int(4909)

Vulnerability Bulletins


Denegación de servicio en CUCM

Vulnerability classification

Property Value
Confidence level Oficial
Impact Denegación de Servicio
Dificulty Experto
Required attacker level Acceso remoto sin cuenta a un servicio estandar

System information

Property Value
Affected manufacturer Networking
Affected software Cisco Unified Communications Manager 5.1 < 5.1(3g)
Cisco Unified Communications Manager 6.x < 6.1(4)
Cisco Unified Communications Manager 7.0 < 7.0(2a)su1
Cisco Unified Communications Manager 7.1.x < 7.1(2)

Description

Se ha descubierto una vulnerabilidad en Cisco Unified Communications Manager.

Un atacante remoto podría causar una denegación de servicio mediante mensajes SIP especialmente diseñados.

Solution



Actualización de software

Cisco
Cisco Unified Communications Manager 5.1(3g)
Cisco Unified Communications Manager 6.1(4)
Cisco Unified Communications Manager 7.0(2a)su1
Cisco Unified Communications Manager 7.1(2)
http://tools.cisco.com/support/downloads/

Standar resources

Property Value
CVE CVE-2009-2864
BID 36496

Other resources

Cisco Security Advisory (cisco-sa-20090923-cm)
http://www.cisco.com/warp/public/707/cisco-sa-20090923-cm.shtml

Version history

Version Comments Date
1.0 Aviso emitido 2009-10-15