CVE-2012-3096

Cisco Unity Connection UC 7.1, 8.0, and 8.5 allows remote authenticated users to cause a denial of service resource consumption and administration outage via extended use of the product, aka Bug ID CSCtd79132...

CVE-2012-3060

CVE-2012-3060 affects Cisco Unity Connection (UC) versions 8.6, 9.0, and 9.5. The vulnerability allows remote attackers to cause a denial of service by sending malformed UDP packets, leading to CPU consumption. The underlying cause is malformed UDP handling in UC that triggers high CPU usage. Pub...

CVE-2012-3096

Cisco Unity Connection (UC) versions 7.1, 8.0, and 8.5 are affected by CVE-2012-3096. The advisory states that remote authenticated users can trigger a denial of service (resource consumption and administration outage) through extended use of the product, identified as Bug ID CSCtd79132. The avai...

CVE-2012-3060: Undefined Security Weakness

Cisco Unity Connection UC 8.6, 9.0, and 9.5 allows remote attackers to cause a denial of service CPU consumption via malformed UDP packets, aka Bug ID CSCtz76269...

PT-2012-4463

Name of the Vulnerable Software and Affected Versions Cisco Unity Connection UC versions 8.6 through 9.5 Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by sending malformed UDP packets. Recommendations For versions 8.6 through 9.5, update...

PT-2012-4472

Name of the Vulnerable Software and Affected Versions Cisco Unity Connection UC versions 7.1, 8.0, and 8.5 Description The issue allows remote authenticated users to cause a denial of service, resulting in resource consumption and administration outage, via extended use of the product...

CVE-2012-3096: Undefined Security Weakness

Cisco Unity Connection UC 7.1, 8.0, and 8.5 allows remote authenticated users to cause a denial of service resource consumption and administration outage via extended use of the product, aka Bug ID CSCtd79132...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unity Connection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unity Connection Advisory ID: cisco-sa-20120229-cuc Revision 1.0 For Public Release 2012 February 29 16:00 UTC GMT +---------------------------------------------------------------------...

Cisco Unity Connection security vulnerabilities

Privilege escalation, crafted TCP packets DoS...

Cisco Unity Connection 7.1远程权限提升漏洞

BUGTRAQ ID: 52216 CVE ID: CVE-2012-0366 Cisco Unity Connection是运行在Linux-based Cisco Unified Communications操作系统上的功能强大的语音消息通讯平台。 Cisco Unity Connection在验证"Help Desk Administrator"和分配权限时在实现上存在安全漏洞，攻击者可利用此漏洞获取完全控制权限 0 Cisco Unity Connection 7.1 厂商补丁： Cisco -----...

CVE-2012-0366

Cisco Unity Connection before 7.1.3bSu2 allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141...

CVE-2012-0367

Cisco Unity Connection before 7.1.5bSu5, 8.0 and 8.5 before 8.5.1Su3, and 8.6 before 8.6.2 allows remote attackers to cause a denial of service services crash via a series of crafted TCP segments, aka Bug ID CSCtq67899...

Design/Logic Flaw

Cisco Unity Connection before 7.1.3bSu2 allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141...

Code injection

Cisco Unity Connection before 7.1.5bSu5, 8.0 and 8.5 before 8.5.1Su3, and 8.6 before 8.6.2 allows remote attackers to cause a denial of service services crash via a series of crafted TCP segments, aka Bug ID CSCtq67899...

CVE-2012-0366

Cisco Unity Connection before 7.1.3bSu2 allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141...

CVE-2012-0367

Cisco Unity Connection before 7.1.5bSu5, 8.0 and 8.5 before 8.5.1Su3, and 8.6 before 8.6.2 allows remote attackers to cause a denial of service services crash via a series of crafted TCP segments, aka Bug ID CSCtq67899...

CVE-2012-0366

Cisco Unity Connection (Linux-based platform) prior to versions 7.1.3b(Su2) and 7.1.5 is affected by CVE-2012-0366, a privilege-escalation vulnerability where an authenticated user with the Help Desk Administrator role can change the administrative password, gaining full control. The issue stems ...

CVE-2012-0367

Cisco Unity Connection is affected by CVE-2012-0367, a remote denial of service caused by the improper handling of TCP segments. Affected versions include: Privilege Escalation vulnerability: prior to 7.1, 7.1, and 8.0/8.5/8.6 are listed in Cisco advisories as affected for the related issue, with...

CVE-2012-0366: Undefined Security Weakness

Cisco Unity Connection before 7.1.3bSu2 allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141...

CVE-2012-0367: Undefined Security Weakness

Cisco Unity Connection before 7.1.5bSu5, 8.0 and 8.5 before 8.5.1Su3, and 8.6 before 8.6.2 allows remote attackers to cause a denial of service services crash via a series of crafted TCP segments, aka Bug ID CSCtq67899...