CVE-2008-0027

Heap-based buffer overflow in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications Manager (CUCM) 4.2 before 4.2(3)SR3 and 4.3 before 4.3(1)SR1, and CallManager 4.0 and 4.1 before 4.1(3)SR5c, allows remote attackers to cause a denial of service or execute arbitrary code via a long request.

Link	Resource
http://dvlabs.tippingpoint.com/advisory/TPTI-08-02
http://www.cisco.com/en/US/products/products_security_advisory09186a0080932c61.shtml	Patch
http://www.securityfocus.com/bid/27313
http://www.securitytracker.com/id?1019223
http://secunia.com/advisories/28530
http://securityreason.com/securityalert/3551
http://www.vupen.com/english/advisories/2008/0171
https://exchange.xforce.ibmcloud.com/vulnerabilities/39704
http://www.securityfocus.com/archive/1/486432/100/0/threaded

Configuration 1

cpe:2.3:a:cisco:unified_communications_manager:4.2.3sr2:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_communications_manager:4.2:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_communications_manager:4.3:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_callmanager:4.1:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_callmanager:4.1(3)sr5:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_callmanager:4.1(3)sr4:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_callmanager:4.1(3)sr5b:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_communications_manager:4.2.3sr2b:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_callmanager:4.0:*:*:*:*:*:*:*

---

Published : 2008-01-17 03:00

Updated : 2018-10-15 09:57

---

NVD link : CVE-2008-0027

Mitre link : CVE-2008-0027

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer