发布日期：2010-03-03
更新日期：2010-03-04

受影响系统：

Cisco Unified Communications Manager 8.x
Cisco Unified Communications Manager 7.x
Cisco Unified Communications Manager 6.x
Cisco Unified Communications Manager 5.x
Cisco Unified Communications Manager 4.x

不受影响系统：

Cisco Unified Communications Manager 8.0(1)
Cisco Unified Communications Manager 7.1(3a)su1
Cisco Unified Communications Manager 6.1(5)
Cisco Unified Communications Manager 4.3(2)SR2

描述：

---

BUGTRAQ  ID: 38501,38496
CVE(CAN) ID: CVE-2010-0588,CVE-2010-0587

Cisco统一通讯管理器是是Cisco IP电话解决方案中的呼叫处理组件，可将企业的电话功能扩展到报文电话网络设备，如IP电话、媒体处理设备、VoIP网关和多媒体应用。

Cisco统一通讯管理器在处理SCCP报文时存在两个拒绝服务漏洞，漏洞都是由畸形SCCP消息触发的，可能导致关键进程失败，中断语音服务。所有的SCCP端口（TCP 2000和2443端口）都受影响。

<*来源：Sipera VIPER Lab （viper@sipera.com）
  
  链接：http://secunia.com/advisories/38754/
        http://www.cisco.com/warp/public/707/cisco-sa-20100303-cucm.shtml
*>

建议：

---

厂商补丁：

Cisco
-----
Cisco已经为此发布了一个安全公告（cisco-sa-20100303-cucm）以及相应补丁:
cisco-sa-20100303-cucm：Cisco Unified Communications Manager Denial of Service Vulnerabilities
链接：http://www.cisco.com/warp/public/707/cisco-sa-20100303-cucm.shtml

补丁下载：

Cisco Unified Communications Manager 4.3(2)SR2软件下载位于
http://tools.cisco.com/support/downloads/go/PlatformList.x?sftType=Unified+Communications+Manager+Updates&mdfid=280771554&treeName=Voice+and+Unified+Communications&mdfLevel=Software%20Version/Option&url=null&modelName=Cisco+Unified+Communications+Manager+Version+4.3&isPlatform=N&treeMdfId=278875240&modifmdfid=null&imname=&hybrid=Y&imst=N

Cisco Unified Communications Manager 6.1(5)软件版本下载位于
http://tools.cisco.com/support/downloads/go/ReleaseType.x?optPlat=&isPlatform=Y&mdfid=281023410&sftType=Unified+Communications+Manager+Updates&treeName=Voice+and+Unified+Communications&modelName=Cisco+Unified+Communications+Manager+Version+6.1&mdfLevel=Software%20Version/Option&treeMdfId=278875240&modifmdfid=null&imname=&hybrid=Y&imst=N

Cisco Unified Communications Manager 7.1(3b)SU2软件版本下载位于
http://tools.cisco.com/support/downloads/go/PlatformList.x?sftType=Unified+Communications+Manager+Updates&mdfid=282421166&treeName=Voice+and+Unified+Communications&mdfLevel=Software%20Version/Option&url=null&modelName=Cisco+Unified+Communications+Manager+Version+7.1&isPlatform=N&treeMdfId=278875240&modifmdfid=null&imname=&hybrid=Y&imst=N

浏览次数：2668
严重程度：0（网友投票）