Lucene search

K
cveCiscoCVE-2009-0057
HistoryJan 22, 2009 - 6:30 p.m.

CVE-2009-0057

2009-01-2218:30:03
CWE-20
cisco
web.nvd.nist.gov
30
cisco
unified communications manager
capf service
denial of service
vulnerability

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.7

Confidence

High

EPSS

0.023

Percentile

89.6%

The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager 5.x before 5.1(3e) and 6.x before 6.1(3) allows remote attackers to cause a denial of service (voice service outage) by sending malformed input over a TCP session in which the “client terminates prematurely.”

Affected configurations

Nvd
Node
ciscounified_communications_managerMatch5.0
OR
ciscounified_communications_managerMatch5.0_1
OR
ciscounified_communications_managerMatch5.0_2
OR
ciscounified_communications_managerMatch5.0_3
OR
ciscounified_communications_managerMatch5.0_3a
OR
ciscounified_communications_managerMatch5.0_4
OR
ciscounified_communications_managerMatch5.0_4a
OR
ciscounified_communications_managerMatch5.0_4a_su1
OR
ciscounified_communications_managerMatch5.1
OR
ciscounified_communications_managerMatch5.1\(1\)
OR
ciscounified_communications_managerMatch5.1\(2\)
OR
ciscounified_communications_managerMatch5.1\(2a\)
OR
ciscounified_communications_managerMatch5.1\(2b\)
OR
ciscounified_communications_managerMatch5.1\(3a\)
OR
ciscounified_communications_managerMatch5.15.1\(1\)
OR
ciscounified_communications_managerMatch5.15.1_\(2a\)
OR
ciscounified_communications_managerMatch5.1\(1\)
OR
ciscounified_communications_managerMatch5.1\(2\)
OR
ciscounified_communications_managerMatch5.1\(3c\)
OR
ciscounified_communications_managerMatch5.1.2
OR
ciscounified_communications_managerMatch5.1_\(2a\)
OR
ciscounified_communications_managerMatch5.1_1
OR
ciscounified_communications_managerMatch5.1_2
OR
ciscounified_communications_managerMatch5.1_2a
OR
ciscounified_communications_managerMatch5.1_2b
OR
ciscounified_communications_managerMatch5.1_3a
OR
ciscounified_communications_managerMatch6.0
OR
ciscounified_communications_managerMatch6.0\(1\)
OR
ciscounified_communications_managerMatch6.0\(1a\)
OR
ciscounified_communications_managerMatch6.0_1
OR
ciscounified_communications_managerMatch6.0_1a
OR
ciscounified_communications_managerMatch6.1
OR
ciscounified_communications_managerMatch6.1\(1a\)
OR
ciscounified_communications_managerMatch6.1\(2\)
OR
ciscounified_communications_managerMatch6.1.0
OR
ciscounified_communications_managerMatch6.1_1a
VendorProductVersionCPE
ciscounified_communications_manager5.0cpe:2.3:a:cisco:unified_communications_manager:5.0:*:*:*:*:*:*:*
ciscounified_communications_manager5.0_1cpe:2.3:a:cisco:unified_communications_manager:5.0_1:*:*:*:*:*:*:*
ciscounified_communications_manager5.0_2cpe:2.3:a:cisco:unified_communications_manager:5.0_2:*:*:*:*:*:*:*
ciscounified_communications_manager5.0_3cpe:2.3:a:cisco:unified_communications_manager:5.0_3:*:*:*:*:*:*:*
ciscounified_communications_manager5.0_3acpe:2.3:a:cisco:unified_communications_manager:5.0_3a:*:*:*:*:*:*:*
ciscounified_communications_manager5.0_4cpe:2.3:a:cisco:unified_communications_manager:5.0_4:*:*:*:*:*:*:*
ciscounified_communications_manager5.0_4acpe:2.3:a:cisco:unified_communications_manager:5.0_4a:*:*:*:*:*:*:*
ciscounified_communications_manager5.0_4a_su1cpe:2.3:a:cisco:unified_communications_manager:5.0_4a_su1:*:*:*:*:*:*:*
ciscounified_communications_manager5.1cpe:2.3:a:cisco:unified_communications_manager:5.1:*:*:*:*:*:*:*
ciscounified_communications_manager5.1cpe:2.3:a:cisco:unified_communications_manager:5.1:\(1\):*:*:*:*:*:*
Rows per page:
1-10 of 361

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.7

Confidence

High

EPSS

0.023

Percentile

89.6%