33 matches found
CVE-2014-0734
SQL injection vulnerability in the Certificate Authority Proxy Function CAPF implementation in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum46483...
CVE-2014-0734
CVE-2014-0734 affects Cisco Unified Communications Manager CAPF. The Certificate Authority Proxy Function fails to properly sanitize user input, enabling a remote attacker to craft a URL that executes arbitrary SQL commands. Affected: UCM 10.0(1) and earlier. Impact: potential data exposure/modif...
CVE-2014-0734: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Certificate Authority Proxy Function CAPF implementation in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum46483...
CVE-2009-0057
The Certificate Authority Proxy Function CAPF service in Cisco Unified Communications Manager 5.x before 5.13e and 6.x before 6.13 allows remote attackers to cause a denial of service voice service outage by sending malformed input over a TCP session in which the "client terminates prematurely."...
Code injection
The Certificate Authority Proxy Function CAPF service in Cisco Unified Communications Manager 5.x before 5.13e and 6.x before 6.13 allows remote attackers to cause a denial of service voice service outage by sending malformed input over a TCP session in which the "client terminates prematurely."...
CVE-2009-0057
CVE-2009-0057 affects Cisco Unified Communications Manager (CAPF DoS) in 5.x before 5.1(3e) and 6.x before 6.1(3). The vulnerability arises in the Certificate Authority Proxy Function (CAPF) when handling malformed input over a TCP session (CAPF port 3804, default). Exploitation can cause a denia...
CVE-2009-0057
The Certificate Authority Proxy Function CAPF service in Cisco Unified Communications Manager 5.x before 5.13e and 6.x before 6.13 allows remote attackers to cause a denial of service voice service outage by sending malformed input over a TCP session in which the "client terminates prematurely."...
CVE-2009-0057: Improper Input Validation
The Certificate Authority Proxy Function CAPF service in Cisco Unified Communications Manager 5.x before 5.13e and 6.x before 6.13 allows remote attackers to cause a denial of service voice service outage by sending malformed input over a TCP session in which the "client terminates prematurely."...
Cisco Unified Communications Manager CAPF Denial of Service Vulnerability
THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...
Design/Logic Flaw
The Certificate Authority Proxy Function CAPF service in Cisco Unified Communications Manager CUCM 4.1 before 4.13SR7, 4.2 before 4.23SR4, and 4.3 before 4.32 allows remote attackers to cause a denial of service service crash via malformed network traffic, aka Bug ID CSCsk46770...
CVE-2008-1744
CVE-2008-1744 affects Cisco Unified Communications Manager (CUCM) CAPF (Certificate Authority Proxy Function) across CUCM 4.1/4.2/4.3 with specific SR updates. The CAPF service, normally TCP 3804 and disabled by default, may be abused by remote malformed network traffic to trigger a denial-of-ser...
CVE-2008-1744: Improper Input Validation
The Certificate Authority Proxy Function CAPF service in Cisco Unified Communications Manager CUCM 4.1 before 4.13SR7, 4.2 before 4.23SR4, and 4.3 before 4.32 allows remote attackers to cause a denial of service service crash via malformed network traffic, aka Bug ID CSCsk46770...
