Vulnerabilities > Cisco > Unified Communications Manager > 4.3.2.sr1

DATE CVE VULNERABILITY TITLE RISK
2007-10-18 CVE-2007-5538 Buffer Errors vulnerability in Cisco products
Buffer overflow in the Centralized TFTP File Locator Service in Cisco Unified Communications Manager (CUCM, formerly CallManager) 5.1 before 5.1(3), and Unified CallManager 5.0, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors involving the processing of filenames, aka CSCsh47712.
network
low complexity
cisco CWE-119
critical
 10.0
10
2007-10-18 CVE-2007-5537 Resource Management Errors vulnerability in Cisco products
Cisco Unified Communications Manager (CUCM, formerly CallManager) 5.1 before 5.1(2), and Unified CallManager 5.0, allow remote attackers to cause a denial of service (kernel panic) via a flood of SIP INVITE messages to UDP port 5060, which triggers resource exhaustion, aka CSCsi75822.
network
low complexity
cisco CWE-399
7.8
7.8