CVE-2010-0591

Cisco Unified Communications Manager DoS via Malformed SIP REG Message

Title source: llm
STIX 2.1

Description

Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5), 7.x before 7.1(3b)SU2, and 8.x before 8.0(1) allows remote attackers to cause a denial of service (process failure) via a malformed SIP REG message, related to an overflow of the Telephone-URL field, aka Bug ID CSCtc62362.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1023670
Patch, Vendor Advisory vendor-advisory x_refsource_cisco
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1b924.shtml
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/38498

Scores

EPSS 0.0162
EPSS Percentile 73.5%

Details

Status published
Products (18)
cisco/unified_communications_manager 6.0
cisco/unified_communications_manager 6.0\(1\)
cisco/unified_communications_manager 6.0\(1a\)
cisco/unified_communications_manager 6.1
cisco/unified_communications_manager 6.1\(1\)
cisco/unified_communications_manager 6.1\(1a\)
cisco/unified_communications_manager 6.1\(1b\)
cisco/unified_communications_manager 6.1\(2\)
cisco/unified_communications_manager 6.1\(2\)su1
cisco/unified_communications_manager 6.1\(2\)su1a
... and 8 more
Published Mar 05, 2010
Tracked Since Feb 18, 2026