CVE-2007-5538

CVE-2007-5538 describes a buffer overflow in the Centralized TFTP File Locator Service of Cisco Unified Communications Manager (CUCM) (formerly CallManager) 5.1 before 5.1(3) and Unified CallManager 5.0. The vulnerability occurs during processing of filenames, allowing remote attackers to execute...

Cisco Unified Communications unaurhoized access

Any active directory user has access to web administration tools...

Cisco Security Advisory: Cisco Unified Communications Web-based Management Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Web-based Management Vulnerability Document ID: 97836 Advisory ID: cisco-sa-20071017-IPCC http://www.cisco.com/warp/public/707/cisco-sa-20071017-IPCC.shtml Revision 1.0 For Public Release 2007...

CVE-2007-5538: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Centralized TFTP File Locator Service in Cisco Unified Communications Manager CUCM, formerly CallManager 5.1 before 5.13, and Unified CallManager 5.0, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors involving the...

CVE-2007-5539: Undefined Security Weakness

Unspecified vulnerability in Cisco Unified Intelligent Contact Management Enterprise ICME, Unified ICM Hosted ICMH, Unified Contact Center Enterprise UCCE, Unified Contact Center Hosted UCCH, and System Unified Contact Center Enterprise SUCCE 7.15 allows remote authenticated users to gain...

CVE-2007-5537: Undefined Security Weakness

Cisco Unified Communications Manager CUCM, formerly CallManager 5.1 before 5.12, and Unified CallManager 5.0, allow remote attackers to cause a denial of service kernel panic via a flood of SIP INVITE messages to UDP port 5060, which triggers resource exhaustion, aka CSCsi75822...

CVE-2007-5537

CVE-2007-5537 affects Cisco Unified Communications Manager (CUCM, former CallManager) 5.1 before 5.1(2) and Unified CallManager 5.0. The vulnerability allows remote attackers to cause a denial of service (kernel panic) by sending a flood of SIP INVITE messages to UDP port 5060, triggering resourc...

CVE-2007-5538

Buffer overflow in the Centralized TFTP File Locator Service in Cisco Unified Communications Manager CUCM, formerly CallManager 5.1 before 5.13, and Unified CallManager 5.0, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors involving the...

Cisco Unified Communications Web-based Management Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Design/Logic Flaw

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action...

PT-2007-4307

Name of the Vulnerable Software and Affected Versions Alcatel OmniPCX Enterprise Communication Server versions prior to R7.1 Description The masterCGI component within the Unified Maintenance Tool contains a flaw that allows remote attackers to execute arbitrary commands. This occurs when shell...

CVE-2007-3010: Improper Neutralization of Special Elements used in a Command

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action...

CVE-2007-3010

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker...

Alcatel-Lucent OmniPCX Enterprise Communication Server 7.1 - masterCGI Command Injection (Metasploit)

Alcatel-Lucent OmniPCX Enterprise Communication Server 7.1 - masterCGI Command Injection Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing a...

Alcatel-Lucent OmniPCX Enterprise Communication Server <= 7.1 masterCGI Command Injection

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

Alcatel-Lucent OmniPCX Enterprise masterCGI Arbitrary Command Execution

This module abuses a metacharacter injection vulnerability in the HTTP management interface of the Alcatel-Lucent OmniPCX Enterprise Communication Server 7.1 and earlier. The Unified Maintenance Tool contains a 'masterCGI' binary which allows an unauthenticated attacker to execute arbitrary...

CVE-2007-4633

Multiple cross-site scripting XSS vulnerabilities in Cisco CallManager and Unified Communications Manager CUCM before 3.35sr2b, 4.1 before 4.13sr5, 4.2 before 4.23sr2, and 4.3 before 4.31sr1 allow remote attackers to inject arbitrary web script or HTML via the lang variable to the 1 user or 2 adm...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cisco CallManager and Unified Communications Manager CUCM before 3.35sr2b, 4.1 before 4.13sr5, 4.2 before 4.23sr2, and 4.3 before 4.31sr1 allow remote attackers to inject arbitrary web script or HTML via the lang variable to the 1 user or 2 adm...

CVE-2007-4634

Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager CUCM before 3.35sr2b, 4.1 before 4.13sr5, 4.2 before 4.23sr2, and 4.3 before 4.31sr1 allow remote attackers to execute arbitrary SQL commands via the lang variable to the 1 user or 2 admin logon page, a...

CVE-2007-4633

Multiple cross-site scripting XSS vulnerabilities in Cisco CallManager and Unified Communications Manager CUCM before 3.35sr2b, 4.1 before 4.13sr5, 4.2 before 4.23sr2, and 4.3 before 4.31sr1 allow remote attackers to inject arbitrary web script or HTML via the lang variable to the 1 user or 2 adm...