PT-2007-5485 · Cisco · Cisco Unified Communications Manager+1

Publicado 2007-08-08 · Atualizado 2017-09-29 · CVE-2007-4294

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 5.0 through 6.0 Cisco IOS versions 12.0 through 12.4

Description The issue allows remote attackers to execute arbitrary code via a malformed SIP packet. Multiple voice-related vulnerabilities are identified in Cisco IOS software and Cisco Unified Communications Manager, pertaining to protocols or features such as Session Initiation Protocol (SIP), Media Gateway Control Protocol (MGCP), H.323, H.254, Real-time Transport Protocol (RTP), and facsimile reception.

Recommendations For Cisco Unified Communications Manager versions 5.0 through 6.0, update to a fixed version of the software. For Cisco IOS versions 12.0 through 12.4, update to a fixed version of the software. As a temporary workaround, consider disabling the affected protocols or features, such as SIP, MGCP, H.323, H.254, RTP, and facsimile reception, until a patch is available.

Correção

Identificadores relacionados

CVE-2007-4294

Produtos afetados

Cisco Ios

Cisco Unified Communications Manager

Referências · 9

• http://securityfocus.com/bid/25239 · Nota
• http://osvdb.org/36693 · Nota
• http://vupen.com/english/advisories/2007/2816 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4294 · Nota de Segurança
• http://securitytracker.com/id?1018538 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5851 · Nota
• http://secunia.com/advisories/26362 · Aviso do Fabricante
• http://cisco.com/en/US/products/products_security_advisory09186a0080899653.shtml · Aviso do Fabricante
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20070808-IOS-voice · Aviso do Fabricante