Cisco Security Advisory: Cisco Unified Communications Manager and Presence Server Unauthorized Access Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager and Presence Server Unauthorized Access Vulnerabilities Document ID: 97060 Advisory ID: cisco-sa-20070711-voip http://www.cisco.com/warp/public/707/cisco-sa-20070711-voip.shtml Revision 1.0...

Cisco Unified Communications Manager / Presence Server multiple security vulnerabilities

Unauthorized SNMP access, buffer overflow in Certificate Trust List TCP/2444 and Real-Time Information Server Data Collector TCP/2556...

Cisco Security Advisory: Cisco Unified Communications Manager Overflow Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager Overflow Vulnerabilities Document ID: 92015 Advisory ID: cisco-sa-20070711-cucm http://www.cisco.com/warp/public/707/cisco-sa-20070711-cucm.shtml Revision 1.0 For Public Release 2007 July 1...

Cisco Unified Communications Manager Overflow Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

checkpoint-csrf.txt

Louhi Networks Oy -= Security Advisory =- Advisory: Checkpoint VPN-1 UTM Edge Cross Site Request Forgery Release Date: 2007/06/26 Last Modified: 2007/06/26 Authors: Henri Lindberg, Associate of ISC² [email protected] Jussi Vuokko, CISSP [email protected] Application: Checkpoint VPN-1 Ed...

[SECURITY] Fedora Core 6 Update: evolution-data-server-1.8.3-7.fc6

The evolution-data-server package provides a unified backend for programs that work with contacts, tasks, and calendar information. It was originally developed for Evolution hence the name, but is now used by other packages...

[SECURITY] Fedora Core 5 Update: evolution-data-server-1.6.3-5.fc5

The evolution-data-server package provides a unified backend for programs t hat work with contacts, tasks, and calendar information. It was originally developed for Evolution hence the name, but is now used by other packages...

[Full-disclosure] CheckPoint VPN-1 UTM Edge Cross Site Request Forgery vulnerability

Louhi Networks Oy -= Security Advisory =- Advisory: Checkpoint VPN-1 UTM Edge Cross Site Request Forgery Release Date: 2007/06/26 Last Modified: 2007/06/26 Authors: Henri Lindberg, Associate of ISC? [email protected] Jussi Vuokko, CISSP [email protected] Application: Checkpoint VPN-1 Ed...

RHEL 5 : evolution-data-server (RHSA-2007:0344)

Updated evolution-data-server package that fixes a security bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The evolution-data-server package provides a unified backend for programs that wor...

Cisco Security Advisory: Vulnerability In Crypto Library

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Vulnerability In Crypto Library Advisory ID: cisco-sa-20070522-crypto.shtml http://www.cisco.com/warp/public/707/cisco-sa-20070522-crypto.shtml Revision 1.0 For Public Release 2007 May 22 1300 UTC GMT -...

Code injection

The Skinny Call Control Protocol SCCP implementation in Cisco Unified CallManager CUCM 3.3 before 3.35SR2a, 4.1 before 4.13SR4, 4.2 before 4.23SR1, and 5.0 before 5.04aSU1 allows remote attackers to cause a denial of service loss of voice services by sending crafted packets to the 1 SCCP 2000/tcp...

Design/Logic Flaw

Cisco Unified CallManager CUCM 5.0 before 5.04aSU1 and Cisco Unified Presence Server CUPS 1.0 before 1.03 allow remote attackers to cause a denial of service loss of voice services via a flood of ICMP echo requests, aka bug ID CSCsf12698...

CVE-2007-1834

Cisco Unified CallManager CUCM 5.0 before 5.04aSU1 and Cisco Unified Presence Server CUPS 1.0 before 1.03 allow remote attackers to cause a denial of service loss of voice services via a flood of ICMP echo requests, aka bug ID CSCsf12698...

CVE-2007-1833

The CVE-2007-1833 issue affects Cisco Unified CallManager (CUCM) across multiple releases: 3.3 before 3.3(5)SR2a, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3)SR1, and 5.0 before 5.0(4a)SU1. The Skinny Call Control Protocol (SCCP) implementation allows remote attackers to cause a denial of service (los...

CVE-2007-1834: Undefined Security Weakness

Cisco Unified CallManager CUCM 5.0 before 5.04aSU1 and Cisco Unified Presence Server CUPS 1.0 before 1.03 allow remote attackers to cause a denial of service loss of voice services via a flood of ICMP echo requests, aka bug ID CSCsf12698...

CVE-2007-1833: Undefined Security Weakness

The Skinny Call Control Protocol SCCP implementation in Cisco Unified CallManager CUCM 3.3 before 3.35SR2a, 4.1 before 4.13SR4, 4.2 before 4.23SR1, and 5.0 before 5.04aSU1 allows remote attackers to cause a denial of service loss of voice services by sending crafted packets to the 1 SCCP 2000/tcp...

CVE-2007-1834

Cisco Unified CallManager CUCM 5.0 before 5.04aSU1 and Cisco Unified Presence Server CUPS 1.0 before 1.03 allow remote attackers to cause a denial of service loss of voice services via a flood of ICMP echo requests, aka bug ID CSCsf12698...

CVE-2007-1834

CVE-2007-1834 affects Cisco Unified CallManager (CUCM) 5.0 prior to 5.0(4a)SU1 and Cisco Unified Presence Server (CUPS) 1.0 prior to 1.0(3). The vulnerability allows unauthenticated, remote attackers to cause a denial of service (loss of voice services) by sending a flood of ICMP echo requests. R...

Code injection

Unspecified vulnerability in the IPSec Manager Service for Cisco Unified CallManager CUCM 5.0 before 5.04aSU1 and Cisco Unified Presence Server CUPS 1.0 before 1.03 allows remote attackers to cause a denial of service loss of cluster services via a "specific UDP packet" to UDP port 8500, aka bug ...

CVE-2007-1826: Undefined Security Weakness

Unspecified vulnerability in the IPSec Manager Service for Cisco Unified CallManager CUCM 5.0 before 5.04aSU1 and Cisco Unified Presence Server CUPS 1.0 before 1.03 allows remote attackers to cause a denial of service loss of cluster services via a "specific UDP packet" to UDP port 8500, aka bug ...