Cisco IOS and Unified Communications Manager (CVE-2012-3949) Denial of Service Vulnerability

Bugtraq ID:	55697
Class:	Design Error
CVE:	CVE-2012-3949
Remote:	Yes
Local:	No
Published:	Sep 26 2012 12:00AM
Updated:	Mar 19 2015 09:39AM
Credit:	Cisco
Vulnerable:	Cisco Unified Communications Manager 8.6 Cisco Unified Communications Manager 8.5(1)SU2 Cisco Unified Communications Manager 8.5(1)SU1 Cisco Unified Communications Manager 8.5(1) Cisco Unified Communications Manager 8.5 Cisco Unified Communications Manager 7.1(5b)SU4 Cisco Unified Communications Manager 7.1(5b)su3 Cisco Unified Communications Manager 7.1(5b)SU2 Cisco Unified Communications Manager 7.1(5B) Cisco Unified Communications Manager 7.1(5A) Cisco Unified Communications Manager 7.1(5)Su1a Cisco Unified Communications Manager 7.1(5)Su1 Cisco Unified Communications Manager 7.1(5) Cisco Unified Communications Manager 7.1(3b)su2 Cisco Unified Communications Manager 7.1(3b)su1 Cisco Unified Communications Manager 7.1(3B) Cisco Unified Communications Manager 7.1(3A)Su1a Cisco Unified Communications Manager 7.1(3a)su1 Cisco Unified Communications Manager 7.1(3A) Cisco Unified Communications Manager 7.1(3) Cisco Unified Communications Manager 7.1(2B)Su1 Cisco Unified Communications Manager 7.1(2B) Cisco Unified Communications Manager 7.1(2a)su1 Cisco Unified Communications Manager 7.1(2A) Cisco Unified Communications Manager 7.1(2) Cisco Unified Communications Manager 7.1 Cisco Unified Communications Manager 7.0(3g) Cisco Unified Communications Manager 7.0(2a)SU3 Cisco Unified Communications Manager 7.0(2A)Su2 Cisco Unified Communications Manager 7.0(2a)su1 Cisco Unified Communications Manager 7.0(2A) Cisco Unified Communications Manager 7.0(2) Cisco Unified Communications Manager 7.0(1)Su1a Cisco Unified Communications Manager 7.0(1)Su1 Cisco Unified Communications Manager 7.0 Cisco Ios 15.2T Cisco Ios 15.2GC Cisco Ios 15.2(2)T1 Cisco Ios 15.2(1)T2 Cisco IOS 15.1M Cisco IOS 15.1GC Cisco IOS 15.0M Cisco IOS 12.4YB Cisco IOS 12.4YA Cisco IOS 12.4XZ Cisco IOS 12.4XY Cisco IOS 12.4XW Cisco IOS 12.4XV Cisco IOS 12.4XT Cisco IOS 12.4XP Cisco IOS 12.4XM Cisco IOS 12.4XL Cisco IOS 12.4XJ Cisco IOS 12.4XG Cisco IOS 12.4XE Cisco IOS 12.4XD Cisco IOS 12.4XC Cisco IOS 12.4XB Cisco IOS 12.4XA Cisco IOS 12.4MRB Cisco IOS 12.4MR Cisco IOS 12.4GC Cisco IOS 12.4 (15)T10 Cisco IOS 12.3ZA Cisco IOS 12.3YZ Cisco IOS 12.3YX Cisco IOS 12.3YU Cisco IOS 12.3YT Cisco IOS 12.3YS Cisco IOS 12.3YQ Cisco IOS 12.3YM Cisco IOS 12.3YK Cisco IOS 12.3YG Cisco IOS 12.3YF Cisco IOS 12.3XZ Cisco IOS 12.3XY Cisco IOS 12.3XX Cisco IOS 12.3XW Cisco IOS 12.3XU Cisco IOS 12.3XR Cisco IOS 12.3XQ Cisco IOS 12.3XL Cisco IOS 12.3XK Cisco IOS 12.3XJ Cisco IOS 12.3XI Cisco IOS 12.3XG Cisco IOS 12.3XF Cisco IOS 12.3XE Cisco IOS 12.3XD Cisco IOS 12.3XC Cisco IOS 12.3XB Cisco IOS 12.3XA Cisco IOS 12.3T Cisco IOS 12.3JK Cisco IOS 12.3B Cisco IOS 12.3 Cisco IOS 12.2ZP Cisco IOS 12.2ZJ Cisco IOS 12.2ZH Cisco IOS 12.2ZE Cisco IOS 12.2ZC Cisco IOS 12.2YT Cisco IOS 12.2YC Cisco IOS 12.2T Cisco IOS 12.2MC Cisco IOS 12.2CZ Cisco IOS 12.2BX Cisco IOS 12.2B
Not Vulnerable:	Cisco Unified Communications Manager 8.6(2a)su1 Cisco Unified Communications Manager 7.1(5b)su5

Cisco IOS and Unified Communications Manager (CVE-2012-3949) Denial of Service Vulnerability

Cisco IOS and Unified Communications Manager are prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause the affected device to reload, denying service to legitimate users.

This issue is tracked by Cisco Bug IDs CSCtj33003, CSCtw84664, and CSCtw66721.

Cisco IOS and Unified Communications Manager (CVE-2012-3949) Denial of Service Vulnerability

To exploit this issue, attackers can use readily available network utilities.

Cisco IOS and Unified Communications Manager (CVE-2012-3949) Denial of Service Vulnerability

Solution:
The vendor has released updates. Please see the referenced advisories for details.

Cisco IOS and Unified Communications Manager (CVE-2012-3949) Denial of Service Vulnerability

References:

• Cisco IOS Homepage (Cisco Systems)
  
• Cisco Unified Communication Manager Homepage (Cisco)