CVEvulnerability
CVE-2009-2865
7.6 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-09-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.6 HIGH — AV:N/AC:H/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in the login implementation in the Extension Mobility feature in the Unified Communications Manager Express (CME) component in Cisco IOS 12.4XW, 12.4XY, 12.4XZ, and 12.4YA allows remote attackers to execute arbitrary code or cause a denial of service via crafted HTTP requests, aka Bug ID CSCsq58779.
Affected configurations
• cisco unified communications manager express
• cisco ios 12.4xw
• cisco ios 12.4xy
• cisco ios 12.4xz
• cisco ios 12.4ya
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://osvdb.org/58335 osvdb.org
- http://tools.cisco.com/security/center/viewAlert.x?alertId=18884 Patch, Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8116.shtml Patch, Vendor Advisory
- http://www.securityfocus.com/bid/36498 www.securityfocus.com
- http://www.securitytracker.com/id?1022932 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/2758 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53448 exchange.xforce.ibmcloud.com
- http://osvdb.org/58335 osvdb.org
- http://tools.cisco.com/security/center/viewAlert.x?alertId=18884 Patch, Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8116.shtml Patch, Vendor Advisory
- http://www.securityfocus.com/bid/36498 www.securityfocus.com
- http://www.securitytracker.com/id?1022932 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/2758 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53448 exchange.xforce.ibmcloud.com