Cisco Releases Security Advisories for Vulnerabilities

Cisco has released security advisories in response to multiple vulnerabilities.

Cisco Security Advisory cisco-sa-20080213-phone was released in response to vulnerabilities in Cisco Unified IP Phone. These vulnerabilities may allow an attacker to execute arbitrary code or cause a denial-of-service condition.

Cisco Security Advisory cisco-sa-20080213-cucmsql was released in response to a vulnerability in Cisco Unified Communications Manager. This vulnerability may allow an attacker to obtain sensitive information.

US-CERT encourages users to do the following:

• Review Cisco Security Advisory cisco-sa-20080213-phone
• Review Cisco Security Advisory cisco-sa-20080213-cucmsql
• Apply software updates and workarounds provided by Cisco