=====================================================================

                           CERT-Renater

               Note d'Information No. 2013/VULN318
_____________________________________________________________________

DATE                : 01/08/2013

HARDWARE PLATFORM(S): Cisco content network and video delivery products.

OPERATING SYSTEM(S): Systems running Cisco WAAS Software,
                       Cisco ACNS Software, Cisco ECDS Software,
                       Cisco CDS-IS, VDS-IS Software,
                       Cisco VDS-SB Software, Cisco VDS-OE Software,
                       Cisco VDS-OS Software.

======================================================================
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130731-cm
______________________________________________________________________

Cisco Security Advisory: Authenticated Command Injection Vulnerability
in Multiple Cisco Content Network and Video Delivery Products

Advisory ID: cisco-sa-20130731-cm

Revision 1.0

For Public Release 2013 July 31 16:00  UTC (GMT)

+---------------------------------------------------------------------

Summary
=======

Multiple Cisco content network and video delivery products contain a
vulnerability when they are configured to run in central management
mode. This vulnerability could allow an authenticated but unprivileged,
remote attacker to execute arbitrary code on the affected system and on
the devices managed by the affected system.

Cisco has released free software updates that address this
vulnerability. Workarounds that mitigate this vulnerability are not
available. This advisory is available at the following link:

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130731-cm

======================================================================

=========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================