PT-2007-1682 · Cisco · Cisco Unified Contact Center Hosted+3

Published 2007-01-11 · Updated 2011-03-08 · CVE-2007-0198

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Enterprise versions 5.0 through 7.1 Cisco Unified Contact Center Hosted versions 5.0 through 7.1 IP Contact Center Enterprise versions 5.0 through 7.1 Cisco IP Contact Center Hosted versions 5.0 through 7.1

Description The issue allows remote attackers to cause a denial of service, resulting in repeated process restart, via a certain TCP session on the JTapi server port.

Recommendations For Cisco Unified Contact Center Enterprise versions 5.0 through 7.1, consider restricting access to the JTapi server port as a temporary workaround until a patch is available. For Cisco Unified Contact Center Hosted versions 5.0 through 7.1, consider restricting access to the JTapi server port as a temporary workaround until a patch is available. For IP Contact Center Enterprise versions 5.0 through 7.1, consider restricting access to the JTapi server port as a temporary workaround until a patch is available. For Cisco IP Contact Center Hosted versions 5.0 through 7.1, consider restricting access to the JTapi server port as a temporary workaround until a patch is available.

Fix

Related Identifiers

CVE-2007-0198

Affected Products

Cisco Ip Contact Center Hosted

Cisco Unified Contact Center Enterprise

Cisco Unified Contact Center Hosted

Ip Contact Center Enterprise

References · 7

• http://cisco.com/warp/public/707/cisco-sa-20070110-jtapi.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0198 · Security Note
• http://vupen.com/english/advisories/2007/0138 · Note
• http://osvdb.org/32682 · Note
• http://securityfocus.com/bid/21988 · Note
• http://securitytracker.com/id?1017499 · Note
• http://secunia.com/advisories/23710 · Note