CVE-2006-3594: Buffer Overflow
First published: Fri Jul 14 2006(Updated: )
Buffer overflow in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows remote attackers to execute arbitrary code via a long hostname in a SIP request, aka bug CSCsd96542.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco CallManager Express | =5.0\(1\) | |
| Cisco CallManager Express | =5.0\(2\) | |
| Cisco CallManager Express | =5.0\(3\) | |
| Cisco CallManager Express | =5.0\(3a\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.cisco.com/warp/public/707/cisco-sa-20060712-cucm.shtml
- http://secunia.com/advisories/21030
- http://securitytracker.com/id?1016475
- http://www.osvdb.org/27162
- http://www.securityfocus.com/bid/18952
- http://www.vupen.com/english/advisories/2006/2774
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27691
Frequently Asked Questions
What is the severity of CVE-2006-3594?
CVE-2006-3594 is classified as a critical vulnerability due to the potential for remote code execution.
How do I fix CVE-2006-3594?
To fix CVE-2006-3594, upgrade Cisco Unified CallManager to a version beyond 5.0(3a) that does not contain this vulnerability.
What systems are affected by CVE-2006-3594?
CVE-2006-3594 affects Cisco Unified CallManager versions 5.0(1) to 5.0(3a).
What type of attack does CVE-2006-3594 facilitate?
CVE-2006-3594 facilitates remote code execution via a buffer overflow triggered by a long hostname in a SIP request.
Can CVE-2006-3594 be exploited remotely?
Yes, CVE-2006-3594 can be exploited remotely by attackers sending specially crafted SIP requests.
- agent/remedy
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/severity
- agent/weakness
- agent/references
- agent/last-modified-date
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/cisco
- canonical/cisco callmanager express
- version/cisco callmanager express/5.0\(1\)
- version/cisco callmanager express/5.0\(2\)
- version/cisco callmanager express/5.0\(3\)
- version/cisco callmanager express/5.0\(3a\)