6.0.1a

DATE	CVE	VULNERABILITY TITLE	RISK
2008-05-16	CVE-2008-1744	Improper Input Validation vulnerability in Cisco products The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, and 4.3 before 4.3(2) allows remote attackers to cause a denial of service (service crash) via malformed network traffic, aka Bug ID CSCsk46770. network low complexity cisco CWE-20	7.8
2008-05-16	CVE-2008-1743	Resource Management Errors vulnerability in Cisco Unified Communications Manager Memory leak in the Certificate Trust List (CTL) Provider service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) and 6.x before 6.1(1) allows remote attackers to cause a denial of service (memory consumption and service interruption) via a series of malformed TCP packets, aka Bug ID CSCsi98433. network low complexity cisco CWE-399	7.8