PT-2007-3187 · Cisco · Cisco Unified Callmanager

Published 2007-04-03 · Updated 2017-07-29 · CVE-2007-1833

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Cisco Unified CallManager versions 3.3 through 3.3(5)SR2a Cisco Unified CallManager versions 4.1 through 4.1(3)SR4 Cisco Unified CallManager versions 4.2 through 4.2(3)SR1 Cisco Unified CallManager versions 5.0 through 5.0(4a)SU1

Description: The issue allows remote attackers to cause a denial of service, resulting in the loss of voice services, by sending crafted packets to specific ports. The affected ports are the SCCP port, which is 2000/tcp, and the SCCPS port, which is 2443/tcp.

Recommendations: For Cisco Unified CallManager version 3.3, update to version 3.3(5)SR2a or later. For Cisco Unified CallManager version 4.1, update to version 4.1(3)SR4 or later. For Cisco Unified CallManager version 4.2, update to version 4.2(3)SR1 or later. For Cisco Unified CallManager version 5.0, update to version 5.0(4a)SU1 or later.

Fix

Related Identifiers

CVE-2007-1833

Affected Products

Cisco Unified Callmanager

References · 7

• http://securitytracker.com/id?1017826 · Patch
• http://cisco.com/warp/public/707/cisco-sa-20070328-voip.shtml · Vendor Advisory
• http://secunia.com/advisories/24665 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1833 · Security Note
• http://vupen.com/english/advisories/2007/1144 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33295 · Note
• http://securityfocus.com/bid/23181 · Note