Ubuntu 8.04 LTS / 8.10 / 9.04 : qt4-x11 vulnerability (USN-829-1)

It was discovered that Qt did not properly handle certificates with NULL characters in the Subject Alternative Name field of X.509 certificates. An attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. CVE-2009-2700. Not...

cman security, bug fix, and enhancement update

2.0.115-1 - RSA II fencing agent has been fixed. - Resolves: rhbz493802 2.0.114-1 - local variable 'verbosefilename' referenced before assignment has been fixed - RSA II fencing agent has been fixed. - Resolves: rhbz493802 rhbz514758 2.0.113-1 - Limitations with 2-node fencescsi are now properly...

CVE-2009-2052

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, 7.0 before 7.02, and 7.1 before 7.12; and Cisco Unified Presence 1.x, 6.x before 6.06, and 7.x before 7.04; allows remote attackers to cause a denial of service TCP services outage via a...

CVE-2009-2054

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, 7.0 before 7.02asu1, and 7.1 before 7.12asu1 allows remote attackers to cause a denial of service file-descriptor exhaustion and SIP outage via a flood of TCP packets, aka Bug ID CSCsx23689...

CVE-2009-2053

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, 7.0 before 7.02asu1, and 7.1 before 7.12 allows remote attackers to cause a denial of service file-descriptor exhaustion and SCCP outage via a flood of TCP packets, aka Bug ID CSCsx32236...

Design/Logic Flaw

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, 7.0 before 7.02asu1, and 7.1 before 7.12asu1 allows remote attackers to cause a denial of service file-descriptor exhaustion and SIP outage via a flood of TCP packets, aka Bug ID CSCsx23689...

Code injection

Cisco Unified Communications Manager aka CUCM, formerly CallManager before 6.11 allows remote attackers to cause a denial of service voice-services outage via a malformed header in a SIP message, aka Bug ID CSCsi46466...

Code injection

Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, and 7.x before 7.12 allow remote attackers to cause a denial of service device reload or...

Code injection

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, 7.0 before 7.02, and 7.1 before 7.12; and Cisco Unified Presence 1.x, 6.x before 6.06, and 7.x before 7.04; allows remote attackers to cause a denial of service TCP services outage via a...

CVE-2009-2050

Cisco Unified Communications Manager aka CUCM, formerly CallManager before 6.11 allows remote attackers to cause a denial of service voice-services outage via a malformed header in a SIP message, aka Bug ID CSCsi46466...

CVE-2009-2051

Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, and 7.x before 7.12 allow remote attackers to cause a denial of service device reload or...

CVE-2009-2051

Summary: CVE-2009-2051 affects Cisco IOS (12.2–12.4, 15.0–15.1), Cisco IOS XE 2.5.x–2.6.x before 2.6.1, and CUCM 4.x–7.x, enabling remote attackers to trigger a DoS (device reload/voice-services outage) via a malformed SIP INVITE that calls sipSafeStrlen and overflows into a crash. The issue is d...

CVE-2009-2050

CVE-2009-2050 concerns Cisco Unified Communications Manager (CUCM, formerly CallManager). The issue allows a remote attacker to cause a denial-of-service (voice-services outage) by sending a malformed header in a SIP message (Bug CSCsi46466). Affected products are CUCM before version 6.1(1), with...

CVE-2009-2050

Cisco Unified Communications Manager aka CUCM, formerly CallManager before 6.11 allows remote attackers to cause a denial of service voice-services outage via a malformed header in a SIP message, aka Bug ID CSCsi46466...

CVE-2009-2051

Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, and 7.x before 7.12 allow remote attackers to cause a denial of service device reload or...

CVE-2009-2054

CVE-2009-2054 affects Cisco Unified Communications Manager (CUCM) 4.x, 5.x (before 5.1(3g)), 6.x (before 6.1(4)), 7.0 (before 7.0(2a)su1) and 7.1 (before 7.1(2a)su1). It enables remote attackers to cause a denial of service via a flood of TCP packets, leading to file-descriptor exhaustion and SIP...

CVE-2009-2053

Cisco Unified Communications Manager (CUCM) is affected by CVE-2009-2053 via a DoS vulnerability in the SCCP path: a flood of TCP packets can exhaust file descriptors and cause SCCP outages. Affected versions include CUCM 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2a)su1, and 7.1 ...

CVE-2009-2053

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, 7.0 before 7.02asu1, and 7.1 before 7.12 allows remote attackers to cause a denial of service file-descriptor exhaustion and SCCP outage via a flood of TCP packets, aka Bug ID CSCsx32236...

CVE-2009-2052

CVE-2009-2052 affects Cisco Unified Communications Manager (CUCM) and Cisco Unified Presence. The DoS arises from the embedded firewall’s connection-tracking table being overwhelmed by many TCP connections, potentially interrupting system services. Affected CUCM versions: 4.x; 5.x up to 5.1(3g); ...

Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities Advisory ID: cisco-sa-20090826-cucm Revision 1.0 For Public Release 2009 August 26 1600 UTC GMT...