Lucene search
CiscoCVE-2012-3935HistorySep 12, 2012 - 11:55 p.m.
CVE-2012-3935
2012-09-1223:55:00
CWE-119
cisco
web.nvd.nist.gov
25
cisco
unified presence
jabber xcp
denial of service
vulnerability
cve-2012-3935
xmpp stream header
csctu32832
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
6.8
Confidence
High
EPSS
0.012
Percentile
85.1%
Cisco Unified Presence (CUP) before 8.6(3) and Jabber Extensible Communications Platform (aka Jabber XCP) before 5.3 allow remote attackers to cause a denial of service (process crash) via a crafted XMPP stream header, aka Bug ID CSCtu32832.
Affected configurations
Node
ciscounified_presenceRange≤8.6\(2\)
ORciscounified_presenceMatch1.0
ORciscounified_presenceMatch6.0
ORciscounified_presenceMatch6.0\(1\)
ORciscounified_presenceMatch6.0\(2\)
ORciscounified_presenceMatch6.0\(3\)
ORciscounified_presenceMatch6.0\(4\)
ORciscounified_presenceMatch6.0\(5\)
ORciscounified_presenceMatch6.0\(6\)
ORciscounified_presenceMatch6.0\(7\)
ORciscounified_presenceMatch6.0_1
ORciscounified_presenceMatch6.0_2
ORciscounified_presenceMatch7.0
ORciscounified_presenceMatch7.0\(1\)
ORciscounified_presenceMatch7.0\(2\)
ORciscounified_presenceMatch7.0\(3\)
ORciscounified_presenceMatch7.0\(4\)
ORciscounified_presenceMatch7.0\(5\)
ORciscounified_presenceMatch7.0\(6\)
ORciscounified_presenceMatch7.0\(7\)
ORciscounified_presenceMatch7.0\(8\)
ORciscounified_presenceMatch7.0\(9\)
ORciscounified_presenceMatch8.0
ORciscounified_presenceMatch8.0\(1\)
ORciscounified_presenceMatch8.0\(2\)
ORciscounified_presenceMatch8.0\(3\)
ORciscounified_presenceMatch8.0\(4\)
ORciscounified_presenceMatch8.5
ORciscounified_presenceMatch8.5\(1\)
ORciscounified_presenceMatch8.5\(2\)
ORciscounified_presenceMatch8.5\(3\)
ORciscounified_presenceMatch8.6\(1\)
Node
ciscojabber_extensible_communications_platformRange≤5.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | unified_presence | * | cpe:2.3:a:cisco:unified_presence:*:*:*:*:*:*:*:* |
| cisco | unified_presence | 1.0 | cpe:2.3:a:cisco:unified_presence:1.0:*:*:*:*:*:*:* |
| cisco | unified_presence | 6.0 | cpe:2.3:a:cisco:unified_presence:6.0:*:*:*:*:*:*:* |
| cisco | unified_presence | 6.0(1) | cpe:2.3:a:cisco:unified_presence:6.0\(1\):*:*:*:*:*:*:* |
| cisco | unified_presence | 6.0(2) | cpe:2.3:a:cisco:unified_presence:6.0\(2\):*:*:*:*:*:*:* |
| cisco | unified_presence | 6.0(3) | cpe:2.3:a:cisco:unified_presence:6.0\(3\):*:*:*:*:*:*:* |
| cisco | unified_presence | 6.0(4) | cpe:2.3:a:cisco:unified_presence:6.0\(4\):*:*:*:*:*:*:* |
| cisco | unified_presence | 6.0(5) | cpe:2.3:a:cisco:unified_presence:6.0\(5\):*:*:*:*:*:*:* |
| cisco | unified_presence | 6.0(6) | cpe:2.3:a:cisco:unified_presence:6.0\(6\):*:*:*:*:*:*:* |
| cisco | unified_presence | 6.0(7) | cpe:2.3:a:cisco:unified_presence:6.0\(7\):*:*:*:*:*:*:* |
Related
prion
prion
Code injection
2012-09-12 23:55:00
cvelist
cvelist
CVE-2012-3935
2012-09-12 23:00:00
nvd
nvd
CVE-2012-3935
2012-09-12 23:55:00
cisco
cisco
securityvulns
securityvulns
Cisco Unified Presence / Jabber Extensible Communications Platform DoS
2012-10-29 00:00:00
nessus
nessus
Cisco Unified Presence Server DoS (cisco-sa-20120912-cupxcp)
2013-08-16 00:00:00
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
6.8
Confidence
High
EPSS
0.012
Percentile
85.1%
Related for CVE-2012-3935