Cisco Unified Communications Manager RIS数据收集器服务绕过认证漏洞

受影响系统：
Cisco Unified CallManager 4.1
Cisco Unified Communications Manager 6.x
Cisco Unified Communications Manager 5.x
Cisco Unified Communications Manager 4.3
Cisco Unified Communications Manager 4.2 网管联盟bitsCN@com

不受影响系统：
Cisco Unified Communications Manager 6.1(2)
Cisco Unified Communications Manager 5.1(3c)
Cisco Unified Communications Manager 4.3(2)SR1
Cisco Unified Communications Manager 4.2(3)SR4 网管u家u.bitscn@com

描述：
--------------------------------------------------------------------------------
BUGTRAQ  ID: 29935
CVE(CAN) ID: CVE-2008-2062,CVE-2008-2730

网管网www_bitscn_com

Cisco Unified Communications Manager（CUCM，之前被称为CallManager）是Cisco IP电话解决方案中的呼叫处理组件。

网管网www.bitscn.com

CUCM的实时信息服务器（RIS）数据收集器服务存在绕过认证漏洞，可能导致非授权泄露某些CUCM集群信息。

在正常的操作中，实时监控工具（RTMT）客户端通过认证到基于Web接口的简单对象访问协议（SOAP）收集CUCM集群统计，SOAP接口将认证的连接代理到RIS数据收集器进程。RIS数据收集器服务默认监听于TCP 2556端口，是用户可配置的。如果直接连接到RIS数据收集器进程所监听的端口，就可以绕过认证检查获得对CUCM集群信息的只读访问。可获得的信息包括性能统计、用户名和配置的IP电话，这些信息可能被用于发动进一步的攻击。 网管bitscn_com

<*来源：VoIPshield
 
  链接：http://www.voipshield.com/research-details.php?id=74&s=3&threats_details=&threats_category=0&threats_vendor=0&limit=20&sort=discovered&sortby=DESC
        http://www.cisco.com/warp/public/707/cisco-sa-20080625-cucm.shtml
*>

网管网www_bitscn_com

建议：
--------------------------------------------------------------------------------
临时解决方法： 中国网管论坛bbs.bitsCN.com

* 允许来自其他CUCM集群系统的对TCP 2556端口的访问。 网管下载dl.bitscn.com

厂商补丁： 网管联盟bitsCN@com

Cisco
-----
Cisco已经为此发布了一个安全公告（cisco-sa-20080625-cucm）以及相应补丁:
cisco-sa-20080625-cucm：Cisco Unified Communications Manager Denial of Service and Authentication Bypass Vulnerabilities
链接：http://www.cisco.com/warp/public/707/cisco-sa-20080625-cucm.shtml 网管联盟bitsCN@com

补丁下载：
http://tools.cisco.com/support/downloads/go/PlatformList.x?sftType=Unified%20Communications%20Manager%20Updates&mdfid=280264388&treeName=Voice%20and%20Unified%20Communications&mdfLevel=Software%20Version/Option&url=null&modelName=Cisco%20Unified%20CallManager%20Version%204.2&isPlatform=N&treeMdfId=278875240&modifmdid=null&imname=null&hybrid=Y&imst=N
http://tools.cisco.com/support/downloads/go/PlatformList.x?sftType=Unified%20Communications%20Manager%20Updates&mdfid=280771554&treeName=Voice%20and%20Unified%20Communications&mdfLevel=Software%20Version/Option&url=null&modelName=Cisco%20Unified%20Communications%20Manager%20Version%204.3&isPlatform=N&treeMdfId=278875240&modifmdfid=null&imname=null&hybrid=Y&imst=N
http://tools.cisco.com/support/downloads/go/ReleaseType.x?optPlat=null&isPlatform=Y&mdfid=280735907&sftType=Unified%20Communications%20Manager%20Updates&treeName=Voice%20and%20Unified%20Communications&modelName=Cisco%20Unified%20Communications%20Manager%20Version%205.1&mdfLevel=Software%20Version/Option&treeMdfId=278875240&modifmdfid=null&imname=null&hybrid=Y&imst=N

网管u家u.bitsCN.com