CVE-2008-1744
published 2008-05-16CVE-2008-1744: The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, and 4.3…
PriorityP430high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
1.18%
64.2th percentile
The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, and 4.3 before 4.3(2) allows remote attackers to cause a denial of service (service crash) via malformed network traffic, aka Bug ID CSCsk46770.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | unified_callmanager | — | — |
| cisco | unified_callmanager | — | — |
| cisco | unified_callmanager | — | — |
| cisco | unified_callmanager | — | — |
| cisco | unified_callmanager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-xx57-275q-jj4j: The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager (CUCM) 4
ghsa_unreviewed·2022-05-01
CVE-2008-1744 [HIGH] CWE-20 GHSA-xx57-275q-jj4j: The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager (CUCM) 4
The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, and 4.3 before 4.3(2) allows remote attackers to cause a denial of service (service crash) via malformed network traffic, aka Bug ID CSCsk46770.
Cisco
Cisco Unified Communications Manager Denial of Service Vulnerabilities
vendor_cisco·2008-05-14·CVSS 7.8
CVE-2008-1742 [HIGH] CWE-399 Cisco Unified Communications Manager Denial of Service Vulnerabilities
Cisco Unified Communications Manager Denial of Service Vulnerabilities
Cisco Unified Communications Manager, formerly Cisco CallManager,
contains multiple denial of service (DoS) vulnerabilities that may cause an
interruption in voice services, if exploited. These vulnerabilities were
discovered internally by Cisco. The following Cisco Unified Communications
Manager services are affected:
Certificate Trust List (CTL) Provider
Certificate Authority Proxy Function (CAPF)
Session Initiation Protocol (SIP)
Simple Network Management Protocol (SNMP) Trap
Cisco has released software updates that address these vulnerabilities. Workarounds that mitigate some of these vulnerabilities are
available.
This advisory is posted at
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecuri
Cisco
Cisco Unified Communications Manager Denial of Service Vulnerabilities
vendor_cisco
CVE-2008-1744 Cisco Unified Communications Manager Denial of Service Vulnerabilities
CVE-2008-1744: Cisco Unified Communications Manager Denial of Service Vulnerabilities
Cisco Unified Communications Manager, formerly Cisco CallManager, contains multiple denial of service (DoS) vulnerabilities that may cause an interruption in voice services, if exploited. These vulnerabilities were discovered internally by Cisco. The following Cisco Unified Communications Manager services are affected: Certificate Trust List (CTL) Provider Certificate Authority Proxy Function (CAPF) Session Initiation Protocol (SIP) Simple Network Management Protocol (SNMP) Trap Cisco has released software updates that address these vulnerabilities.
CWE: CWE-399, CWE-399
Bug IDs: CSCsj80609, CSCsi98433, CSCsk46770, CSCsi48115, CSCsk46944
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/30238http://securitytracker.com/id?1020022http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtmlhttp://www.securityfocus.com/bid/29221http://www.vupen.com/english/advisories/2008/1533https://exchange.xforce.ibmcloud.com/vulnerabilities/42415http://secunia.com/advisories/30238http://securitytracker.com/id?1020022http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtmlhttp://www.securityfocus.com/bid/29221http://www.vupen.com/english/advisories/2008/1533https://exchange.xforce.ibmcloud.com/vulnerabilities/42415
2008-05-16
Published