Lucene search

CiscoCVE-2008-1746

HistoryMay 16, 2008 - 12:54 p.m.

CVE-2008-1746

2008-05-1612:54:00

CWE-20

cisco

web.nvd.nist.gov

cisco

unified communications manager

snmp

trap agent

denial of service

vulnerability

cve-2008-1746

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.5

Confidence

High

EPSS

0.021

Percentile

89.3%

JSON

The SNMP Trap Agent service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR6, 4.2 before 4.2(3)SR3, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) allows remote attackers to cause a denial of service (core dump and service restart) via a series of malformed UDP packets, as demonstrated by the IP Stack Integrity Checker (ISIC), aka Bug ID CSCsj24113.

Affected configurations

Nvd

Node

ciscounified_communications_managerMatch4.1

ciscounified_communications_managerMatch4.1\(3\)sr.5

ciscounified_communications_managerMatch4.1\(3\)sr4

ciscounified_communications_managerMatch4.1\(3\)sr5

ciscounified_communications_managerMatch4.1\(3\)sr5b

ciscounified_communications_managerMatch4.1\(3\)sr5c

ciscounified_communications_managerMatch4.24.2\(3\)sr.2

ciscounified_communications_managerMatch4.24.2_\(3\)sr2b

ciscounified_communications_managerMatch4.24.2_\(3\)sr3

ciscounified_communications_managerMatch4.3

ciscounified_communications_managerMatch4.34.3\(1\)sr.1

ciscounified_communications_managerMatch5.1\(1\)

ciscounified_communications_managerMatch5.1\(2\)

ciscounified_communications_managerMatch5.1\(2a\)

ciscounified_communications_managerMatch5.1\(2b\)

ciscounified_communications_managerMatch6.0

ciscounified_communications_managerMatch6.1

ciscounified_communications_managerMatch6.1\(1a\)

VendorProductVersionCPE
ciscounified_communications_manager4.1cpe:2.3:a:cisco:unified_communications_manager:4.1:*:*:*:*:*:*:*
ciscounified_communications_manager4.1cpe:2.3:a:cisco:unified_communications_manager:4.1:\(3\)sr.5:*:*:*:*:*:*
ciscounified_communications_manager4.1cpe:2.3:a:cisco:unified_communications_manager:4.1:\(3\)sr4:*:*:*:*:*:*
ciscounified_communications_manager4.1cpe:2.3:a:cisco:unified_communications_manager:4.1:\(3\)sr5:*:*:*:*:*:*
ciscounified_communications_manager4.1cpe:2.3:a:cisco:unified_communications_manager:4.1:\(3\)sr5b:*:*:*:*:*:*
ciscounified_communications_manager4.1cpe:2.3:a:cisco:unified_communications_manager:4.1:\(3\)sr5c:*:*:*:*:*:*
ciscounified_communications_manager4.2cpe:2.3:a:cisco:unified_communications_manager:4.2:4.2\(3\)sr.2:*:*:*:*:*:*
ciscounified_communications_manager4.2cpe:2.3:a:cisco:unified_communications_manager:4.2:4.2_\(3\)sr2b:*:*:*:*:*:*
ciscounified_communications_manager4.2cpe:2.3:a:cisco:unified_communications_manager:4.2:4.2_\(3\)sr3:*:*:*:*:*:*
ciscounified_communications_manager4.3cpe:2.3:a:cisco:unified_communications_manager:4.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	unified_communications_manager	4.1	cpe:2.3:a:cisco:unified_communications_manager:4.1:::::::*
cisco	unified_communications_manager	4.1	cpe:2.3:a:cisco:unified_communications_manager:4.1:\(3\)sr.5::::::
cisco	unified_communications_manager	4.1	cpe:2.3:a:cisco:unified_communications_manager:4.1:\(3\)sr4::::::
cisco	unified_communications_manager	4.1	cpe:2.3:a:cisco:unified_communications_manager:4.1:\(3\)sr5::::::
cisco	unified_communications_manager	4.1	cpe:2.3:a:cisco:unified_communications_manager:4.1:\(3\)sr5b::::::
cisco	unified_communications_manager	4.1	cpe:2.3:a:cisco:unified_communications_manager:4.1:\(3\)sr5c::::::
cisco	unified_communications_manager	4.2	cpe:2.3:a:cisco:unified_communications_manager:4.2:4.2\(3\)sr.2::::::
cisco	unified_communications_manager	4.2	cpe:2.3:a:cisco:unified_communications_manager:4.2:4.2_\(3\)sr2b::::::
cisco	unified_communications_manager	4.2	cpe:2.3:a:cisco:unified_communications_manager:4.2:4.2_\(3\)sr3::::::
cisco	unified_communications_manager	4.3	cpe:2.3:a:cisco:unified_communications_manager:4.3:::::::*

Rows per page:

1-10 of 181

References

secunia.com/advisories/30238

securitytracker.com/id?1020022

www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml

www.securityfocus.com/bid/29221

www.vupen.com/english/advisories/2008/1533

exchange.xforce.ibmcloud.com/vulnerabilities/42420

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.5

Confidence

High

EPSS

0.021

Percentile

89.3%

JSON

Related for CVE-2008-1746