CISCO - Solaris MGC

Source: Xatrix

The Media Gateway Controller (MGC) product is installed on top of
Solaris operating system. In the default installation Solaris has
several know security vulnerabilites. In order to prevent them from
being exploited customers must install updated packages CSCOh007 and
CSCOh013. These packages contain the latest Solaris patches and
additional hardening of the Solaris OS.

These vulnerabilities have been exploited and PSIRT knows of a few
cases where customer's systems running SC2200 have been compromised.

We are investigating other products that are based on Solaris.

There is no workaround.

This advisory is available at the
http://www.cisco.com/warp/public/707/Solaris-for-MGC-pub.shtml