Detections
Analytics
Cisco Unified Communications Manager IM and Presence GNU C Library (glibc) Buffer Overflow (CSCus69785) (GHOST)
critical Nessus Plugin ID 85449
Language:
Synopsis
The remote host is missing a vendor-supplied security patch.Description
According to its self-reported version, the Cisco Unified Communications Manager IM and Presence Server Service is affected by a heap-based buffer overflow condition in the GNU C Library (glibc) due to improper validation of user-supplied input to the glibc functions__nss_hostname_digits_dots(), gethostbyname(), and gethostbyname2().
This allows a remote attacker to cause a buffer overflow, resulting in a denial of service condition or the execution of arbitrary code.
Solution
Apply the relevant patch referenced in the Cisco bug ID CSCus69785.See Also
http://www.nessus.org/u?fd2144f8
Plugin Details
Severity: Critical
ID: 85449
File Name: cisco_cups_CSCus69785.nasl
Version: 1.11
Type: local
Family: CISCO
Published: 8/17/2015
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 8.9
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2015-0235
Vulnerability Information
CPE: cpe:/a:cisco:unified_presence_server, cpe:/a:cisco:unified_communications_manager_im_and_presence_service, cpe:/a:cisco:unified_communications_manager
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 1/28/2015
Vulnerability Publication Date: 1/27/2015
Exploitable With
Core Impact
Metasploit (Exim GHOST (glibc gethostbyname) Buffer Overflow)
Reference Information
CVE: CVE-2015-0235
BID: 72325