The Skinny Call Control Protocol (SCCP) implementation in Cisco Unified CallManager (CUCM) 3.3 before 3.3(5)SR2a, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3)SR1, and 5.0 before 5.0(4a)SU1 allows remote attackers to cause a denial of service (loss of voice services) by sending crafted packets to the (1) SCCP (2000/tcp) or (2) SCCPS (2443/tcp) port.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Unified_callmanager | Cisco | 3.3 (including) | 3.3 (including) |
| Unified_callmanager | Cisco | 3.3(2) (including) | 3.3(2) (including) |
| Unified_callmanager | Cisco | 3.3(2)spb (including) | 3.3(2)spb (including) |
| Unified_callmanager | Cisco | 3.3(2)spc (including) | 3.3(2)spc (including) |
| Unified_callmanager | Cisco | 3.3(3) (including) | 3.3(3) (including) |
| Unified_callmanager | Cisco | 3.3(3)sr1 (including) | 3.3(3)sr1 (including) |
| Unified_callmanager | Cisco | 3.3(3)sr4 (including) | 3.3(3)sr4 (including) |
| Unified_callmanager | Cisco | 3.3(4) (including) | 3.3(4) (including) |
| Unified_callmanager | Cisco | 3.3(4)sr1a (including) | 3.3(4)sr1a (including) |
| Unified_callmanager | Cisco | 3.3(5) (including) | 3.3(5) (including) |
| Unified_callmanager | Cisco | 3.3(5)sr1 (including) | 3.3(5)sr1 (including) |
| Unified_callmanager | Cisco | 3.3(5)sr1a (including) | 3.3(5)sr1a (including) |
| Unified_callmanager | Cisco | 4.1 (including) | 4.1 (including) |
| Unified_callmanager | Cisco | 4.1(2) (including) | 4.1(2) (including) |
| Unified_callmanager | Cisco | 4.1(3) (including) | 4.1(3) (including) |
| Unified_callmanager | Cisco | 4.1(3)sr1 (including) | 4.1(3)sr1 (including) |
| Unified_callmanager | Cisco | 4.1(3)sr2 (including) | 4.1(3)sr2 (including) |
| Unified_callmanager | Cisco | 4.1(3)sr3 (including) | 4.1(3)sr3 (including) |
| Unified_callmanager | Cisco | 4.2 (including) | 4.2 (including) |
| Unified_callmanager | Cisco | 5.0 (including) | 5.0 (including) |
| Unified_callmanager | Cisco | 5.0(1) (including) | 5.0(1) (including) |
| Unified_callmanager | Cisco | 5.0(2) (including) | 5.0(2) (including) |
| Unified_callmanager | Cisco | 5.0(3) (including) | 5.0(3) (including) |
| Unified_callmanager | Cisco | 5.0(3a) (including) | 5.0(3a) (including) |
| Unified_callmanager | Cisco | 5.0(4) (including) | 5.0(4) (including) |
References
- http://secunia.com/advisories/24665
- http://securitytracker.com/id?1017826
- http://www.cisco.com/warp/public/707/cisco-sa-20070328-voip.shtml
- http://www.securityfocus.com/bid/23181
- http://www.vupen.com/english/advisories/2007/1144
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33295
- http://secunia.com/advisories/24665
- http://securitytracker.com/id?1017826
- http://www.cisco.com/warp/public/707/cisco-sa-20070328-voip.shtml
- http://www.securityfocus.com/bid/23181
- http://www.vupen.com/english/advisories/2007/1144
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33295