CVE-2011-2560

Cisco Unified Communications Manager - Denial of Service via Idle TCP Connections

Title source: llm

Description

The Packet Capture Service in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x does not properly handle idle TCP connections, which allows remote attackers to cause a denial of service (memory consumption and restart) by making many connections, aka Bug ID CSCtf97162.

References (1)

Core 1

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml

Scores

EPSS 0.0176

EPSS Percentile 75.7%

Details

CWE

CWE-399

Status published

Products (14)

cisco/unified_communications_manager 4.1\(3\)

cisco/unified_communications_manager 4.1\(3\)sr1

cisco/unified_communications_manager 4.1\(3\)sr2

cisco/unified_communications_manager 4.1\(3\)sr3

cisco/unified_communications_manager 4.1\(3\)sr4

cisco/unified_communications_manager 4.2

cisco/unified_communications_manager 4.2.1

cisco/unified_communications_manager 4.2.2

cisco/unified_communications_manager 4.2.3

cisco/unified_communications_manager 4.2.3sr1

... and 4 more

Published Aug 29, 2011

Tracked Since Feb 18, 2026