Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco IOS Software Network Time Protocol Packet Vulnerability

Cisco IOS® Software with support for Network Time Protocol NTP version v4 contains a vulnerability processing specific NTP packets that will result in a reload of the device. This results in a remote denial of service DoS condition on the affected device. Cisco has released software updates that...

DEBIAN-CVE-2009-3241

Unspecified vulnerability in the OpcUa OPC UA dissector in Wireshark 0.99.6 through 1.0.8 and 1.2.0 through 1.2.1 allows remote attackers to cause a denial of service memory and CPU consumption via malformed OPCUA Service CallRequest packets...

Alcatel-Lucent OmniPCX Enterprise masterCGI Arbitrary Command Execution

This module abuses a metacharacter injection vulnerability in the HTTP management interface of the Alcatel-Lucent OmniPCX Enterprise Communication Server 7.1 and earlier. The Unified Maintenance Tool contains a 'masterCGI' binary which allows an unauthenticated attacker to execute arbitrary...

CVE-2009-2054

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, 7.0 before 7.02asu1, and 7.1 before 7.12asu1 allows remote attackers to cause a denial of service file-descriptor exhaustion and SIP outage via a flood of TCP packets, aka Bug ID CSCsx23689...

CVE-2009-2053

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, 7.0 before 7.02asu1, and 7.1 before 7.12 allows remote attackers to cause a denial of service file-descriptor exhaustion and SCCP outage via a flood of TCP packets, aka Bug ID CSCsx32236...

CVE-2009-2052

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, 7.0 before 7.02, and 7.1 before 7.12; and Cisco Unified Presence 1.x, 6.x before 6.06, and 7.x before 7.04; allows remote attackers to cause a denial of service TCP services outage via a...

CVE-2009-2050

Cisco Unified Communications Manager aka CUCM, formerly CallManager before 6.11 allows remote attackers to cause a denial of service voice-services outage via a malformed header in a SIP message, aka Bug ID CSCsi46466...

Code injection

Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, and 7.x before 7.12 allow remote attackers to cause a denial of service device reload or...

Code injection

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, 7.0 before 7.02, and 7.1 before 7.12; and Cisco Unified Presence 1.x, 6.x before 6.06, and 7.x before 7.04; allows remote attackers to cause a denial of service TCP services outage via a...

CVE-2009-2051

Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, and 7.x before 7.12 allow remote attackers to cause a denial of service device reload or...

Design/Logic Flaw

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, 7.0 before 7.02asu1, and 7.1 before 7.12asu1 allows remote attackers to cause a denial of service file-descriptor exhaustion and SIP outage via a flood of TCP packets, aka Bug ID CSCsx23689...

Code injection

Cisco Unified Communications Manager aka CUCM, formerly CallManager before 6.11 allows remote attackers to cause a denial of service voice-services outage via a malformed header in a SIP message, aka Bug ID CSCsi46466...

CVE-2009-2050

CVE-2009-2050 concerns Cisco Unified Communications Manager (CUCM, formerly CallManager). The issue allows a remote attacker to cause a denial-of-service (voice-services outage) by sending a malformed header in a SIP message (Bug CSCsi46466). Affected products are CUCM before version 6.1(1), with...

CVE-2009-2052

CVE-2009-2052 affects Cisco Unified Communications Manager (CUCM) and Cisco Unified Presence. The DoS arises from the embedded firewall’s connection-tracking table being overwhelmed by many TCP connections, potentially interrupting system services. Affected CUCM versions: 4.x; 5.x up to 5.1(3g); ...

CVE-2009-2054

CVE-2009-2054 affects Cisco Unified Communications Manager (CUCM) 4.x, 5.x (before 5.1(3g)), 6.x (before 6.1(4)), 7.0 (before 7.0(2a)su1) and 7.1 (before 7.1(2a)su1). It enables remote attackers to cause a denial of service via a flood of TCP packets, leading to file-descriptor exhaustion and SIP...

CVE-2009-2053

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, 7.0 before 7.02asu1, and 7.1 before 7.12 allows remote attackers to cause a denial of service file-descriptor exhaustion and SCCP outage via a flood of TCP packets, aka Bug ID CSCsx32236...

CVE-2009-2053

Cisco Unified Communications Manager (CUCM) is affected by CVE-2009-2053 via a DoS vulnerability in the SCCP path: a flood of TCP packets can exhaust file descriptors and cause SCCP outages. Affected versions include CUCM 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2a)su1, and 7.1 ...

CVE-2009-2050

Cisco Unified Communications Manager aka CUCM, formerly CallManager before 6.11 allows remote attackers to cause a denial of service voice-services outage via a malformed header in a SIP message, aka Bug ID CSCsi46466...

CVE-2009-2051

Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, and 7.x before 7.12 allow remote attackers to cause a denial of service device reload or...