CVE-2008-3801

Unspecified vulnerability in the Session Initiation Protocol SIP implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service device or process reload via unspecified valid SIP...

CVE-2008-3801

CVE-2008-3801 affects Cisco IOS 12.2–12.4 and Cisco Unified Communications Manager (CUCM) 4.1–6.1 when VoIP is enabled. Affected SIP processing of valid SIP messages can cause the CCM/IOS DPS to reload, resulting in DoS (service disruption). Cisco advisories list fixed releases: CUCM 4.1(3)SR8, 4...

Cisco Unified Communications Manager SIP服务拒绝服务漏洞

BUGTRAQ ID: 31367 CVE ID: CVE-2008-3800 CVE-2008-3801 CNCVE ID：CNCVE-20083800 CNCVE-20083801 Cisco Unified Communications Manager是一款Cisco IP电话解决方案中的呼叫处理组件。 Cisco Unified Communications Manager SIP服务处理存在两个拒绝服务攻击，远程攻击者可以利用漏洞使语音服务破坏。 Cisco Unified Communications Manager的SIP实现在处理特定的合法的SIP消息时可触发Cisco...

Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

FGA-2008-16: EMC Dantz Retrospect 7 backup Client 7.5.116 Remote Memory corruption Vulnerability

FGA-2008-16: EMC Dantz Retrospect 7 backup Client 7.5.116 Remote Memory corruption Vulnerability http://www.fortiguardcenter.com/advisory/FGA-2008-16.html July 20, 2008 -- Affected Vendors: EMC -- Affected Products: EMC Dantz Retrospect 7 backup Client 7.5.116 -- Vulnerability Details: The...

Cisco Unified Communications Manager RIS数据收集器服务绕过认证漏洞

BUGTRAQ ID: 29935 CVECAN ID: CVE-2008-2062,CVE-2008-2730 Cisco Unified Communications Manager（CUCM，之前被称为CallManager）是Cisco IP电话解决方案中的呼叫处理组件。 CUCM的实时信息服务器（RIS）数据收集器服务存在绕过认证漏洞，可能导致非授权泄露某些CUCM集群信息。...

Cisco Unified Communications Manager CTI服务拒绝服务漏洞

BUGTRAQ ID: 29933 CVECAN ID: CVE-2008-2061 Cisco Unified Communications Manager（CUCM，之前被称为CallManager）是Cisco IP电话解决方案中的呼叫处理组件。 CUCM的计算机电话集成（CTI）管理器服务在处理畸形输入时存在拒绝服务漏洞，远程攻击者可以通过向默认的TCP 2748监听端口发送恶意报文导致语音服务中断。 Cisco Unified Communications Manager 6.x Cisco Unified Communications Manager 5.x 临时解决方法：...

Authentication flaw

The Real-Time Information Server RIS Data Collector service in Cisco Unified Communications Manager CUCM before 4.23SR4, and 4.3 before 4.32SR1, allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the servic...

CVE-2008-2062

The Real-Time Information Server RIS Data Collector service in Cisco Unified Communications Manager CUCM before 4.23SR4, and 4.3 before 4.32SR1, allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the servic...

Design/Logic Flaw

The Computer Telephony Integration CTI Manager service in Cisco Unified Communications Manager CUCM 5.x before 5.13c and 6.x before 6.12 allows remote attackers to cause a denial of service TSP crash via malformed network traffic to TCP port 2748...

Authentication flaw

The Real-Time Information Server RIS Data Collector service in Cisco Unified Communications Manager CUCM 5.x before 5.13 and 6.x before 6.11 allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the service...

CVE-2008-2061

The Computer Telephony Integration CTI Manager service in Cisco Unified Communications Manager CUCM 5.x before 5.13c and 6.x before 6.12 allows remote attackers to cause a denial of service TSP crash via malformed network traffic to TCP port 2748...

CVE-2008-2730

The Real-Time Information Server RIS Data Collector service in Cisco Unified Communications Manager CUCM 5.x before 5.13 and 6.x before 6.11 allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the service...

CVE-2008-2062

CVE-2008-2062 (CISCO CUCM RIS Data Collector) affects the Real-Time Information Server Data Collector component in Cisco Unified Communications Manager (CUCM) prior to 4.2(3)SR4 and 4.3 prior to 4.3(2)SR1. The issue is an authentication bypass: by connecting directly to the RIS Data Collector por...

CVE-2008-2062

The Real-Time Information Server RIS Data Collector service in Cisco Unified Communications Manager CUCM before 4.23SR4, and 4.3 before 4.32SR1, allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the servic...

CVE-2008-2061

The Computer Telephony Integration CTI Manager service in Cisco Unified Communications Manager CUCM 5.x before 5.13c and 6.x before 6.12 allows remote attackers to cause a denial of service TSP crash via malformed network traffic to TCP port 2748...

CVE-2008-2730

The Real-Time Information Server RIS Data Collector service in Cisco Unified Communications Manager CUCM 5.x before 5.13 and 6.x before 6.11 allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the service...

Cisco Unified Communications Manager Denial of Service and Authentication Bypass Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service and Authentication Bypass Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service and Authentication Bypass Vulnerabilities Advisory ID: cisco-sa-20080625-cucm Revision 1.0 For Public Release 2008 June 25 1600 UTC GMT...

Cisco Unified Communications Manager multiple security vulnerabilities

Computer Telephony Integration Manager DoS TCP/2748 The Real-Time Information Server SOAP interface TCP/2556 unauthorized access...