PRIOn knowledge basePRION:CVE-2008-0027

HistoryJan 17, 2008 - 3:00 a.m.

Heap overflow

2008-01-1703:00:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.177 Low

EPSS

Percentile

96.0%

JSON

Heap-based buffer overflow in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications Manager (CUCM) 4.2 before 4.2(3)SR3 and 4.3 before 4.3(1)SR1, and CallManager 4.0 and 4.1 before 4.1(3)SR5c, allows remote attackers to cause a denial of service or execute arbitrary code via a long request.

CPENameOperatorVersion
unified_callmanagereq4.1
unified_callmanagereq4.13.0-sr5
unified_callmanagereq4.13.0-sr4
unified_callmanagereq4.13.0-sr5-b
unified_callmanagereq4.0
unified_communications_managereq4.2.3-sr2
unified_communications_managereq4.2
unified_communications_managereq4.3
unified_communications_managereq4.2.3-sr2-b

Name	Operator	Version
unified_callmanager	eq	4.1
unified_callmanager	eq	4.13.0-sr5
unified_callmanager	eq	4.13.0-sr4
unified_callmanager	eq	4.13.0-sr5-b
unified_callmanager	eq	4.0
unified_communications_manager	eq	4.2.3-sr2
unified_communications_manager	eq	4.2
unified_communications_manager	eq	4.3
unified_communications_manager	eq	4.2.3-sr2-b

References

dvlabs.tippingpoint.com/advisory/TPTI-08-02

secunia.com/advisories/28530

securityreason.com/securityalert/3551

www.cisco.com/en/US/products/products_security_advisory09186a0080932c61.shtml

www.securityfocus.com/archive/1/486432/100/0/threaded

www.securityfocus.com/bid/27313

www.securitytracker.com/id?1019223

www.vupen.com/english/advisories/2008/0171

exchange.xforce.ibmcloud.com/vulnerabilities/39704

8.7 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.177 Low

EPSS

Percentile

96.0%

JSON

Related for PRION:CVE-2008-0027