CVE-2014-2171: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Cisco TelePresence TC Software 4.x through 6.x before 6.0.1 and TE Software 4.x and 6.0.x before 6.0.2 allows remote attackers to execute arbitrary code via crafted SIP packets, aka Bug ID CSCud81796...

CVE-2014-2173: Undefined Security Weakness

Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 do not properly restrict access to the serial port, which allows local users to gain privileges via unspecified commands, aka Bug ID CSCub67692...

CVE-2014-2167: Improper Input Validation

The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCua86589...

CVE-2014-2175: Improper Input Validation

Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allow remote attackers to cause a denial of service memory consumption via crafted H.225 packets, aka Bug ID CSCtq78849...

CVE-2014-2165: Improper Input Validation

The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCtq72699...

PT-2014-4520

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software versions 4.x through 5.x Cisco TelePresence TE Software versions 4.x through 6.0 Description The issue affects the SIP implementation, allowing remote attackers to cause a denial of service, resulting in a device...

CVE-2014-2166: Improper Input Validation

The SIP implementation in Cisco TelePresence TC Software 4.x and TE Software 4.x allows remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug ID CSCto70562...

PT-2014-4526

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software versions 4.x through 5.x Cisco TelePresence TE Software versions 4.x through 6.0 Description The issue is related to a buffer overflow that allows remote attackers to execute arbitrary code via crafted DNS respon...

PT-2014-4532

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software versions 4.x through 5.x Cisco TelePresence TE Software versions 4.x through 6.0 Description The issue allows remote attackers to cause a denial of service, resulting in memory consumption, via crafted H.225...

PT-2014-4521

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software versions 4.x through 5.x Cisco TelePresence TE Software version 4.x Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, by sending crafted SIP packets...

PT-2014-4530

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software versions 4.x through 5.x Cisco TelePresence TE Software versions 4.x through 6.0 Description The issue is related to a buffer overflow that allows local users to gain privileges. This is due to the improper...

CVE-2014-2172: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows local users to gain privileges by leveraging improper handling of the u-boot compiler flag for internal executable files, aka Bug ID CSCub67693...

Multiple Vulnerabilities in Cisco TelePresence TC and TE Software

Cisco TelePresence TC and TE Software are affected by the following vulnerabilities: Six Session Initiation Protocol SIP denial of service vulnerabilities Cisco TelePresence TC and TE Software DNS Buffer Overflow Vulnerability Cisco TelePresence TC and TE Software Input Validation Vulnerability...

ca-certificates-mozilla: add, remove or blacklist some certificates (important)

The Mozilla CA certificates package was updated to match the current Mozilla revision 1.95 of certdata.txt. It blacklists some misused certificate authorities, adds some new and adjusts some others. On openSUSE 13.1 a problem with names was also fixed. distrust: AC DG Tresor SSL bnc854367 new:...

CVE-2013-6244: Undefined Security Weakness

The Live Update webdynpro application webdynpro/dispatcher/sap.com/tcslmuilup/LUP in SAP NetWeaver 7.31 and earlier allows remote attackers to read arbitrary files and directories via an XML document containing an external entity declaration in conjunction with an entity reference, related to an...

PT-2013-5979

Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.31 and earlier Description The issue allows remote attackers to read arbitrary files and directories via an XML document containing an external entity declaration in conjunction with an entity reference, related to an...

PT-2013-4362

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC software affected versions not specified Description The issue concerns the web portal in Cisco TelePresence endpoints, where it does not enforce an exact password match for users without a configured password. This allow...

CVE-2013-3401

The CVE-2013-3401 issue affects the SIP implementation in Cisco TelePresence TC Software. It arises from errors in the SIP stack that allow an unauthenticated, remote attacker to cause unintended NOTIFY messages, potentially impacting the integrity of communications. Cisco’s advisory notes that e...

CVE-2013-3401: Undefined Security Weakness

The SIP implementation in Cisco TelePresence TC Software allows remote attackers to trigger unintended use of NOTIFY messages via unspecified vectors, aka Bug ID CSCud96080...

PT-2013-4358

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC Software affected versions not specified Description The issue concerns the SIP implementation, which allows remote attackers to trigger unintended use of NOTIFY messages. Recommendations At the moment, there is no...