Cisco Unified Communications Manager (CUCM) Multiple Denial of Service Vulnerabilities
BID:49302
Info
Cisco Unified Communications Manager (CUCM) Multiple Denial of Service Vulnerabilities
| Bugtraq ID: | 49302 |
| Class: | Unknown |
| CVE: |
CVE-2011-2560 CVE-2011-2561 CVE-2011-2562 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 24 2011 12:00AM |
| Updated: | Mar 19 2015 08:09AM |
| Credit: | The vendor reported these issues. |
| Vulnerable: |
Cisco Unified Communications Manager 8.5(1)SU1 Cisco Unified Communications Manager 8.5(1) Cisco Unified Communications Manager 8.5 Cisco Unified Communications Manager 8.0(3a)su1 Cisco Unified Communications Manager 8.0(3a) Cisco Unified Communications Manager 8.0(3) Cisco Unified Communications Manager 8.0(2C)Su1 Cisco Unified Communications Manager 8.0(2C) Cisco Unified Communications Manager 8.0(1) Cisco Unified Communications Manager 8.0(0.98000.106) Cisco Unified Communications Manager 7.1(5b)su3 Cisco Unified Communications Manager 7.1(5b)SU2 Cisco Unified Communications Manager 7.1(5B) Cisco Unified Communications Manager 7.1(5A) Cisco Unified Communications Manager 7.1(5)Su1a Cisco Unified Communications Manager 7.1(5)Su1 Cisco Unified Communications Manager 7.1(5) Cisco Unified Communications Manager 7.1(3b)su2 Cisco Unified Communications Manager 7.1(3b)su1 Cisco Unified Communications Manager 7.1(3B) Cisco Unified Communications Manager 7.1(3A)Su1a Cisco Unified Communications Manager 7.1(3a)su1 Cisco Unified Communications Manager 7.1(3A) Cisco Unified Communications Manager 7.1(3) Cisco Unified Communications Manager 7.1(2B)Su1 Cisco Unified Communications Manager 7.1(2B) Cisco Unified Communications Manager 7.1(2a)su1 Cisco Unified Communications Manager 7.1(2A) Cisco Unified Communications Manager 7.1(2) Cisco Unified Communications Manager 7.1 Cisco Unified Communications Manager 7.0(3g) Cisco Unified Communications Manager 7.0(2a)SU3 Cisco Unified Communications Manager 7.0(2A)Su2 Cisco Unified Communications Manager 7.0(2a)su1 Cisco Unified Communications Manager 7.0(2A) Cisco Unified Communications Manager 7.0(2) Cisco Unified Communications Manager 7.0(1)Su1a Cisco Unified Communications Manager 7.0(1)Su1 Cisco Unified Communications Manager 7.0 Cisco Unified Communications Manager 6.1(5)SU2 Cisco Unified Communications Manager 6.1(5)SU1 Cisco Unified Communications Manager 6.1(5) Cisco Unified Communications Manager 6.1(4A)Su2 Cisco Unified Communications Manager 6.1(4A) Cisco Unified Communications Manager 6.1(4)Su1 Cisco Unified Communications Manager 6.1(4) Cisco Unified Communications Manager 6.1(3B) Cisco Unified Communications Manager 6.1(3A) Cisco Unified Communications Manager 6.1(3) Cisco Unified Communications Manager 6.1(2)Su1a Cisco Unified Communications Manager 6.1(2) Cisco Unified Communications Manager 6.1(1B) Cisco Unified Communications Manager 6.1(1a) Cisco Unified Communications Manager 6.1(1) Cisco Unified Communications Manager 6.1 (3b)su1 Cisco Unified Communications Manager 6.1 (2)su1 Cisco Unified Communications Manager 6.1 Cisco Unified Communications Manager 6.0(1) Cisco Unified Communications Manager 6.0 (1a) Cisco Unified Communications Manager 4.3(2)SR2 Cisco Unified Communications Manager 4.3(2)SR1b Cisco Unified Communications Manager 4.3(2)sr1a Cisco Unified Communications Manager 4.3(2)SR1 Cisco Unified Communications Manager 4.3(2) Cisco Unified Communications Manager 4.3(1)sr.1 Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 4.2(3)sr2 Cisco Unified Communications Manager 4.2 (3)SR4 Cisco Unified Communications Manager 4.2 (3)SR3 Cisco Unified Communications Manager 4.2 (3)SR2b |
| Not Vulnerable: |
Cisco Unified Communications Manager 8.6 Cisco Unified Communications Manager 8.5(1)SU2 Cisco Unified Communications Manager 8.0(3a)SU2 Cisco Unified Communications Manager 7.1(5b)SU4 Cisco Unified Communications Manager 6.1(5)SU3 |
Discussion
Cisco Unified Communications Manager (CUCM) Multiple Denial of Service Vulnerabilities
Cisco Unified Communications Manager is prone to multiple denial-of-service vulnerabilities.
An attacker can exploit these issues to cause denial-of-service conditions in the affected application.
These issues are documented by these Cisco bug IDs:
CSCtf97162
CSCtc61990
CSCth43256
Cisco Unified Communications Manager is prone to multiple denial-of-service vulnerabilities.
An attacker can exploit these issues to cause denial-of-service conditions in the affected application.
These issues are documented by these Cisco bug IDs:
CSCtf97162
CSCtc61990
CSCth43256
Exploit / POC
Cisco Unified Communications Manager (CUCM) Multiple Denial of Service Vulnerabilities
To exploit these issues, attackers can use readily available network utilities.
To exploit these issues, attackers can use readily available network utilities.
Solution / Fix
Cisco Unified Communications Manager (CUCM) Multiple Denial of Service Vulnerabilities
Solution:
The vendor has released updates. Please see the referenced advisory for details.
Solution:
The vendor has released updates. Please see the referenced advisory for details.
References
Cisco Unified Communications Manager (CUCM) Multiple Denial of Service Vulnerabilities
References:
References: