CVE-2009-2052

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, 7.0 before 7.02, and 7.1 before 7.12; and Cisco Unified Presence 1.x, 6.x before 6.06, and 7.x before 7.04; allows remote attackers to cause a denial of service TCP services outage via a...

CVE-2009-2051

Summary: CVE-2009-2051 affects Cisco IOS (12.2–12.4, 15.0–15.1), Cisco IOS XE 2.5.x–2.6.x before 2.6.1, and CUCM 4.x–7.x, enabling remote attackers to trigger a DoS (device reload/voice-services outage) via a malformed SIP INVITE that calls sipSafeStrlen and overflows into a crash. The issue is d...

PT-2009-4507 · Cisco · Cisco Unified Communications Manager

Name of the Vulnerable Software and Affected Versions: Cisco Unified Communications Manager versions 4.x through 7.1 before 7.12asu1, specifically: Cisco Unified Communications Manager versions 4.x Cisco Unified Communications Manager versions 5.x before 5.13g Cisco Unified Communications Manager...

Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities Advisory ID: cisco-sa-20090826-cucm Revision 1.0 For Public Release 2009 August 26 1600 UTC GMT...

Forrester: The Good And Bad of Security Technologies

From SC Magazine Angela Moscaritolo Businesses are using a variety of technologies to help reduce the impact of threats, prevent breaches and meet compliance — but some of these products are more beneficial than others, according to a new Forrester report released Wednesday that examines the stat...

Cross site scripting

Cross-site scripting XSS vulnerability in the Administration interface in Cisco Customer Response Solutions CRS before 7.01 SR2 in Cisco Unified Contact Center Express aka CCX server allows remote authenticated users to inject arbitrary web script or HTML into the CCX database via unspecified...

CVE-2009-2047

Cisco CVE-2009-2047 pertains to a directory traversal vulnerability in the Administration interface of Cisco Customer Response Solutions (CRS) and Cisco Unified CCX, affecting CRS before 7.0(1) SR2. The flaw allows remote authenticated users to read, modify, or delete arbitrary files on the serve...

Cisco Unified Contact Center Express multiple security vulnerabilities

Directory traversal and crossite scripting via administration page...

Cisco Security Advisory: Vulnerabilities in Unified Contact Center Express Administration Pages

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Vulnerabilities in Unified Contact Center Express Administration Pages Advisory ID: cisco-sa-20090715-uccx http://www.cisco.com/warp/public/707/cisco-sa-20090715-uccx.shtml Revision 1.0 For Public Release 2009 July 15 1600 UTC...

CVE-2009-1161

CVE-2009-1161 describes a directory traversal vulnerability in CiscoWorks Common Services (CWCS) 3.0.x–3.2.x on Windows when the TFTP service is enabled. An unauthenticated remote attacker could access arbitrary files via CWCS TFTP, affecting multiple Cisco products that rely on CWCS (e.g., Unifi...

Cisco Security Advisory: CiscoWorks TFTP Directory Traversal Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: CiscoWorks TFTP Directory Traversal Vulnerability Advisory ID: cisco-sa-20090520-cw http://www.cisco.com/warp/public/707/cisco-sa-20090520-cw.shtml Revision 1.0 For Public Release 2009 May 20 1600 UTC GMT Summary =======...

CVE-2009-0630

The 1 Cisco Unified Communications Manager Express; 2 SIP Gateway Signaling Support Over Transport Layer Security TLS Transport; 3 Secure Signaling and Media Encryption; 4 Blocks Extensible Exchange Protocol BEEP; 5 Network Admission Control HTTP Authentication Proxy; 6 Per-user URL Redirect for...

Authentication flaw

The 1 Cisco Unified Communications Manager Express; 2 SIP Gateway Signaling Support Over Transport Layer Security TLS Transport; 3 Secure Signaling and Media Encryption; 4 Blocks Extensible Exchange Protocol BEEP; 5 Network Admission Control HTTP Authentication Proxy; 6 Per-user URL Redirect for...

CVE-2009-0630

The 1 Cisco Unified Communications Manager Express; 2 SIP Gateway Signaling Support Over Transport Layer Security TLS Transport; 3 Secure Signaling and Media Encryption; 4 Blocks Extensible Exchange Protocol BEEP; 5 Network Admission Control HTTP Authentication Proxy; 6 Per-user URL Redirect for...

[SECURITY] Fedora 9 Update: evolution-data-server-2.22.3-3.fc9

The evolution-data-server package provides a unified backend for programs t hat work with contacts, tasks, and calendar information. It was originally developed for Evolution hence the name, but is now used by other packages...

CVE-2009-0632

The IP Phone Personal Address Book PAB Synchronizer feature in Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.1, 4.2 before 4.23SR4b, 4.3 before 4.32SR1b, 5.x before 5.13e, 6.x before 6.13, and 7.0 before 7.02 sends privileged directory-service account credentials to the...

Code injection

The IP Phone Personal Address Book PAB Synchronizer feature in Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.1, 4.2 before 4.23SR4b, 4.3 before 4.32SR1b, 5.x before 5.13e, 6.x before 6.13, and 7.0 before 7.02 sends privileged directory-service account credentials to the...

CVE-2009-0632

The IP Phone Personal Address Book PAB Synchronizer feature in Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.1, 4.2 before 4.23SR4b, 4.3 before 4.32SR1b, 5.x before 5.13e, 6.x before 6.13, and 7.0 before 7.02 sends privileged directory-service account credentials to the...

CVE-2009-0632

CVE-2009-0632 affects Cisco Unified Communications Manager (CUCM) IP Phone Personal Address Book (PAB) Synchronizer. The vulnerability leaks privileged directory-service credentials to the client during PAB sync, allowing an attacker who intercepts credentials to modify CUCM configuration and esc...

Cisco CallManager / Unified Communications Manager privilege escalation

During authentication process for address book synchronization, full access account credentials are leaked to client...