Code injection

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x before 4.32SR2, 6.x before 6.15, 7.x before 7.13asu1, and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SCCP StationCapabilitiesRes message with an invalid MaxCap field,...

Design/Logic Flaw

The CTI Manager service in Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x before 4.32sr1a, 6.x before 6.13, 7.0x before 7.02, 7.1x before 7.12, and 8.x before 8.01 allows remote attackers to cause a denial of service service failure via a malformed message, aka Bug ID...

CVE-2010-0591

Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15, 7.x before 7.13bSU2, and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SIP REG message, related to an overflow of the Telephone-URL field, aka Bug ID...

CVE-2010-0587

CVE-2010-0587 affects Cisco Unified Communications Manager (CUCM) and is triggered by a malformed SCCP StationCapabilitiesRes message with an invalid MaxCap field, leading to a DoS (process failure). The vulnerability impacts CUCM versions 4.x (before 4.3(2)SR2), 6.x (before 6.1(5)), 7.x (before ...

CVE-2010-0590

CVE-2010-0590 affects Cisco Unified Communications Manager (CUCM) CMSIPUtility. It allows remote attackers to cause a DoS (process failure) via a malformed SIP Register message on CUCM 7.x prior to 7.1(3a)su1 and 8.x prior to 8.0(1); the vulnerability is fixed in CUCM 7.1(3a)su1 and 8.0(1).

CVE-2010-0592

The CTI Manager service in Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x before 4.32sr1a, 6.x before 6.13, 7.0x before 7.02, 7.1x before 7.12, and 8.x before 8.01 allows remote attackers to cause a denial of service service failure via a malformed message, aka Bug ID...

CVE-2010-0590

The CMSIPUtility component in Cisco Unified Communications Manager aka CUCM, formerly CallManager 7.x before 7.13asu1 and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SIP Register message, aka Bug ID CSCtc37188...

CVE-2010-0588

Cisco Unified Communications Manager (CUCM) versions 6.x prior to 6.1(5), 7.x prior to 7.1(3a)su1, and 8.x prior to 8.0(1) are affected by a DoS vulnerability triggered by malformed SCCP messages (RegAvailableLines or FwdStatReq) containing an invalid Line number, which can cause a process failur...

CVE-2010-0588

Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15, 7.x before 7.13asu1, and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SCCP 1 RegAvailableLines or 2 FwdStatReq message with an invalid Line number, aka Bug ...

CVE-2010-0591

CVE-2010-0591 affects Cisco Unified Communications Manager (CUCM) where a malformed SIP REG message can cause a DoS (process failure) due to an overflow of the Telephone-URL field. Affected CUCM versions include 6.x prior to 6.1(5), 7.x prior to 7.1(3b)SU2, and 8.x prior to 8.0(1). Cisco fixed th...

CVE-2010-0592

CVE-2010-0592 affects Cisco Unified Communications Manager CTI Manager service. A malformed message to CTI Manager (TCP 2748) can cause a DoS (service failure). The issue is fixed in CUCM releases: 4.3(2)sr1a, 6.1(3), 7.0(2), 7.1(2), and 8.0(1). Other Cisco CUCM components (SCCP/SIP) also documen...

Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities Advisory ID: cisco-sa-20100303-cucm Revision 1.0 For Public Release 2010 March 3 1600 UTC GMT...

Cisco Unified Communications Manager DoS

DoS on SIP and SCCP Skinny protocols, on CTI Manager TCP/2748 request parsing...

Cisco Releases Multiple Security Advisories

Cisco has released three security advisories to address vulnerabilities. Security advisory cisco-sa-20100303-cucm, addresses multiple vulnerabilities in the Cisco Unified Communications Manager which affect the Session Initiation Protocol SIP, Skinny Client Control Protocol SCCP, and the Computer...

Cisco Unified Communications Manager Denial of Service Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Multiple Vulnerabilities in Cisco Unified MeetingPlace

No description provided by source. Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified MeetingPlace Advisory ID: cisco-sa-20100127-mp Revision 1.0 For Public Release 2010 Jan 27 1600 UTC GMT +--------------------------------------------------------------------- Summary =======...

CVE-2010-0142

MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote authenticated users to gain privileges via a modified authentication sequence, aka Bug ID CSCsv66530...

Sql injection

Cisco Unified MeetingPlace 7 before 7.02.3 hotfix 5F, 6 before 6.0.639.2, and possibly 5 does not properly validate SQL commands, which allows remote attackers to create, modify, or delete data in a database via unspecified vectors, aka Bug ID CSCtc39691...

CVE-2010-0140

CVE-2010-0140 concerns Cisco Unified MeetingPlace web server vulnerabilities that allow an unauthenticated attacker to create a regular user or an administrator account via a crafted URL to the internal interface. The vulnerability is documented as part of Cisco Bug IDs CSCtc59231 and CSCtd40661....

CVE-2010-0139

Cisco CVE-2010-0139 affects Cisco Unified MeetingPlace versions 5, 6, and 7. The root cause is insufficient validation of SQL commands, allowing unauthenticated remote attackers to create, modify, or delete data in the MeetingPlace database via unspecified vectors. In practice, Cisco’s advisory l...