CVE-2008-1744

The Certificate Authority Proxy Function CAPF service in Cisco Unified Communications Manager CUCM 4.1 before 4.13SR7, 4.2 before 4.23SR4, and 4.3 before 4.32 allows remote attackers to cause a denial of service service crash via malformed network traffic, aka Bug ID CSCsk46770...

CVE-2008-1740

The Presence Engine PE service in Cisco Unified Presence before 6.01 allows remote attackers to cause a denial of service core dump and service interruption via an unspecified "stress test," aka Bug ID CSCsh20972...

CVE-2008-1742

Memory leak in the Certificate Trust List CTL Provider service in Cisco Unified Communications Manager CUCM 5.x before 5.13 allows remote attackers to cause a denial of service memory consumption and service interruption via a series of malformed TCP packets, as demonstrated by TCPFUZZ, aka Bug I...

CVE-2008-1744

The Certificate Authority Proxy Function CAPF service in Cisco Unified Communications Manager CUCM 4.1 before 4.13SR7, 4.2 before 4.23SR4, and 4.3 before 4.32 allows remote attackers to cause a denial of service service crash via malformed network traffic, aka Bug ID CSCsk46770...

CVE-2008-1745

Cisco Unified Communications Manager CUCM 5.x before 5.12 and 6.x before 6.11 allows remote attackers to cause a denial of service service interruption via a SIP JOIN message with a malformed header, aka Bug ID CSCsi48115...

CVE-2008-1746

The SNMP Trap Agent service in Cisco Unified Communications Manager CUCM 4.1 before 4.13SR6, 4.2 before 4.23SR3, 4.3 before 4.32, 5.x before 5.13, and 6.x before 6.11 allows remote attackers to cause a denial of service core dump and service restart via a series of malformed UDP packets, as...

CVE-2008-1740

CVE-2008-1740 affects Cisco Unified Presence: Presence Engine (PE) service in versions prior to 6.0(1) is vulnerable to a DoS via an unspecified stress test, causing core dumps and service interruption. The issue is documented as Cisco Bug CSCsh20972. Cisco’s related advisory and Seebug/CVE aggre...

CVE-2008-1741

CVE-2008-1741 affects Cisco Unified Presence SIP Proxy (SIPD) in Cisco Unified Presence versions 6.0(1) and 6.0(2). The vulnerability allows remote attackers to cause a denial of service (core dump and service interruption) by sending a TCP port scan to the SIP proxy, as described in Cisco Bug CS...

CVE-2008-1742

CVE-2008-1742 affects Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3). A memory leak in the Certificate Trust List (CTL) Provider service can be triggered by a sequence of malformed TCP packets, leading to denial of service via memory consumption and service interruption. The CTL Pr...

CVE-2008-1747

Cisco Unified Communications Manager (CUCM) is affected by a denial-of-service vulnerability (CVE-2008-1747) that can be triggered by malformed SIP INVITE messages, potentially causing a CCM service restart. Historically documented for CUCM versions 4.1 before 4.1(3)SR6, 4.2 before 4.2(3)SR3, 4.3...

CVE-2008-1158

CVE-2008-1158 affects the Presence Engine (PE) service in Cisco Unified Presence before version 6.0(1). A remote attacker can trigger a denial-of-service (core dump and service interruption) by sending malformed packets (Bug ID CSCsh50164). The issue is documented in Cisco’s advisory Cisco Securi...

CVE-2008-1743

The CVE-2008-1743 issue affects Cisco Unified Communications Manager (CUCM) 5.x (before 5.1(3)) and 6.x (before 6.1(1)). It is a memory-leak denial-of-service in the Certificate Trust List (CTL) Provider service triggered by a series of malformed TCP packets, with CTL Provider listening on TCP 24...

CVE-2008-1748

Cisco Unified Communications Manager (CUCM) versions 4.1/4.2/4.3/5.x/6.x suffer a DoS due to improper validation of SIP URLs, exploitable via a crafted SIP INVITE message (Bug CSCsl22355). Affected components include SIP handling; the issue is documented as CVE-2008-1748. The vulnerability may le...

CVE-2008-1158

The Presence Engine PE service in Cisco Unified Presence before 6.01 allows remote attackers to cause a denial of service core dump and service interruption via malformed packets, aka Bug ID CSCsh50164...

CVE-2008-1746

Cisco Unified Communications Manager (CUCM) SNMP Trap Agent is vulnerable to DoS via a sequence of malformed UDP packets. Affected versions: 4.1 before 4.1(3)SR6, 4.2 before 4.2(3)SR3, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1). Root cause as described is a vulnerability in the S...

CVE-2008-1748

Cisco Unified Communications Manager 4.1 before 4.13SR7, 4.2 before 4.23SR4, 4.3 before 4.32, 5.x before 5.13, and 6.x before 6.11 does not properly validate SIP URLs, which allows remote attackers to cause a denial of service service interruption via a SIP INVITE message, aka Bug ID CSCsl22355...

CVE-2008-1744: Improper Input Validation

The Certificate Authority Proxy Function CAPF service in Cisco Unified Communications Manager CUCM 4.1 before 4.13SR7, 4.2 before 4.23SR4, and 4.3 before 4.32 allows remote attackers to cause a denial of service service crash via malformed network traffic, aka Bug ID CSCsk46770...

CVE-2008-1748: Improper Input Validation

Cisco Unified Communications Manager 4.1 before 4.13SR7, 4.2 before 4.23SR4, 4.3 before 4.32, 5.x before 5.13, and 6.x before 6.11 does not properly validate SIP URLs, which allows remote attackers to cause a denial of service service interruption via a SIP INVITE message, aka Bug ID CSCsl22355...

CVE-2008-1743: Undefined Security Weakness

Memory leak in the Certificate Trust List CTL Provider service in Cisco Unified Communications Manager CUCM 5.x before 5.13 and 6.x before 6.11 allows remote attackers to cause a denial of service memory consumption and service interruption via a series of malformed TCP packets, aka Bug ID...

CVE-2008-1740: Improper Input Validation

The Presence Engine PE service in Cisco Unified Presence before 6.01 allows remote attackers to cause a denial of service core dump and service interruption via an unspecified "stress test," aka Bug ID CSCsh20972...