CVE-2008-1158

2008-05-1612:54:00

CWE-20

[email protected]

web.nvd.nist.gov

cisco

unified presence

pe service

vulnerability

denial of service

cve-2008-1158

nvd

6.4 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.02 Low

EPSS

Percentile

88.6%

JSON

The Presence Engine (PE) service in Cisco Unified Presence before 6.0(1) allows remote attackers to cause a denial of service (core dump and service interruption) via malformed packets, aka Bug ID CSCsh50164.

CPENameOperatorVersion
cisco:unified_presence_servercisco unified presence servereq1.0
cisco:unified_presence_servercisco unified presence servereq1.0\(1\)
cisco:unified_presencecisco unified presenceeq6.0
cisco:unified_presence_servercisco unified presence servereq1.0\(3\)
cisco:unified_presence_servercisco unified presence servereq1.0\(2\)

CPE	Name	Operator	Version
cisco:unified_presence_server	cisco unified presence server	eq	1.0
cisco:unified_presence_server	cisco unified presence server	eq	1.0\(1\)
cisco:unified_presence	cisco unified presence	eq	6.0
cisco:unified_presence_server	cisco unified presence server	eq	1.0\(3\)
cisco:unified_presence_server	cisco unified presence server	eq	1.0\(2\)