Cisco CallManager 4.2 / CUCM 4.2 - Logon Page 'lang' SQL Injection

source: https://www.securityfocus.com/bid/25480/info Cisco Unified CallManager and Unified Communications Manager are prone to multiple input-validation vulnerabilities because the applications fail to properly sanitize user-supplied input. These issues include a cross-site scripting vulnerabilit...

Motive Communications ActiveUtils EmailData ActiveX control stack buffer overflows

Overview The Motive Communications ActiveUtils EmailData ActiveX control contains multiple stack buffer overflows, which could allow an attacker to execute arbitrary code on a vulnerable system. Description Motive Communications ActiveUtils is a software package used by multiple ISPs to provide...

CVE-2007-4294

Unspecified vulnerability in Cisco Unified Communications Manager CUCM 5.0, 5.1, and 6.0, and IOS 12.0 through 12.4, allows remote attackers to execute arbitrary code via a malformed SIP packet, aka CSCsi80102...

CVE-2007-4294

Unspecified vulnerability in Cisco Unified Communications Manager CUCM 5.0, 5.1, and 6.0, and IOS 12.0 through 12.4, allows remote attackers to execute arbitrary code via a malformed SIP packet, aka CSCsi80102...

CVE-2007-4294

CVE-2007-4294 describes an unspecified vulnerability in Cisco Unified Communications Manager (CUCM) 5.0, 5.1, 6.0 and Cisco IOS 12.0–12.4 that allows remote code execution via a malformed SIP packet (CSCsi80102). The connected documents confirm affected products and versions and that exploitation...

[Full-disclosure] Cisco Security Advisory: Voice Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager

Cisco Security Advisory: Voice Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager Advisory ID: cisco-sa-20070808-IOS-voice http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-voice.shtml Revision 1.0 For Public Release 2007 August 08 1600 UTC GMT -...

Voice Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Atheros无线驱动拒绝服务漏洞

BUGTRAQ ID: 25160 CVE ID:CVE-2007-2927 CNCVE ID:CNCVE-20072927 Atheros Wireless Drivers是一款无线网卡的驱动程序。 部分版本的Atheros 802.11 a/b/g无线适配器版本不正确处理畸形报文，远程攻击者可以利用漏洞对驱动进行拒绝服务攻击。 问题是由于驱动不正确处理管理帧，在频率范围的攻击者可以通过发送畸形802.11管理帧来触发溢出，导致设备驱动崩溃。 Atheros Communications Wireless Driver 802.11 a/b/g 0 可联系供应商获得最新的程序：...

Cisco Security Advisory: Cisco IOS Secure Copy Authorization Bypass Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Secure Copy Authorization Bypass Vulnerability Advisory ID: cisco-sa-20070808-scp http://www.cisco.com/warp/public/707/cisco-sa-20070808-scp.shtml Revision 1.0 For Public Release 2007 August 08 1600 UTC GMT -...

[SECURITY] Fedora 7 Update: openssl-0.9.8b-14.fc7

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

Panda AdminSecure Communications Agent < 4.2 Packet Handling Remote Heap Overflow

The Panda AdminSecure Communications Agent software, which is used for centralized management of Panda Antivirus, is installed on the remote Windows host. The version of Communications Agent on the remote host trusts a user-supplied length value for a memory allocation when processing traffic to...

Panda AdminSecure Communications Agent Detection

The remote service is a Communications Agent, which manages communications between Panda AdminSecure and client computers for centralized management of Panda antivirus software. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if...

Design/Logic Flaw

Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allow remote attackers to obtain sensitive information via unspecified vectors that reveal the SNMP community strings and configuration settings, aka 1 CSCsj20668 and 2 CSCsj25962...

CVE-2007-3775

Unspecified vulnerability in Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allows remote attackers to cause a denial of service loss of cluster services via unspecified vectors, aka 1 CSCsj09859 and 2 CSCsj19985...

Code injection

Unspecified vulnerability in Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allows remote attackers to cause a denial of service loss of cluster services via unspecified vectors, aka 1 CSCsj09859 and 2 CSCsj19985...

CVE-2006-5278

Integer overflow in the Real-Time Information Server RIS Data Collector service RisDC.exe in Cisco Unified Communications Manager CUCM, formerly CallManager before 20070711 allow remote attackers to execute arbitrary code via crafted packets, resulting in a heap-based buffer overflow...

CVE-2007-3776

Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allow remote attackers to obtain sensitive information via unspecified vectors that reveal the SNMP community strings and configuration settings, aka 1 CSCsj20668 and 2 CSCsj25962...

CVE-2006-5278

Integer overflow in the Real-Time Information Server RIS Data Collector service RisDC.exe in Cisco Unified Communications Manager CUCM, formerly CallManager before 20070711 allow remote attackers to execute arbitrary code via crafted packets, resulting in a heap-based buffer overflow...

CVE-2007-3776

Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allow remote attackers to obtain sensitive information via unspecified vectors that reveal the SNMP community strings and configuration settings, aka 1 CSCsj20668 and 2 CSCsj25962...

CVE-2007-3775

Unspecified vulnerability in Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allows remote attackers to cause a denial of service loss of cluster services via unspecified vectors, aka 1 CSCsj09859 and 2 CSCsj19985...