PT-2007-1682 · Cisco · Cisco Unified Contact Center Hosted+3

Publicado 2007-01-11 · Atualizado 2011-03-08 · CVE-2007-0198

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Enterprise versions 5.0 through 7.1 Cisco Unified Contact Center Hosted versions 5.0 through 7.1 IP Contact Center Enterprise versions 5.0 through 7.1 Cisco IP Contact Center Hosted versions 5.0 through 7.1

Description The issue allows remote attackers to cause a denial of service, resulting in repeated process restart, via a certain TCP session on the JTapi server port.

Recommendations For Cisco Unified Contact Center Enterprise versions 5.0 through 7.1, consider restricting access to the JTapi server port as a temporary workaround until a patch is available. For Cisco Unified Contact Center Hosted versions 5.0 through 7.1, consider restricting access to the JTapi server port as a temporary workaround until a patch is available. For IP Contact Center Enterprise versions 5.0 through 7.1, consider restricting access to the JTapi server port as a temporary workaround until a patch is available. For Cisco IP Contact Center Hosted versions 5.0 through 7.1, consider restricting access to the JTapi server port as a temporary workaround until a patch is available.

Correção

Identificadores relacionados

CVE-2007-0198

Produtos afetados

Cisco Ip Contact Center Hosted

Cisco Unified Contact Center Enterprise

Cisco Unified Contact Center Hosted

Ip Contact Center Enterprise

Referências · 7

• http://vupen.com/english/advisories/2007/0138 · Nota
• http://osvdb.org/32682 · Nota
• http://securityfocus.com/bid/21988 · Nota
• http://cisco.com/warp/public/707/cisco-sa-20070110-jtapi.shtml · Aviso do Fabricante
• http://securitytracker.com/id?1017499 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0198 · Nota de Segurança
• http://secunia.com/advisories/23710 · Nota