CVE-2011-1606: Undefined Security Weakness

Unspecified vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15su1, 8.0 before 8.03, and 8.5 before 8.51 allows remote attackers to cause a denial of service process failure via a malformed SIP message, aka Bug ID CSCtg62855...

PT-2011-3251

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 6.x through 6.15su2 Cisco Unified Communications Manager versions 7.x through 7.15bsu2 Cisco Unified Communications Manager versions 8.0 through 8.03asu0 Cisco Unified Communications Manager versio...

PT-2011-3249

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 6.x through 6.15su1, 7.x through 7.15bsu1, 8.0 through 8.02, and 8.5 through 8.50 Description The issue allows remote attackers to cause a denial of service via a malformed SIP message. This can le...

CVE-2011-1609: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15su1, 8.0 before 8.03, and 8.5 before 8.51 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtg85647...

PT-2011-3248

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 6.x before 6.15su3 Cisco Unified Communications Manager versions 7.x before 7.15bsu3 Cisco Unified Communications Manager versions 8.0 before 8.03asu2 Cisco Unified Communications Manager versions...

PT-2011-3252

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 6.x through 6.15su1, 7.x through 7.15su0, 8.0 through 8.02, and 8.5 through 8.50 Description A SQL injection issue allows remote authenticated users to execute arbitrary SQL commands. Recommendatio...

PT-2011-3250

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 6.x before 6.15su2 Cisco Unified Communications Manager versions 7.x before 7.15su1 Cisco Unified Communications Manager versions 8.0 before 8.03 Cisco Unified Communications Manager versions 8.5...

CVE-2011-1604: Undefined Security Weakness

Memory leak in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su3, 7.x before 7.15bsu3, 8.0 before 8.03asu2, and 8.5 before 8.51 allows remote attackers to cause a denial of service memory consumption and process failure via a malformed SIP message, aka Bug ID...

Hacker posts screenshot of sex video on SPAD website !

Hacker posts screenshot of sex video on SPAD website ! The Land Public Transport Commission SPAD website was hacked yesterday and a screenshot of the controversial sex video allegedly involving a top politician was posted on its main page. Appearing on the website were two images, one depicting t...

[SECURITY] Fedora 13 Update: mingw32-openssl-1.0.0-0.7.beta4.fc13

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols. This package contains Windows MinGW libraries and development tools...

Cisco Unified Communications Manager multiple security vulnerabilities

DoS via SIP, directory traversal, SQL injection...

[SECURITY] Fedora 15 Update: mingw32-openssl-1.0.0d-1.fc15

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols. This package contains Windows MinGW libraries and development tools...

Vulnerabilities in Cisco's Unified Communications Manager

Cisco published an advisory report yesterday detailing multiple vulnerabilities in there Unified Communications Manager. There are three denial of service vulnerabilities that affect session initiation protocol services, two SQL injection vulnerabilities, and a directory transversal vulnerability...

PT-2011-3253

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 6.x through 6.15su2, 7.x through 7.15su3, 8.0 through 8.03asu1, and 8.5 through 8.50su0 Description The issue allows remote attackers to execute arbitrary SQL commands via the f, l, or n parameter ...

Cisco Releases Security Advisory for Cisco Unified Communications Manager

Cisco has released a security advisory to address multiple vulnerabilities in Cisco Unified Communications Manager. These vulnerabilities may allow an attacker to perform SQL injection attacks, conduct directory traversal attacks, or cause a denial-of-service condition. US-CERT encourages users a...

Multiple Vulnerabilities in Cisco Unified Communications Manager

...

Cisco Unified Communications Manager 8.5 - xmldirectorylist.jsp Multiple SQL Injections

Cisco Unified Communications Manager 8.5 - xmldirectorylist.jsp Multiple SQL Injections source: https://www.securityfocus.com/bid/47607/info Cisco Unified Communications Manager is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before...

Cisco Unified Communications Manager 8.5 - 'xmldirectorylist.jsp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/47607/info Cisco Unified Communications Manager is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an authenticated attacker to...

Nortel CS1000 Communications Server Remote Denial of Service Vulnerability

This vulnerability allows remote attackers to create a denial of service condition on vulnerable installations of Nortel CS1000 Communication Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the process listening on UDP port 5100. When parsing ...

[USN-1110-1] KDE-Libs vulnerabilities

========================================================================== Ubuntu Security Notice USN-1110-1 April 14, 2011 kde4libs vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...