Code injection

The SIP process in Cisco Unified Communications Manager aka CUCM, formerly CallManager 7.x before 7.15bsu4 and 8.x before 8.01 does not properly handle SDP data within a SIP call in certain situations related to use of the g729ar8 codec for a Media Termination Point MTP, which allows remote...

Code injection

The Packet Capture Service in Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x does not properly handle idle TCP connections, which allows remote attackers to cause a denial of service memory consumption and restart by making many connections, aka Bug ID CSCtf97162...

CVE-2011-2560

The CVE-2011-2560 issue affects Cisco Unified Communications Manager (CUCM) 4.x, specifically the Packet Capture Service. The root cause is improper handling of idle TCP connections, allowing a remote attacker to exhaust memory and trigger a denial-of-service resulting in a restart by establishin...

CVE-2011-2563

CVE-2011-2563 describes a DoS vulnerability in Cisco’s Service Advertisement Framework (SAF) affecting Cisco Unified Communications Manager (CUCM, 8.x before 8.5(1)) and Cisco Intercompany Media Engine (IME, 8.x before 8.5(1). An unauthenticated remote attacker can send crafted SAF packets, causi...

CVE-2011-2561

The SIP process in Cisco Unified Communications Manager aka CUCM, formerly CallManager 7.x before 7.15bsu4 and 8.x before 8.01 does not properly handle SDP data within a SIP call in certain situations related to use of the g729ar8 codec for a Media Termination Point MTP, which allows remote...

CVE-2011-2561

Cisco Unified Communications Manager (CUCM) 7.x prior to 7.1(5b)su4 and 8.x prior to 8.0(1) is vulnerable in its SIP processing when handling SDP data during SIP calls using the g729ar8 codec for a Media Termination Point (MTP). The flaw, tracked as Bug CSCtc61990, can allow remote attackers to c...

CVE-2011-2562

CVE-2011-2562 affects Cisco Unified Communications Manager (CUCM) versions: 6.x before 6.1(5)su2, 7.x before 7.1(5b)su3, 8.x before 8.0(3a)su1, and 8.5 before 8.5(1)su1. The vulnerability allows remote attackers to cause a denial of service (service outage) by sending a SIP INVITE message. Root c...

CVE-2011-1643

CVE-2011-1643 affects Cisco Unified Communications Manager (CUCM) and Cisco Unified Presence Server. Affected CUCM versions: 6.x, 7.x before 7.1(5b)su4, 8.0, and 8.5 before 8.5(1)su2; Presence Server: 6.x, 7.x, 8.0, and 8.5 before 8.5xnr. Root cause: an open query interface could disclose databas...

CVE-2011-1604

Memory leak in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su3, 7.x before 7.15bsu3, 8.0 before 8.03asu2, and 8.5 before 8.51 allows remote attackers to cause a denial of service memory consumption and process failure via a malformed SIP message, aka Bug ID...

Memory corruption

Memory leak in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su3, 7.x before 7.15bsu3, 8.0 before 8.03asu2, and 8.5 before 8.51 allows remote attackers to cause a denial of service memory consumption and process failure via a malformed SIP message, aka Bug ID...

CVE-2011-1606

Cisco Unified Communications Manager (CUCM) 6.x–8.x is affected by CVE-2011-1606, a DoS in SIP processing triggered by malformed SIP messages. According to Cisco’s advisory, the vulnerability is fixed in CUCM releases 6.1(5)su3, 7.1(5b)su4, 8.0(3a)su2, and 8.5(1)su1. The issue can cause a process...

CVE-2011-1609

Cisco Unified Communications Manager (CUCM) is affected by SQL injection vulnerabilities (CVE-2011-1609) in 6.x prior to 6.1(5)su2, 7.x prior to 7.1(5)su1, 8.0 prior to 8.0(3), and 8.5 prior to 8.5(1). The flaw allows a remote authenticated user to execute arbitrary SQL commands via unspecified v...

CVE-2011-1604

The CVE-2011-1604 issue affects Cisco Unified Communications Manager (CUCM) 6.x, 7.x, 8.0, and 8.5, where a memory leak triggered by malformed SIP messages can cause DoS (memory consumption and process failure). Cisco’s advisory fixes this in CUCM versions 6.1(5)SU3, 7.1(5b)SU3, 8.0(3a)SU2, and 8...

CVE-2011-1607

CVE-2011-1607 affects Cisco Unified Communications Manager (CUCM) with a directory traversal vulnerability in the POST upload path that allows an authenticated remote attacker to upload files to arbitrary directories. Affected CUCM versions: 6.x (before 6.1(5)su3), 7.x (before 7.1(5b)su3), 8.0 (b...

CVE-2011-1605

CVE-2011-1605 affects Cisco Unified Communications Manager (CUCM) 6.x, 7.x, and 8.x. The vulnerability arises from processing malformed SIP messages in the SIP services, leading to a denial of service (process failure). Cisco’s advisory lists fixes in CUCM versions 6.1(5)SU2/3, 7.1(5b)SU2, 8.0(3)...

CVE-2011-1610

Multiple SQL injection vulnerabilities in xmldirectorylist.jsp in the embedded Apache HTTP Server component in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su3, 7.x before 7.15su4, 8.0 before 8.03asu2, and 8.5 before 8.51su1 allow remote attackers to execute...

CVE-2010-3039

/usr/local/cm/bin/pktCapprotectData in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6, 7, and 8 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in a request to the administrative interface, aka Bug IDs CSCti52041 and...

CVE-2010-3039

CVE-2010-3039 affects Cisco Unified Communications Manager (CUCM) 6–8. A setuid binary (/usr/local/cm/bin/pktCap_protectData) fails to validate command-line arguments, allowing a local, authenticated administrator to inject shell metacharacters and execute arbitrary commands. The vulnerability en...

CVE-2010-3039

/usr/local/cm/bin/pktCapprotectData in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6, 7, and 8 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in a request to the administrative interface, aka Bug IDs CSCti52041 and...

Cisco Releases Security Advisories

Cisco has released six security advisories to address vulnerabilities affecting the Cisco IOS Software and the Cisco Unified Communications Manager. Exploitation of these vulnerabilities may allow an attacker to cause a denial-of-service condition. US-CERT encourages users and administrators to...