Two vulnerabilities have been reported in Cisco TelePresence Recording Server, which can be exploited by malicious users and malicious people to compromise a vulnerable system.

1) An error within the administrative web interface can be exploited to inject and execute arbitrary commands by sending a specially crafted request.

2) An error within the handling of Cisco Discovery Protocol (CDP) packets in the CDP component can be exploited to execute arbitrary code by sending a specially crafted CDP packet.

Successful exploitation requires the ability to send an Ethernet frame directly to the device.

The vulnerability is reported in versions 1.6 and prior, 1.7, and 1.8.

Solution
Update to version 1.8.1.

Provided and/or discovered by
Reported by the vendor.

Original Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctrs

Deep Links
Links available to Secunia VIM customers