CVE-2008-0027

CVE-2008-0027 corresponds to a heap overflow in Cisco Unified Communications Manager’s CTL Provider service (CTLProvider.exe). The flaw; occurs in CUCM 4.2 before 4.2(3)SR3 and 4.3 before 4.3(1)SR1, and in CallManager 4.0/4.1 before 4.1(3)SR5c; the CTL Provider listens on TCP port 2444 and proces...

TPTI-08-02: Cisco Call Manager CTLProvider Heap Overflow Vulnerability

TPTI-08-02: Cisco Call Manager CTLProvider Heap Overflow Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-08-02 January 16, 2008 -- CVE ID: CVE-2008-0027 -- Affected Vendor: Cisco -- Affected Products: Cisco Call Manager 4.13 -- Vulnerability Details: This vulnerability allows remote...