Cisco Security Advisory: Cisco Unified Communications Manager IP Phone Personal Address Book Synchronizer Privilege Escalation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager IP Phone Personal Address Book Synchronizer Privilege Escalation Vulnerability Advisory ID: cisco-sa-20090311-cucmpab Revision 1.0 For Public Release 2009 March 11 1600 UTC GMT...

CVE-2009-0743

Cross-site scripting XSS vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0517.0 aka 6.0 MR4 and 7.0 before 7.02 aka 7.0 MR1 allows remote authenticated users to inject arbitrary web script or HTML via the E-mail Address field...

CVE-2009-0743

Cross-site scripting XSS vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0517.0 aka 6.0 MR4 and 7.0 before 7.02 aka 7.0 MR1 allows remote authenticated users to inject arbitrary web script or HTML via the E-mail Address field...

CVE-2009-0743

The CVE-2009-0743 issue is an XSS vulnerability in Cisco Unified MeetingPlace Web Conferencing’s Web Server, specifically on the edit account page. The flaw allows remote authenticated users to inject arbitrary web script or HTML via the E-mail Address field in versions 6.0 prior to 6.0(517.0) (6...

Cisco Unified MeetingPlace视频会议系统E-Mail Address字段远程跨站脚本漏洞

BUGTRAQ ID: 33915 Cisco Unified MeetingPlace是思科的网络会议解决方案。 Unified MeetingPlace允许用户修改自己的帐号设置，如名称、电话分机、邮件地址等。如果用户在配置文件页面设置了特制的E-mail Address字段的话，则其他用户在查看该用户的配置文件或该用户所创建会议的详细信息时就会导致跨站脚本攻击，在浏览器会话中执行所嵌入的恶意代码。 Cisco Unified MeetingPlace 7.0 Cisco Unified MeetingPlace 6.0 厂商补丁： Cisco -----...

Fedora Update for evolution-data-server FEDORA-2007-484

Check for the Version of evolution-data-server OpenVAS Vulnerability Test Fedora Update for evolution-data-server FEDORA-2007-484 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora Update for evolution-data-server FEDORA-2007-0464

Check for the Version of evolution-data-server OpenVAS Vulnerability Test Fedora Update for evolution-data-server FEDORA-2007-0464 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora Update for evolution-data-server FEDORA-2007-595

Check for the Version of evolution-data-server OpenVAS Vulnerability Test Fedora Update for evolution-data-server FEDORA-2007-595 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

CVE-2009-0614

The CVE applies to Cisco Unified MeetingPlace Web Conferencing servers (6.0 before 6.0(517.0) MR4 and 7.0 before 7.0(2) MR1). The vulnerability is an authentication bypass enabling remote attackers to gain administrative access via a crafted URL. It is documented in Cisco advisory cisco-sa-200902...

Cisco Unified MeetingPlace Web Conferencing Stored Cross Site Scripting Vulnerability

Title: Cisco Unified MeetingPlace Web Conferencing Stored Cross Site Scripting Vulnerability CVE Identifier: N/A Credit: Security Assurance Team of the National Australia Bank. The vendor was advised of this vulnerability prior to its public release. National Australia Bank adheres to the...

Cisco Unified MeetingPlace Cross Site Scripting

Title: Cisco Unified MeetingPlace Web Conferencing Stored Cross Site Scripting Vulnerability CVE Identifier: N/A Credit: Security Assurance Team of the National Australia Bank. The vendor was advised of this vulnerability prior to its public release. National Australia Bank adheres to the...

CVE-2009-0057

The Certificate Authority Proxy Function CAPF service in Cisco Unified Communications Manager 5.x before 5.13e and 6.x before 6.13 allows remote attackers to cause a denial of service voice service outage by sending malformed input over a TCP session in which the "client terminates prematurely."...

Code injection

The Certificate Authority Proxy Function CAPF service in Cisco Unified Communications Manager 5.x before 5.13e and 6.x before 6.13 allows remote attackers to cause a denial of service voice service outage by sending malformed input over a TCP session in which the "client terminates prematurely."...

CVE-2009-0057

CVE-2009-0057 affects Cisco Unified Communications Manager (CAPF DoS) in 5.x before 5.1(3e) and 6.x before 6.1(3). The vulnerability arises in the Certificate Authority Proxy Function (CAPF) when handling malformed input over a TCP session (CAPF port 3804, default). Exploitation can cause a denia...

Cisco Unified Communications Manager DoS

Certificate Authority Proxy Function service DoS TCP/3804...

Cisco Security Advisory: Cisco Unified Communications Manager CAPF Denial of Service Vulnerability`

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager CAPF Denial of Service Vulnerability Advisory ID: cisco-sa-20090121-cucmcapf Revision 1.0 For Public Release 2009 January 21 1600 UTC GMT...

Cisco Unified Communications Manager CAPF Denial of Service Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Unified IP Phone 7960G and 7940G RTP远程拒绝服务漏洞

BUGTRAQ ID: 33264 CVE ID：CVE-2008-4444 CNCVE ID：CNCVE-20084444 Cisco Unified IP Phone是思科的统一IP电话解决方案。 Cisco Unified IP Phone 7960G和7940G不正确解析部分畸形RTP头字段数据，远程攻击者可以利用漏洞对电话机进行拒绝服务攻击。 SIP协议用于在电话中设置呼叫，一旦呼叫建立，媒体内容由RTP协议承接，远程攻击者可以发送特殊构建的RTP报文时电话重启。 Cisco Unified IP Phone 7960G Cisco Unified IP Phone 7940G...

Cisco Security Advisory: Cisco IOS NAT Skinny Call Control Protocol Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS NAT Skinny Call Control Protocol Vulnerability Advisory ID: cisco-sa-20080924-sccp http://www.cisco.com/warp/public/707/cisco-sa-20080924-sccp.shtml Revision 1.0 For Public Release 2008 September 24 1600 UTC GMT -...

Design/Logic Flaw

Unspecified vulnerability in the Session Initiation Protocol SIP implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service device or process reload via unspecified valid SIP...