PT-2007-3187 · Cisco · Cisco Unified Callmanager

Publicado 2007-04-03 · Atualizado 2017-07-29 · CVE-2007-1833

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Cisco Unified CallManager versions 3.3 through 3.3(5)SR2a Cisco Unified CallManager versions 4.1 through 4.1(3)SR4 Cisco Unified CallManager versions 4.2 through 4.2(3)SR1 Cisco Unified CallManager versions 5.0 through 5.0(4a)SU1

Description: The issue allows remote attackers to cause a denial of service, resulting in the loss of voice services, by sending crafted packets to specific ports. The affected ports are the SCCP port, which is 2000/tcp, and the SCCPS port, which is 2443/tcp.

Recommendations: For Cisco Unified CallManager version 3.3, update to version 3.3(5)SR2a or later. For Cisco Unified CallManager version 4.1, update to version 4.1(3)SR4 or later. For Cisco Unified CallManager version 4.2, update to version 4.2(3)SR1 or later. For Cisco Unified CallManager version 5.0, update to version 5.0(4a)SU1 or later.

Correção

Identificadores relacionados

CVE-2007-1833

Produtos afetados

Cisco Unified Callmanager

Referências · 7

• http://vupen.com/english/advisories/2007/1144 · Nota
• http://securitytracker.com/id?1017826 · Correção
• http://cisco.com/warp/public/707/cisco-sa-20070328-voip.shtml · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33295 · Nota
• http://secunia.com/advisories/24665 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-1833 · Nota de Segurança
• http://securityfocus.com/bid/23181 · Nota