Cisco Unified Contact Center Express CTI Messages Denial of Service Vulnerability

Bugtraq ID:	40684
Class:	Design Error
CVE:	CVE-2010-1570
Remote:	Yes
Local:	No
Published:	Jun 09 2010 12:00AM
Updated:	Jun 09 2010 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Unified Contact Center Express (CCX) 7.x Cisco Unified Contact Center Express (CCX) 6.x Cisco Unified Contact Center Express (CCX) 5.x Cisco Customer Response Solution (CRS) 7.x Cisco Customer Response Solution (CRS) 6.x Cisco Customer Response Solution (CRS) 5.x
Not Vulnerable:	Cisco Unified Contact Center Express (CCX) 7.0(2) Cisco Unified Contact Center Express (CCX) 7.0(1)SR4 Cisco Unified Contact Center Express (CCX) 6.0(1)SR1 Cisco Unified Contact Center Express (CCX) 5.0(2)SR3

Cisco Unified Contact Center Express CTI Messages Denial of Service Vulnerability

Cisco Unified Contact Center Express is prone to a denial-of-service vulnerability that affects the computer telephony integration (CTI) component.

An attacker can exploit this issue to cause active agents to logout, denying service to legitimate users.

This issue is tracked by Cisco Bug ID CSCso89629.

Cisco Unified Contact Center Express CTI Messages Denial of Service Vulnerability

To exploit this issue, attackers can use readily available network utilities.

Cisco Unified Contact Center Express CTI Messages Denial of Service Vulnerability

Solution:
Updates are available; please see the references for more information.

Cisco Unified Contact Center Express CTI Messages Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco)
  
• Cisco Security Advisory: Vulnerabilities in Cisco Unified Contact Center Express (Cisco)