Cisco Unified CallManager和Unified Server 大量ICMP回显请求拒绝服务

目前厂商已经发布了升级补丁以修复这个安全问题，补丁下载链接：

临时解决方法：

* TCP 2000端口(SCCP)和TCP 2443端口(SCCPS)上仅允许VoIP端点到CUCM系统的通讯

* 阻断CUCM和CUPS系统的ICMP回显请求(type 8)

* 仅允许集群配置中配置的CUCM/CUPS系统之间的UDP 8500端口(IPSec Manager)

厂商补丁：

Cisco

-----

Cisco已经为此发布了一个安全公告(cisco-sa-20070328-voip)以及相应补丁:

cisco-sa-20070328-voip：Multiple Cisco Unified CallManager and Presence Server Denial of Service Vulnerabilities

链接：

http://www.cisco.com/en/US/products/products_security_advisory09186a008080f17b.shtml

来源: CISCO

名称: 20070328 Multiple Cisco Unified CallManager and Presence Server Denial of Service Vulnerabilities

链接:http://www.cisco.com/warp/public/707/cisco-sa-20070328-voip.shtml

来源: SECTRACK

名称: 1017826

链接:http://securitytracker.com/id?1017826

来源: SECUNIA

名称: 24690

链接:http://secunia.com/advisories/24690

来源: BID

名称: 23181

链接:http://www.securityfocus.com/bid/23181

来源: VUPEN

名称: ADV-2007-1144

链接:http://www.frsirt.com/english/advisories/2007/1144