CVE-2008-1743

2008-05-1612:54:00

CWE-399

[email protected]

web.nvd.nist.gov

cve-2008-1743

memory leak

cisco unified communications manager

cucm 5.x

cucm 6.x

denial of service

bug id cscsi98433

nvd

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.5 Medium

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.2%

JSON

Memory leak in the Certificate Trust List (CTL) Provider service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) and 6.x before 6.1(1) allows remote attackers to cause a denial of service (memory consumption and service interruption) via a series of malformed TCP packets, aka Bug ID CSCsi98433.

Affected configurations

NVD

Node

ciscounified_communications_managerRange5.0–5.1\(3\)

ciscounified_communications_managerRange6.0–6.1\(1\)

CPENameOperatorVersion
cisco:unified_communications_managercisco unified communications managerlt5.1\(3\)
cisco:unified_communications_managercisco unified communications managerlt6.1\(1\)

CPE	Name	Operator	Version
cisco:unified_communications_manager	cisco unified communications manager	lt	5.1\(3\)
cisco:unified_communications_manager	cisco unified communications manager	lt	6.1\(1\)