Vulnerabilities > CVE-2010-0591 - Denial of Service vulnerability in Cisco Unified Communications Manager SIP Message (CVE-2010-0591)

CVSS 7.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

COMPLETE

network

low complexity

cisco

NVD

Published: 2010-03-05

Updated: 2010-03-05

Summary

Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5), 7.x before 7.1(3b)SU2, and 8.x before 8.0(1) allows remote attackers to cause a denial of service (process failure) via a malformed SIP REG message, related to an overflow of the Telephone-URL field, aka Bug ID CSCtc62362.

Vulnerable Configurations

Part	Description	Count
Application	Cisco Cisco Unified Communications Manager 6.0 Cisco Unified Communications Manager 6.0\(1\) Cisco Unified Communications Manager 6.0\(1A\) Cisco Unified Communications Manager 6.1 Cisco Unified Communications Manager 6.1\(1\) Cisco Unified Communications Manager 6.1\(1A\) Cisco Unified Communications Manager 6.1\(1B\) Cisco Unified Communications Manager 6.1\(2\) Cisco Unified Communications Manager 6.1\(2\)Su1 Cisco Unified Communications Manager 6.1\(2\)Su1A Cisco Unified Communications Manager 6.1\(3\) Cisco Unified Communications Manager 6.1\(4\) Cisco Unified Communications Manager 6.1.0 Cisco Unified Communications Manager 7.0 Cisco Unified Communications Manager 7.0\(1\) Cisco Unified Communications Manager 7.0\(2\) Cisco Unified Communications Manager 7.1 Cisco Unified Communications Manager 8.0	18

Summary

Vulnerable Configurations

References