Cisco Security Advisory: Cisco IOS Secure Copy Authorization Bypass Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Secure Copy Authorization Bypass Vulnerability Advisory ID: cisco-sa-20070808-scp http://www.cisco.com/warp/public/707/cisco-sa-20070808-scp.shtml Revision 1.0 For Public Release 2007 August 08 1600 UTC GMT -...

Design/Logic Flaw

Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allow remote attackers to obtain sensitive information via unspecified vectors that reveal the SNMP community strings and configuration settings, aka 1 CSCsj20668 and 2 CSCsj25962...

Code injection

Unspecified vulnerability in Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allows remote attackers to cause a denial of service loss of cluster services via unspecified vectors, aka 1 CSCsj09859 and 2 CSCsj19985...

CVE-2007-3775

Unspecified vulnerability in Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allows remote attackers to cause a denial of service loss of cluster services via unspecified vectors, aka 1 CSCsj09859 and 2 CSCsj19985...

CVE-2006-5278

Integer overflow in the Real-Time Information Server RIS Data Collector service RisDC.exe in Cisco Unified Communications Manager CUCM, formerly CallManager before 20070711 allow remote attackers to execute arbitrary code via crafted packets, resulting in a heap-based buffer overflow...

CVE-2007-3776

Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allow remote attackers to obtain sensitive information via unspecified vectors that reveal the SNMP community strings and configuration settings, aka 1 CSCsj20668 and 2 CSCsj25962...

CVE-2006-5278

Integer overflow in the Real-Time Information Server RIS Data Collector service RisDC.exe in Cisco Unified Communications Manager CUCM, formerly CallManager before 20070711 allow remote attackers to execute arbitrary code via crafted packets, resulting in a heap-based buffer overflow...

CVE-2007-3775

Unspecified vulnerability in Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allows remote attackers to cause a denial of service loss of cluster services via unspecified vectors, aka 1 CSCsj09859 and 2 CSCsj19985...

CVE-2007-3776

Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allow remote attackers to obtain sensitive information via unspecified vectors that reveal the SNMP community strings and configuration settings, aka 1 CSCsj20668 and 2 CSCsj25962...

CVE-2007-3776

CVE-2007-3776 affects Cisco Unified Communications Manager (CUCM) and Unified Presence Server (CUPS). The issue is an information disclosure vulnerability where remote attackers can obtain sensitive data (SNMP community strings and configuration settings) through unspecified vectors. The sources ...

CVE-2007-3775

CVE-2007-3775 affects Cisco Unified Communications Manager (CUCM, formerly CallManager) and Unified Presence Server (CUPS). The available documents describe an unspecified vulnerability that allows remote attackers to cause a denial of service (loss of cluster services). The exact vulnerable comp...

CVE-2006-5277

Off-by-one error in the Certificate Trust List CTL Provider service CTLProvider.exe in Cisco Unified Communications Manager CUCM, formerly CallManager before 20070711 allow remote attackers to execute arbitrary code via a crafted packet that triggers a heap-based buffer overflow...

CVE-2006-5277

CVE-2006-5277 affects Cisco Unified Communications Manager (CUCM) prior to 20070711, due to an off-by-one error in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) that can trigger a heap-based buffer overflow. The vulnerability could allow a remote attacker to execute arbitrar...

CVE-2006-5277

Off-by-one error in the Certificate Trust List CTL Provider service CTLProvider.exe in Cisco Unified Communications Manager CUCM, formerly CallManager before 20070711 allow remote attackers to execute arbitrary code via a crafted packet that triggers a heap-based buffer overflow...

CVE-2007-3776: Undefined Security Weakness

Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allow remote attackers to obtain sensitive information via unspecified vectors that reveal the SNMP community strings and configuration settings, aka 1 CSCsj20668 and 2 CSCsj25962...

CVE-2006-5278: Undefined Security Weakness

Integer overflow in the Real-Time Information Server RIS Data Collector service RisDC.exe in Cisco Unified Communications Manager CUCM, formerly CallManager before 20070711 allow remote attackers to execute arbitrary code via crafted packets, resulting in a heap-based buffer overflow...

CVE-2006-5277: Undefined Security Weakness

Off-by-one error in the Certificate Trust List CTL Provider service CTLProvider.exe in Cisco Unified Communications Manager CUCM, formerly CallManager before 20070711 allow remote attackers to execute arbitrary code via a crafted packet that triggers a heap-based buffer overflow...

CVE-2007-3775: Undefined Security Weakness

Unspecified vulnerability in Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allows remote attackers to cause a denial of service loss of cluster services via unspecified vectors, aka 1 CSCsj09859 and 2 CSCsj19985...

PT-2007-5024 · Esoft · Esoft Instagate Ex2 Utm

Name of the Vulnerable Software and Affected Versions: eSoft InstaGate EX2 UTM device versions prior to 3.1.20070615 Description: A cross-site request forgery CSRF issue allows remote attackers to perform privileged actions as administrators. The vendor disputes the distribution of the vulnerable...

Cisco Unified Communications Manager和Presence Server未授权访问漏洞

Cisco Unified Communications Manager是一款思科开发的统一通信解决方案。Cisco Unified Presence Server是统一状态服务器。 Cisco Unified Communications Manager和Presence Server存在多个未授权访问问题，远程攻击者可以利用漏洞获得管理员的访问和获得敏感信息。 问题一是未授权管理者可激活/终止CUCM/CUPS系统服务： 未授权CUCM/CUPS管理员可激活/终止在CUCM/CUPS集群环境中的系统服务。可造成拒绝服务攻击。未授权管理员不能更改或者查看CUCM/CUPS系统的配置。...