6169 matches found
CVE-2007-1834
Cisco Unified CallManager CUCM 5.0 before 5.04aSU1 and Cisco Unified Presence Server CUPS 1.0 before 1.03 allow remote attackers to cause a denial of service loss of voice services via a flood of ICMP echo requests, aka bug ID CSCsf12698...
Code injection
Unspecified vulnerability in the IPSec Manager Service for Cisco Unified CallManager CUCM 5.0 before 5.04aSU1 and Cisco Unified Presence Server CUPS 1.0 before 1.03 allows remote attackers to cause a denial of service loss of cluster services via a "specific UDP packet" to UDP port 8500, aka bug ...
Cisco Unified CallManager和Unified Server多个拒绝服务漏洞
Cisco Unified CallManager提供了一种可扩展、可分布和高可用的企业IP电话呼叫处理解决方案。 Cisco Unified CallManager CUCM和Cisco Unified Presence Server CUPS存在多个安全问题，远程攻击者可以利用漏洞对服务程序进行拒绝服务攻击。 具体问题如下： - SCCP/SCCPS端口扫描拒绝服务 Skinny Call Control Protocol SCCP协议是Cisco私有语音协议，用于CallManager系统和IP电话的呼叫管理。SCCP使用TCP 2000进行通信，运行在TCP...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in 1 PreSearch.html and 2 PreSearch.class in Cisco Secure Access Control Server ACS, VPN Client, Unified Personal Communicator, MeetingPlace, Unified MeetingPlace, Unified MeetingPlace Express, CallManager, IP Communicator, Unified Video Advantage...
Command injection
The command line interface CLI in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.04SR1 and earlier allows local users to obtain privileges or cause a denial of service via unspecified vectors. NOTE: this issue can be leveraged remotely via CVE-2007-1063...
CVE-2007-1072
CVE-2007-1072 affects Cisco Unified IP Phone series (7906G, 7911G, 7941G, 7961G, 7970G, 7971G) with firmware 8.0(4)SR1 and earlier. The CLI (command line interface) permits local users to obtain privileges or cause a denial of service via unspecified vectors. The issue can be leveraged remotely t...
Hardcoded credentials
The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.04SR1 and earlier, uses a hard-coded username and password, which allows remote attackers to access the device...
CVE-2007-1062
The Cisco Unified IP Conference Station 7935 3.215 and earlier, and Station 7936 3.312 and earlier does not properly handle administrator HTTP sessions, which allows remote attackers to bypass authentication controls via a direct URL request to the administrative HTTP interface for a limited time...
CVE-2007-1063
The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.04SR1 and earlier, uses a hard-coded username and password, which allows remote attackers to access the device...
CVE-2007-1062
The CVE affects Cisco Unified IP Conference Station 7935 (versions up to 3.2(15)) and Station 7936 (up to 3.3(12)). It allows remote attackers to bypass authentication by issuing a direct URL request to the administrative HTTP interface for a limited time, enabling unauthorized access to admin co...
Cisco Security Advisory: Cisco Unified IP Conference Station and IP Phone Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified IP Conference Station and IP Phone Vulnerabilities Advisory ID: cisco-sa-20070221-phone http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml Revision 1.0 For Public Release 2007 February 21 1600 UTC...
Microsoft MFC Embedded OLE Object Remote Code Execution Vulnerability
Description The Microsoft MFC component for Microsoft Windows and Microsoft Visual Studio .NET is prone to a remote code-execution vulnerability. This issue occurs when the application using the component attempts to parse malformed Rich Text Files RTF. An attacker could exploit this issue by...
Cisco Unified Contact Center/IP Contact Center JTapi网关拒绝服务漏洞
Cisco Unified Contact Center（之前为Cisco IP Contact Center IPCC）是Cisco Unified Communications系统中的组件，可在多个通讯通道中提供智能路由和呼叫处理。 所有版本的Cisco Unified Contact Center和Cisco IP Contact...
CVE-2007-0198
The JTapi Gateway process in Cisco Unified Contact Center Enterprise, Unified Contact Center Hosted, IP Contact Center Enterprise, and Cisco IP Contact Center Hosted 5.0 through 7.1 allows remote attackers to cause a denial of service repeated process restart via a certain TCP session on the JTap...
CVE-2007-0198
CVE-2007-0198 affects Cisco Unified Contact Center Enterprise/Hosted and Cisco IP Contact Center Enterprise/Hosted (versions 5.0–7.1). The JTapi Gateway process can be disrupted by unauthenticated remote connections to the JTapi server TCP port, causing a DoS via repeated restart of the JTapi Gat...
Cisco Unified Contact Center and IP Contact Center JTapi Gateway Vulnerability
...
Microsoft Windows CSRSS HardError Messages Denial of Service Vulnerability
Description Microsoft Windows is prone to a local denial-of-service vulnerability because the operating system fails to handle certain API calls with unexpected parameters. A local unprivileged attacker may exploit this issue by executing a malicious application. Successful exploits will allow...
CVE-2006-5553
Cisco Security Agent CSA for Linux 4.5 before 4.5.1.657 and 5.0 before 5.0.0.193, as used by Unified CallManager CUCM and Unified Presence Server CUPS, allows remote attackers to cause a denial of service resource consumption via a port scan with certain options...
CVE-2006-5553
Cisco Security Agent CSA for Linux 4.5 before 4.5.1.657 and 5.0 before 5.0.0.193, as used by Unified CallManager CUCM and Unified Presence Server CUPS, allows remote attackers to cause a denial of service resource consumption via a port scan with certain options...