CVE:CVE-2011-3315
CNNVD:CNNVD-201110-645
Cisco Unified Communications Manager（CUCM，Unified CM，CallManager）是美国思科（Cisco）公司的一款统一通信系统中的呼叫处理组件。该组件提供了一种可扩展、可分布和高可用的企业IP电话呼叫处理解决方案。Cisco Unified Contact Center Express是单节点和双节点呼叫中心服务器。Cisco Unified Interactive Voice Response是提供IP呼叫队列和IP智能音频回复的UCCX产品包。
多个思科产品目录在实现上存在目录遍历漏洞，攻击者可利用这些漏洞在应用程序当前目录之外写入任意文件。
solution:Upgrade cisco unified_ip_interactive_voice_response to a higher version than -; Upgrade cisco unified_ip_ivr to a higher version than 6.0(1,7.0(1,7.0(2,8.0(1,8.0(2,8.5(1,and avoid the version 6.0(1),7.0(1),7.0(2),8.0(1),8.0(2),8.5(1); Upgrade cisco unified_communications_manager to a higher version than 5.0,5.1,5.1(1,5.1(1b,5.1(1c,5.1(2,5.1(2a,5.1(2b,5.1(3,5.1(3a,5.1(3c,5.1(3d,5.1(3e,5.1.2,6.0,6.1(1,6.1(1a,6.1(1b,6.1(2,6.1(2su1,6.1(2su1a,6.1(3,6.1(3a,6.1(3b,6.1(3bsu1,6.1(4,6.1(4su1,6.1(4a,6.1(4asu2,6.1(5,6.1(5su1,7.0(1su1,7.0(1su1a,7.0(2,7.0(2a,7.0(2asu1,7.0(2asu2,7.1(2a,7.1(2asu1,7.1(2b,7.1(2bsu1,7.1(3,7.1(3a,7.1(3asu1,7.1(3asu1a,7.1(3b,7.1(3bsu1,7.1(3bsu2,7.1(5,7.1(5su1,7.1(5su1a,7.1(5a,7.1(5b,7.1(5bsu1,7.1(5bsu1a,8.0,8.0(1,8.0(2,8.0(2a,8.0(2b,8.0(2c,8.0(2csu1,and avoid the version 5.0,5.1,5.1(1),5.1(1b),5.1(1c),5.1(2),5.1(2a),5.1(2b),5.1(3),5.1(3a),5.1(3c),5.1(3d),5.1(3e),5.1.2,6.0,6.1(1),6.1(1a),6.1(1b),6.1(2),6.1(2)su1,6.1(2)su1a,6.1(3),6.1(3a),6.1(3b),6.1(3b)su1,6.1(4),6.1(4)su1,6.1(4a),6.1(4a)su2,6.1(5),6.1(5)su1,7.0(1)su1,7.0(1)su1a,7.0(2),7.0(2a),7.0(2a)su1,7.0(2a)su2,7.1(2a),7.1(2a)su1,7.1(2b),7.1(2b)su1,7.1(3),7.1(3a),7.1(3a)su1,7.1(3a)su1a,7.1(3b),7.1(3b)su1,7.1(3b)su2,7.1(5),7.1(5)su1,7.1(5)su1a,7.1(5a),7.1(5b),7.1(5b)su1,7.1(5b)su1a,8.0,8.0(1),8.0(2),8.0(2a),8.0(2b),8.0(2c),8.0(2c)su1