Cisco Unified Communications Manager / Cisco Unified Presence DoS

Multiple Denial of Service conditions on SIP and Skinny processing...

CVE-2009-3704

ZoIPer 2.22, and possibly other versions before 2.24 Library 5324, allows remote attackers to cause a denial of service crash via a SIP INVITE request with an empty Call-Info header...

Cross site request forgery (csrf)

ZoIPer 2.22, and possibly other versions before 2.24 Library 5324, allows remote attackers to cause a denial of service crash via a SIP INVITE request with an empty Call-Info header...

CVE-2009-3704

ZoIPer 2.22, and possibly other versions before 2.24 Library 5324, allows remote attackers to cause a denial of service crash via a SIP INVITE request with an empty Call-Info header...

CVE-2009-3704

ZoIPer 2.22 (and possibly versions before 2.24, Library 5324) is vulnerable to a remote denial-of-service via a crafted SIP INVITE with an empty Call-Info header. The issue is an unauthenticated remote DoS that can crash the application. Remediation in the documents is to upgrade to version 2.24 ...

CVE-2009-2867

Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.2XNC, 12.2XND, 12.4T, 12.4XZ, and 12.4YA, when Zone-Based Policy Firewall SIP Inspection is enabled, allows remote attackers to cause a denial of service device reload via a crafted SIP transit packet, aka Bug ID CSCsr18691...

CVE-2009-2864

Cisco Unified Communications Manager aka CUCM, formerly CallManager 5.x before 5.13g, 6.x before 6.14, 7.0.x before 7.02asu1, and 7.1.x before 7.12 allows remote attackers to cause a denial of service service restart via malformed SIP messages, aka Bug ID CSCsz95423...

CVE-2009-2870

Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when the Cisco Unified Border Element feature is enabled, allows remote attackers to cause a denial of service device reload via crafted SIP messages, aka Bug ID CSCsx25880...

Code injection

Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.2XNC, 12.2XND, 12.4T, 12.4XZ, and 12.4YA, when Zone-Based Policy Firewall SIP Inspection is enabled, allows remote attackers to cause a denial of service device reload via a crafted SIP transit packet, aka Bug ID CSCsr18691...

Code injection

Cisco Unified Communications Manager aka CUCM, formerly CallManager 5.x before 5.13g, 6.x before 6.14, 7.0.x before 7.02asu1, and 7.1.x before 7.12 allows remote attackers to cause a denial of service service restart via malformed SIP messages, aka Bug ID CSCsz95423...

Code injection

Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when the Cisco Unified Border Element feature is enabled, allows remote attackers to cause a denial of service device reload via crafted SIP messages, aka Bug ID CSCsx25880...

CVE-2009-2864

Cisco Unified Communications Manager aka CUCM, formerly CallManager 5.x before 5.13g, 6.x before 6.14, 7.0.x before 7.02asu1, and 7.1.x before 7.12 allows remote attackers to cause a denial of service service restart via malformed SIP messages, aka Bug ID CSCsz95423...

CVE-2009-2864

Cisco Unified Communications Manager (CUCM) versions affected: 5.x before 5.1(3g); 6.x before 6.1(4); 7.0.x before 7.0(2a)su1; 7.1.x before 7.1(2). Root cause is a denial-of-service in the SIP handling that can crash/restart the CM process when processing crafted SIP messages. CVSS base score in ...

CVE-2009-2870

CVE-2009-2870 is a Cisco IOS DoS vulnerability triggered by processing crafted SIP messages when the Cisco Unified Border Element is enabled. Affected: Cisco IOS 12.2–12.4 with UBE/SIP enabled; impact is device reload (DoS). Root cause: DoS in SIP message handling (CSCsx25880). Exploitation is ne...

CVE-2009-2867

Cisco IOS Zone-Based Policy Firewall SIP inspection is affected by CVE-2009-2867 (Bug CSCsr18691). A crafted SIP transit packet can cause a denial of service resulting in a device reload on affected releases. The advisory specifies that only devices configured with SIP inspection in Zone-Based Po...

CVE-2009-2867

Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.2XNC, 12.2XND, 12.4T, 12.4XZ, and 12.4YA, when Zone-Based Policy Firewall SIP Inspection is enabled, allows remote attackers to cause a denial of service device reload via a crafted SIP transit packet, aka Bug ID CSCsr18691...

CVE-2009-2870

Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when the Cisco Unified Border Element feature is enabled, allows remote attackers to cause a denial of service device reload via crafted SIP messages, aka Bug ID CSCsx25880...

Cisco IOS SIP消息拒绝服务漏洞

BUGTRAQ ID: 36499 CVE ID: CVE-2009-2870 Cisco IOS是思科网络设备所使用的互联网操作系统。 如果设备运行的Cisco IOS镜像中包含有Cisco Unified Border Element功能，则Cisco IOS软件的SIP实现中存在拒绝服务漏洞。处理一系列特制的SIP消息会导致设备重载。 Cisco IOS 12.4 Cisco IOS 12.3 临时解决方法： 禁用SIP监听端口 sip-ua no transport udp no transport tcp no transport tcp tls 部署以下控制面整型（CoPP）...

Cisco Unified Communications Manager DoS

Crash on SIP request handling...

Cisco Security Advisory: Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerability Advisory ID: cisco-sa-20090923-cm Revision 1.0 For Public Release 2009 September 23...