Cisco Unified Communications Manager SIP Message (CVE-2010-2837) Denial of Service Vulnerability
BID:42696
Info
Cisco Unified Communications Manager SIP Message (CVE-2010-2837) Denial of Service Vulnerability
| Bugtraq ID: | 42696 |
| Class: | Design Error |
| CVE: |
CVE-2010-2837 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 25 2010 12:00AM |
| Updated: | Aug 25 2010 12:00AM |
| Credit: | Cisco |
| Vulnerable: |
Cisco Unified Communications Manager 8.0(0.98000.106) Cisco Unified Communications Manager 7.1(3b)su2 Cisco Unified Communications Manager 7.1(3b)su1 Cisco Unified Communications Manager 7.1(3a)su1 Cisco Unified Communications Manager 7.1(2a)su1 Cisco Unified Communications Manager 7.1(2) Cisco Unified Communications Manager 7.1 Cisco Unified Communications Manager 7.0(2a)su1 Cisco Unified Communications Manager 7.0(2) Cisco Unified Communications Manager 7.0 Cisco Unified Communications Manager 6.1(5) Cisco Unified Communications Manager 6.1(4) Cisco Unified Communications Manager 6.1(3) Cisco Unified Communications Manager 6.1(2) Cisco Unified Communications Manager 6.1(1a) Cisco Unified Communications Manager 6.1(1) Cisco Unified Communications Manager 6.1 (3b)su1 Cisco Unified Communications Manager 6.1 (2)su1 Cisco Unified Communications Manager 6.1 |
| Not Vulnerable: |
Cisco Unified Communications Manager 9.0(1) Cisco Unified Communications Manager 7.1(5) Cisco Unified Communications Manager 7.0(2a)SU3 Cisco Unified Communications Manager 6.1(5)SU1 |
Discussion
Cisco Unified Communications Manager SIP Message (CVE-2010-2837) Denial of Service Vulnerability
Cisco Unified Communications Manager is prone to a denial-of-service vulnerability.
An attacker can exploit this issue to cause an interruption in voice services, denying service to legitimate users.
This issue is tracked by Cisco Bug ID CSCtd17310.
Cisco Unified Communications Manager is prone to a denial-of-service vulnerability.
An attacker can exploit this issue to cause an interruption in voice services, denying service to legitimate users.
This issue is tracked by Cisco Bug ID CSCtd17310.
Exploit / POC
Cisco Unified Communications Manager SIP Message (CVE-2010-2837) Denial of Service Vulnerability
To exploit this issue, attackers can use readily available network utilities.
To exploit this issue, attackers can use readily available network utilities.
Solution / Fix
Cisco Unified Communications Manager SIP Message (CVE-2010-2837) Denial of Service Vulnerability
Solution:
The vendor has released updates. Please see the referenced advisory for details.
Solution:
The vendor has released updates. Please see the referenced advisory for details.
References
Cisco Unified Communications Manager SIP Message (CVE-2010-2837) Denial of Service Vulnerability
References:
References: