Vulnerability Description
The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, and 4.3 before 4.3(2) allows remote attackers to cause a denial of service (service crash) via malformed network traffic, aka Bug ID CSCsk46770.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Unified Callmanager | 4.1 |
| Cisco | Unified Communications Manager | 4.2_3_sr2 |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/30238
- http://securitytracker.com/id?1020022
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.s
- http://www.securityfocus.com/bid/29221
- http://www.vupen.com/english/advisories/2008/1533
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42415
- http://secunia.com/advisories/30238
- http://securitytracker.com/id?1020022
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.s
- http://www.securityfocus.com/bid/29221
- http://www.vupen.com/english/advisories/2008/1533
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42415
FAQ
What is CVE-2008-1744?
CVE-2008-1744 is a vulnerability with a CVSS score of 7.8 (HIGH). The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, and 4.3 before 4.3(2) allows remote attackers to caus...
How severe is CVE-2008-1744?
CVE-2008-1744 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2008-1744?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Unified Callmanager, Cisco Unified Communications Manager.