CVE-2008-0529

Cisco Unified IP Phone SCCP Firmware - Authenticated Buffer Overflow via Telnet Command

Title source: llm

Description

Buffer overflow in the telnet server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G running SCCP firmware might allow remote authenticated users to execute arbitrary code via a crafted command.

References (6)

Core 6

Core References

Patch vendor-advisory x_refsource_cisco

http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1019410

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/27774

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2008/0543

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/40493

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/28935

Scores

EPSS 0.0536

EPSS Percentile 91.7%

Details

CWE

CWE-119

Status published

Products (2)

cisco/session_initiation_protocol_\(sip\)_firmware

cisco/skinny_client_control_protocol_\(sccp\)_firmware

Published Feb 15, 2008

Tracked Since Feb 18, 2026