CVE:CVE-2011-0379
CNNVD:CNNVD-201102-347
Cisco TelePresence是美国思科（Cisco）公司的一套被称为“网真”系统的视频会议解决方案。该方案提供音频、视频空间等组件，可为远程参会者提供一个“面对面”的虚拟会议室效果。
带有软件1.6.x版本的Cisco Adaptive Security Appliances（ASA）5500系列设备，带有软件1.0.x，1.1.x，1.5.x，以及1.6.x版本的Cisco TelePresence Multipoint Switch（CTMS）设备，带有软件1.2.x至1.6.x版本的Cisco TelePresence终端设备，以及Cisco TelePresence Manager 1.2.x，1.3.x，1.4.x，1.5.x，以及1.6.2版本中存在缓冲区溢出漏洞。远程攻击者可以借助特制Cisco Discovery Protocol包，以系统级别的权限执行任意代码，完全控制受影响计算机，造成拒绝服务。
solution:Upgrade cisco adaptive_security_appliance_software to a higher version than 1.6.0,and avoid the version 1.6.0; Upgrade cisco 5500_series_adaptive_security_appliance to a higher version than *; Upgrade cisco asa_5500 to a higher version than *; Upgrade cisco telepresence_multipoint_switch_software to a higher version than 1.0.4.0,1.1.0,1.1.1,1.1.2,1.5.0,1.5.1,1.5.2,1.5.3,1.5.4,1.5.5,1.5.6,1.6.0,1.6.1,1.6.2,1.6.3,1.6.4,and avoid the version 1.0.4.0,1.1.0,1.1.1,1.1.2,1.5.0,1.5.1,1.5.2,1.5.3,1.5.4,1.5.5,1.5.6,1.6.0,1.6.1,1.6.2,1.6.3,1.6.4; Upgrade cisco telepresence_multipoint_switch to a higher version than *; Upgrade cisco telepresence_system_software to a higher version than 1.2.3,1.3.2,1.4.7,1.5.1,1.5.3,1.5.10,1.5.11,1.5.12,1.5.13,1.6.0,1.6.2,1.6.3,1.6.4,1.6.5,1.6.6,1.6.7,1.6.8,and avoid the version 1.2.3,1.3.2,1.4.7,1.5.1,1.5.3,1.5.10,1.5.11,1.5.12,1.5.13,1.6.0,1.6.2,1.6.3,1.6.4,1.6.5,1.6.6,1.6.7,1.6.8; Upgrade cisco telepresence_system_1000 to a higher version than *; Upgrade cisco telepresence_system_1100 to a higher version than *; Upgrade cisco telepresence_system_3000 to a higher version than *; Upgrade cisco telepresence_system_1300_series to a higher version than *; Upgrade cisco telepresence_system_3200_series to a higher version than *; Upgrade cisco telepresence_system_500_series to a higher version than *; Upgrade cisco telepresence_manager to a higher version than 1.2.0.0,1.3.2,1.4.0,1.5.1,1.5.2,1.6.2,and avoid the version 1.2.0.0,1.3.2,1.4.0,1.5.1,1.5.2,1.6.2