CVE-2010-0591

Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5), 7.x before 7.1(3b)SU2, and 8.x before 8.0(1) allows remote attackers to cause a denial of service (process failure) via a malformed SIP REG message, related to an overflow of the Telephone-URL field, aka Bug ID CSCtc62362.

Score

CVSS 2.0 7.8 High

Status

Modified - psirt@cisco.com

Published

2010-03-05

Last modified

2024-09-16

Affected products

• Unified Communications Manager (Cisco)

References

• http://securitytracker.com/id?1023670
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1b924.shtml
• http://www.securityfocus.com/bid/38498