CVEvulnerability

CVE-2009-0057

4.3 MEDIUM Published 2009-01-22 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-01-22
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
Weaknesses
CWE-20

Description

The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager 5.x before 5.1(3e) and 6.x before 6.1(3) allows remote attackers to cause a denial of service (voice service outage) by sending malformed input over a TCP session in which the "client terminates prematurely."

Affected configurations

• cisco unified communications manager 5.0 • cisco unified communications manager 5.0 1 • cisco unified communications manager 5.0 2 • cisco unified communications manager 5.0 3 • cisco unified communications manager 5.0 3a • cisco unified communications manager 5.0 4 • cisco unified communications manager 5.0 4a • cisco unified communications manager 5.0 4a su1 • cisco unified communications manager 5.1 • cisco unified communications manager 5.1\(1\) • cisco unified communications manager 5.1\(2\) • cisco unified communications manager 5.1\(3c\) • cisco unified communications manager 5.1.2 • cisco unified communications manager 5.1 \(2a\) • cisco unified communications manager 5.1 1 • cisco unified communications manager 5.1 2 • cisco unified communications manager 5.1 2a • cisco unified communications manager 5.1 2b • cisco unified communications manager 5.1 3a • cisco unified communications manager 6.0 • cisco unified communications manager 6.0 1 • cisco unified communications manager 6.0 1a • cisco unified communications manager 6.1 • cisco unified communications manager 6.1\(2\) • cisco unified communications manager 6.1.0 • cisco unified communications manager 6.1 1a

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References