CVE-2011-2560

The Packet Capture Service in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x does not properly handle idle TCP connections, which allows remote attackers to cause a denial of service (memory consumption and restart) by making many connections, aka Bug ID CSCtf97162.

Score

CVSS 2.0 7.8 High

Status

Modified - psirt@cisco.com

Published

2011-08-29

Last modified

2024-09-17

Weaknesses

CWE-399

Affected products

• Unified Communications Manager (Cisco)

References

• http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml