Lucene search

[email protected]CVE-2006-5278

HistoryJul 15, 2007 - 10:30 p.m.

CVE-2006-5278

2007-07-1522:30:00

[email protected]

web.nvd.nist.gov

cisco

cucm

risdc.exe

integer overflow

remote code execution

buffer overflow

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

High

0.051 Low

EPSS

Percentile

93.0%

JSON

Integer overflow in the Real-Time Information Server (RIS) Data Collector service (RisDC.exe) in Cisco Unified Communications Manager (CUCM, formerly CallManager) before 20070711 allow remote attackers to execute arbitrary code via crafted packets, resulting in a heap-based buffer overflow.

Affected configurations

NVD

Node

ciscounified_callmanagerRange3.3–3.3\(5\)sr2

ciscounified_callmanagerRange4.1–4.1\(3\)sr4

ciscounified_callmanagerRange4.2–4.2\(3\)sr1

ciscounified_callmanagerRange5.1–5.1\(2\)

ciscounified_callmanagerMatch5.0

ciscounified_communications_managerRange4.3–4.3\(1\)

CPENameOperatorVersion
cisco:unified_callmanagercisco unified callmanagerle3.3\(5\)sr2
cisco:unified_callmanagercisco unified callmanagerle4.1\(3\)sr4
cisco:unified_callmanagercisco unified callmanagerle4.2\(3\)sr1
cisco:unified_callmanagercisco unified callmanagerle5.1\(2\)
cisco:unified_callmanagercisco unified callmanagereq5.0
cisco:unified_communications_managercisco unified communications managerle4.3\(1\)

CPE	Name	Operator	Version
cisco:unified_callmanager	cisco unified callmanager	le	3.3\(5\)sr2
cisco:unified_callmanager	cisco unified callmanager	le	4.1\(3\)sr4
cisco:unified_callmanager	cisco unified callmanager	le	4.2\(3\)sr1
cisco:unified_callmanager	cisco unified callmanager	le	5.1\(2\)
cisco:unified_callmanager	cisco unified callmanager	eq	5.0
cisco:unified_communications_manager	cisco unified communications manager	le	4.3\(1\)

References

secunia.com/advisories/26043

securitytracker.com/id?1018369

www.cisco.com/warp/public/707/cisco-sa-20070711-cucm.shtml

www.iss.net/threats/271.html

www.osvdb.org/36121

www.securityfocus.com/bid/24868

www.vupen.com/english/advisories/2007/2512

exchange.xforce.ibmcloud.com/vulnerabilities/19057

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

High

0.051 Low

EPSS

Percentile

93.0%

JSON

Related for CVE-2006-5278

cvelist1 nvd1 cisco1