Cisco Unity Connection Exhaustion Denial of Service Vulnerability

Cisco Unity contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability exists due to improper handling of network messages. An unauthenticated, remote attacker to exploit this vulnerability to render the Cisco Unity...

Cisco Unity 7.0存在多个漏洞

BUGTRAQ ID: 31642 CNCAN ID：CNCAN-2008100906 Cisco Unity是一款面向企业级机构的统一通信解决方案。 Cisco Unity存在多个安全问题，包括： -Unity监听在动态UDP端口的多个服务处理特殊报文存在拒绝服务攻击。 -Unity server共享目录可泄漏信息给所有域用户。 -Unity server的会话管理看起来受限制，允许恶意用户使用所有可用户会话对合法管理者进行拒绝服务访问。要恢复新会话功能需要重新启动系统，重新启动默认WEB将不奏效。 -存在输入验证问题，导致多个跨站脚本攻击。 Cisco Unity 7.0...

Cisco Unity authentication bypass

Authentication bypass to administration features if anonymous access is enabled...

Cisco Security Advisory: Authentication Bypass in Cisco Unity

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Authentication Bypass in Cisco Unity Advisory ID: cisco-sa-20081008-unity http://www.cisco.com/warp/public/707/cisco-sa-20081008-unity.shtml Revision 1.0 For Public Release 2008 October 08 1600 UTC GMT Summary ======= A...

Cisco Unity远程管理验证绕过漏洞

BUGTRAQ ID: 31638 CVE ID：CVE-2008-3814 CNCVE ID：CNCVE-20083814 Cisco Unity是一款面向企业级机构的统一通信解决方案。 Cisco Unity WEB接口验证实现存在问题，远程攻击者可以利用漏洞访问受限制资源。 第一次尝试连接任意特定链接，会重定向到验证页，但是任意后续的尝试会导致无需要合法登录验证凭证而成功访问，攻击者借此可获得敏感信息或可编辑配置。 Cisco Unity 7.0 Cisco Unity 5.0 Cisco Unity 4.0 Cisco将发布补丁来提供解决方案，请用户关注供应商进度：...

CVE-2008-3814

Unspecified vulnerability in Cisco Unity 4.x before 4.21ES161, 5.x before 5.01ES53, and 7.x before 7.02ES8, when using anonymous authentication aka native Unity authentication, allows remote attackers to bypass authentication and read or modify system configuration parameters by going to a specif...

Authentication flaw

Unspecified vulnerability in Cisco Unity 4.x before 4.21ES161, 5.x before 5.01ES53, and 7.x before 7.02ES8, when using anonymous authentication aka native Unity authentication, allows remote attackers to bypass authentication and read or modify system configuration parameters by going to a specif...

CVE-2008-3814

Unspecified vulnerability in Cisco Unity 4.x before 4.21ES161, 5.x before 5.01ES53, and 7.x before 7.02ES8, when using anonymous authentication aka native Unity authentication, allows remote attackers to bypass authentication and read or modify system configuration parameters by going to a specif...

Authentication Bypass in Cisco Unity

A vulnerability exists in Cisco Unity that could allow an unauthenticated user to view or modify some of the configuration parameters of the Cisco Unity server. Cisco has released software updates that address this vulnerabilities. A workaround that mitigates this vulnerability is available. This...

Cisco Security Advisory: Cisco Security Agent for Windows System Driver Remote Buffer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Security Agent for Windows System Driver Remote Buffer Overflow Vulnerability Advisory ID: cisco-sa-20071205-csa http://www.cisco.com/warp/public/707/cisco-sa-20071205-csa.shtml Revision 1.0 For Public Release 2007...

CVE-2006-2166

Unspecified vulnerability in the HTTP management interface in Cisco Unity Express CUE 2.22 and earlier, when running on any CUE Advanced Integration Module AIM or Network Module NM, allows remote authenticated attackers to reset the password for any user with an expired password...

CVE-2006-2166

Unspecified vulnerability in the HTTP management interface in Cisco Unity Express CUE 2.22 and earlier, when running on any CUE Advanced Integration Module AIM or Network Module NM, allows remote authenticated attackers to reset the password for any user with an expired password...

Unauthorized Cisco Unity Express access

It's possible to change password without entering old one if account is expired...

[Full-disclosure] Cisco Security Advisory: Cisco Unity Express Expired Password Reset Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unity Express Expired Password Reset Privilege Escalation Advisory ID: cisco-sa-20060501-cue http://www.cisco.com/warp/public/707/cisco-sa-20060501-cue.shtml Revision 1.0 For Public Release 2006 May 01 2300 UTC GMT...

Cisco Unity Express Expired Password Reset Privilege Escalation

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Unity VPN Detection

Binary data 2925.prm...

CVE-2004-1322

Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows remote attackers to gain unauthorized access and change configuration settings or read outgoing or incoming e-mail messages...

Cisco Unity default password

Few Accounts with default passwords...

Cisco Security Advisory: Cisco Unity Integrated with Exchange Has Default Passwords

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ================================================================= Cisco Security Advisory: Cisco Unity Integrated with Exchange Has Default Passwords ================================================================= Revision 1.0: FINAL For Public...

Cisco Unity Integrated with Exchange Has Default Passwords

...