Vulnerabilities > Cisco > Unified Callmanager

DATE CVE VULNERABILITY TITLE RISK
2007-07-15 CVE-2006-5277 Heap Buffer Overflow vulnerability in Cisco products
Off-by-one error in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications Manager (CUCM, formerly CallManager) before 20070711 allow remote attackers to execute arbitrary code via a crafted packet that triggers a heap-based buffer overflow.
network
cisco
critical
9.3
2007-04-03 CVE-2007-1834 Remote Denial Of Service vulnerability in Cisco Unified Callmanager and Unified Presence Server
Cisco Unified CallManager (CUCM) 5.0 before 5.0(4a)SU1 and Cisco Unified Presence Server (CUPS) 1.0 before 1.0(3) allow remote attackers to cause a denial of service (loss of voice services) via a flood of ICMP echo requests, aka bug ID CSCsf12698.
network
low complexity
cisco
7.8
2007-04-03 CVE-2007-1833 Remote Denial Of Service vulnerability in Cisco Unified CallManager And Unified Server
The Skinny Call Control Protocol (SCCP) implementation in Cisco Unified CallManager (CUCM) 3.3 before 3.3(5)SR2a, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3)SR1, and 5.0 before 5.0(4a)SU1 allows remote attackers to cause a denial of service (loss of voice services) by sending crafted packets to the (1) SCCP (2000/tcp) or (2) SCCPS (2443/tcp) port.
network
low complexity
cisco
5.0
2007-04-02 CVE-2007-1826 Remote Denial Of Service vulnerability in Cisco Unified Callmanager and Unified Presence Server
Unspecified vulnerability in the IPSec Manager Service for Cisco Unified CallManager (CUCM) 5.0 before 5.0(4a)SU1 and Cisco Unified Presence Server (CUPS) 1.0 before 1.0(3) allows remote attackers to cause a denial of service (loss of cluster services) via a "specific UDP packet" to UDP port 8500, aka bug ID CSCsg60949.
network
low complexity
cisco
7.8
2006-10-26 CVE-2006-5553 Remote Port Scan Denial of Service vulnerability in Cisco products
Cisco Security Agent (CSA) for Linux 4.5 before 4.5.1.657 and 5.0 before 5.0.0.193, as used by Unified CallManager (CUCM) and Unified Presence Server (CUPS), allows remote attackers to cause a denial of service (resource consumption) via a port scan with certain options.
network
low complexity
cisco
7.8
2006-07-18 CVE-2006-3594 Remote vulnerability in Cisco Unified CallManager
Buffer overflow in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows remote attackers to execute arbitrary code via a long hostname in a SIP request, aka bug CSCsd96542.
network
low complexity
cisco
7.5
2006-07-18 CVE-2006-3593 Remote vulnerability in Cisco Unified CallManager
The command line interface (CLI) in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows local users to overwrite arbitrary files by redirecting a command's output to a file or folder, aka bug CSCse31704.
network
low complexity
cisco
4.0
2006-07-18 CVE-2006-3592 Remote vulnerability in Cisco Unified CallManager
Unspecified vulnerability in the command line interface (CLI) in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows local users to execute arbitrary commands with elevated privileges via unspecified vectors, involving "certain CLI commands," aka bug CSCse11005.
local
low complexity
cisco
4.6