CVE-2009-2865

2009-09-2819:30:01

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

Confidence

High

EPSS

0.031

Percentile

91.0%

JSON

Buffer overflow in the login implementation in the Extension Mobility feature in the Unified Communications Manager Express (CME) component in Cisco IOS 12.4XW, 12.4XY, 12.4XZ, and 12.4YA allows remote attackers to execute arbitrary code or cause a denial of service via crafted HTTP requests, aka Bug ID CSCsq58779.

Affected configurations

Nvd

Node

ciscounified_communications_manager_express

AND

ciscoiosMatch12.4xw

ciscoiosMatch12.4xy

ciscoiosMatch12.4xz

ciscoiosMatch12.4ya

VendorProductVersionCPE
ciscounified_communications_manager_express*cpe:2.3:a:cisco:unified_communications_manager_express:*:*:*:*:*:*:*:*
ciscoios12.4xwcpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*
ciscoios12.4xycpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*
ciscoios12.4xzcpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*
ciscoios12.4yacpe:2.3:o:cisco:ios:12.4ya:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	unified_communications_manager_express	*	cpe:2.3:a:cisco:unified_communications_manager_express::::::::
cisco	ios	12.4xw	cpe:2.3:o:cisco:ios:12.4xw:::::::*
cisco	ios	12.4xy	cpe:2.3:o:cisco:ios:12.4xy:::::::*
cisco	ios	12.4xz	cpe:2.3:o:cisco:ios:12.4xz:::::::*
cisco	ios	12.4ya	cpe:2.3:o:cisco:ios:12.4ya:::::::*