Vulnerability Description
Cisco Unified Communications Manager 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) does not properly validate SIP URLs, which allows remote attackers to cause a denial of service (service interruption) via a SIP INVITE message, aka Bug ID CSCsl22355.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Unified Communications Manager | >= 4.1, < 4.1\(3\)sr7 |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/30238Third Party Advisory
- http://securitytracker.com/id?1020022Third Party AdvisoryVDB Entry
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.sPatchVendor Advisory
- http://www.securityfocus.com/bid/29221Third Party AdvisoryVDB Entry
- http://www.vupen.com/english/advisories/2008/1533Permissions Required
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42419Third Party AdvisoryVDB Entry
- http://secunia.com/advisories/30238Third Party Advisory
- http://securitytracker.com/id?1020022Third Party AdvisoryVDB Entry
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.sPatchVendor Advisory
- http://www.securityfocus.com/bid/29221Third Party AdvisoryVDB Entry
- http://www.vupen.com/english/advisories/2008/1533Permissions Required
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42419Third Party AdvisoryVDB Entry
FAQ
What is CVE-2008-1748?
CVE-2008-1748 is a vulnerability with a CVSS score of 7.8 (HIGH). Cisco Unified Communications Manager 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) does not properly validate SIP URLs, which allows remote at...
How severe is CVE-2008-1748?
CVE-2008-1748 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2008-1748?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Unified Communications Manager.