6172 matches found
CVE-2010-0139
Cisco CVE-2010-0139 affects Cisco Unified MeetingPlace versions 5, 6, and 7. The root cause is insufficient validation of SQL commands, allowing unauthenticated remote attackers to create, modify, or delete data in the MeetingPlace database via unspecified vectors. In practice, Cisco’s advisory l...
CVE-2010-0141
MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote attackers to discover usernames, passwords, and unspecified other data from the user database via a modified authentication sequence to the Audio Server, aka Bug ID CSCsv76935...
CVE-2010-0142
CVE-2010-0142 concerns a privilege-escalation flaw in Cisco Unified MeetingPlace’s MeetingTime component. According to Cisco’s advisory, remote authenticated users could alter the MeetingTime authentication sequence to elevate privileges to administrator via manipulated packets, enabling access t...
Cisco Patches, Updates Unified MeetingPlace
In a current advisory, Cisco describes an SQL injection hole which can be exploited to manipulate or spy out database contents and other vulnerabilities it fixed in versions, 5, 6 and 7 of Unified MeetingPlace. Read the full article. The H Security...
Cisco Releases Security Advisory for Unified MeetingPlace
Cisco has released a security advisory to address multiple vulnerabilities in Unified MeetingPlace. These vulnerabilities may allow a remote, unauthenticated attacker to obtain sensitive information, manipulate configuration data, create unauthorized accounts, operate with elevated privileges or...
Multiple Vulnerabilities in Cisco Unified MeetingPlace
THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...
Cisco Security Advisory: Cisco Unified Presence Denial of Service Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Presence Denial of Service Vulnerabilities Advisory ID: cisco-sa-20091014-cup Revision 1.0 For Public Release 2009 October 14 1600 UTC GMT +---------------------------------------------------------------------...
Cisco Unified Communications Manager / Cisco Unified Presence DoS
Multiple Denial of Service conditions on SIP and Skinny processing...
CVE-2009-2874
The TimesTenD process in Cisco Unified Presence 1.x, 6.x before 6.06, and 7.x before 7.04 allows remote attackers to cause a denial of service process crash via a large number of TCP connections to ports 16200 and 22794, aka Bug ID CSCsy17662...
Code injection
The TimesTenD process in Cisco Unified Presence 1.x, 6.x before 6.06, and 7.x before 7.04 allows remote attackers to cause a denial of service process crash via a large number of TCP connections to ports 16200 and 22794, aka Bug ID CSCsy17662...
CVE-2009-2874
The CVE-2009-2874 entry affects Cisco Unified Presence, specifically the TimesTenD process in Cisco Unified Presence 1.x, 6.x before 6.0(6), and 7.x before 7.0(4). The underlying issue is a DoS condition caused by a large number of TCP connections to ports 16200 and 22794, which can crash the Tim...
CVE-2009-2874
The TimesTenD process in Cisco Unified Presence 1.x, 6.x before 6.06, and 7.x before 7.04 allows remote attackers to cause a denial of service process crash via a large number of TCP connections to ports 16200 and 22794, aka Bug ID CSCsy17662...
Cisco Unified Presence Denial of Service Vulnerabilities
THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...
CVE-2009-2870
Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when the Cisco Unified Border Element feature is enabled, allows remote attackers to cause a denial of service device reload via crafted SIP messages, aka Bug ID CSCsx25880...
Code injection
Cisco Unified Communications Manager aka CUCM, formerly CallManager 5.x before 5.13g, 6.x before 6.14, 7.0.x before 7.02asu1, and 7.1.x before 7.12 allows remote attackers to cause a denial of service service restart via malformed SIP messages, aka Bug ID CSCsz95423...
Buffer overflow
Buffer overflow in the login implementation in the Extension Mobility feature in the Unified Communications Manager Express CME component in Cisco IOS 12.4XW, 12.4XY, 12.4XZ, and 12.4YA allows remote attackers to execute arbitrary code or cause a denial of service via crafted HTTP requests, aka B...
CVE-2009-2864
Cisco Unified Communications Manager aka CUCM, formerly CallManager 5.x before 5.13g, 6.x before 6.14, 7.0.x before 7.02asu1, and 7.1.x before 7.12 allows remote attackers to cause a denial of service service restart via malformed SIP messages, aka Bug ID CSCsz95423...
CVE-2009-2864
Cisco Unified Communications Manager (CUCM) versions affected: 5.x before 5.1(3g); 6.x before 6.1(4); 7.0.x before 7.0(2a)su1; 7.1.x before 7.1(2). Root cause is a denial-of-service in the SIP handling that can crash/restart the CM process when processing crafted SIP messages. CVSS base score in ...
Cisco Plugs Holes in IOS Software
Cisco has released a peck of patches to cover multiple security flaws in its flagship Cisco IOS originally Internetwork Operating System, warning that the bugs exposes businesses to denial-of-service or policy bypass attacks. In all, the networking vendor released 10 advisories covering Cisco IOS...