PT-2008-3284 · Cisco · Cisco Unified Communications Manager

Publicado 2008-05-16 · Atualizado 2018-10-31 · CVE-2008-1743

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 5.x before 5.1(3) Cisco Unified Communications Manager versions 6.x before 6.1(1)

Description A memory leak in the Certificate Trust List (CTL) Provider service allows remote attackers to cause a denial of service via a series of malformed TCP packets. This results in memory consumption and service interruption.

Recommendations For Cisco Unified Communications Manager versions 5.x before 5.1(3), update to version 5.1(3) or later. For Cisco Unified Communications Manager versions 6.x before 6.1(1), update to version 6.1(1) or later.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2008-1743

Produtos afetados

Cisco Unified Communications Manager

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2008-1743 · Nota de Segurança
• http://securitytracker.com/id?1020022 · Nota
• http://vupen.com/english/advisories/2008/1533 · Nota
• http://secunia.com/advisories/30238 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42414 · Nota
• http://securityfocus.com/bid/29221 · Nota
• http://cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml · Aviso do Fabricante