CVEvulnerability
CVE-2008-1748
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-05-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-20
Description
Cisco Unified Communications Manager 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) does not properly validate SIP URLs, which allows remote attackers to cause a denial of service (service interruption) via a SIP INVITE message, aka Bug ID CSCsl22355.
Affected configurations
• cisco unified communications manager (>= 4.1 < 4.1\(3\)sr7)
• cisco unified communications manager (>= 4.2 < 4.2\(3\)sr4)
• cisco unified communications manager (>= 4.3 < 4.3\(2\))
• cisco unified communications manager (>= 5.0 < 5.1\(3\))
• cisco unified communications manager (>= 6.0 < 6.1\(1\))
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://secunia.com/advisories/30238 Third Party Advisory
- http://securitytracker.com/id?1020022 Third Party Advisory, VDB Entry
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml Patch, Vendor Advisory
- http://www.securityfocus.com/bid/29221 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/1533 Permissions Required
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42419 Third Party Advisory, VDB Entry
- http://secunia.com/advisories/30238 Third Party Advisory
- http://securitytracker.com/id?1020022 Third Party Advisory, VDB Entry
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080995688.shtml Patch, Vendor Advisory
- http://www.securityfocus.com/bid/29221 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/1533 Permissions Required
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42419 Third Party Advisory, VDB Entry