Description
Cisco Unified Communications Manager 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) does not properly validate SIP URLs, which allows remote attackers to cause a denial of service (service interruption) via a SIP INVITE message, aka Bug ID CSCsl22355.
References (6)
Core 6
Core References
Patch, Vendor Advisory vendor-advisory
x_refsource_cisco
http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml
Permissions Required vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/1533
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/29221
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/42419
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/30238
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1020022
Scores
EPSS
0.0245
EPSS Percentile
82.5%
Details
CWE
CWE-20
Status
published
Products (1)
cisco/unified_communications_manager
4.1 - 4.1\(3\)sr7
Published
May 16, 2008
Tracked Since
Feb 18, 2026