CVE-2009-2865

2009-09-2819:30:00

CWE-119

[email protected]

web.nvd.nist.gov

cisco

buffer overflow

extension mobility

cisco ios 12.4x

cve-2009-2865

nvd

8.2 High

AI Score

Confidence

High

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.031 Low

EPSS

Percentile

91.0%

JSON

Buffer overflow in the login implementation in the Extension Mobility feature in the Unified Communications Manager Express (CME) component in Cisco IOS 12.4XW, 12.4XY, 12.4XZ, and 12.4YA allows remote attackers to execute arbitrary code or cause a denial of service via crafted HTTP requests, aka Bug ID CSCsq58779.

CPENameOperatorVersion
cisco:unified_communications_manager_expresscisco unified communications manager expresseq*
cisco:ioscisco ioseq12.4xw
cisco:ioscisco ioseq12.4xy
cisco:ioscisco ioseq12.4xz
cisco:ioscisco ioseq12.4ya

CPE	Name	Operator	Version
cisco:unified_communications_manager_express	cisco unified communications manager express	eq	*
cisco:ios	cisco ios	eq	12.4xw
cisco:ios	cisco ios	eq	12.4xy
cisco:ios	cisco ios	eq	12.4xz
cisco:ios	cisco ios	eq	12.4ya