CVE-2010-0140: Undefined Security Weakness

Multiple unspecified vulnerabilities in the web server in Cisco Unified MeetingPlace 7 before 7.02.3 hotfix 5F, 6 before 6.0.639.3, and possibly 5 allow remote attackers to create 1 user or 2 administrator accounts via a crafted URL in a request to the internal interface, aka Bug IDs CSCtc59231 a...

CVE-2010-0141: Undefined Security Weakness

MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote attackers to discover usernames, passwords, and unspecified other data from the user database via a modified authentication sequence to the Audio Server, aka Bug ID CSCsv76935...

CVE-2010-0139: Improper Neutralization of Special Elements used in an SQL Command

Cisco Unified MeetingPlace 7 before 7.02.3 hotfix 5F, 6 before 6.0.639.2, and possibly 5 does not properly validate SQL commands, which allows remote attackers to create, modify, or delete data in a database via unspecified vectors, aka Bug ID CSCtc39691...

Multiple Vulnerabilities in Cisco Unified MeetingPlace

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

CVE-2009-4128: Improper Authentication

GNU GRand Unified Bootloader GRUB 2 1.97 only compares the submitted portion of a password with the actual password, which makes it easier for physically proximate attackers to conduct brute force attacks and bypass authentication by submitting a password whose length is 1...

Cisco Security Advisory: Cisco Unified Presence Denial of Service Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Presence Denial of Service Vulnerabilities Advisory ID: cisco-sa-20091014-cup Revision 1.0 For Public Release 2009 October 14 1600 UTC GMT +---------------------------------------------------------------------...

Cisco Unified Communications Manager / Cisco Unified Presence DoS

Multiple Denial of Service conditions on SIP and Skinny processing...

Code injection

The TimesTenD process in Cisco Unified Presence 1.x, 6.x before 6.06, and 7.x before 7.04 allows remote attackers to cause a denial of service process crash via a large number of TCP connections to ports 16200 and 22794, aka Bug ID CSCsy17662...

CVE-2009-2874

The TimesTenD process in Cisco Unified Presence 1.x, 6.x before 6.06, and 7.x before 7.04 allows remote attackers to cause a denial of service process crash via a large number of TCP connections to ports 16200 and 22794, aka Bug ID CSCsy17662...

CVE-2009-2874

The TimesTenD process in Cisco Unified Presence 1.x, 6.x before 6.06, and 7.x before 7.04 allows remote attackers to cause a denial of service process crash via a large number of TCP connections to ports 16200 and 22794, aka Bug ID CSCsy17662...

CVE-2009-2874

The CVE-2009-2874 entry affects Cisco Unified Presence, specifically the TimesTenD process in Cisco Unified Presence 1.x, 6.x before 6.0(6), and 7.x before 7.0(4). The underlying issue is a DoS condition caused by a large number of TCP connections to ports 16200 and 22794, which can crash the Tim...

CVE-2009-2874: Undefined Security Weakness

The TimesTenD process in Cisco Unified Presence 1.x, 6.x before 6.06, and 7.x before 7.04 allows remote attackers to cause a denial of service process crash via a large number of TCP connections to ports 16200 and 22794, aka Bug ID CSCsy17662...

Cisco Unified Presence Denial of Service Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

CVE-2009-2870

Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when the Cisco Unified Border Element feature is enabled, allows remote attackers to cause a denial of service device reload via crafted SIP messages, aka Bug ID CSCsx25880...

Buffer overflow

Buffer overflow in the login implementation in the Extension Mobility feature in the Unified Communications Manager Express CME component in Cisco IOS 12.4XW, 12.4XY, 12.4XZ, and 12.4YA allows remote attackers to execute arbitrary code or cause a denial of service via crafted HTTP requests, aka B...

Code injection

Cisco Unified Communications Manager aka CUCM, formerly CallManager 5.x before 5.13g, 6.x before 6.14, 7.0.x before 7.02asu1, and 7.1.x before 7.12 allows remote attackers to cause a denial of service service restart via malformed SIP messages, aka Bug ID CSCsz95423...

CVE-2009-2864

Cisco Unified Communications Manager (CUCM) versions affected: 5.x before 5.1(3g); 6.x before 6.1(4); 7.0.x before 7.0(2a)su1; 7.1.x before 7.1(2). Root cause is a denial-of-service in the SIP handling that can crash/restart the CM process when processing crafted SIP messages. CVSS base score in ...

CVE-2009-2864

Cisco Unified Communications Manager aka CUCM, formerly CallManager 5.x before 5.13g, 6.x before 6.14, 7.0.x before 7.02asu1, and 7.1.x before 7.12 allows remote attackers to cause a denial of service service restart via malformed SIP messages, aka Bug ID CSCsz95423...

CVE-2009-2870: Undefined Security Weakness

Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when the Cisco Unified Border Element feature is enabled, allows remote attackers to cause a denial of service device reload via crafted SIP messages, aka Bug ID CSCsx25880...

CVE-2009-2865: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the login implementation in the Extension Mobility feature in the Unified Communications Manager Express CME component in Cisco IOS 12.4XW, 12.4XY, 12.4XZ, and 12.4YA allows remote attackers to execute arbitrary code or cause a denial of service via crafted HTTP requests, aka B...