Cisco Unified Communications Manager Express Vulnerability - Cisco Systems

Cisco IOS devices that are configured for Cisco Unified Communications Manager Express CME and the Extension Mobility feature are affected by a buffer overflow vulnerability. Successful exploitation of this vulnerability may result in the execution of arbitrary code or a denial of service DoS...

CVE-2009-2865

CVE-2009-2865 reports a buffer overflow in the login portion of Cisco CME’s Extension Mobility, allowing remote attackers to trigger arbitrary code execution or DoS via crafted HTTP requests. The vulnerability affects Cisco IOS CME with Extension Mobility; exploitation requires HTTP requests from...