Cisco WebEx Meetings Server 2.7 Patch 4
Version 2.7.1.2074
March 17, 2017
 
 
Files:
 
        cisco-webex-meetings-server-2.7.1.2074.B.iso

 
Defects fixed:
 
        CSCvc14829 Joining meetings via Edge browser using a temp client fails due to a long temp client file name
        CSCvc39165 Directory Traversal in Orion 2.6
        CSCvb99900 WebEx Productivity Tools World Writable
        CSCvc88194 Cisco WebEx Browser Extension Remote Code Execution Vulnerability
        CSCvc89943 SSLGW crashes on media VM and recovers resulting in DC going down for few minutes
        CSCvd20975 Cannot join WebEx meeting as a Guest using Edge browser and temp meeting client
        CSCvd03369 Meeting fails to end due to DB exception
        CSCvd50728 Orion AS server authentication by pass
        CSCvd42837 Pixman Manipulation Routine Integer Overflow Vulnerability
        CSCvd42787 libtiff vulnerabilities CVE-2013-1960 CVE-2013-1961
        CSCvd42824 OpenLDAP Server Daemon Reference Counting Denial of Service Vulnerability
        CSCvd42758 BIND vulnerabilities CVE-2016-1285 CVE-2016-1286
        CSCvd42740 Expat XML Content Parsing Denial of Service Vulnerability
        CSCvd36819 glibc vulnerabilities CVE-2010-3847 CVE-2011-1659 CVE-2011-4609

        Please refer to following security advisory for CSCvc88194:
        https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170124-webex
 

Necessary prerequisites:
 
        You must install the Cisco WebEx Meetings Server version 2.7 MR2 (Build 2.7.1.2048)
        or higher before applying this patch.
        
        You can acquire this software by purchasing it from Cisco (or in the event
        of a customer Proof-of-Concept by contacting your Cisco AUC Partner or Cisco
        Sales Team).
 
        
Checksum of .iso installer (from "md5sum" utility):
 
        7f83fcbb24fdf2f4c7115951385ee140  cisco-webex-meetings-server-2.7.1.2074.B.iso
 
        
Installation instructions:
        
        Follow these instructions to update an existing system:
        
        Refer to the product page to download the update file:
        http://www.cisco.com/en/US/products/ps12732/tsd_products_support_general_information.html

        Before updating this release, consult the Cisco WebEx Meetings Server
        Administration Guide, Chapter "Updating the System":   
        http://www.cisco.com/en/US/products/ps12732/prod_installation_guides_list.html
        
        Then refer to the step-by-step instructions in the Admin online help of the Cisco
        WebEx Meetings Server 2.7 product.