CVE-2013-3459

Cisco Unified Communications Manager Unified CM 7.1x before 7.15bsu6a does not properly handle errors, which allows remote attackers to cause a denial of service service disruption via malformed registration messages, aka Bug ID CSCuf93466...

CVE-2013-3460

Memory leak in Cisco Unified Communications Manager Unified CM 8.5x before 8.51su6, 8.6x before 8.62asu3, and 9.x before 9.11 allows remote attackers to cause a denial of service service disruption via a high rate of UDP packets, aka Bug ID CSCub85597...

CVE-2013-3460

CVE-2013-3460 affects Cisco Unified Communications Manager (CUCM) versions 8.5.x before 8.5(1)su6, 8.6.x before 8.6(2a)su3, and 9.x before 9.1(1). It describes a memory leak vulnerability that lets remote attackers cause a denial of service (service disruption) by sending a high rate of UDP packe...

CVE-2013-3461

Cisco Unified Communications Manager Unified CM 8.5x and 8.6x before 8.62asu3 and 9.x before 9.11 does not properly restrict the rate of SIP packets, which allows remote attackers to cause a denial of service memory and CPU consumption, and service disruption via a flood of UDP packets to port...

CVE-2013-3453

Memory leak in Cisco Unified Communications Manager IM and Presence Service before 8.65SU1 and 9.x before 9.12, and Cisco Unified Presence, allows remote attackers to cause a denial of service memory and CPU consumption by making many TCP connections to port 1 5060 or 2 5061, aka Bug ID CSCud8495...

CVE-2013-3453

CVE-2013-3453 affects Cisco Unified Communications Manager IM and Presence Service prior to 8.6(5)SU1 and 9.x prior to 9.1(2), as well as Cisco Unified Presence. The issue is a memory leak that can be triggered by a high volume of TCP connections to SIP ports 5060 and 5061, leading to memory and ...

CVE-2013-3453

Memory leak in Cisco Unified Communications Manager IM and Presence Service before 8.65SU1 and 9.x before 9.12, and Cisco Unified Presence, allows remote attackers to cause a denial of service memory and CPU consumption by making many TCP connections to port 1 5060 or 2 5061, aka Bug ID CSCud8495...

Cisco Patches DoS, Buffer Overflow Vulnerabilities in UCM

Cisco has again pushed out an update for its Unified Communications Manager product, fixing several vulnerabilities that if left unpatched could lead to a denial of service attack, allow attackers to modify data or execute arbitrary commands, among other problems. The problems exist in versions...

Declassified 2011 FISC Opinion Shows Court Found Some NSA Surveillance Unconstitutional

Newly declassified documents released in response to a Freedom of Information Act request by the EFF show that the secret Foreign Intelligence Surveillance Court in 2011 declared that the National Security Agency’s techniques for collecting upstream Internet communications was unconstitutional an...

Code injection

The Kepware DNP Master Driver for the KEPServerEX Communications Platform before 5.12.140.0 allows remote attackers to cause a denial of service master-station infinite loop via crafted DNP3 packets to TCP port 20000 and allows physically proximate attackers to cause a denial of service...

Multiple Vulnerabilities in Cisco Unified Communications Manager

Cisco Unified Communications Manager Unified CM contains multiple vulnerabilities that could allow an unauthenticated, remote attacker to modify data, execute arbitrary commands, or cause a denial of service DoS condition. Cisco has released software updates that address these vulnerabilities. Th...

Cisco Unified Communications Manager IM and Presence Service Denial of Service Vulnerability

Cisco Unified Communications Manager IM and Presence Service contains a denial of service DoS vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. Exploitation of this vulnerability could cause an interruption of presence services. Cisco h...

CVE-2013-3450

Cross-site request forgery CSRF vulnerability in the User WebDialer page in Cisco Unified Communications Manager Unified CM allows remote attackers to hijack the authentication of arbitrary users for requests that dial calls, aka Bug ID CSCui13028...

CVE-2013-3451

Multiple cross-site request forgery CSRF vulnerabilities in Cisco Unified Communications Manager Unified CM allow remote attackers to hijack the authentication of arbitrary users for requests that perform arbitrary Unified CM operations, aka Bug ID CSCui13033...

CVE-2013-3442

The web portal in Cisco Unified Communications Manager Unified CM allows remote authenticated users to obtain sensitive stack-trace information via unspecified vectors that trigger a stack exception, aka Bug ID CSCug34854...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Cisco Unified Communications Manager Unified CM allow remote attackers to hijack the authentication of arbitrary users for requests that perform arbitrary Unified CM operations, aka Bug ID CSCui13033...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the User WebDialer page in Cisco Unified Communications Manager Unified CM allows remote attackers to hijack the authentication of arbitrary users for requests that dial calls, aka Bug ID CSCui13028...

Information disclosure

The web portal in Cisco Unified Communications Manager Unified CM allows remote authenticated users to obtain sensitive stack-trace information via unspecified vectors that trigger a stack exception, aka Bug ID CSCug34854...

CVE-2013-3450

Cisco Unified Communications Manager's User WebDialer is affected by CVE-2013-3450, a CSRF vulnerability caused by insufficient CSRF protections. An unauthenticated, remote attacker could exploit this to hijack a user’s authenticated session and initiate dialed calls on behalf of the affected use...

CVE-2013-3451

Multiple cross-site request forgery CSRF vulnerabilities in Cisco Unified Communications Manager Unified CM allow remote attackers to hijack the authentication of arbitrary users for requests that perform arbitrary Unified CM operations, aka Bug ID CSCui13033...