Cisco Unified MeetingPlace Cross Site Scripting

Title: Cisco Unified MeetingPlace Web Conferencing Stored Cross Site Scripting Vulnerability CVE Identifier: N/A Credit: Security Assurance Team of the National Australia Bank. The vendor was advised of this vulnerability prior to its public release. National Australia Bank adheres to the...

Cisco Unified MeetingPlace Web Conferencing Stored Cross Site Scripting Vulnerability

Title: Cisco Unified MeetingPlace Web Conferencing Stored Cross Site Scripting Vulnerability CVE Identifier: N/A Credit: Security Assurance Team of the National Australia Bank. The vendor was advised of this vulnerability prior to its public release. National Australia Bank adheres to the...

CVE-2009-0614: Improper Authentication

Unspecified vulnerability in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0517.0 aka 6.0 MR4 and 7.0 before 7.02 aka 7.0 MR1 allows remote attackers to bypass authentication and obtain administrative access via a crafted URL...

CVE-2009-0057

The Certificate Authority Proxy Function CAPF service in Cisco Unified Communications Manager 5.x before 5.13e and 6.x before 6.13 allows remote attackers to cause a denial of service voice service outage by sending malformed input over a TCP session in which the "client terminates prematurely."...

Code injection

The Certificate Authority Proxy Function CAPF service in Cisco Unified Communications Manager 5.x before 5.13e and 6.x before 6.13 allows remote attackers to cause a denial of service voice service outage by sending malformed input over a TCP session in which the "client terminates prematurely."...

CVE-2009-0057

CVE-2009-0057 affects Cisco Unified Communications Manager (CAPF DoS) in 5.x before 5.1(3e) and 6.x before 6.1(3). The vulnerability arises in the Certificate Authority Proxy Function (CAPF) when handling malformed input over a TCP session (CAPF port 3804, default). Exploitation can cause a denia...

Cisco Unified Communications Manager DoS

Certificate Authority Proxy Function service DoS TCP/3804...

Cisco Security Advisory: Cisco Unified Communications Manager CAPF Denial of Service Vulnerability`

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager CAPF Denial of Service Vulnerability Advisory ID: cisco-sa-20090121-cucmcapf Revision 1.0 For Public Release 2009 January 21 1600 UTC GMT...

CVE-2009-0057: Improper Input Validation

The Certificate Authority Proxy Function CAPF service in Cisco Unified Communications Manager 5.x before 5.13e and 6.x before 6.13 allows remote attackers to cause a denial of service voice service outage by sending malformed input over a TCP session in which the "client terminates prematurely."...

Cisco Unified Communications Manager CAPF Denial of Service Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

CVE-2008-4444: Improper Input Validation

Cisco Unified IP Phone aka SIP phone 7960G and 7940G with firmware P0S3-08-9-00 and possibly other versions before 8.10 allows remote attackers to cause a denial of service device reboot or possibly execute arbitrary code via a Realtime Transport Protocol RTP packet with malformed headers...

Cisco Unified IP Phone 7960G and 7940G RTP远程拒绝服务漏洞

BUGTRAQ ID: 33264 CVE ID：CVE-2008-4444 CNCVE ID：CNCVE-20084444 Cisco Unified IP Phone是思科的统一IP电话解决方案。 Cisco Unified IP Phone 7960G和7940G不正确解析部分畸形RTP头字段数据，远程攻击者可以利用漏洞对电话机进行拒绝服务攻击。 SIP协议用于在电话中设置呼叫，一旦呼叫建立，媒体内容由RTP协议承接，远程攻击者可以发送特殊构建的RTP报文时电话重启。 Cisco Unified IP Phone 7960G Cisco Unified IP Phone 7940G...

Cisco Security Advisory: Cisco IOS NAT Skinny Call Control Protocol Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS NAT Skinny Call Control Protocol Vulnerability Advisory ID: cisco-sa-20080924-sccp http://www.cisco.com/warp/public/707/cisco-sa-20080924-sccp.shtml Revision 1.0 For Public Release 2008 September 24 1600 UTC GMT -...

Design/Logic Flaw

Unspecified vulnerability in the Session Initiation Protocol SIP implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service device or process reload via unspecified valid SIP...

CVE-2008-3801

Unspecified vulnerability in the Session Initiation Protocol SIP implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service device or process reload via unspecified valid SIP...

CVE-2008-3801

CVE-2008-3801 affects Cisco IOS 12.2–12.4 and Cisco Unified Communications Manager (CUCM) 4.1–6.1 when VoIP is enabled. Affected SIP processing of valid SIP messages can cause the CCM/IOS DPS to reload, resulting in DoS (service disruption). Cisco advisories list fixed releases: CUCM 4.1(3)SR8, 4...

Cisco Unified Communications Manager SIP服务拒绝服务漏洞

BUGTRAQ ID: 31367 CVE ID: CVE-2008-3800 CVE-2008-3801 CNCVE ID：CNCVE-20083800 CNCVE-20083801 Cisco Unified Communications Manager是一款Cisco IP电话解决方案中的呼叫处理组件。 Cisco Unified Communications Manager SIP服务处理存在两个拒绝服务攻击，远程攻击者可以利用漏洞使语音服务破坏。 Cisco Unified Communications Manager的SIP实现在处理特定的合法的SIP消息时可触发Cisco...

CVE-2008-3801: Undefined Security Weakness

Unspecified vulnerability in the Session Initiation Protocol SIP implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service device or process reload via unspecified valid SIP...

CVE-2008-3800: Undefined Security Weakness

Unspecified vulnerability in the Session Initiation Protocol SIP implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service device or process reload via unspecified valid SIP...

Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...