Vulnerability Description
The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager 5.x before 5.1(3e) and 6.x before 6.1(3) allows remote attackers to cause a denial of service (voice service outage) by sending malformed input over a TCP session in which the "client terminates prematurely."
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Unified Communications Manager | 5.0 |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/33588Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a61928.sVendor Advisory
- http://www.securityfocus.com/bid/33379
- http://www.securitytracker.com/id?1021620
- http://www.vupen.com/english/advisories/2009/0213
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48139
- http://secunia.com/advisories/33588Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a61928.sVendor Advisory
- http://www.securityfocus.com/bid/33379
- http://www.securitytracker.com/id?1021620
- http://www.vupen.com/english/advisories/2009/0213
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48139
FAQ
What is CVE-2009-0057?
CVE-2009-0057 is a vulnerability with a CVSS score of 4.3 (MEDIUM). The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager 5.x before 5.1(3e) and 6.x before 6.1(3) allows remote attackers to cause a denial of service (voice ser...
How severe is CVE-2009-0057?
CVE-2009-0057 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-0057?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Unified Communications Manager.