Lucene search

[email protected]CVE-2007-5538

HistoryOct 18, 2007 - 12:17 a.m.

CVE-2007-5538

2007-10-1800:17:00

CWE-119

[email protected]

web.nvd.nist.gov

cisco

unified communications

buffer overflow

vulnerability

cve-2007-5538

nvd

8.1 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.083 Low

EPSS

Percentile

94.4%

JSON

Buffer overflow in the Centralized TFTP File Locator Service in Cisco Unified Communications Manager (CUCM, formerly CallManager) 5.1 before 5.1(3), and Unified CallManager 5.0, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors involving the processing of filenames, aka CSCsh47712.

Affected configurations

NVD

Node

ciscounified_callmanagerMatch5.0

ciscounified_communications_managerRange≤5.1\(2\)

CPENameOperatorVersion
cisco:unified_callmanagercisco unified callmanagereq5.0
cisco:unified_communications_managercisco unified communications managerle5.1\(2\)

CPE	Name	Operator	Version
cisco:unified_callmanager	cisco unified callmanager	eq	5.0
cisco:unified_communications_manager	cisco unified communications manager	le	5.1\(2\)

References

osvdb.org/37940

secunia.com/advisories/27296

www.cisco.com/en/US/products/products_security_advisory09186a00808dda34.shtml

www.securityfocus.com/bid/26105

www.securitytracker.com/id?1018828

www.vupen.com/english/advisories/2007/3532

exchange.xforce.ibmcloud.com/vulnerabilities/37247

8.1 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.083 Low

EPSS

Percentile

94.4%

JSON

Related for CVE-2007-5538

nvd1 cvelist1 prion1 cisco1