CVE-2009-1998

Unspecified vulnerability in the Oracle Communications Order and Service Management component in Oracle Industry Applications 2.8.0, 6.2.0, 6.3.0, and 6.3.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2009-1998

Unspecified vulnerability in the Oracle Communications Order and Service Management component in Oracle Industry Applications 2.8.0, 6.2.0, 6.3.0, and 6.3.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2009-1998

CVE-2009-1998 affects Oracle Communications Order and Service Management in Oracle Industry Applications versions 2.8.0, 6.2.0, 6.3.0 and 6.3.1. The vulnerability is described as an unspecified issue that allows remote authenticated users to affect confidentiality and integrity via unknown vector...

Cisco Unified Communications Manager / Cisco Unified Presence DoS

Multiple Denial of Service conditions on SIP and Skinny processing...

USN-842-1: Wget vulnerability

It was discovered that Wget did not correctly handle SSL certificates with zero bytes in the Common Name. A remote attacker could exploit this to perform a machine-in-the-middle attack to view sensitive information or alter encrypted communications...

CVE-2009-2864

Cisco Unified Communications Manager aka CUCM, formerly CallManager 5.x before 5.13g, 6.x before 6.14, 7.0.x before 7.02asu1, and 7.1.x before 7.12 allows remote attackers to cause a denial of service service restart via malformed SIP messages, aka Bug ID CSCsz95423...

Buffer overflow

Buffer overflow in the login implementation in the Extension Mobility feature in the Unified Communications Manager Express CME component in Cisco IOS 12.4XW, 12.4XY, 12.4XZ, and 12.4YA allows remote attackers to execute arbitrary code or cause a denial of service via crafted HTTP requests, aka B...

Code injection

Cisco Unified Communications Manager aka CUCM, formerly CallManager 5.x before 5.13g, 6.x before 6.14, 7.0.x before 7.02asu1, and 7.1.x before 7.12 allows remote attackers to cause a denial of service service restart via malformed SIP messages, aka Bug ID CSCsz95423...

CVE-2009-2864

Cisco Unified Communications Manager (CUCM) versions affected: 5.x before 5.1(3g); 6.x before 6.1(4); 7.0.x before 7.0(2a)su1; 7.1.x before 7.1(2). Root cause is a denial-of-service in the SIP handling that can crash/restart the CM process when processing crafted SIP messages. CVSS base score in ...

CVE-2009-2864

Cisco Unified Communications Manager aka CUCM, formerly CallManager 5.x before 5.13g, 6.x before 6.14, 7.0.x before 7.02asu1, and 7.1.x before 7.12 allows remote attackers to cause a denial of service service restart via malformed SIP messages, aka Bug ID CSCsz95423...

Cisco Plugs Holes in IOS Software

Cisco has released a peck of patches to cover multiple security flaws in its flagship Cisco IOS originally Internetwork Operating System, warning that the bugs exposes businesses to denial-of-service or policy bypass attacks. In all, the networking vendor released 10 advisories covering Cisco IOS...

Cisco Security Advisory: Cisco Unified Communications Manager Express Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager Express Vulnerability Advisory ID: cisco-sa-20090923-cme Revision 1.0 For Public Release 2009 September 23 +--------------------------------------------------------------------- Summary...

Cisco Unified Communications Manager DoS

Crash on SIP request handling...

Cisco Security Advisory: Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerability Advisory ID: cisco-sa-20090923-cm Revision 1.0 For Public Release 2009 September 23...

Cisco IOS Software Network Time Protocol Packet Vulnerability

Cisco IOS® Software with support for Network Time Protocol NTP version v4 contains a vulnerability processing specific NTP packets that will result in a reload of the device. This results in a remote denial of service DoS condition on the affected device. Cisco has released software updates that...

Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Unified Communications Manager Express Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

USN-835-1: neon vulnerabilities

Joe Orton discovered that neon did not correctly handle SSL certificates with zero bytes in the Common Name. A remote attacker could exploit this to perform a machine-in-the-middle attack to view sensitive information or alter encrypted communications...

Ubuntu 8.04 LTS / 8.10 / 9.04 : kde4libs, kdelibs vulnerability (USN-833-1)

It was discovered that KDE did not properly handle certificates with NULL characters in the Subject Alternative Name field of X.509 certificates. An attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. Note that Tenable...

USN-833-1: KDE-Libs vulnerability

It was discovered that KDE did not properly handle certificates with NULL characters in the Subject Alternative Name field of X.509 certificates. An attacker could exploit this to perform a machine-in-the-middle attack to view sensitive information or alter encrypted communications...