CVE-2011-1604

Memory leak in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su3, 7.x before 7.15bsu3, 8.0 before 8.03asu2, and 8.5 before 8.51 allows remote attackers to cause a denial of service memory consumption and process failure via a malformed SIP message, aka Bug ID...

CVE-2011-1604

The CVE-2011-1604 issue affects Cisco Unified Communications Manager (CUCM) 6.x, 7.x, 8.0, and 8.5, where a memory leak triggered by malformed SIP messages can cause DoS (memory consumption and process failure). Cisco’s advisory fixes this in CUCM versions 6.1(5)SU3, 7.1(5b)SU3, 8.0(3a)SU2, and 8...

CVE-2011-1606

Unspecified vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15su1, 8.0 before 8.03, and 8.5 before 8.51 allows remote attackers to cause a denial of service process failure via a malformed SIP message, aka Bug ID CSCtg62855...

CVE-2011-1606

Cisco Unified Communications Manager (CUCM) 6.x–8.x is affected by CVE-2011-1606, a DoS in SIP processing triggered by malformed SIP messages. According to Cisco’s advisory, the vulnerability is fixed in CUCM releases 6.1(5)su3, 7.1(5b)su4, 8.0(3a)su2, and 8.5(1)su1. The issue can cause a process...

CVE-2011-1610

CVE-2011-1610 affects Cisco Unified Communications Manager (CUCM) where the embedded Apache HTTP Server exposes xmldirectorylist.jsp. The vulnerability arises from improper validation of parameters (f, l, n) passed to the JSP, enabling a remote, unauthenticated attacker to inject and execute arbi...

Hacker posts screenshot of sex video on SPAD website !

Hacker posts screenshot of sex video on SPAD website ! The Land Public Transport Commission SPAD website was hacked yesterday and a screenshot of the controversial sex video allegedly involving a top politician was posted on its main page. Appearing on the website were two images, one depicting t...

[SECURITY] Fedora 13 Update: mingw32-openssl-1.0.0-0.7.beta4.fc13

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols. This package contains Windows MinGW libraries and development tools...

Cisco Unified Communications Manager multiple security vulnerabilities

DoS via SIP, directory traversal, SQL injection...

[SECURITY] Fedora 15 Update: mingw32-openssl-1.0.0d-1.fc15

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols. This package contains Windows MinGW libraries and development tools...

Vulnerabilities in Cisco's Unified Communications Manager

Cisco published an advisory report yesterday detailing multiple vulnerabilities in there Unified Communications Manager. There are three denial of service vulnerabilities that affect session initiation protocol services, two SQL injection vulnerabilities, and a directory transversal vulnerability...

Cisco Releases Security Advisory for Cisco Unified Communications Manager

Cisco has released a security advisory to address multiple vulnerabilities in Cisco Unified Communications Manager. These vulnerabilities may allow an attacker to perform SQL injection attacks, conduct directory traversal attacks, or cause a denial-of-service condition. US-CERT encourages users a...

Multiple Vulnerabilities in Cisco Unified Communications Manager

...

Cisco Unified Communications Manager 8.5 - 'xmldirectorylist.jsp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/47607/info Cisco Unified Communications Manager is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an authenticated attacker to...

Cisco Unified Communications Manager 8.5 - xmldirectorylist.jsp Multiple SQL Injections

Cisco Unified Communications Manager 8.5 - xmldirectorylist.jsp Multiple SQL Injections source: https://www.securityfocus.com/bid/47607/info Cisco Unified Communications Manager is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before...

Nortel CS1000 Communications Server Remote Denial of Service Vulnerability

This vulnerability allows remote attackers to create a denial of service condition on vulnerable installations of Nortel CS1000 Communication Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the process listening on UDP port 5100. When parsing ...

[USN-1110-1] KDE-Libs vulnerabilities

========================================================================== Ubuntu Security Notice USN-1110-1 April 14, 2011 kde4libs vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : nss vulnerabilities (USN-1106-1)

It was discovered that several invalid HTTPS certificates were issued and revoked. An attacker could exploit these to perform a man in the middle attack to view sensitive information or alter encrypted communications. These certificates were marked as explicitly not trusted to prevent their misus...

USN-1106-1: NSS vulnerabilities

It was discovered that several invalid HTTPS certificates were issued and revoked. An attacker could exploit these to perform a machine-in-the-middle attack to view sensitive information or alter encrypted communications. These certificates were marked as explicitly not trusted to prevent their...

Ubuntu Update for qt4-x11 vulnerabilities USN-1101-1

Ubuntu Update for Linux kernel vulnerabilities USN-1101-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11011.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for qt4-x11 vulnerabilities USN-1101-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

Rich Mogull on the RSA Attack and the Epsilon Breach

Dennis Fisher talks with Rich Mogull of Securosis about the fallout from the RSA attack, the way that the communications with the public and customers are being handled and the effects of the email breach at Epsilon. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast ...