CVE-2010-0587

CVE-2010-0587 affects Cisco Unified Communications Manager (CUCM) and is triggered by a malformed SCCP StationCapabilitiesRes message with an invalid MaxCap field, leading to a DoS (process failure). The vulnerability impacts CUCM versions 4.x (before 4.3(2)SR2), 6.x (before 6.1(5)), 7.x (before ...

CVE-2010-0592: Undefined Security Weakness

The CTI Manager service in Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x before 4.32sr1a, 6.x before 6.13, 7.0x before 7.02, 7.1x before 7.12, and 8.x before 8.01 allows remote attackers to cause a denial of service service failure via a malformed message, aka Bug ID...

CVE-2010-0591: Undefined Security Weakness

Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15, 7.x before 7.13bSU2, and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SIP REG message, related to an overflow of the Telephone-URL field, aka Bug ID...

CVE-2010-0588: Undefined Security Weakness

Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15, 7.x before 7.13asu1, and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SCCP 1 RegAvailableLines or 2 FwdStatReq message with an invalid Line number, aka Bug ...

CVE-2010-0587: Undefined Security Weakness

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x before 4.32SR2, 6.x before 6.15, 7.x before 7.13asu1, and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SCCP StationCapabilitiesRes message with an invalid MaxCap field,...

CVE-2010-0590: Undefined Security Weakness

The CMSIPUtility component in Cisco Unified Communications Manager aka CUCM, formerly CallManager 7.x before 7.13asu1 and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SIP Register message, aka Bug ID CSCtc37188...

Cisco Unified Communications Manager DoS

DoS on SIP and SCCP Skinny protocols, on CTI Manager TCP/2748 request parsing...

Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities Advisory ID: cisco-sa-20100303-cucm Revision 1.0 For Public Release 2010 March 3 1600 UTC GMT...

Cisco Releases Multiple Security Advisories

Cisco has released three security advisories to address vulnerabilities. Security advisory cisco-sa-20100303-cucm, addresses multiple vulnerabilities in the Cisco Unified Communications Manager which affect the Session Initiation Protocol SIP, Skinny Client Control Protocol SCCP, and the Computer...

Cisco Unified Communications Manager Denial of Service Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Multiple Vulnerabilities in Cisco Unified MeetingPlace

No description provided by source. Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified MeetingPlace Advisory ID: cisco-sa-20100127-mp Revision 1.0 For Public Release 2010 Jan 27 1600 UTC GMT +--------------------------------------------------------------------- Summary =======...

CVE-2010-0142

MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote authenticated users to gain privileges via a modified authentication sequence, aka Bug ID CSCsv66530...

Sql injection

Cisco Unified MeetingPlace 7 before 7.02.3 hotfix 5F, 6 before 6.0.639.2, and possibly 5 does not properly validate SQL commands, which allows remote attackers to create, modify, or delete data in a database via unspecified vectors, aka Bug ID CSCtc39691...

CVE-2010-0139

Cisco CVE-2010-0139 affects Cisco Unified MeetingPlace versions 5, 6, and 7. The root cause is insufficient validation of SQL commands, allowing unauthenticated remote attackers to create, modify, or delete data in the MeetingPlace database via unspecified vectors. In practice, Cisco’s advisory l...

CVE-2010-0140

CVE-2010-0140 concerns Cisco Unified MeetingPlace web server vulnerabilities that allow an unauthenticated attacker to create a regular user or an administrator account via a crafted URL to the internal interface. The vulnerability is documented as part of Cisco Bug IDs CSCtc59231 and CSCtd40661....

CVE-2010-0142

CVE-2010-0142 concerns a privilege-escalation flaw in Cisco Unified MeetingPlace’s MeetingTime component. According to Cisco’s advisory, remote authenticated users could alter the MeetingTime authentication sequence to elevate privileges to administrator via manipulated packets, enabling access t...

CVE-2010-0141

MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote attackers to discover usernames, passwords, and unspecified other data from the user database via a modified authentication sequence to the Audio Server, aka Bug ID CSCsv76935...

Cisco Patches, Updates Unified MeetingPlace

In a current advisory, Cisco describes an SQL injection hole which can be exploited to manipulate or spy out database contents and other vulnerabilities it fixed in versions, 5, 6 and 7 of Unified MeetingPlace. Read the full article. The H Security...

CVE-2010-0142: Undefined Security Weakness

MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote authenticated users to gain privileges via a modified authentication sequence, aka Bug ID CSCsv66530...

Cisco Releases Security Advisory for Unified MeetingPlace

Cisco has released a security advisory to address multiple vulnerabilities in Unified MeetingPlace. These vulnerabilities may allow a remote, unauthenticated attacker to obtain sensitive information, manipulate configuration data, create unauthorized accounts, operate with elevated privileges or...