Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveCiscoCVE-2009-2051
HistoryAug 27, 2009 - 5:00 p.m.

CVE-2009-2051

2009-08-2717:00:00
cisco
web.nvd.nist.gov
34
cve-2009-2051
cisco
ios
unified communications manager
dos
sip
invite
remote attackers
denial of service

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.6

Confidence

Low

EPSS

0.012

Percentile

85.1%

JSON

Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), and 7.x before 7.1(2) allow remote attackers to cause a denial of service (device reload or voice-services outage) via a malformed SIP INVITE message that triggers an improper call to the sipSafeStrlen function, aka Bug IDs CSCsz40392 and CSCsz43987.

Affected configurations

Nvd
Node
ciscounified_communications_managerRange5.0–5.1\(3g\)
OR
ciscounified_communications_managerRange6.1\(1\)–6.1\(4\)
OR
ciscounified_communications_managerRange7.1–7.1\(2\)
OR
ciscoiosRange12.2–12.4
OR
ciscoiosRange15.0–15.1
OR
ciscoios_xeRange2.5.0–2.6.1
VendorProductVersionCPE
ciscoioscpe:/o:cisco:ios::::
ciscoios_xecpe:/o:cisco:ios_xe::::

Related

nvd 1
cvelist 1
prion 1
nessus 1
securityvulns 4
cisco 2
nvd
nvd
CVE-2009-2051
2009-08-27 17:00:00
cvelist
cvelist
CVE-2009-2051
2009-08-27 16:31:00
prion
prion
Code injection
2009-08-27 17:00:00
nessus
nessus
Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities (cisco-sa-20100922-sip)
2010-09-22 00:00:00
securityvulns
securityvulns
Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities
2010-09-24 00:00:00
Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities
2009-08-27 00:00:00
Cisco Unified Communications Manager / Cisco Unified Presence DoS
2009-10-17 00:00:00
cisco
cisco
Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities
2010-09-22 16:00:00
Cisco Unified Communications Manager Denial of Service Vulnerabilities
2009-08-26 16:00:00

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.6

Confidence

Low

EPSS

0.012

Percentile

85.1%

JSON
Related for CVE-2009-2051
nvd1cvelist1prion1nessus1securityvulns4cisco2