漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Cisco Unity Connection File Upload Denial of Service Vulnerability
Vulnerability Description
A vulnerability in the Bulk Administration Tool (BAT) for Cisco Unity Connection could allow an authenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected software does not restrict the maximum size of certain files that can be written to disk. An attacker who has valid administrator credentials for an affected system could exploit this vulnerability by sending a crafted, remote connection request to an affected system. A successful exploit could allow the attacker to write a file that consumes most of the available disk space on the system, causing application functions to operate abnormally and leading to a DoS condition.
CVSS Information
N/A
Vulnerability Type
资源管理错误
Vulnerability Title
Cisco Unity Connection Bulk Administration Tool 资源管理错误漏洞
Vulnerability Description
Cisco Unity Connection(UC)是美国思科(Cisco)公司的一套语音留言平台。该平台可利用语音命令,以“免提”方式拨打电话或者收听留言。Bulk Administration Tool(BAT)是其中的一个批量管理工具。 Cisco UC中的BAT存在资源管理错误漏洞,该漏洞源于程序没有限制写入到磁盘文件的最大值。远程攻击者可通过向受影响的系统发送特制的连接请求利用该漏洞造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A