186 matches found
CVE-2010-4687
CVE-2010-4687 affects Cisco STCAPP (the SCCP telephony control application) on Cisco IOS before 15.0(1)XA1. The issue is that it does not properly handle multiple calls on a shared line, allowing remote attackers to cause a denial of service (port hang) by ending two calls simultaneously that are...
CVE-2010-4687
STCAPP aka the SCCP telephony control application on Cisco IOS before 15.01XA1 does not properly handle multiple calls to a shared line, which allows remote attackers to cause a denial of service port hang by simultaneously ending two calls that were controlled by CallManager Express CME, aka Bug...
Cisco Unified Communications Manager Express Denial of Service Vulnerabilities (cisco-sa-20100324-cucme)
Devices running Cisco IOS Software and configured for Cisco Unified Communications Manager Express CME or Cisco Unified Survivable Remote Site Telephony SRST operation are affected by two denial of service vulnerabilities that may result in a device reload if successfully exploited. The...
Cisco IOS NAT Skinny Call Control Protocol Vulnerability
A series of segmented Skinny Call Control Protocol SCCP messages may cause a Cisco IOS device that is configured with the Network Address Translation NAT SCCP Fragmentation Support feature to reload. Cisco has released free software updates that address this vulnerability. A workaround that...
Cisco IOS Software NAT Skinny Call Control Protocol Vulnerability (cisco-sa-20100324-sccp)
Skinny Client Control Protocol SCCP crafted messages may cause a Cisco IOS device that is configured with the Network Address Translation NAT SCCP Fragmentation Support feature to reload. Cisco has released free software updates that address this vulnerability. A workaround that mitigates this...
CVE-2010-0585
Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express CME or Cisco Unified Survivable Remote Site Telephony SRST is enabled, allows remote attackers to cause a denial of service device reload via a malformed Skinny Client Control Protocol SCCP message, aka Bug ID...
CVE-2010-0584
Unspecified vulnerability in Cisco IOS 12.4, when NAT SCCP fragmentation support is enabled, allows remote attackers to cause a denial of service device reload via crafted Skinny Client Control Protocol SCCP packets, aka Bug ID CSCsy09250...
CVE-2010-0586
Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express CME or Cisco Unified Survivable Remote Site Telephony SRST is enabled, allows remote attackers to cause a denial of service device reload via a malformed Skinny Client Control Protocol SCCP message, aka Bug ID...
Design/Logic Flaw
Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express CME or Cisco Unified Survivable Remote Site Telephony SRST is enabled, allows remote attackers to cause a denial of service device reload via a malformed Skinny Client Control Protocol SCCP message, aka Bug ID...
Design/Logic Flaw
Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express CME or Cisco Unified Survivable Remote Site Telephony SRST is enabled, allows remote attackers to cause a denial of service device reload via a malformed Skinny Client Control Protocol SCCP message, aka Bug ID...
Code injection
Unspecified vulnerability in Cisco IOS 12.4, when NAT SCCP fragmentation support is enabled, allows remote attackers to cause a denial of service device reload via crafted Skinny Client Control Protocol SCCP packets, aka Bug ID CSCsy09250...
CVE-2010-0584
CVE-2010-0584 pertains to Cisco IOS 12.4 devices, specifically when NAT SCCP Fragmentation Support is enabled. The vulnerability allows crafted Skinny Client Control Protocol (SCCP) packets to cause a reload (DoS) of the Cisco IOS device, tracked as Bug CSCsy09250. The issue affects Cisco IOS rel...
CVE-2010-0585
CVE-2010-0585 (and related CVE-2010-0586) affect Cisco IOS 12.1–12.4 with CME/SRST enabled. A malformed SCCP message can cause a device reload (DoS). Cisco’s advisory and security notes identify two DoS bugs (CSCsz48614 and CSCsz49741) and list vulnerable releases alongside first fixed versions. ...
CVE-2010-0585
Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express CME or Cisco Unified Survivable Remote Site Telephony SRST is enabled, allows remote attackers to cause a denial of service device reload via a malformed Skinny Client Control Protocol SCCP message, aka Bug ID...
CVE-2010-0586
Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express CME or Cisco Unified Survivable Remote Site Telephony SRST is enabled, allows remote attackers to cause a denial of service device reload via a malformed Skinny Client Control Protocol SCCP message, aka Bug ID...
CVE-2010-0586
CVE-2010-0586 affects Cisco IOS 12.1–12.4 when Cisco Unified CME or SRST is enabled; a malformed SCCP message can trigger a denial-of-service resulting in a device reload. The vulnerability exists in the SCCP message handling within CME/SRST-enabled IOS platforms and can be exploited remotely ove...
CVE-2010-0584
Unspecified vulnerability in Cisco IOS 12.4, when NAT SCCP fragmentation support is enabled, allows remote attackers to cause a denial of service device reload via crafted Skinny Client Control Protocol SCCP packets, aka Bug ID CSCsy09250...
Cisco routers IOS multiple security vulnerabilities
DoS via TCP connections, multiple vulnerabilities in IPSec, H.323, SIP. SCCP, MPLS protocols...
Cisco Security Advisory: Cisco IOS Software NAT Skinny Call Control Protocol Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Software NAT Skinny Call Control Protocol Vulnerability Advisory ID: cisco-sa-20100324-sccp Revision 1.0 For Public Release 2010 March 24 1600 UTC GMT...
CVE-2010-0588
Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15, 7.x before 7.13asu1, and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SCCP 1 RegAvailableLines or 2 FwdStatReq message with an invalid Line number, aka Bug ...