Cisco Unified Communications Manager IM and Presence Server DoS (cisco-sa-20130821-cup)

According to its self-reported version, the version of Cisco Unified Communications Manager IM and Presence Server installed on the remote host has a denial of service vulnerability. An unauthenticated, remote attacker could exploit this by creating a large number of connections to the SIP ports...

CVE-2013-3472

Cross-site request forgery CSRF vulnerability in the Enterprise License Manager ELM in Cisco Unified Communications Manager CM allows remote attackers to hijack the authentication of arbitrary users for requests that make ELM modifications, aka Bug ID CSCui58210...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Enterprise License Manager ELM in Cisco Unified Communications Manager CM allows remote attackers to hijack the authentication of arbitrary users for requests that make ELM modifications, aka Bug ID CSCui58210...

CVE-2013-3472

The CVE concerns Cisco Unified Communications Manager’s Enterprise License Manager (ELM) and a Cross-site Request Forgery (CSRF) flaw that lets an attacker hijack the authentication of arbitrary users to perform ELM-modifying requests. Affected component: ELM within CM; root cause: CSRF vulnerabi...

CVE-2013-3472

Cross-site request forgery CSRF vulnerability in the Enterprise License Manager ELM in Cisco Unified Communications Manager CM allows remote attackers to hijack the authentication of arbitrary users for requests that make ELM modifications, aka Bug ID CSCui58210...

Phone Hack Could Block Messages, Calls on GSM Networks

By tweaking the firmware on certain kinds of phones, a hacker could make it so other phones in the area are unable to receive incoming calls or SMS messages, according to research presented at the USENIX Security Symposium earlier this month. The hack involves modifying the baseband processor on...

CVE-2013-3462

Buffer overflow in Cisco Unified Communications Manager Unified CM 7.1x before 7.15bsu6, 8.5x before 8.51su6, 8.6x before 8.62asu3, and 9.x before 9.12 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka Bug ID CSCud54358...

CVE-2013-3459

Cisco Unified Communications Manager Unified CM 7.1x before 7.15bsu6a does not properly handle errors, which allows remote attackers to cause a denial of service service disruption via malformed registration messages, aka Bug ID CSCuf93466...

CVE-2013-3461

Cisco Unified Communications Manager Unified CM 8.5x and 8.6x before 8.62asu3 and 9.x before 9.11 does not properly restrict the rate of SIP packets, which allows remote attackers to cause a denial of service memory and CPU consumption, and service disruption via a flood of UDP packets to port...

CVE-2013-3460

Memory leak in Cisco Unified Communications Manager Unified CM 8.5x before 8.51su6, 8.6x before 8.62asu3, and 9.x before 9.11 allows remote attackers to cause a denial of service service disruption via a high rate of UDP packets, aka Bug ID CSCub85597...

Buffer overflow

Buffer overflow in Cisco Unified Communications Manager Unified CM 7.1x before 7.15bsu6, 8.5x before 8.51su6, 8.6x before 8.62asu3, and 9.x before 9.12 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka Bug ID CSCud54358...

Code injection

Cisco Unified Communications Manager Unified CM 8.5x and 8.6x before 8.62asu3 and 9.x before 9.11 does not properly restrict the rate of SIP packets, which allows remote attackers to cause a denial of service memory and CPU consumption, and service disruption via a flood of UDP packets to port...

Code injection

Cisco Unified Communications Manager Unified CM 7.1x before 7.15bsu6a does not properly handle errors, which allows remote attackers to cause a denial of service service disruption via malformed registration messages, aka Bug ID CSCuf93466...

Memory corruption

Memory leak in Cisco Unified Communications Manager Unified CM 8.5x before 8.51su6, 8.6x before 8.62asu3, and 9.x before 9.11 allows remote attackers to cause a denial of service service disruption via a high rate of UDP packets, aka Bug ID CSCub85597...

CVE-2013-3462

Cisco Unified Communications Manager (Unified CM) is affected by CVE-2013-3462, a remote buffer overflow (Bug ID CSCud54358) that could allow an authenticated, remote attacker to execute arbitrary code. Impact applies to CUCM 7.1(x) before 7.1(5b)su6, 8.5(x) before 8.5(1)su6, 8.6(x) before 8.6(2a...

CVE-2013-3459

CVE-2013-3459 affects Cisco Unified Communications Manager (CUCM) 7.1.x prior to 7.1(5b)su6a, where error handling in registration messages can be abused to trigger a denial of service. Root cause: improper error handling leads to service disruption via malformed registration traffic. According t...

CVE-2013-3462

Buffer overflow in Cisco Unified Communications Manager Unified CM 7.1x before 7.15bsu6, 8.5x before 8.51su6, 8.6x before 8.62asu3, and 9.x before 9.12 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka Bug ID CSCud54358...

CVE-2013-3461

CVE-2013-3461 affects Cisco Unified Communications Manager (CUCM) 8.5(x) and 8.6(x) before 8.6(2a)su3 and 9.x before 9.1(1). The vulnerability is a DoS caused by insufficient rate limiting of SIP traffic, allowing remote attackers to flood UDP 5060 and exhaust memory/CPU, leading to service disru...

CVE-2013-3459

Cisco Unified Communications Manager Unified CM 7.1x before 7.15bsu6a does not properly handle errors, which allows remote attackers to cause a denial of service service disruption via malformed registration messages, aka Bug ID CSCuf93466...

CVE-2013-3460

CVE-2013-3460 affects Cisco Unified Communications Manager (CUCM) versions 8.5.x before 8.5(1)su6, 8.6.x before 8.6(2a)su3, and 9.x before 9.1(1). It describes a memory leak vulnerability that lets remote attackers cause a denial of service (service disruption) by sending a high rate of UDP packe...