CVE-2011-1643

Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x, 7.x before 7.15bsu4, 8.0, and 8.5 before 8.51su2 and Cisco Unified Presence Server 6.x, 7.x, 8.0, and 8.5 before 8.5xnr allow remote attackers to read database data by connecting to a query interface through an SSL session,...

Code injection

Unspecified vulnerability in the Service Advertisement Framework SAF in Cisco Unified Communications Manager aka CUCM, formerly CallManager 8.x before 8.51 and Cisco Intercompany Media Engine 8.x before 8.51 allows remote attackers to cause a denial of service device reload via crafted SAF packet...

Code injection

The SIP process in Cisco Unified Communications Manager aka CUCM, formerly CallManager 7.x before 7.15bsu4 and 8.x before 8.01 does not properly handle SDP data within a SIP call in certain situations related to use of the g729ar8 codec for a Media Termination Point MTP, which allows remote...

Code injection

Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x, 7.x before 7.15bsu4, 8.0, and 8.5 before 8.51su2 and Cisco Unified Presence Server 6.x, 7.x, 8.0, and 8.5 before 8.5xnr allow remote attackers to read database data by connecting to a query interface through an SSL session,...

Code injection

Unspecified vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15bsu3, 8.x before 8.03asu1, and 8.5 before 8.51 allows remote attackers to cause a denial of service service outage via a SIP INVITE message, aka Bug ID CSCth43256...

Design/Logic Flaw

Unspecified vulnerability in the Service Advertisement Framework SAF in Cisco Unified Communications Manager aka CUCM, formerly CallManager 8.x before 8.51 and Cisco Intercompany Media Engine 8.x before 8.51 allows remote attackers to cause a denial of service device reload via crafted SAF packet...

CVE-2011-1643

Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x, 7.x before 7.15bsu4, 8.0, and 8.5 before 8.51su2 and Cisco Unified Presence Server 6.x, 7.x, 8.0, and 8.5 before 8.5xnr allow remote attackers to read database data by connecting to a query interface through an SSL session,...

CVE-2011-2564

Unspecified vulnerability in the Service Advertisement Framework SAF in Cisco Unified Communications Manager aka CUCM, formerly CallManager 8.x before 8.51 and Cisco Intercompany Media Engine 8.x before 8.51 allows remote attackers to cause a denial of service device reload via crafted SAF packet...

CVE-2011-2561

Cisco Unified Communications Manager (CUCM) 7.x prior to 7.1(5b)su4 and 8.x prior to 8.0(1) is vulnerable in its SIP processing when handling SDP data during SIP calls using the g729ar8 codec for a Media Termination Point (MTP). The flaw, tracked as Bug CSCtc61990, can allow remote attackers to c...

CVE-2011-2564

CVE-2011-2564 affects Cisco Unified Communications Manager (CUCM) 8.x before 8.5(1) and Cisco Intercompany Media Engine (IME) 8.x before 8.5(1). The vulnerability allows an unauthenticated attacker to cause a denial of service (device reload) by sending crafted Service Advertisement Framework (SA...

CVE-2011-1643

CVE-2011-1643 affects Cisco Unified Communications Manager (CUCM) and Cisco Unified Presence Server. Affected CUCM versions: 6.x, 7.x before 7.1(5b)su4, 8.0, and 8.5 before 8.5(1)su2; Presence Server: 6.x, 7.x, 8.0, and 8.5 before 8.5xnr. Root cause: an open query interface could disclose databas...

CVE-2011-2563

CVE-2011-2563 describes a DoS vulnerability in Cisco’s Service Advertisement Framework (SAF) affecting Cisco Unified Communications Manager (CUCM, 8.x before 8.5(1)) and Cisco Intercompany Media Engine (IME, 8.x before 8.5(1). An unauthenticated remote attacker can send crafted SAF packets, causi...

CVE-2011-2560

The Packet Capture Service in Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x does not properly handle idle TCP connections, which allows remote attackers to cause a denial of service memory consumption and restart by making many connections, aka Bug ID CSCtf97162...

CVE-2011-2562

Unspecified vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15bsu3, 8.x before 8.03asu1, and 8.5 before 8.51 allows remote attackers to cause a denial of service service outage via a SIP INVITE message, aka Bug ID CSCth43256...

CVE-2011-2563: Undefined Security Weakness

Unspecified vulnerability in the Service Advertisement Framework SAF in Cisco Unified Communications Manager aka CUCM, formerly CallManager 8.x before 8.51 and Cisco Intercompany Media Engine 8.x before 8.51 allows remote attackers to cause a denial of service device reload via crafted SAF packet...

CVE-2011-1643: Exposure of Sensitive Information to an Unauthorized Actor

Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x, 7.x before 7.15bsu4, 8.0, and 8.5 before 8.51su2 and Cisco Unified Presence Server 6.x, 7.x, 8.0, and 8.5 before 8.5xnr allow remote attackers to read database data by connecting to a query interface through an SSL session,...

PT-2011-3932

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 8.0 through 8.51 Cisco Intercompany Media Engine versions 8.0 through 8.51 Description The issue is related to an unspecified vulnerability in the Service Advertisement Framework SAF that allows...

CVE-2011-2561: Undefined Security Weakness

The SIP process in Cisco Unified Communications Manager aka CUCM, formerly CallManager 7.x before 7.15bsu4 and 8.x before 8.01 does not properly handle SDP data within a SIP call in certain situations related to use of the g729ar8 codec for a Media Termination Point MTP, which allows remote...

PT-2011-3933

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 8.0 through 8.51 Cisco Intercompany Media Engine versions 8.0 through 8.51 Description The issue is related to an unspecified vulnerability in the Service Advertisement Framework SAF that allows...

PT-2011-3931

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 6.x through 6.15su1, Cisco Unified Communications Manager versions 7.x through 7.15bsu2, Cisco Unified Communications Manager versions 8.x through 8.03asu0, Cisco Unified Communications Manager...