CVE-2008-1158

CVE-2008-1158 affects the Presence Engine (PE) service in Cisco Unified Presence before version 6.0(1). A remote attacker can trigger a denial-of-service (core dump and service interruption) by sending malformed packets (Bug ID CSCsh50164). The issue is documented in Cisco’s advisory Cisco Securi...

CVE-2008-1154

The CVE-2008-1154 issue affects Cisco Unified Communications products featuring Disaster Recovery Framework (DRF). The DRF Master server accepts network requests without authentication, allowing a remote, unauthenticated attacker to perform DRF tasks and, per the sources, potentially execute arbi...

CVE-2011-3288

CVE-2011-3288 affects Cisco Unified Presence before 8.5(4). The vulnerability arises from improper detection of recursion during XML entity expansion, allowing a remote attacker to craft an XML document with deeply nested entity references to cause memory and CPU exhaustion and potentially crash ...

CVE-2013-3453

CVE-2013-3453 affects Cisco Unified Communications Manager IM and Presence Service prior to 8.6(5)SU1 and 9.x prior to 9.1(2), as well as Cisco Unified Presence. The issue is a memory leak that can be triggered by a high volume of TCP connections to SIP ports 5060 and 5061, leading to memory and ...

CVE-2012-3935

CVE-2012-3935 affects Cisco Unified Presence (CUP) before 8.6(3) and Jabber Extensible Communications Platform (Jabber XCP) before 5.3. A remote, unauthenticated attacker can cause a denial of service (process crash) by sending a crafted XMPP stream header. The issue is documented in Cisco adviso...

CVE-2008-1740

CVE-2008-1740 affects Cisco Unified Presence: Presence Engine (PE) service in versions prior to 6.0(1) is vulnerable to a DoS via an unspecified stress test, causing core dumps and service interruption. The issue is documented as Cisco Bug CSCsh20972. Cisco’s related advisory and Seebug/CVE aggre...

CVE-2013-1197

The CVE-2013-1197 issue affects Cisco Unified Presence (CUP): the server's XML parser in the jabberd process can be triggered by crafted XMPP messages by an authenticated remote attacker to cause a denial of service (jabberd daemon crash). The vulnerability is due to insufficient validation of XM...

CVE-2008-1741

CVE-2008-1741 affects Cisco Unified Presence SIP Proxy (SIPD) in Cisco Unified Presence versions 6.0(1) and 6.0(2). The vulnerability allows remote attackers to cause a denial of service (core dump and service interruption) by sending a TCP port scan to the SIP proxy, as described in Cisco Bug CS...