Cisco CUCM RIS 数据收集器服务存在绕过认证漏洞

　　受影响系统：

　　Cisco Unified CallManager 4.1

　　Cisco Unified Communications Manager 6.x

　　Cisco Unified Communications Manager 5.x

　　Cisco Unified Communications Manager 4.3

　　Cisco Unified Communications Manager 4.2

　　不受影响系统：

　　Cisco Unified Communications Manager 6.1(2)

　　Cisco Unified Communications Manager 5.1(3c)

　　Cisco Unified Communications Manager 4.3(2)SR1

　　Cisco Unified Communications Manager 4.2(3)SR4

　　描述：

　　Cisco Unified Communications Manager（CUCM，之前被称为CallManager）是Cisco IP电话解决方案中的呼叫处理组件。

　　CUCM的实时信息服务器（RIS）数据收集器服务存在绕过认证漏洞，可能导致非授权泄露某些CUCM集群信息。

　　在正常的操作中，实时监控工具（RTMT）客户端通过认证到基于Web接口的简单对象访问协议（SOAP）收集CUCM集群统计，SOAP接口将认证的连接代理到RIS数据收集器进程。RIS数据收集器服务默认监听于TCP 2556端口，是用户可配置的。如果直接连接到RIS数据收集器进程所监听的端口，就可以绕过认证检查获得对CUCM集群信息的只读访问。可获得的信息包括性能统计、用户名和配置的IP电话，这些信息可能被用于发动进一步的攻击。

　　厂商补丁：

　　Cisco已经为此发布了一个安全公告（cisco-sa-20080625-cucm）以及相应补丁:

　　cisco-sa-20080625-cucm：Cisco Unified Communications Manager Denial of Service and Authentication Bypass Vulnerabilities

　　链接http://www.cisco.com/warp/public/707/cisco-sa-20080625-cucm.shtml

　　补丁下载：

　　http://tools.cisco.com/support/downloads/go/PlatformList.x?sftType=Unified%20Communications%20Manager%20Updates&mdfid=280264388&treeName=Voice%20and%20Unified%20Communications&mdfLevel=Software%20Version/Option&url=null&modelName=Cisco%20Unified%20CallManager%20Version%204.2&isPlatform=N&treeMdfId=278875240&modifmdid=null&imname=null&hybrid=Y&imst=N

　　http://tools.cisco.com/support/downloads/go/PlatformList.x?sftType=Unified%20Communications%20Manager%20Updates&mdfid=280771554&treeName=Voice%20and%20Unified%20Communications&mdfLevel=Software%20Version/Option&url=null&modelName=Cisco%20Unified%20Communications%20Manager%20Version%204.3&isPlatform=N&treeMdfId=278875240&modifmdfid=null&imname=null&hybrid=Y&imst=N

　　http://tools.cisco.com/support/downloads/go/ReleaseType.x?optPlat=null&isPlatform=Y&mdfid=280735907&sftType=Unified%20Communications%20Manager%20Updates&treeName=Voice%20and%20Unified%20Communications&modelName=Cisco%20Unified%20Communications%20Manager%20Version%205.1&mdfLevel=Software%20Version/Option&treeMdfId=278875240&modifmdfid=null&imname=null&hybrid=Y&imst=N

　　http://tools.cisco.com/support/downloads/go/PlatformList.x?sftType=Unified%20Communications%20Manager%20Updates&mdfid=281023410&treeName=Voice%20and%20Unified%20Communications&mdfLevel=Software%20Version/Option&url=null&modelName=Cisco%20Unified%20Communications%20Manager%20Version%206.1&isPlatform=N&treeMdfId=278875240&modifmdfid=null&imname=null&hybrid=Y&imst=N