.1(3a,7.1(3asu1,7.1(3asu1a,7.1(3b,7.1(3bsu1,7.1(3bsu2,7.1(5,7.1(5su1,7.1(5su1a,7.1(5a,7.1(5b,8.0,8.0(2c,8.0(2csu1,8.0(3,and avoid the version 6.0,6.1(1),6.1(1a),6.1(1b),6.1(2),6.1(2)su1,6.1(2)su1a,6.1(3),6.1(3a),6.1(3b),6.1(3b)su1,6.1(4),6.1(4)su1,6.1(4a),6.1(4a)su2,6.1(5),7.0,7.0(1)su1,7.0(1)su1a,7.0(2),7.0(2a),7.0(2a)su1,7.0(2a)su2,7.1(2a),7.1(2a)su1,7.1(2b),7.1(2b)su1,7.1(3),7.1(3a),7.1(3a)su1,7.1(3a)su1a,7.1(3b),7.1(3b)su1,7.1(3b)su2,7.1(5),7.1(5)su1,7.1(5)su1a,7.1(5a),7.1(5b),8.0,8.0(2c),8.0(2c)su1,8.0(3)