CVE-2010-1227

CVE-2010-1227 describes a cross-site scripting (XSS) vulnerability in Sun Java System Communications Express 6.2 and 6.3 that allows remote attackers to inject arbitrary Web script or HTML via the subject field of a message, demonstrated by a subject containing an IMG element whose SRC attribute ...

CVE-2010-1227: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Sun Java System Communications Express 6.2 and 6.3 allows remote attackers to inject arbitrary web script or HTML via the subject field of a message, as demonstrated by a subject containing an IMG element with a SRC attribute that performs a cross-site...

Design/Logic Flaw

Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express CME or Cisco Unified Survivable Remote Site Telephony SRST is enabled, allows remote attackers to cause a denial of service device reload via a malformed Skinny Client Control Protocol SCCP message, aka Bug ID...

Cisco Security Advisory: Cisco Unified Communications Manager Express Denial of Service Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager Express Denial of Service Vulnerabilities Advisory ID: cisco-sa-20100324-cucme Revision 1.0 For Public Release 2010 March 24 1600 UTC GMT...

Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities Advisory ID: cisco-sa-20100324-sip Revision 1.0 For Public Release 2010 March 24 1600 UTC GMT...

Tata CSO Says Tier1 ISPs Can Remove Botnets, Malware

Internet service providers have the ability to wipe nearly all malicious activity in their network without stepping on individual privacy and civil liberties, said Adam Rice, chief security officer at Mumbai-based Tata Communications. Read the full article. TechTarget...

Waledac Botnet Now Completely Crippled, Experts Say

After Microsoft’s actions to take down the Waledac botnet last month, there was some question about whether the operation was much more than a grab for headlines that would have little effect on actual spam levels or malware infections. But more than three weeks after the takedown, researchers sa...

Sun Java System Communications Express Multiple HTML Injection Vuln

Exploit for unknown platform in category web applications ============================================================================== Sun Java System Communications Express Multiple HTML Injection Vulnerabilities ============================================================================== As...

Cisco Patches Voice Flaws

Cisco has released a number of reports on vulnerabilities in its products. It is possible to disrupt the transfer of voice data in the Unified Communications Manager using crafted SIP, SCCP and CTI packets. Read the full article. The H Security...

Buffer overflow

Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15, 7.x before 7.13bSU2, and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SIP REG message, related to an overflow of the Telephone-URL field, aka Bug ID...

Code injection

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x before 4.32SR2, 6.x before 6.15, 7.x before 7.13asu1, and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SCCP StationCapabilitiesRes message with an invalid MaxCap field,...

Code injection

The CMSIPUtility component in Cisco Unified Communications Manager aka CUCM, formerly CallManager 7.x before 7.13asu1 and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SIP Register message, aka Bug ID CSCtc37188...

Design/Logic Flaw

The CTI Manager service in Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x before 4.32sr1a, 6.x before 6.13, 7.0x before 7.02, 7.1x before 7.12, and 8.x before 8.01 allows remote attackers to cause a denial of service service failure via a malformed message, aka Bug ID...

CVE-2010-0588

Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15, 7.x before 7.13asu1, and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SCCP 1 RegAvailableLines or 2 FwdStatReq message with an invalid Line number, aka Bug ...

CVE-2010-0590

The CMSIPUtility component in Cisco Unified Communications Manager aka CUCM, formerly CallManager 7.x before 7.13asu1 and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SIP Register message, aka Bug ID CSCtc37188...

CVE-2010-0592

The CTI Manager service in Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x before 4.32sr1a, 6.x before 6.13, 7.0x before 7.02, 7.1x before 7.12, and 8.x before 8.01 allows remote attackers to cause a denial of service service failure via a malformed message, aka Bug ID...

CVE-2010-0587

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x before 4.32SR2, 6.x before 6.15, 7.x before 7.13asu1, and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SCCP StationCapabilitiesRes message with an invalid MaxCap field,...

CVE-2010-0591

Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15, 7.x before 7.13bSU2, and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SIP REG message, related to an overflow of the Telephone-URL field, aka Bug ID...

CVE-2010-0591

CVE-2010-0591 affects Cisco Unified Communications Manager (CUCM) where a malformed SIP REG message can cause a DoS (process failure) due to an overflow of the Telephone-URL field. Affected CUCM versions include 6.x prior to 6.1(5), 7.x prior to 7.1(3b)SU2, and 8.x prior to 8.0(1). Cisco fixed th...

CVE-2010-0587

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x before 4.32SR2, 6.x before 6.15, 7.x before 7.13asu1, and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SCCP StationCapabilitiesRes message with an invalid MaxCap field,...