Lucene search

[email protected]CVE-2008-1742

HistoryMay 16, 2008 - 12:54 p.m.

CVE-2008-1742

2008-05-1612:54:00

CWE-399

[email protected]

web.nvd.nist.gov

cisco

unified communications manager

memory leak

certificate trust list provider

denial of service

tcp

vulnerability

cve-2008-1742

nvd

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.5 Medium

AI Score

Confidence

High

0.022 Low

EPSS

Percentile

89.5%

JSON

Memory leak in the Certificate Trust List (CTL) Provider service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) allows remote attackers to cause a denial of service (memory consumption and service interruption) via a series of malformed TCP packets, as demonstrated by TCPFUZZ, aka Bug ID CSCsj80609.

Affected configurations

NVD

Node

ciscounified_communications_managerMatch4.1

ciscounified_communications_managerMatch4.2

ciscounified_communications_managerMatch4.3

ciscounified_communications_managerMatch5.1\(1\)

ciscounified_communications_managerMatch5.1\(2\)

ciscounified_communications_managerMatch5.1\(2a\)

ciscounified_communications_managerMatch5.1\(2b\)

ciscounified_communications_managerMatch5.1\(3a\)

ciscounified_communications_managerMatch6.0

ciscounified_communications_managerMatch6.0\(1\)

ciscounified_communications_managerMatch6.0\(1a\)

ciscounified_communications_managerMatch6.1

ciscounified_communications_managerMatch6.1\(1a\)

CPENameOperatorVersion
cisco:unified_communications_managercisco unified communications managereq4.1
cisco:unified_communications_managercisco unified communications managereq4.2
cisco:unified_communications_managercisco unified communications managereq4.3
cisco:unified_communications_managercisco unified communications managereq5.1
cisco:unified_communications_managercisco unified communications managereq6.0
cisco:unified_communications_managercisco unified communications managereq6.1

CPE	Name	Operator	Version
cisco:unified_communications_manager	cisco unified communications manager	eq	4.1
cisco:unified_communications_manager	cisco unified communications manager	eq	4.2
cisco:unified_communications_manager	cisco unified communications manager	eq	4.3
cisco:unified_communications_manager	cisco unified communications manager	eq	5.1
cisco:unified_communications_manager	cisco unified communications manager	eq	6.0
cisco:unified_communications_manager	cisco unified communications manager	eq	6.1