CVEvulnerability
CVE-2007-5538
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-10-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in the Centralized TFTP File Locator Service in Cisco Unified Communications Manager (CUCM, formerly CallManager) 5.1 before 5.1(3), and Unified CallManager 5.0, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors involving the processing of filenames, aka CSCsh47712.
Affected configurations
• cisco unified callmanager 5.0
• cisco unified communications manager (<= 5.1\(2\))
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://osvdb.org/37940 osvdb.org
- http://secunia.com/advisories/27296 secunia.com
- http://www.cisco.com/en/US/products/products_security_advisory09186a00808dda34.shtml www.cisco.com
- http://www.securityfocus.com/bid/26105 www.securityfocus.com
- http://www.securitytracker.com/id?1018828 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/3532 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37247 exchange.xforce.ibmcloud.com
- http://osvdb.org/37940 osvdb.org
- http://secunia.com/advisories/27296 secunia.com
- http://www.cisco.com/en/US/products/products_security_advisory09186a00808dda34.shtml www.cisco.com
- http://www.securityfocus.com/bid/26105 www.securityfocus.com
- http://www.securitytracker.com/id?1018828 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/3532 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37247 exchange.xforce.ibmcloud.com