Lucene search

[email protected]CVE-2006-3594

HistoryJul 18, 2006 - 3:37 p.m.

CVE-2006-3594

2006-07-1815:37:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-3594

buffer overflow

cisco unified callmanager

cucm

remote code execution

sip request

cscsd96542

8.1 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.155 Low

EPSS

Percentile

95.8%

JSON

Buffer overflow in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows remote attackers to execute arbitrary code via a long hostname in a SIP request, aka bug CSCsd96542.

CPENameOperatorVersion
cisco:unified_callmanagercisco unified callmanagereq5.0\(2\)
cisco:unified_callmanagercisco unified callmanagereq5.0\(3\)
cisco:unified_callmanagercisco unified callmanagereq5.0\(3a\)
cisco:unified_callmanagercisco unified callmanagereq5.0\(1\)

CPE	Name	Operator	Version
cisco:unified_callmanager	cisco unified callmanager	eq	5.0\(2\)
cisco:unified_callmanager	cisco unified callmanager	eq	5.0\(3\)
cisco:unified_callmanager	cisco unified callmanager	eq	5.0\(3a\)
cisco:unified_callmanager	cisco unified callmanager	eq	5.0\(1\)

References

secunia.com/advisories/21030

securitytracker.com/id?1016475

www.cisco.com/warp/public/707/cisco-sa-20060712-cucm.shtml

www.osvdb.org/27162

www.securityfocus.com/bid/18952

www.vupen.com/english/advisories/2006/2774

exchange.xforce.ibmcloud.com/vulnerabilities/27691

8.1 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.155 Low

EPSS

Percentile

95.8%

JSON

Related for CVE-2006-3594

cisco1