PT-2011-3929 · Cisco · Cisco Unified Communications Manager

Publicado 2011-08-29 · Atualizado 2012-06-15 · CVE-2011-2560

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 4.x

Description The issue is related to the Packet Capture Service in Cisco Unified Communications Manager, which does not properly handle idle TCP connections. This allows remote attackers to cause a denial of service by making many connections, resulting in memory consumption and restart.

Recommendations For version 4.x, update to a version that properly handles idle TCP connections to prevent denial of service attacks.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2011-2560

Produtos afetados

Cisco Unified Communications Manager

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2011-2560 · Nota de Segurança
• http://cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml · Aviso do Fabricante