Lucene search

CiscoCVE-2008-1740

HistoryMay 16, 2008 - 12:54 p.m.

CVE-2008-1740

2008-05-1612:54:00

CWE-20

cisco

web.nvd.nist.gov

cisco

unified

presence

pe service

cve-2008-1740

denial of service

nvd

cisco unified presence

bug id cscsh20972

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.5

Confidence

High

EPSS

0.021

Percentile

89.3%

JSON

The Presence Engine (PE) service in Cisco Unified Presence before 6.0(1) allows remote attackers to cause a denial of service (core dump and service interruption) via an unspecified “stress test,” aka Bug ID CSCsh20972.

Affected configurations

Nvd

Node

ciscounified_presenceRange≤6.0_2

ciscounified_presenceMatch6.0_1

VendorProductVersionCPE
ciscounified_presence*cpe:2.3:a:cisco:unified_presence:*:*:*:*:*:*:*:*
ciscounified_presence6.0_1cpe:2.3:a:cisco:unified_presence:6.0_1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	unified_presence	*	cpe:2.3:a:cisco:unified_presence::::::::
cisco	unified_presence	6.0_1	cpe:2.3:a:cisco:unified_presence:6.0_1:::::::*

References

secunia.com/advisories/30240

securitytracker.com/id?1020023

www.cisco.com/en/US/products/products_security_advisory09186a0080995682.shtml

www.securityfocus.com/bid/29220

www.vupen.com/english/advisories/2008/1534

exchange.xforce.ibmcloud.com/vulnerabilities/42412

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.5

Confidence

High

EPSS

0.021

Percentile

89.3%

JSON

Related for CVE-2008-1740