CVE-2009-2050

CVE-2009-2050 concerns Cisco Unified Communications Manager (CUCM, formerly CallManager). The issue allows a remote attacker to cause a denial-of-service (voice-services outage) by sending a malformed header in a SIP message (Bug CSCsi46466). Affected products are CUCM before version 6.1(1), with...

CVE-2009-2051

Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, and 7.x before 7.12 allow remote attackers to cause a denial of service device reload or...

CVE-2009-2053

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, 7.0 before 7.02asu1, and 7.1 before 7.12 allows remote attackers to cause a denial of service file-descriptor exhaustion and SCCP outage via a flood of TCP packets, aka Bug ID CSCsx32236...

CVE-2009-2051

Summary: CVE-2009-2051 affects Cisco IOS (12.2–12.4, 15.0–15.1), Cisco IOS XE 2.5.x–2.6.x before 2.6.1, and CUCM 4.x–7.x, enabling remote attackers to trigger a DoS (device reload/voice-services outage) via a malformed SIP INVITE that calls sipSafeStrlen and overflows into a crash. The issue is d...

CVE-2009-2050

Cisco Unified Communications Manager aka CUCM, formerly CallManager before 6.11 allows remote attackers to cause a denial of service voice-services outage via a malformed header in a SIP message, aka Bug ID CSCsi46466...

Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities Advisory ID: cisco-sa-20090826-cucm Revision 1.0 For Public Release 2009 August 26 1600 UTC GMT...

PT-2009-4507 · Cisco · Cisco Unified Communications Manager

Name of the Vulnerable Software and Affected Versions: Cisco Unified Communications Manager versions 4.x through 7.1 before 7.12asu1, specifically: Cisco Unified Communications Manager versions 4.x Cisco Unified Communications Manager versions 5.x before 5.13g Cisco Unified Communications Manager...

CVE-2009-2053: Undefined Security Weakness

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, 7.0 before 7.02asu1, and 7.1 before 7.12 allows remote attackers to cause a denial of service file-descriptor exhaustion and SCCP outage via a flood of TCP packets, aka Bug ID CSCsx32236...

CVE-2009-2051: Undefined Security Weakness

Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, and 7.x before 7.12 allow remote attackers to cause a denial of service device reload or...

CVE-2009-2050: Undefined Security Weakness

Cisco Unified Communications Manager aka CUCM, formerly CallManager before 6.11 allows remote attackers to cause a denial of service voice-services outage via a malformed header in a SIP message, aka Bug ID CSCsi46466...

CVE-2009-2052: Undefined Security Weakness

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, 7.0 before 7.02, and 7.1 before 7.12; and Cisco Unified Presence 1.x, 6.x before 6.06, and 7.x before 7.04; allows remote attackers to cause a denial of service TCP services outage via a...

CVE-2009-2054: Allocation of Resources Without Limits or Throttling

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, 7.0 before 7.02asu1, and 7.1 before 7.12asu1 allows remote attackers to cause a denial of service file-descriptor exhaustion and SIP outage via a flood of TCP packets, aka Bug ID CSCsx23689...

Forrester: The Good And Bad of Security Technologies

From SC Magazine Angela Moscaritolo Businesses are using a variety of technologies to help reduce the impact of threats, prevent breaches and meet compliance — but some of these products are more beneficial than others, according to a new Forrester report released Wednesday that examines the stat...

Cross site scripting

Cross-site scripting XSS vulnerability in the Administration interface in Cisco Customer Response Solutions CRS before 7.01 SR2 in Cisco Unified Contact Center Express aka CCX server allows remote authenticated users to inject arbitrary web script or HTML into the CCX database via unspecified...

CVE-2009-2047

Cisco CVE-2009-2047 pertains to a directory traversal vulnerability in the Administration interface of Cisco Customer Response Solutions (CRS) and Cisco Unified CCX, affecting CRS before 7.0(1) SR2. The flaw allows remote authenticated users to read, modify, or delete arbitrary files on the serve...

CVE-2009-2048: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Administration interface in Cisco Customer Response Solutions CRS before 7.01 SR2 in Cisco Unified Contact Center Express aka CCX server allows remote authenticated users to inject arbitrary web script or HTML into the CCX database via unspecified...

Cisco Security Advisory: Vulnerabilities in Unified Contact Center Express Administration Pages

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Vulnerabilities in Unified Contact Center Express Administration Pages Advisory ID: cisco-sa-20090715-uccx http://www.cisco.com/warp/public/707/cisco-sa-20090715-uccx.shtml Revision 1.0 For Public Release 2009 July 15 1600 UTC...

Cisco Unified Contact Center Express multiple security vulnerabilities

Directory traversal and crossite scripting via administration page...

CVE-2009-2047: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Administration interface in Cisco Customer Response Solutions CRS before 7.01 SR2 in Cisco Unified Contact Center Express aka CCX server allows remote authenticated users to read, modify, or delete arbitrary files via unspecified vectors...

CVE-2009-1161

CVE-2009-1161 describes a directory traversal vulnerability in CiscoWorks Common Services (CWCS) 3.0.x–3.2.x on Windows when the TFTP service is enabled. An unauthenticated remote attacker could access arbitrary files via CWCS TFTP, affecting multiple Cisco products that rely on CWCS (e.g., Unifi...