CVE-2011-1607
published 2011-05-03CVE-2011-1607: Directory traversal vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5b)su3, 8.0…
PriorityP335medium6.5CVSS 2.0
AVNACLAuSCPIPAP
EPSS
2.26%
81.1th percentile
Directory traversal vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5b)su3, 8.0 before 8.0(3a)su1, and 8.5 before 8.5(1) allows remote authenticated users to upload files to arbitrary directories via a modified pathname in an upload request, aka Bug ID CSCti81603.
Affected
46 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
| cisco | unified_communications_manager | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Multiple Vulnerabilities in Cisco Unified Communications Manager
vendor_cisco
CVE-2011-1607 Multiple Vulnerabilities in Cisco Unified Communications Manager
CVE-2011-1607: Multiple Vulnerabilities in Cisco Unified Communications Manager
Cisco Unified Communications Manager (previously known as Cisco CallManager) contains the following vulnerabilities: Three (3) denial of service (DoS) vulnerabilities that affect Session Initiation Protocol (SIP) services Directory transversal vulnerability Two (2) SQL injection vulnerabilities Cisco has released free software updates for affected Cisco Unified Communications Manager versions to address the vulnerabilities. A workaround exists only for the SIP DoS vulnerabilities. This advisory is posted at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110427-cucm .
Bug IDs: CSCti42904, CSCth39586, CSCtg62855, CSCti81603, CSCtg85647
GHSA
GHSA-29f9-3r2g-rwg5: Directory traversal vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6
ghsa_unreviewed·2022-05-17
CVE-2011-1607 [MEDIUM] CWE-22 GHSA-29f9-3r2g-rwg5: Directory traversal vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6
Directory traversal vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5b)su3, 8.0 before 8.0(3a)su1, and 8.5 before 8.5(1) allows remote authenticated users to upload files to arbitrary directories via a modified pathname in an upload request, aka Bug ID CSCti81603.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0051.htmlhttp://secunia.com/advisories/44331http://www.cisco.com/en/US/products/products_security_advisory09186a0080b79904.shtmlhttp://www.securityfocus.com/bid/47608http://www.securitytracker.com/id?1025449http://www.vupen.com/english/advisories/2011/1122https://exchange.xforce.ibmcloud.com/vulnerabilities/67127http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0051.htmlhttp://secunia.com/advisories/44331http://www.cisco.com/en/US/products/products_security_advisory09186a0080b79904.shtmlhttp://www.securityfocus.com/bid/47608http://www.securitytracker.com/id?1025449http://www.vupen.com/english/advisories/2011/1122https://exchange.xforce.ibmcloud.com/vulnerabilities/67127
2011-05-03
Published