PT-2008-5775 · Cisco · Cisco Unity

Publicado 2008-10-13 · Atualizado 2017-08-08 · CVE-2008-4543

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Unity versions 4.x through 4.2(1)ES160 Cisco Unity versions 5.x through 5.0(1)ES52 Cisco Unity versions 7.x through 7.0(1)ES7

Description The issue allows remote attackers to cause a denial of service, specifically session exhaustion, by establishing a large number of connections when anonymous authentication, also known as native Unity authentication, is used.

Recommendations For Cisco Unity versions 4.x through 4.2(1)ES160, update to version 4.2(1)ES161 or later. For Cisco Unity versions 5.x through 5.0(1)ES52, update to version 5.0(1)ES53 or later. For Cisco Unity versions 7.x through 7.0(1)ES7, update to version 7.0(2)ES8 or later.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2008-4543

Produtos afetados

Cisco Unity

Referências · 8

• http://voipshield.com/research-details.php?id=128 · Nota
• http://securityfocus.com/bid/31642 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-4543 · Nota de Segurança
• http://cisco.com/en/US/products/products_security_response09186a0080a0d861.html · Aviso do Fabricante
• http://secunia.com/advisories/32187 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45743 · Nota
• http://vupen.com/english/advisories/2008/2771 · Nota
• http://securitytracker.com/id?1021013 · Nota