PT-2013-5615

Name of the Vulnerable Software and Affected Versions Cisco Unity Connection affected versions not specified Description A directory traversal issue in the attachment service of the Voice Message Web Service allows remote authenticated users to create files and execute arbitrary JSP code by...

CVE-2013-5534: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the attachment service in the Voice Message Web Service aka VMWS or Cisco Unity Web Service in Cisco Unity Connection allows remote authenticated users to create files, and consequently execute arbitrary JSP code, via a crafted pathname for a file that is not ...

Cisco Unity Connection Directory Traversal Vulnerability

A vulnerability in the attachment service of Cisco Unity Connection, known as Cisco Unity Web Service or as Voice Message Web Service VMWS, could allow an authenticated, remote attacker to place files in arbitrary locations on an affected device. The vulnerability is due to a failure to properly...

Cisco Unity Connection Version

Cisco Unity Connection was found. TRUSTED...

Cisco Unity Connection Administrator Password Bypass (cisco-sa-20120229-cuc)

Cisco Unity Connection before 7.1.3bSu2 / 7.1.5 allows remote, authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70197; scriptversion"1.6";...

Cisco Unity Connection Remote Denial of Service (cisco-sa-20120229-cuc)

Cisco Unity Connection before 7.1.5bSu5, 8.0, 8.5 before 8.5.1Su3, and 8.6 before 8.6.2 allows remote attackers to cause a denial of service services crash via a series of crafted TCP segments, aka Bug ID CSCtq67899. C Tenable Network Security, Inc. include"compat.inc"; if description...

Cisco Unified Communications Manager Blind SQL Injection Vulnerability

A vulnerability in Cisco Unified Communication Manager Unified CM could allow an authenticated, remote attacker to execute a blind Structured Query Language SQL injection. The vulnerability is due to improper validation of user-supplied requests by the Cisco Unified CM. An attacker could exploit...

Cisco Unified Communications Manager Remote Blind SQL Injection Vulnerability

Cisco Unified Communication Manager Unified CM contains a vulnerability that could allow an unauthenticated, remote attacker to execute a blind Structured Query Language SQL injection. The vulnerability is due to improper validation of user-supplied requests by the Cisco Unified CM. An attacker...

CVE-2013-1129

Memory leak in Cisco Unity Connection 9.x allows remote attackers to cause a denial of service memory consumption and process crash by sending many TCP requests, aka Bug ID CSCud59736...

Memory corruption

Memory leak in Cisco Unity Connection 9.x allows remote attackers to cause a denial of service memory consumption and process crash by sending many TCP requests, aka Bug ID CSCud59736...

CVE-2013-1129

Memory leak in Cisco Unity Connection 9.x allows remote attackers to cause a denial of service memory consumption and process crash by sending many TCP requests, aka Bug ID CSCud59736...

CVE-2013-1129

CVE-2013-1129 affects Cisco Unity Connection 9.x, where a memory leak can be triggered by unauthenticated remote attackers sending many TCP requests, leading to memory consumption and eventual process crash (DoS). Cisco advisory CSCud59736 confirms unauthenticated, remote exploitation via crafted...

CVE-2013-1129: Undefined Security Weakness

Memory leak in Cisco Unity Connection 9.x allows remote attackers to cause a denial of service memory consumption and process crash by sending many TCP requests, aka Bug ID CSCud59736...

PT-2013-2899

Name of the Vulnerable Software and Affected Versions Cisco Unity Connection versions 9.x Description A memory leak issue allows remote attackers to cause a denial of service by consuming memory and crashing the process through many TCP requests. Recommendations For Cisco Unity Connection version...

Cisco Unity Connection Memory Leak Denial of Service Vulnerability

Cisco Unity Connection contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to the improper handling of user-supplied requests by the affected software. An unauthenticated, remote attacker could exploit...

CVE-2012-3060

Cisco Unity Connection UC 8.6, 9.0, and 9.5 allows remote attackers to cause a denial of service CPU consumption via malformed UDP packets, aka Bug ID CSCtz76269...

CVE-2012-3096

Cisco Unity Connection UC 7.1, 8.0, and 8.5 allows remote authenticated users to cause a denial of service resource consumption and administration outage via extended use of the product, aka Bug ID CSCtd79132...

Code injection

Cisco Unity Connection UC 8.6, 9.0, and 9.5 allows remote attackers to cause a denial of service CPU consumption via malformed UDP packets, aka Bug ID CSCtz76269...

Code injection

Cisco Unity Connection UC 7.1, 8.0, and 8.5 allows remote authenticated users to cause a denial of service resource consumption and administration outage via extended use of the product, aka Bug ID CSCtd79132...

CVE-2012-3060

Cisco Unity Connection UC 8.6, 9.0, and 9.5 allows remote attackers to cause a denial of service CPU consumption via malformed UDP packets, aka Bug ID CSCtz76269...