Cisco Unified Communications Manager SCCP (CVE-2010-0587) Denial of Service Vulnerability

Bugtraq ID:	38496
Class:	Design Error
CVE:	CVE-2010-0587
Remote:	Yes
Local:	No
Published:	Mar 03 2010 12:00AM
Updated:	Mar 12 2010 04:02PM
Credit:	Sipera VIPER Lab
Vulnerable:	Cisco Unified Communications Manager 8.0(0.98000.106) Cisco Unified Communications Manager 7.1(2a)su1 Cisco Unified Communications Manager 7.1(2) Cisco Unified Communications Manager 7.1 Cisco Unified Communications Manager 7.0(3g) Cisco Unified Communications Manager 7.0(2a)su1 Cisco Unified Communications Manager 7.0(2) Cisco Unified Communications Manager 7.0(2) Cisco Unified Communications Manager 7.0 Cisco Unified Communications Manager 6.1(4) Cisco Unified Communications Manager 6.1(3) Cisco Unified Communications Manager 6.1(2) Cisco Unified Communications Manager 6.1(1a) Cisco Unified Communications Manager 6.1(1) Cisco Unified Communications Manager 6.1 (3b)su1 Cisco Unified Communications Manager 6.1 (2)su1 Cisco Unified Communications Manager 6.1 Cisco Unified Communications Manager 6.0(1) Cisco Unified Communications Manager 6.0 (1a) Cisco Unified Communications Manager 5.1(3g) Cisco Unified Communications Manager 5.1(3e) Cisco Unified Communications Manager 5.1(3d) Cisco Unified Communications Manager 5.1(3C) Cisco Unified Communications Manager 5.1(3a) Cisco Unified Communications Manager 5.1(3) Cisco Unified Communications Manager 5.1(2b) Cisco Unified Communications Manager 5.1(2a) Cisco Unified Communications Manager 5.1(2) Cisco Unified Communications Manager 5.1(1) Cisco Unified Communications Manager 4.3(2)Sr1b Cisco Unified Communications Manager 4.3(2)Sr1a Cisco Unified Communications Manager 4.3(2)SR1 Cisco Unified Communications Manager 4.3(2) Cisco Unified Communications Manager 4.3(1)Sr.1 Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 4.2(3)sr2 Cisco Unified Communications Manager 4.2 (3)SR4 Cisco Unified Communications Manager 4.2 (3)SR3 Cisco Unified Communications Manager 4.2 (3)SR2b Cisco Unified CallManager 6.0 Cisco Unified CallManager 5.0 Cisco Unified CallManager 4.2(3)SR4b
Not Vulnerable:	Cisco Unified Communications Manager 9.0(1) Cisco Unified Communications Manager 7.1(3a)su1 Cisco Unified Communications Manager 6.1(5) Cisco Unified Communications Manager 4.3(2)SR2

Cisco Unified Communications Manager SCCP (CVE-2010-0587) Denial of Service Vulnerability

Cisco Unified Communications Manager is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause an interruption in voice services, denying service to legitimate users.

This issue is tracked by Cisco Bug ID CSCtc38985.

Cisco Unified Communications Manager SCCP (CVE-2010-0587) Denial of Service Vulnerability

To exploit this issue, attackers can use readily available network utilities.

Cisco Unified Communications Manager SCCP (CVE-2010-0587) Denial of Service Vulnerability

Solution:
The vendor has released updates. Please see the referenced advisory for details.

Cisco Unified Communications Manager SCCP (CVE-2010-0587) Denial of Service Vulnerability

References:

• Cisco Unified Communication Manager Homepage (Cisco)
  
• Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service (Cisco Systems Product Security Incident Response Team )
  
• Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service (Cisco)