Cisco Security Updates: Cisco Unified Communications Manager and Presence Server

Cisco Systems announced two new security updates this morning involving Cisco Unified Communications Manager and Cisco Unified Presence Server.

Cisco Unified Communications Manager Overflow Vulnerabilities

Cisco Unified Communications Manager has two overflow vulnerabilities that could allow a remote attacker to execute arbitrary code or cause a denial of service. Check Cisco’s website for solutions and workarounds.

Cisco Unified Communications Manager and Presence Server Unauthorized Access Vulnerabilities

A vulnerability in Cisco Unified Communications Manager and Cisco Unified Presence server could allow an unauthorized user to terminate system services resulting in a denial of service. Additionally, another vulnerability allows access to SNMP configuration which could result in the compromise of sensitive data. Cisco has made software available to address these vulnerabilities.