Media Gateway Controller (MGC) 安装在 Solaris 系统上，在缺省安装下，Solaris 有多个漏洞，Cisco 建议用户安装升级软件包 CSCOh007，CSCOh013，它们含有最新的 Solaris 补丁和相关的安全配置。 根据 Solaris 提供的相应补丁，Cisco 整合了相关补丁包，Patches for Solaris 2.6 对应 CSCOh007.pkg。 同时，Solaris 在缺省安装状态下开放了一些有漏洞的服务。Cisco 开发出了 CSCO013.pkg 帮助用户关闭这些服务。 要确定系统是否已遭入侵，建议用户参考： http://www.cert.org/security-improvement/modules/m09.html 受影响产品： +---------------------------------+--------------------------------+ |SC2200 | All systems running Solaris 2.6| | | (Through release 7.4(x) | +---------------------------------+--------------------------------+ |VSC3000 | All systems running Solaris 2.6| | | (Through release 9.1(x) | +---------------------------------+--------------------------------+ |PGW 2200 | All systems running Solaris 2.6| | | (Through release 9.1(x) | +---------------------------------+--------------------------------+ |Billing and Management Server | | |(BAMS) | All systems running Solaris 2.6| +---------------------------------+--------------------------------+ |Voice Services Provisioning Tool | | |(VSPT) | All systems running Solaris 2.6| +---------------------------------+--------------------------------+ 解决方案： 1) Software Versions and Fixes The issues are fixed with the following packages: +-----------------------+-----------------------+--------------------+ |SC2200 |All release up to and |MGCSOL-h007.bin and | | |including 7.4(x) |MGCSOL-h013.bin | +-----------------------+-----------------------+--------------------+ | |All releases up to and | | |VSC3000 |including release |MGCSOL-h007.bin and | | |9.1(x) |MGCSOL-h013.bin | +-----------------------+-----------------------+--------------------+ | |All releases up to and | | |PGW 2200 |including release |MGCSOL-h007.bin and | | |9.1(x) |MGCSOL-h013.bin | +-----------------------+-----------------------+--------------------+ |Billing and Management |All systems running | | |Server (BAMS) |Solaris 2.6 |MGCSOL-h007.bin only| +-----------------------+-----------------------+--------------------+ |Voice Services | | | |Provisioning Tool |All systems running |MGCSOL-h007.bin only| |(VSPT) |Solaris 2.6 | | +-----------------------+-----------------------+--------------------+ 2) 下载安装相关软件包: http://www.cisco.com