Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 5.x before 5.1(3g), 6.x before 6.1(4), 7.0.x before 7.0(2a)su1, and 7.1.x before 7.1(2) allows remote attackers to cause a denial of service (service restart) via malformed SIP messages, aka Bug ID CSCsz95423.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Unified_callmanager | Cisco | 5.0(1) (including) | 5.0(1) (including) |
| Unified_callmanager | Cisco | 5.0(2) (including) | 5.0(2) (including) |
| Unified_callmanager | Cisco | 5.0(2a) (including) | 5.0(2a) (including) |
| Unified_callmanager | Cisco | 5.0(3) (including) | 5.0(3) (including) |
| Unified_callmanager | Cisco | 5.0(3a) (including) | 5.0(3a) (including) |
| Unified_callmanager | Cisco | 5.0(4) (including) | 5.0(4) (including) |
| Unified_callmanager | Cisco | 5.0(4a) (including) | 5.0(4a) (including) |
| Unified_callmanager | Cisco | 5.0(4c) (including) | 5.0(4c) (including) |
| Unified_callmanager | Cisco | 5.1 (including) | 5.1 (including) |
| Unified_callmanager | Cisco | 5.1(1) (including) | 5.1(1) (including) |
| Unified_callmanager | Cisco | 5.1(1a) (including) | 5.1(1a) (including) |
| Unified_callmanager | Cisco | 5.1(1c) (including) | 5.1(1c) (including) |
| Unified_callmanager | Cisco | 5.1(2) (including) | 5.1(2) (including) |
| Unified_callmanager | Cisco | 5.1(2a) (including) | 5.1(2a) (including) |
| Unified_callmanager | Cisco | 5.1(2b) (including) | 5.1(2b) (including) |
| Unified_callmanager | Cisco | 5.1(3) (including) | 5.1(3) (including) |
| Unified_callmanager | Cisco | 5.1(3a) (including) | 5.1(3a) (including) |
| Unified_callmanager | Cisco | 5.1(3b) (including) | 5.1(3b) (including) |
| Unified_callmanager | Cisco | 5.1(3c) (including) | 5.1(3c) (including) |
| Unified_callmanager | Cisco | 6.0(1) (including) | 6.0(1) (including) |
| Unified_callmanager | Cisco | 6.0(1a) (including) | 6.0(1a) (including) |
| Unified_callmanager | Cisco | 6.0(1b) (including) | 6.0(1b) (including) |
| Unified_callmanager | Cisco | 6.1 (including) | 6.1 (including) |
| Unified_callmanager | Cisco | 6.1(1) (including) | 6.1(1) (including) |
| Unified_callmanager | Cisco | 6.1(1a) (including) | 6.1(1a) (including) |
| Unified_callmanager | Cisco | 6.1(1b) (including) | 6.1(1b) (including) |
| Unified_callmanager | Cisco | 6.1(2) (including) | 6.1(2) (including) |
| Unified_communications_manager | Cisco | 5.1(1b) (including) | 5.1(1b) (including) |
| Unified_communications_manager | Cisco | 5.1(1c) (including) | 5.1(1c) (including) |
| Unified_communications_manager | Cisco | 5.1(2) (including) | 5.1(2) (including) |
| Unified_communications_manager | Cisco | 5.1(2a) (including) | 5.1(2a) (including) |
| Unified_communications_manager | Cisco | 5.1(3) (including) | 5.1(3) (including) |
| Unified_communications_manager | Cisco | 5.1(3a) (including) | 5.1(3a) (including) |
| Unified_communications_manager | Cisco | 5.1(3c) (including) | 5.1(3c) (including) |
| Unified_communications_manager | Cisco | 5.1(3d) (including) | 5.1(3d) (including) |
| Unified_communications_manager | Cisco | 5.1(3e) (including) | 5.1(3e) (including) |
| Unified_communications_manager | Cisco | 6.1(1) (including) | 6.1(1) (including) |
| Unified_communications_manager | Cisco | 6.1(1a) (including) | 6.1(1a) (including) |
| Unified_communications_manager | Cisco | 6.1(1b) (including) | 6.1(1b) (including) |
| Unified_communications_manager | Cisco | 6.1(2) (including) | 6.1(2) (including) |
| Unified_communications_manager | Cisco | 6.1(2)su1 (including) | 6.1(2)su1 (including) |
| Unified_communications_manager | Cisco | 6.1(2)su1a (including) | 6.1(2)su1a (including) |
| Unified_communications_manager | Cisco | 6.1(3) (including) | 6.1(3) (including) |
| Unified_communications_manager | Cisco | 7.0(1) (including) | 7.0(1) (including) |
| Unified_communications_manager | Cisco | 7.0(2) (including) | 7.0(2) (including) |
| Unified_communications_manager | Cisco | 7.1 (including) | 7.1 (including) |
References
- http://osvdb.org/58344
- http://secunia.com/advisories/36836
- http://tools.cisco.com/security/center/viewAlert.x?alertId=18883
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8118.shtml
- http://www.securityfocus.com/bid/36496
- http://www.securitytracker.com/id?1022931
- http://www.vupen.com/english/advisories/2009/2757
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53447
- http://osvdb.org/58344
- http://secunia.com/advisories/36836
- http://tools.cisco.com/security/center/viewAlert.x?alertId=18883
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8118.shtml
- http://www.securityfocus.com/bid/36496
- http://www.securitytracker.com/id?1022931
- http://www.vupen.com/english/advisories/2009/2757
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53447