Lucene search

[email protected]CVE-2006-5277

HistoryJul 15, 2007 - 9:30 p.m.

CVE-2006-5277

2007-07-1521:30:00

[email protected]

web.nvd.nist.gov

cisco

unified communications manager

cucm

callmanager

cve-2006-5277

security vulnerability

remote code execution

buffer overflow

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

High

0.068 Low

EPSS

Percentile

93.9%

JSON

Off-by-one error in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications Manager (CUCM, formerly CallManager) before 20070711 allow remote attackers to execute arbitrary code via a crafted packet that triggers a heap-based buffer overflow.

Affected configurations

NVD

Node

ciscounified_callmanagerRange3.3–3.3\(5\)sr2

ciscounified_callmanagerRange4.1–4.1\(3\)sr4

ciscounified_callmanagerRange4.2–4.2\(3\)sr1

ciscounified_callmanagerMatch5.0

ciscounified_communications_managerRange4.3–4.3\(1\)

ciscounified_communications_managerRange5.1–5.1\(1\)

CPENameOperatorVersion
cisco:unified_callmanagercisco unified callmanagerle3.3\(5\)sr2
cisco:unified_callmanagercisco unified callmanagerle4.1\(3\)sr4
cisco:unified_callmanagercisco unified callmanagerle4.2\(3\)sr1
cisco:unified_callmanagercisco unified callmanagereq5.0
cisco:unified_communications_managercisco unified communications managerle4.3\(1\)
cisco:unified_communications_managercisco unified communications managerle5.1\(1\)

CPE	Name	Operator	Version
cisco:unified_callmanager	cisco unified callmanager	le	3.3\(5\)sr2
cisco:unified_callmanager	cisco unified callmanager	le	4.1\(3\)sr4
cisco:unified_callmanager	cisco unified callmanager	le	4.2\(3\)sr1
cisco:unified_callmanager	cisco unified callmanager	eq	5.0
cisco:unified_communications_manager	cisco unified communications manager	le	4.3\(1\)
cisco:unified_communications_manager	cisco unified communications manager	le	5.1\(1\)

References

secunia.com/advisories/26043

securitytracker.com/id?1018369

www.cisco.com/warp/public/707/cisco-sa-20070711-cucm.shtml

www.iss.net/threats/270.html

www.osvdb.org/36122

www.securityfocus.com/bid/24868

www.vupen.com/english/advisories/2007/2512

exchange.xforce.ibmcloud.com/vulnerabilities/31437

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

High

0.068 Low

EPSS

Percentile

93.9%

JSON

Related for CVE-2006-5277

cvelist1 nvd1 cisco1