CVE-2011-2543

Buffer overflow in the cuil component in Cisco Telepresence System Integrator C Series 4.x before TC4.2.0 allows remote authenticated users to cause a denial of service (endpoint reboot or process crash) or possibly execute arbitrary code via a long location parameter to the getxml program, aka Bug ID CSCtq46496.

• CWE-119

• http://secunia.com/advisories/46057Vendor Advisory
• http://secunia.com/advisories/46109Vendor Advisory
• http://securityreason.com/securityalert/8393
• http://securitytracker.com/id?1026072Exploit
• http://www.exploit-db.com/exploits/17871Exploit
• http://www.securityfocus.com/archive/1/519698/100/0/threaded
• http://www.securityfocus.com/bid/49670
• https://exchange.xforce.ibmcloud.com/vulnerabilities/69907
• http://secunia.com/advisories/46057Vendor Advisory
• http://secunia.com/advisories/46109Vendor Advisory
• http://securityreason.com/securityalert/8393
• http://securitytracker.com/id?1026072Exploit
• http://www.exploit-db.com/exploits/17871Exploit
• http://www.securityfocus.com/archive/1/519698/100/0/threaded
• http://www.securityfocus.com/bid/49670
• https://exchange.xforce.ibmcloud.com/vulnerabilities/69907

Published

Sep 23, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-2532The json.decode function in util/json.lua in Prosody 0.8.x b…
• CVE-2011-2533The configure script in D-Bus (aka DBus) 1.2.x before 1.2.28…
• CVE-2011-2534Buffer overflow in the clusterip_proc_write function in net/…7.8
• CVE-2011-2535chan_iax2.c in the IAX2 channel driver in Asterisk Open Sour…
• CVE-2011-2536chan_sip.c in the SIP channel driver in Asterisk Open Source…
• CVE-2011-2538Cisco Video Communications Server (VCS) before X7.0.3 contai…7.2
• CVE-2011-2544Cross-site scripting (XSS) vulnerability in the web interfac…
• CVE-2011-2545Cross-site scripting (XSS) vulnerability in the SIP implemen…
• CVE-2011-2546SQL injection vulnerability in the web-based management inte…
• CVE-2011-2547The web-based management interface on Cisco SA 500 series se…
• CVE-2011-2549Unspecified vulnerability in Cisco IOS XR 4.1.x before 4.1.1…
• CVE-2011-2555Cisco TelePresence Recording Server 1.7.2.x before 1.7.2.1 h…