CVE-2010-2837: Undefined Security Weakness

The SIPStationInit implementation in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.1SU before 6.15SU1, 7.0SU before 7.02aSU3, 7.1SU before 7.13bSU2, 7.1 before 7.15, and 8.0 before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SI...

Cisco Releases Advisories for Unified Communications Manager and Unified Presence

Cisco has released security advisories to address multiple vulnerabilities affecting Unified Communications Manager and Unified Presence. These vulnerabilities affect the processing of Session Initiation Protocol SIP messages. Exploitation of these vulnerabilities may allow an attacker to cause a...

Design/Logic Flaw

Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express CME or Cisco Unified Survivable Remote Site Telephony SRST is enabled, allows remote attackers to cause a denial of service device reload via a malformed Skinny Client Control Protocol SCCP message, aka Bug ID...

Cisco Security Advisory: Cisco Unified Communications Manager Express Denial of Service Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager Express Denial of Service Vulnerabilities Advisory ID: cisco-sa-20100324-cucme Revision 1.0 For Public Release 2010 March 24 1600 UTC GMT...

Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities Advisory ID: cisco-sa-20100324-sip Revision 1.0 For Public Release 2010 March 24 1600 UTC GMT...

Cisco Patches Voice Flaws

Cisco has released a number of reports on vulnerabilities in its products. It is possible to disrupt the transfer of voice data in the Unified Communications Manager using crafted SIP, SCCP and CTI packets. Read the full article. The H Security...

Buffer overflow

Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15, 7.x before 7.13bSU2, and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SIP REG message, related to an overflow of the Telephone-URL field, aka Bug ID...

Code injection

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x before 4.32SR2, 6.x before 6.15, 7.x before 7.13asu1, and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SCCP StationCapabilitiesRes message with an invalid MaxCap field,...

Code injection

The CMSIPUtility component in Cisco Unified Communications Manager aka CUCM, formerly CallManager 7.x before 7.13asu1 and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SIP Register message, aka Bug ID CSCtc37188...

Design/Logic Flaw

The CTI Manager service in Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x before 4.32sr1a, 6.x before 6.13, 7.0x before 7.02, 7.1x before 7.12, and 8.x before 8.01 allows remote attackers to cause a denial of service service failure via a malformed message, aka Bug ID...

CVE-2010-0590

The CMSIPUtility component in Cisco Unified Communications Manager aka CUCM, formerly CallManager 7.x before 7.13asu1 and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SIP Register message, aka Bug ID CSCtc37188...

CVE-2010-0591

Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15, 7.x before 7.13bSU2, and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SIP REG message, related to an overflow of the Telephone-URL field, aka Bug ID...

CVE-2010-0587

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x before 4.32SR2, 6.x before 6.15, 7.x before 7.13asu1, and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SCCP StationCapabilitiesRes message with an invalid MaxCap field,...

CVE-2010-0588

Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15, 7.x before 7.13asu1, and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SCCP 1 RegAvailableLines or 2 FwdStatReq message with an invalid Line number, aka Bug ...

CVE-2010-0591

Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15, 7.x before 7.13bSU2, and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SIP REG message, related to an overflow of the Telephone-URL field, aka Bug ID...

CVE-2010-0588

Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15, 7.x before 7.13asu1, and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SCCP 1 RegAvailableLines or 2 FwdStatReq message with an invalid Line number, aka Bug ...

CVE-2010-0590

The CMSIPUtility component in Cisco Unified Communications Manager aka CUCM, formerly CallManager 7.x before 7.13asu1 and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SIP Register message, aka Bug ID CSCtc37188...

CVE-2010-0590

CVE-2010-0590 affects Cisco Unified Communications Manager (CUCM) CMSIPUtility. It allows remote attackers to cause a DoS (process failure) via a malformed SIP Register message on CUCM 7.x prior to 7.1(3a)su1 and 8.x prior to 8.0(1); the vulnerability is fixed in CUCM 7.1(3a)su1 and 8.0(1).

CVE-2010-0592

CVE-2010-0592 affects Cisco Unified Communications Manager CTI Manager service. A malformed message to CTI Manager (TCP 2748) can cause a DoS (service failure). The issue is fixed in CUCM releases: 4.3(2)sr1a, 6.1(3), 7.0(2), 7.1(2), and 8.0(1). Other Cisco CUCM components (SCCP/SIP) also documen...

CVE-2010-0588

Cisco Unified Communications Manager (CUCM) versions 6.x prior to 6.1(5), 7.x prior to 7.1(3a)su1, and 8.x prior to 8.0(1) are affected by a DoS vulnerability triggered by malformed SCCP messages (RegAvailableLines or FwdStatReq) containing an invalid Line number, which can cause a process failur...