CVE-2008-1744

The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, and 4.3 before 4.3(2) allows remote attackers to cause a denial of service (service crash) via malformed network traffic, aka Bug ID CSCsk46770.

Link	Resource
http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml
http://www.securityfocus.com/bid/29221
http://securitytracker.com/id?1020022
http://secunia.com/advisories/30238
http://www.vupen.com/english/advisories/2008/1533
https://exchange.xforce.ibmcloud.com/vulnerabilities/42415

Configuration 1

cpe:2.3:a:cisco:unified_communications_manager:4.2_3_sr3:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_callmanager:4.1_3_sr5:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_callmanager:4.1_3_sr4:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_communications_manager:5.1_3a:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_communications_manager:4.3_1_sr1:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_callmanager:4.1_3_sr5b:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_communications_manager:6.1:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_communications_manager:5.1_2a:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_callmanager:4.1_3_sr5c:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_communications_manager:4.3:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_callmanager:4.1:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_communications_manager:4.2_3_sr2b:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_communications_manager:6.1_1a:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_communications_manager:4.2_3_sr2:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_communications_manager:5.1_2b:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_communications_manager:5.1_2:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_communications_manager:6.0_1:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_communications_manager:6.0:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_communications_manager:6.0_1a:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_communications_manager:5.1_1:*:*:*:*:*:*:*

---

Published : 2008-05-16 12:54

Updated : 2017-08-08 01:30

---

NVD link : CVE-2008-1744

Mitre link : CVE-2008-1744

No products.

CWE-20