Cisco Call Manager / Cisco Unified Communications Manager buffer overflow

Buffer overflow in CTL Provider Service TCP/2444...

Cisco Unified Communications Manager CTL Provider Heap Overflow

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Security Advisory: Cisco Security Agent for Windows System Driver Remote Buffer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Security Agent for Windows System Driver Remote Buffer Overflow Vulnerability Advisory ID: cisco-sa-20071205-csa http://www.cisco.com/warp/public/707/cisco-sa-20071205-csa.shtml Revision 1.0 For Public Release 2007...

CVE-2007-6190

The HTTP daemon in the Cisco Unified IP Phone, when the Extension Mobility feature is enabled, allows remote authenticated users of other phones associated with the same CUCM server to eavesdrop on the physical environment via a CiscoIPPhoneExecute message containing a URL attribute of an...

Design/Logic Flaw

The HTTP daemon in the Cisco Unified IP Phone, when the Extension Mobility feature is enabled, allows remote authenticated users of other phones associated with the same CUCM server to eavesdrop on the physical environment via a CiscoIPPhoneExecute message containing a URL attribute of an...

CVE-2007-6190

The CVE affects Cisco Unified IP Phone devices with Extension Mobility enabled. The HTTP daemon can be abused by remote authenticated users on other phones within the same CUCM domain to eavesdrop on the physical environment by triggering a CiscoIPPhoneExecute message that points to an RTP audio ...

Cisco Unified MeetingPlace跨站脚本执行漏洞

BUGTRAQ ID: 26364 CVECAN ID: CVE-2007-5581 Cisco Unified MeetingPlace是思科的网络会议解决方案。 MeetingPlace处理用户数据时存在输入过滤漏洞，远程攻击者可能利用此漏洞在用户系统的浏览器中执行恶意代码。 MeetingPlace的mpweb/scripts/mpx.dll文件没有正确地验证FirstName和LastName参数，如果用户在登录屏幕提交了嵌入有恶意代码或脚本的URL的话，就可以执行跨站脚本攻击，导致在用户浏览器会话中执行任意代码。 Cisco Unified MeetingPlace 6.0...

CVE-2007-5581

Summary: CVE-2007-5581 affects Cisco Unified MeetingPlace (mpweb/scripts/mpx.dll). The vulnerability is a cross-site scripting flaw caused by insufficient validation of the FirstName and LastName parameters, allowing remote attackers to inject script/HTML into a user’s browser session in MeetingP...

Cisco Unified MeetingPlace Login Screen Cross-Site Scripting Vulnerability

Cisco Unified MeetingPlace versions 5.3.235.0 and prior, 5.4, and 6.0 contain a vulnerability that could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. This vulnerability is due to insufficient filtering of parameters passed to the Login form of Cisco Unified...

Cisco Unified Communications管理应用程序特权提升漏洞

Cisco Unified Communications Manager（CUCM，之前被称为CallManager）是Cisco IP电话解决方案中的呼叫处理组件。 Cisco Unified Communications管理应用程序包含的基于WEB的工具存在访问验证问题，远程攻击者可以利用漏洞访问设备敏感信息和更改应用程序配置。 Cisco Unified ICME, Unified ICMH, UCCE,...

CVE-2007-5538

Buffer overflow in the Centralized TFTP File Locator Service in Cisco Unified Communications Manager CUCM, formerly CallManager 5.1 before 5.13, and Unified CallManager 5.0, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors involving the...

Buffer overflow

Buffer overflow in the Centralized TFTP File Locator Service in Cisco Unified Communications Manager CUCM, formerly CallManager 5.1 before 5.13, and Unified CallManager 5.0, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors involving the...

CVE-2007-5537

Cisco Unified Communications Manager CUCM, formerly CallManager 5.1 before 5.12, and Unified CallManager 5.0, allow remote attackers to cause a denial of service kernel panic via a flood of SIP INVITE messages to UDP port 5060, which triggers resource exhaustion, aka CSCsi75822...

Code injection

Cisco Unified Communications Manager CUCM, formerly CallManager 5.1 before 5.12, and Unified CallManager 5.0, allow remote attackers to cause a denial of service kernel panic via a flood of SIP INVITE messages to UDP port 5060, which triggers resource exhaustion, aka CSCsi75822...

CVE-2007-5538

CVE-2007-5538 describes a buffer overflow in the Centralized TFTP File Locator Service of Cisco Unified Communications Manager (CUCM) (formerly CallManager) 5.1 before 5.1(3) and Unified CallManager 5.0. The vulnerability occurs during processing of filenames, allowing remote attackers to execute...

CVE-2007-5539

Cisco UC/ICM suite components (ICME, ICMH, UCCE, UCCH, SUCCE) version 7.1(5) contain an unspecified vulnerability that allows remote authenticated users to gain privileges, read reports, or alter SUCCE configuration via certain web interfaces. The exact root cause, affected subcomponents, and exp...

Cisco Unified Communications unaurhoized access

Any active directory user has access to web administration tools...

Cisco Security Advisory: Cisco Unified Communications Web-based Management Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Web-based Management Vulnerability Document ID: 97836 Advisory ID: cisco-sa-20071017-IPCC http://www.cisco.com/warp/public/707/cisco-sa-20071017-IPCC.shtml Revision 1.0 For Public Release 2007...

CVE-2007-5537

CVE-2007-5537 affects Cisco Unified Communications Manager (CUCM, former CallManager) 5.1 before 5.1(2) and Unified CallManager 5.0. The vulnerability allows remote attackers to cause a denial of service (kernel panic) by sending a flood of SIP INVITE messages to UDP port 5060, triggering resourc...

CVE-2007-5538

Buffer overflow in the Centralized TFTP File Locator Service in Cisco Unified Communications Manager CUCM, formerly CallManager 5.1 before 5.13, and Unified CallManager 5.0, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors involving the...