Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2009-0057

The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager 5.x before 5.1(3e) and 6.x before 6.1(3) allows remote attackers to cause a denial of service (voice service outage) by sending malformed input over a TCP session in which the "client terminates prematurely."

Published

2009-01-22T18:30:03.813

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

8.6

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application cisco unified_communications_manager 5.0 Yes
Application cisco unified_communications_manager 5.0_1 Yes
Application cisco unified_communications_manager 5.0_2 Yes
Application cisco unified_communications_manager 5.0_3 Yes
Application cisco unified_communications_manager 5.0_3a Yes
Application cisco unified_communications_manager 5.0_4 Yes
Application cisco unified_communications_manager 5.0_4a Yes
Application cisco unified_communications_manager 5.0_4a_su1 Yes
Application cisco unified_communications_manager 5.1 Yes
Application cisco unified_communications_manager 5.1 Yes
Application cisco unified_communications_manager 5.1 Yes
Application cisco unified_communications_manager 5.1 Yes
Application cisco unified_communications_manager 5.1 Yes
Application cisco unified_communications_manager 5.1 Yes
Application cisco unified_communications_manager 5.1 Yes
Application cisco unified_communications_manager 5.1 Yes
Application cisco unified_communications_manager 5.1\(1\) Yes
Application cisco unified_communications_manager 5.1\(2\) Yes
Application cisco unified_communications_manager 5.1\(3c\) Yes
Application cisco unified_communications_manager 5.1.2 Yes
Application cisco unified_communications_manager 5.1_\(2a\) Yes
Application cisco unified_communications_manager 5.1_1 Yes
Application cisco unified_communications_manager 5.1_2 Yes
Application cisco unified_communications_manager 5.1_2a Yes
Application cisco unified_communications_manager 5.1_2b Yes
Application cisco unified_communications_manager 5.1_3a Yes
Application cisco unified_communications_manager 6.0 Yes
Application cisco unified_communications_manager 6.0 Yes
Application cisco unified_communications_manager 6.0 Yes
Application cisco unified_communications_manager 6.0_1 Yes
Application cisco unified_communications_manager 6.0_1a Yes
Application cisco unified_communications_manager 6.1 Yes
Application cisco unified_communications_manager 6.1 Yes
Application cisco unified_communications_manager 6.1\(2\) Yes
Application cisco unified_communications_manager 6.1.0 Yes
Application cisco unified_communications_manager 6.1_1a Yes
References