----------------------------------------------------------------------


Use WSUS to deploy 3rd party patches

Public BETA
http://secunia.com/vulnerability_scanning/corporate/wsus_3rd_third_party_patching/


----------------------------------------------------------------------

TITLE:
Cisco Digital Media Manager Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA38800

VERIFY ADVISORY:
http://secunia.com/advisories/38800/

DESCRIPTION:
Two vulnerabilities and a security issue have been reported in Cisco
Digital Media Manager, which can be exploited by malicious users to
gain escalated privileges and disclose sensitive information and by
malicious people to compromise a vulnerable system.

1) An unspecified error can be exploited to change the configuration
and obtain full access to the device.

The vulnerability is reported in versions 5.0.x and 5.1.x.

2) An error exists due to unsafe storage of user credentials in
memory and error logs, which can be exploited to view Cisco Digital
Media Player user credentials or LDAP credentials.

The vulnerability is reported in versions prior to 5.2.

Successful exploitation of vulnerabilities #1 and #2 requires
authentication.

3) A security issue exists due to default credentials in the
underlying Tomcat application, which can be exploited to gain
administrative access to the application.

The vulnerability is reported in versions prior to 5.2

SOLUTION:
Update to version 5.2.

PROVIDED AND/OR DISCOVERED BY:
The vendor credits the National Australia Bank's Security Assurance
team.

ORIGINAL ADVISORY:
http://www.cisco.com/warp/public/707/cisco-sa-20100303-dmm.shtml

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
private users keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------