Description
The Skinny Call Control Protocol (SCCP) implementation in Cisco Unified CallManager (CUCM) 3.3 before 3.3(5)SR2a, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3)SR1, and 5.0 before 5.0(4a)SU1 allows remote attackers to cause a denial of service (loss of voice services) by sending crafted packets to the (1) SCCP (2000/tcp) or (2) SCCPS (2443/tcp) port.
References (6)
Core 6
Core References
Patch vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1017826
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/33295
Patch, Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/24665
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2007/1144
Patch, Vendor Advisory vendor-advisory
x_refsource_cisco
http://www.cisco.com/warp/public/707/cisco-sa-20070328-voip.shtml
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/23181
Scores
EPSS
0.0235
EPSS Percentile
82.0%
Details
Status
published
Products (25)
cisco/unified_callmanager
3.3
cisco/unified_callmanager
3.3\(2\)
cisco/unified_callmanager
3.3\(2\)spb
cisco/unified_callmanager
3.3\(2\)spc
cisco/unified_callmanager
3.3\(3\)
cisco/unified_callmanager
3.3\(3\)sr1
cisco/unified_callmanager
3.3\(3\)sr4
cisco/unified_callmanager
3.3\(4\)
cisco/unified_callmanager
3.3\(4\)sr1a
cisco/unified_callmanager
3.3\(5\)
... and 15 more
Published
Apr 03, 2007
Tracked Since
Feb 18, 2026