PT-2011-3929 · Cisco · Cisco Unified Communications Manager

Published 2011-08-29 · Updated 2012-06-15 · CVE-2011-2560

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 4.x

Description The issue is related to the Packet Capture Service in Cisco Unified Communications Manager, which does not properly handle idle TCP connections. This allows remote attackers to cause a denial of service by making many connections, resulting in memory consumption and restart.

Recommendations For version 4.x, update to a version that properly handles idle TCP connections to prevent denial of service attacks.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2011-2560

Affected Products

Cisco Unified Communications Manager

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2011-2560 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml · Vendor Advisory