[SECURITY] Fedora 7 Update: evolution-2.10.3-10.fc7

Evolution is the GNOME mailer, calendar, contact manager and communications tool. The tools which make up Evolution will be tightly integrated with one another and act as a seamless personal information-management tool...

[SECURITY] Fedora 8 Update: evolution-2.12.3-5.fc8

Evolution is the GNOME mailer, calendar, contact manager and communications tool. The tools which make up Evolution will be tightly integrated with one another and act as a seamless personal information-management tool...

[SECURITY] Fedora 9 Update: openssl-0.9.8g-9.fc9

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

APOP password recovery vulnerability

Overview POP3 is a protocol for receiving email from mail servers. APOP is an authentication mechanism used by the POP3 protocol. It is reported that APOP passwords could be recovered by third parties. In its successful attack, the attacker spoofs itself as the mail server, provides challenge...

Cisco Unified Communications Manager多个拒绝服务漏洞

BUGTRAQ ID: 29221 CVECAN ID: CVE-2008-1744,CVE-2008-1745,CVE-2008-1746,CVE-2008-1747,CVE-2008-1748,CVE-2008-1742,CVE-2008-1743 Cisco Unified Communications Manager（CUCM，之前被称为CallManager）是Cisco IP电话解决方案中的呼叫处理组件。 CUCM中存在多个拒绝服务漏洞，可能导致语音服务中断。 以下Cisco Unified Communications Manager服务受影响： 证书信任列表（CTL）供应...

Design/Logic Flaw

The Certificate Authority Proxy Function CAPF service in Cisco Unified Communications Manager CUCM 4.1 before 4.13SR7, 4.2 before 4.23SR4, and 4.3 before 4.32 allows remote attackers to cause a denial of service service crash via malformed network traffic, aka Bug ID CSCsk46770...

CVE-2008-1742

Memory leak in the Certificate Trust List CTL Provider service in Cisco Unified Communications Manager CUCM 5.x before 5.13 allows remote attackers to cause a denial of service memory consumption and service interruption via a series of malformed TCP packets, as demonstrated by TCPFUZZ, aka Bug I...

CVE-2008-1747

Unspecified vulnerability in Cisco Unified Communications Manager 4.1 before 4.13SR6, 4.2 before 4.23SR3, 4.3 before 4.32, 5.x before 5.13, and 6.x before 6.11 allows remote attackers to cause a denial of service CCM service restart via an unspecified SIP INVITE message, aka Bug ID CSCsk46944...

CVE-2008-1748

Cisco Unified Communications Manager 4.1 before 4.13SR7, 4.2 before 4.23SR4, 4.3 before 4.32, 5.x before 5.13, and 6.x before 6.11 does not properly validate SIP URLs, which allows remote attackers to cause a denial of service service interruption via a SIP INVITE message, aka Bug ID CSCsl22355...

Code injection

Unspecified vulnerability in Cisco Unified Communications Manager 4.1 before 4.13SR6, 4.2 before 4.23SR3, 4.3 before 4.32, 5.x before 5.13, and 6.x before 6.11 allows remote attackers to cause a denial of service CCM service restart via an unspecified SIP INVITE message, aka Bug ID CSCsk46944...

Code injection

Cisco Unified Communications Manager 4.1 before 4.13SR7, 4.2 before 4.23SR4, 4.3 before 4.32, 5.x before 5.13, and 6.x before 6.11 does not properly validate SIP URLs, which allows remote attackers to cause a denial of service service interruption via a SIP INVITE message, aka Bug ID CSCsl22355...

CVE-2008-1744

The Certificate Authority Proxy Function CAPF service in Cisco Unified Communications Manager CUCM 4.1 before 4.13SR7, 4.2 before 4.23SR4, and 4.3 before 4.32 allows remote attackers to cause a denial of service service crash via malformed network traffic, aka Bug ID CSCsk46770...

CVE-2008-1745

Cisco Unified Communications Manager CUCM 5.x before 5.12 and 6.x before 6.11 allows remote attackers to cause a denial of service service interruption via a SIP JOIN message with a malformed header, aka Bug ID CSCsi48115...

CVE-2008-1746

The SNMP Trap Agent service in Cisco Unified Communications Manager CUCM 4.1 before 4.13SR6, 4.2 before 4.23SR3, 4.3 before 4.32, 5.x before 5.13, and 6.x before 6.11 allows remote attackers to cause a denial of service core dump and service restart via a series of malformed UDP packets, as...

Code injection

The SNMP Trap Agent service in Cisco Unified Communications Manager CUCM 4.1 before 4.13SR6, 4.2 before 4.23SR3, 4.3 before 4.32, 5.x before 5.13, and 6.x before 6.11 allows remote attackers to cause a denial of service core dump and service restart via a series of malformed UDP packets, as...

CVE-2008-1747

Cisco Unified Communications Manager (CUCM) is affected by a denial-of-service vulnerability (CVE-2008-1747) that can be triggered by malformed SIP INVITE messages, potentially causing a CCM service restart. Historically documented for CUCM versions 4.1 before 4.1(3)SR6, 4.2 before 4.2(3)SR3, 4.3...

CVE-2008-1743

The CVE-2008-1743 issue affects Cisco Unified Communications Manager (CUCM) 5.x (before 5.1(3)) and 6.x (before 6.1(1)). It is a memory-leak denial-of-service in the Certificate Trust List (CTL) Provider service triggered by a series of malformed TCP packets, with CTL Provider listening on TCP 24...

CVE-2008-1746

The SNMP Trap Agent service in Cisco Unified Communications Manager CUCM 4.1 before 4.13SR6, 4.2 before 4.23SR3, 4.3 before 4.32, 5.x before 5.13, and 6.x before 6.11 allows remote attackers to cause a denial of service core dump and service restart via a series of malformed UDP packets, as...

CVE-2008-1742

CVE-2008-1742 affects Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3). A memory leak in the Certificate Trust List (CTL) Provider service can be triggered by a sequence of malformed TCP packets, leading to denial of service via memory consumption and service interruption. The CTL Pr...

CVE-2008-1746

Cisco Unified Communications Manager (CUCM) SNMP Trap Agent is vulnerable to DoS via a sequence of malformed UDP packets. Affected versions: 4.1 before 4.1(3)SR6, 4.2 before 4.2(3)SR3, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1). Root cause as described is a vulnerability in the S...