CVE-2008-1748

published 2008-05-16

CVE-2008-1748: Cisco Unified Communications Manager 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) does not properly…

high 7.8 CVSS 3.1

AV N AC L Au N C N I N A C

Cisco Unified Communications Manager 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) does not properly validate SIP URLs, which allows remote attackers to cause a denial of service (service interruption) via a SIP INVITE message, aka Bug ID CSCsl22355.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
cisco	unified_communications_manager	—	—
cisco	unified_communications_manager	>= 4.1 < 4.1\(3\)sr7	4.1\(3\)sr7
cisco	unified_communications_manager	>= 4.2 < 4.2\(3\)sr4	4.2\(3\)sr4
cisco	unified_communications_manager	>= 4.3 < 4.3\(2\)	4.3\(2\)
cisco	unified_communications_manager	>= 5.0 < 5.1\(3\)	5.1\(3\)
cisco	unified_communications_manager	>= 6.0 < 6.1\(1\)	6.1\(1\)

CWE-20 CWE-399