CVE-2009-2053
published 2009-08-27CVE-2009-2053: Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2a)su1, and 7.1 before 7.1(2)…
PriorityP335high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
3.41%
87.5th percentile
Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2a)su1, and 7.1 before 7.1(2) allows remote attackers to cause a denial of service (file-descriptor exhaustion and SCCP outage) via a flood of TCP packets, aka Bug ID CSCsx32236.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | >= 5.0 < 5.1\(3g\) | 5.1\(3g\) |
| cisco | unified_communications_manager | >= 6.1\(1\) < 6.1\(4\) | 6.1\(4\) |
| cisco | unified_communications_manager | >= 7.0 < 7.0\(2a\)su1 | 7.0\(2a\)su1 |
| cisco | unified_communications_manager | >= 7.1 < 7.1\(2\) | 7.1\(2\) |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Unified Communications Manager Denial of Service Vulnerabilities
vendor_cisco·2009-08-26·CVSS 7.8
CVE-2009-2050 [HIGH] CWE-399 Cisco Unified Communications Manager Denial of Service Vulnerabilities
Cisco Unified Communications Manager Denial of Service Vulnerabilities
Cisco Unified Communications Manager (formerly CallManager) contains
multiple denial of service (DoS) vulnerabilities that if exploited could cause
an interruption to voice services. The Session Initiation Protocol (SIP) and
Skinny Client Control Protocol (SCCP) services are affected by these
vulnerabilities.
Cisco has released free software updates for select Cisco Unified
Communications Manager versions that address these vulnerabilities. There are
no workarounds for these vulnerabilities.
This advisory is posted at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090826-cucm.
Cisco
Cisco Unified Communications Manager Denial of Service Vulnerabilities
vendor_cisco
CVE-2009-2053 Cisco Unified Communications Manager Denial of Service Vulnerabilities
CVE-2009-2053: Cisco Unified Communications Manager Denial of Service Vulnerabilities
Cisco Unified Communications Manager (formerly CallManager) contains multiple denial of service (DoS) vulnerabilities that if exploited could cause an interruption to voice services. The Session Initiation Protocol (SIP) and Skinny Client Control Protocol (SCCP) services are affected by these vulnerabilities. Cisco has released free software updates for select Cisco Unified Communications Manager versions that address these vulnerabilities. There are no
CWE: CWE-399, CWE-399
Bug IDs: CSCsz43987, CSCta20040, CSCtf72678, CSCsi46466, CSCsz40392
GHSA
GHSA-8j74-6x75-vf94: Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4
ghsa_unreviewed·2022-05-02
CVE-2009-2053 [HIGH] GHSA-8j74-6x75-vf94: Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4
Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2a)su1, and 7.1 before 7.1(2) allows remote attackers to cause a denial of service (file-descriptor exhaustion and SCCP outage) via a flood of TCP packets, aka Bug ID CSCsx32236.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://osvdb.org/57455http://secunia.com/advisories/36498http://secunia.com/advisories/36499http://www.cisco.com/en/US/products/products_security_advisory09186a0080af2d11.shtmlhttp://www.securityfocus.com/bid/36152http://www.securitytracker.com/id?1022775http://osvdb.org/57455http://secunia.com/advisories/36498http://secunia.com/advisories/36499http://www.cisco.com/en/US/products/products_security_advisory09186a0080af2d11.shtmlhttp://www.securityfocus.com/bid/36152http://www.securitytracker.com/id?1022775
2009-08-27
Published