CVE-2008-2053

Unspecified vulnerability in Cisco Unified Customer Voice Portal CVP 4.0.x before 4.02ES14, 4.1.x before 4.11ES11, and 7.x before 7.01 allows remote authenticated users with administrator role privileges to create, modify, or delete a superuser account...

Cisco Security Advisory: Cisco Voice Portal Privilege Escalation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Voice Portal Privilege Escalation Vulnerability Advisory ID: cisco-sa-20080521-cvp http://www.cisco.com/warp/public/707/cisco-sa-20080521-cvp.shtml Revision 1.0 For Public Release 2008 May 21 1600 UTC GMT Summary =======...

Cisco Unified Communications Manager多个拒绝服务漏洞

BUGTRAQ ID: 29221 CVECAN ID: CVE-2008-1744,CVE-2008-1745,CVE-2008-1746,CVE-2008-1747,CVE-2008-1748,CVE-2008-1742,CVE-2008-1743 Cisco Unified Communications Manager（CUCM，之前被称为CallManager）是Cisco IP电话解决方案中的呼叫处理组件。 CUCM中存在多个拒绝服务漏洞，可能导致语音服务中断。 以下Cisco Unified Communications Manager服务受影响： 证书信任列表（CTL）供应...

Cisco Unified Presence引擎多个拒绝服务漏洞

BUGTRAQ ID: 29222,29220,29219 CVECAN ID: CVE-2008-1741,CVE-2008-1740,CVE-2008-1158 Cisco Unified Presence用于收集有关用户可用性状态和通讯能力的信息。 当有漏洞的Cisco Unified Presence系统接收到一系列畸形报文时，Cisco Unified Presence 1.0版本的的Presence引擎服务中会出现两个漏洞，导致拒绝服务的情况。第一个漏洞记录为CVE-2008-1158和Cisco Bug ID...

Code injection

Unspecified vulnerability in Cisco Unified Communications Manager 4.1 before 4.13SR6, 4.2 before 4.23SR3, 4.3 before 4.32, 5.x before 5.13, and 6.x before 6.11 allows remote attackers to cause a denial of service CCM service restart via an unspecified SIP INVITE message, aka Bug ID CSCsk46944...

CVE-2008-1747

Unspecified vulnerability in Cisco Unified Communications Manager 4.1 before 4.13SR6, 4.2 before 4.23SR3, 4.3 before 4.32, 5.x before 5.13, and 6.x before 6.11 allows remote attackers to cause a denial of service CCM service restart via an unspecified SIP INVITE message, aka Bug ID CSCsk46944...

CVE-2008-1746

The SNMP Trap Agent service in Cisco Unified Communications Manager CUCM 4.1 before 4.13SR6, 4.2 before 4.23SR3, 4.3 before 4.32, 5.x before 5.13, and 6.x before 6.11 allows remote attackers to cause a denial of service core dump and service restart via a series of malformed UDP packets, as...

CVE-2008-1744

The Certificate Authority Proxy Function CAPF service in Cisco Unified Communications Manager CUCM 4.1 before 4.13SR7, 4.2 before 4.23SR4, and 4.3 before 4.32 allows remote attackers to cause a denial of service service crash via malformed network traffic, aka Bug ID CSCsk46770...

CVE-2008-1745

Cisco Unified Communications Manager CUCM 5.x before 5.12 and 6.x before 6.11 allows remote attackers to cause a denial of service service interruption via a SIP JOIN message with a malformed header, aka Bug ID CSCsi48115...

Code injection

Cisco Unified Communications Manager 4.1 before 4.13SR7, 4.2 before 4.23SR4, 4.3 before 4.32, 5.x before 5.13, and 6.x before 6.11 does not properly validate SIP URLs, which allows remote attackers to cause a denial of service service interruption via a SIP INVITE message, aka Bug ID CSCsl22355...

Code injection

The SNMP Trap Agent service in Cisco Unified Communications Manager CUCM 4.1 before 4.13SR6, 4.2 before 4.23SR3, 4.3 before 4.32, 5.x before 5.13, and 6.x before 6.11 allows remote attackers to cause a denial of service core dump and service restart via a series of malformed UDP packets, as...

CVE-2008-1740

The Presence Engine PE service in Cisco Unified Presence before 6.01 allows remote attackers to cause a denial of service core dump and service interruption via an unspecified "stress test," aka Bug ID CSCsh20972...

Design/Logic Flaw

The Certificate Authority Proxy Function CAPF service in Cisco Unified Communications Manager CUCM 4.1 before 4.13SR7, 4.2 before 4.23SR4, and 4.3 before 4.32 allows remote attackers to cause a denial of service service crash via malformed network traffic, aka Bug ID CSCsk46770...

CVE-2008-1742

Memory leak in the Certificate Trust List CTL Provider service in Cisco Unified Communications Manager CUCM 5.x before 5.13 allows remote attackers to cause a denial of service memory consumption and service interruption via a series of malformed TCP packets, as demonstrated by TCPFUZZ, aka Bug I...

Design/Logic Flaw

The Presence Engine PE service in Cisco Unified Presence before 6.01 allows remote attackers to cause a denial of service core dump and service interruption via malformed packets, aka Bug ID CSCsh50164...

Command injection

The SIP Proxy SIPD service in Cisco Unified Presence before 6.03 allows remote attackers to cause a denial of service core dump and service interruption via a TCP port scan, aka Bug ID CSCsj64533...

CVE-2008-1748

Cisco Unified Communications Manager 4.1 before 4.13SR7, 4.2 before 4.23SR4, 4.3 before 4.32, 5.x before 5.13, and 6.x before 6.11 does not properly validate SIP URLs, which allows remote attackers to cause a denial of service service interruption via a SIP INVITE message, aka Bug ID CSCsl22355...

CVE-2008-1158

The Presence Engine PE service in Cisco Unified Presence before 6.01 allows remote attackers to cause a denial of service core dump and service interruption via malformed packets, aka Bug ID CSCsh50164...

CVE-2008-1742

Memory leak in the Certificate Trust List CTL Provider service in Cisco Unified Communications Manager CUCM 5.x before 5.13 allows remote attackers to cause a denial of service memory consumption and service interruption via a series of malformed TCP packets, as demonstrated by TCPFUZZ, aka Bug I...

CVE-2008-1741

CVE-2008-1741 affects Cisco Unified Presence SIP Proxy (SIPD) in Cisco Unified Presence versions 6.0(1) and 6.0(2). The vulnerability allows remote attackers to cause a denial of service (core dump and service interruption) by sending a TCP port scan to the SIP proxy, as described in Cisco Bug CS...