发布日期：2008-06-25
更新日期：2008-06-26

受影响系统：

Cisco Unified CallManager 4.1
Cisco Unified Communications Manager 6.x
Cisco Unified Communications Manager 5.x
Cisco Unified Communications Manager 4.3
Cisco Unified Communications Manager 4.2

不受影响系统：

Cisco Unified Communications Manager 6.1(2)
Cisco Unified Communications Manager 5.1(3c)
Cisco Unified Communications Manager 4.3(2)SR1
Cisco Unified Communications Manager 4.2(3)SR4

描述：

---

BUGTRAQ  ID: 29935
CVE(CAN) ID: CVE-2008-2062,CVE-2008-2730

Cisco Unified Communications Manager（CUCM，之前被称为CallManager）是Cisco IP电话解决方案中的呼叫处理组件。

CUCM的实时信息服务器（RIS）数据收集器服务存在绕过认证漏洞，可能导致非授权泄露某些CUCM集群信息。

在正常的操作中，实时监控工具（RTMT）客户端通过认证到基于Web接口的简单对象访问协议（SOAP）收集CUCM集群统计，SOAP接口将认证的连接代理到RIS数据收集器进程。RIS数据收集器服务默认监听于TCP 2556端口，是用户可配置的。如果直接连接到RIS数据收集器进程所监听的端口，就可以绕过认证检查获得对CUCM集群信息的只读访问。可获得的信息包括性能统计、用户名和配置的IP电话，这些信息可能被用于发动进一步的攻击。

<*来源：VoIPshield
  
  链接：http://www.voipshield.com/research-details.php?id=74&s=3&threats_details=&threats_category=0&threats_vendor=0&limit=20&sort=discovered&sortby=DESC
        http://secunia.com/advisories/30848/
        http://www.cisco.com/warp/public/707/cisco-sa-20080625-cucm.shtml
*>

建议：

---

临时解决方法：

* 允许来自其他CUCM集群系统的对TCP 2556端口的访问。

厂商补丁：

Cisco
-----
Cisco已经为此发布了一个安全公告（cisco-sa-20080625-cucm）以及相应补丁:
cisco-sa-20080625-cucm：Cisco Unified Communications Manager Denial of Service and Authentication Bypass Vulnerabilities
链接：http://www.cisco.com/warp/public/707/cisco-sa-20080625-cucm.shtml

补丁下载：
http://tools.cisco.com/support/downloads/go/PlatformList.x?sftType=Unified%20Communications%20Manager%20Updates&mdfid=280264388&treeName=Voice%20and%20Unified%20Communications&mdfLevel=Software%20Version/Option&url=null&modelName=Cisco%20Unified%20CallManager%20Version%204.2&isPlatform=N&treeMdfId=278875240&modifmdid=null&imname=null&hybrid=Y&imst=N
http://tools.cisco.com/support/downloads/go/PlatformList.x?sftType=Unified%20Communications%20Manager%20Updates&mdfid=280771554&treeName=Voice%20and%20Unified%20Communications&mdfLevel=Software%20Version/Option&url=null&modelName=Cisco%20Unified%20Communications%20Manager%20Version%204.3&isPlatform=N&treeMdfId=278875240&modifmdfid=null&imname=null&hybrid=Y&imst=N
http://tools.cisco.com/support/downloads/go/ReleaseType.x?optPlat=null&isPlatform=Y&mdfid=280735907&sftType=Unified%20Communications%20Manager%20Updates&treeName=Voice%20and%20Unified%20Communications&modelName=Cisco%20Unified%20Communications%20Manager%20Version%205.1&mdfLevel=Software%20Version/Option&treeMdfId=278875240&modifmdfid=null&imname=null&hybrid=Y&imst=N
http://tools.cisco.com/support/downloads/go/PlatformList.x?sftType=Unified%20Communications%20Manager%20Updates&mdfid=281023410&treeName=Voice%20and%20Unified%20Communications&mdfLevel=Software%20Version/Option&url=null&modelName=Cisco%20Unified%20Communications%20Manager%20Version%206.1&isPlatform=N&treeMdfId=278875240&modifmdfid=null&imname=null&hybrid=Y&imst=N

浏览次数：2827
严重程度：0（网友投票）