CVE-2008-4543

Cisco Unity 4.x < 4.2(1)ES161, 5.x < 5.0(1)ES53, 7.x < 7.0(2)ES8 - DoS via Session Exhaustion

Title source: llm

Description

Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authentication (aka native Unity authentication), allows remote attackers to cause a denial of service (session exhaustion) via a large number of connections.

References (7)

Core 7

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/45743

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1021013

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/31642

Vendor Advisory vendor-advisory x_refsource_cisco

http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html

Various Sources x_refsource_misc

http://www.voipshield.com/research-details.php?id=128

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/32187

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2008/2771

Scores

EPSS 0.0183

EPSS Percentile 76.7%

Details

CWE

CWE-399

Status published

Products (10)

cisco/unity 4.0

cisco/unity 4.0\(1\)

cisco/unity 4.0\(2\)

cisco/unity 4.0\(3\) (2 CPE variants)

cisco/unity 4.0\(4\) (2 CPE variants)

cisco/unity 4.0\(5\)

cisco/unity 4.1\(1\)

cisco/unity 5.0

cisco/unity 7.0

cisco/unity < 4.2\(1\)

Published Oct 13, 2008

Tracked Since Feb 18, 2026