CVE-2008-2061

Опубликовано: 26 июн. 2008

Источник: nvd

CVSS2: 7.8

EPSS Низкий

Описание

The Computer Telephony Integration (CTI) Manager service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3c) and 6.x before 6.1(2) allows remote attackers to cause a denial of service (TSP crash) via malformed network traffic to TCP port 2748.

Ссылки

http://secunia.com/advisories/30848
Third Party Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a00809b9011.shtml
Patch
Vendor Advisory
http://www.securityfocus.com/bid/29933
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1020360
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2008/1933/references
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/43349
Third Party Advisory
VDB Entry
http://secunia.com/advisories/30848
Third Party Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a00809b9011.shtml
Patch
Vendor Advisory
http://www.securityfocus.com/bid/29933
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1020360
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2008/1933/references
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/43349
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*

Версия от 5.0 (включая) до 5.1\(3c\) (исключая)

cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*

Версия от 6.0 (включая) до 6.1\(2\) (исключая)

EPSS

Процентиль: 87%

0.03307

Низкий

7.8 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-prvr-fvg6-m8jr

github

почти 4 года назад