Voice Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Unified MeetingPlace Web Conferencing crossite scripting

No description provided...

Cisco Security Advisory: Cisco IOS Secure Copy Authorization Bypass Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Secure Copy Authorization Bypass Vulnerability Advisory ID: cisco-sa-20070808-scp http://www.cisco.com/warp/public/707/cisco-sa-20070808-scp.shtml Revision 1.0 For Public Release 2007 August 08 1600 UTC GMT -...

Code injection

Unspecified vulnerability in Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allows remote attackers to cause a denial of service loss of cluster services via unspecified vectors, aka 1 CSCsj09859 and 2 CSCsj19985...

CVE-2007-3776

Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allow remote attackers to obtain sensitive information via unspecified vectors that reveal the SNMP community strings and configuration settings, aka 1 CSCsj20668 and 2 CSCsj25962...

CVE-2006-5278

Integer overflow in the Real-Time Information Server RIS Data Collector service RisDC.exe in Cisco Unified Communications Manager CUCM, formerly CallManager before 20070711 allow remote attackers to execute arbitrary code via crafted packets, resulting in a heap-based buffer overflow...

CVE-2007-3775

Unspecified vulnerability in Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allows remote attackers to cause a denial of service loss of cluster services via unspecified vectors, aka 1 CSCsj09859 and 2 CSCsj19985...

Design/Logic Flaw

Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allow remote attackers to obtain sensitive information via unspecified vectors that reveal the SNMP community strings and configuration settings, aka 1 CSCsj20668 and 2 CSCsj25962...

CVE-2007-3775

CVE-2007-3775 affects Cisco Unified Communications Manager (CUCM, formerly CallManager) and Unified Presence Server (CUPS). The available documents describe an unspecified vulnerability that allows remote attackers to cause a denial of service (loss of cluster services). The exact vulnerable comp...

CVE-2007-3775

Unspecified vulnerability in Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allows remote attackers to cause a denial of service loss of cluster services via unspecified vectors, aka 1 CSCsj09859 and 2 CSCsj19985...

CVE-2007-3776

Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allow remote attackers to obtain sensitive information via unspecified vectors that reveal the SNMP community strings and configuration settings, aka 1 CSCsj20668 and 2 CSCsj25962...

CVE-2006-5278

Integer overflow in the Real-Time Information Server RIS Data Collector service RisDC.exe in Cisco Unified Communications Manager CUCM, formerly CallManager before 20070711 allow remote attackers to execute arbitrary code via crafted packets, resulting in a heap-based buffer overflow...

CVE-2007-3776

CVE-2007-3776 affects Cisco Unified Communications Manager (CUCM) and Unified Presence Server (CUPS). The issue is an information disclosure vulnerability where remote attackers can obtain sensitive data (SNMP community strings and configuration settings) through unspecified vectors. The sources ...

CVE-2006-5277

Off-by-one error in the Certificate Trust List CTL Provider service CTLProvider.exe in Cisco Unified Communications Manager CUCM, formerly CallManager before 20070711 allow remote attackers to execute arbitrary code via a crafted packet that triggers a heap-based buffer overflow...

CVE-2006-5277

Off-by-one error in the Certificate Trust List CTL Provider service CTLProvider.exe in Cisco Unified Communications Manager CUCM, formerly CallManager before 20070711 allow remote attackers to execute arbitrary code via a crafted packet that triggers a heap-based buffer overflow...

CVE-2006-5277

CVE-2006-5277 affects Cisco Unified Communications Manager (CUCM) prior to 20070711, due to an off-by-one error in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) that can trigger a heap-based buffer overflow. The vulnerability could allow a remote attacker to execute arbitrar...

PT-2007-5024 · Esoft · Esoft Instagate Ex2 Utm

Name of the Vulnerable Software and Affected Versions: eSoft InstaGate EX2 UTM device versions prior to 3.1.20070615 Description: A cross-site request forgery CSRF issue allows remote attackers to perform privileged actions as administrators. The vendor disputes the distribution of the vulnerable...

CVE-2007-3776: Undefined Security Weakness

Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allow remote attackers to obtain sensitive information via unspecified vectors that reveal the SNMP community strings and configuration settings, aka 1 CSCsj20668 and 2 CSCsj25962...

CVE-2006-5278: Undefined Security Weakness

Integer overflow in the Real-Time Information Server RIS Data Collector service RisDC.exe in Cisco Unified Communications Manager CUCM, formerly CallManager before 20070711 allow remote attackers to execute arbitrary code via crafted packets, resulting in a heap-based buffer overflow...

CVE-2007-3775: Undefined Security Weakness

Unspecified vulnerability in Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allows remote attackers to cause a denial of service loss of cluster services via unspecified vectors, aka 1 CSCsj09859 and 2 CSCsj19985...