Lucene search

K
nvd[email protected]NVD:CVE-2007-5538
HistoryOct 18, 2007 - 12:17 a.m.

CVE-2007-5538

2007-10-1800:17:00
CWE-119
web.nvd.nist.gov
5

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

High

EPSS

0.087

Percentile

94.6%

Buffer overflow in the Centralized TFTP File Locator Service in Cisco Unified Communications Manager (CUCM, formerly CallManager) 5.1 before 5.1(3), and Unified CallManager 5.0, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors involving the processing of filenames, aka CSCsh47712.

Affected configurations

Nvd
Node
ciscounified_callmanagerMatch5.0
OR
ciscounified_communications_managerRange5.1\(2\)
VendorProductVersionCPE
ciscounified_callmanager5.0cpe:2.3:a:cisco:unified_callmanager:5.0:*:*:*:*:*:*:*
ciscounified_communications_manager*cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

High

EPSS

0.087

Percentile

94.6%

Related for NVD:CVE-2007-5538