CVE-2009-0057

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2009-0057
The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager 5.x before 5.1(3e) and 6.x before 6.1(3) allows remote attackers to cause a denial of service (voice service outage) by sending malformed input over a TCP session in which the "client terminates prematurely."

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
http://secunia.com/advisories/33588 Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a61928.shtml Vendor Advisory
http://www.securityfocus.com/bid/33379
http://www.securitytracker.com/id?1021620
http://www.vupen.com/english/advisories/2009/0213
https://exchange.xforce.ibmcloud.com/vulnerabilities/48139
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:cisco:unified_communications_manager:5.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.0_1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.0_2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.0_3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.0_3a:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.0_4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.0_4a:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.0_4a_su1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.1:\(1\):*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.1:\(2\):*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.1:\(2a\):*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.1:\(2b\):*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.1:\(3a\):*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.1:5.1\(1\):*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.1:5.1_\(2a\):*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.1\(1\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.1\(2\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.1\(3c\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.1.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.1_\(2a\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.1_1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.1_2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.1_2a:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.1_2b:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:5.1_3a:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:6.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:6.0:\(1\):*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:6.0:\(1a\):*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:6.0_1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:6.0_1a:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:6.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:6.1:\(1a\):*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:6.1\(2\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:6.1.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:6.1_1a:*:*:*:*:*:*:*
History

No history.

Information

Published : 2009-01-22 18:30

Updated : 2024-02-04 17:33

NVD link : CVE-2009-0057

Mitre link : CVE-2009-0057

CVE.ORG link : CVE-2009-0057

JSON object : View

Products Affected

cisco

  • unified_communications_manager
CWE
CWE-20

Improper Input Validation