发布日期：2012-07-11
更新日期：2012-07-12

受影响系统：

Cisco Telepresence Recording Server 1.7.2.1
Cisco Telepresence Recording Server 1.7.2
Cisco Telepresence Recording Server 1.7.1
Cisco Telepresence Recording Server 1.6.2
Cisco Telepresence Recording Server 1.6.1
Cisco Telepresence Recording Server 1.6

描述：

---

BUGTRAQ  ID: 54385
CVE ID: CVE-2012-3076

Cisco TelePresence Recording Server可将Cisco TelePresence产品转换为高清录音室，创建和递送高质量的视频。

Cisco TelePresence Recording Server在实现上存在远程命令注入漏洞，成功利用后可造成以root用户权限执行任意命令。

<*来源：Cisco
  
  链接：http://secunia.com/advisories/49864/
        http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctrs
*>

建议：

---

厂商补丁：

Cisco
-----
Cisco已经为此发布了一个安全公告（cisco-sa-20120711-ctrs）以及相应补丁:

cisco-sa-20120711-ctrs：Multiple Vulnerabilities in Cisco TelePresence Recording Server

链接：http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctrs

浏览次数：2427
严重程度：0（网友投票）