Cisco CallManager 3.x4.x - Web Interface ccmadminphonelist.asp?Pattern Cross-Site Scripting

Cisco CallManager 3.x4.x - Web Interface ccmadminphonelist.asp?Pattern Cross-Site Scripting source: https://www.securityfocus.com/bid/18504/info Cisco CallManager is prone to a cross-site scripting vulnerability. This issue is due to a failure in the web-interface to properly sanitize user-suppli...

Cisco CallManager 3.x/4.x - 'Web Interface 'ccmuser/logon.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18504/info Cisco CallManager is prone to a cross-site scripting vulnerability. This issue is due to a failure in the web-interface to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the...

CVE-2006-2369

RealVNC 4.1.1, and other products that use RealVNC such as AdderLink IP and Cisco CallManager, allows remote attackers to bypass authentication via a request in which the client specifies an insecure security type such as "Type 1 - None", which is accepted even if it is not offered by the server,...

CVE-2006-2369: Improper Authentication

RealVNC 4.1.1, and other products that use RealVNC such as AdderLink IP and Cisco CallManager, allows remote attackers to bypass authentication via a request in which the client specifies an insecure security type such as "Type 1 - None", which is accepted even if it is not offered by the server,...

PT-2006-3333 · Realvnc +2 · Realvnc +2

Name of the Vulnerable Software and Affected Versions: RealVNC version 4.1.1 AdderLink IP affected versions not specified Cisco CallManager affected versions not specified Description: The issue allows remote attackers to bypass authentication by specifying an insecure security type, such as Type...

TFTP File Detection (Cisco CallManager) - Active Check

The remote host has a TFTP server installed that is serving one or more Cisco CallManager files. SPDX-FileCopyrightText: 2005 Corsaire Limited Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Memory corruption

Cisco CallManager 3.2 and earlier, 3.3 before 3.35SR1, 4.0 before 4.02aSR2c, and 4.1 before 4.13SR2 allow remote attackers to 1 cause a denial of service CPU and memory consumption via a large number of open TCP connections to port 2000 and 2 cause a denial of service fill the Windows Service...

CVE-2006-0368

Cisco CallManager 3.2 and earlier, 3.3 before 3.35SR1, 4.0 before 4.02aSR2c, and 4.1 before 4.13SR2 allow remote attackers to 1 cause a denial of service CPU and memory consumption via a large number of open TCP connections to port 2000 and 2 cause a denial of service fill the Windows Service...

CVE-2006-0367

Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.35SR1, 4.0 before 4.02aSR2c, and 4.1 before 4.13SR2 allows remote authenticated users with read-only administrative privileges to obtain full administrative privileges via a "crafted URL on the CCMAdmin web page."...

Design/Logic Flaw

Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.35SR1, 4.0 before 4.02aSR2c, and 4.1 before 4.13SR2 allows remote authenticated users with read-only administrative privileges to obtain full administrative privileges via a "crafted URL on the CCMAdmin web page."...

CVE-2006-0368

CVE-2006-0368 affects Cisco CallManager versions 3.2 and earlier; 3.3 before 3.3(5)SR1; 4.0 before 4.0(2a)SR2c; and 4.1 before 4.1(3)SR2. It enables remote attackers to cause denial of service by opening a large number of TCP connections to port 2000 (CPU/memory consumption) and to ports 2001, 20...

CVE-2006-0368

Cisco CallManager 3.2 and earlier, 3.3 before 3.35SR1, 4.0 before 4.02aSR2c, and 4.1 before 4.13SR2 allow remote attackers to 1 cause a denial of service CPU and memory consumption via a large number of open TCP connections to port 2000 and 2 cause a denial of service fill the Windows Service...

CVE-2006-0367

Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.35SR1, 4.0 before 4.02aSR2c, and 4.1 before 4.13SR2 allows remote authenticated users with read-only administrative privileges to obtain full administrative privileges via a "crafted URL on the CCMAdmin web page."...

CVE-2006-0367

CVE-2006-0367 affects Cisco CallManager up to versions 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2. The issue is a privilege-escalation vulnerability where remote authenticated users with read-only administrative privileges can obtain full admin privile...

CVE-2006-0367: Undefined Security Weakness

Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.35SR1, 4.0 before 4.02aSR2c, and 4.1 before 4.13SR2 allows remote authenticated users with read-only administrative privileges to obtain full administrative privileges via a "crafted URL on the CCMAdmin web page."...

CVE-2006-0368: Undefined Security Weakness

Cisco CallManager 3.2 and earlier, 3.3 before 3.35SR1, 4.0 before 4.02aSR2c, and 4.1 before 4.13SR2 allow remote attackers to 1 cause a denial of service CPU and memory consumption via a large number of open TCP connections to port 2000 and 2 cause a denial of service fill the Windows Service...

Cisco Security Advisory: Cisco Call Manager Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Call Manager Denial of Service Advisory ID: cisco-sa-20060118-ccmdos http://www.cisco.com/warp/public/707/cisco-sa-20060118-ccmdos.shtml Revision 1.0 ============ For Public Release 2006 January 18 1600 UTC GMT -...

[VulnWatch] Cisco Security Advisory: Cisco Call Manager Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Call Manager Privilege Escalation Advisory ID: cisco-sa-20060118-ccmpe http://www.cisco.com/warp/public/707/cisco-sa-20060118-ccmpe.shtml Revision 1.0 ============ For Public Release 2006 January 18 1600 UTC GMT -...

Cisco Security Advisory: Cisco Security Agent Vulnerable to Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Security Agent Vulnerable to Privilege Escalation ===================================================================== Advisory ID: cisco-sa-20051129-csa http://www.cisco.com/warp/public/707/cisco-sa-20051129-csa.shtml...

Cisco CallManager TFTP File Detection

The remote host has a TFTP server installed that is serving one or more Cisco CallManager files. These files do not themselves include any sensitive information, but do identify the TFTP server as being part of a Cisco CallManager environment. The CCM TFTP server is an essential part of providing...