CVE-2007-5538: Buffer Overflow
First published: Thu Oct 18 2007(Updated: )
Buffer overflow in the Centralized TFTP File Locator Service in Cisco Unified Communications Manager (CUCM, formerly CallManager) 5.1 before 5.1(3), and Unified CallManager 5.0, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors involving the processing of filenames, aka CSCsh47712.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Unified Communications Manager | <=5.1\(2\) | |
| Cisco CallManager Express | =5.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.cisco.com/en/US/products/products_security_advisory09186a00808dda34.shtml
- http://www.securityfocus.com/bid/26105
- http://www.securitytracker.com/id?1018828
- http://secunia.com/advisories/27296
- http://osvdb.org/37940
- http://www.vupen.com/english/advisories/2007/3532
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37247
Frequently Asked Questions
What is the severity of CVE-2007-5538?
CVE-2007-5538 is considered to be a high severity vulnerability due to the potential for remote code execution and denial of service.
How do I fix CVE-2007-5538?
To address CVE-2007-5538, it is recommended to upgrade Cisco Unified Communications Manager to version 5.1(3) or later.
Who is affected by CVE-2007-5538?
CVE-2007-5538 affects users of Cisco Unified Communications Manager 5.0 and versions of Unified Communications Manager up to 5.1(2).
What are the potential impacts of CVE-2007-5538?
The potential impacts of CVE-2007-5538 include execution of arbitrary code and service disruption.
Is there a workaround for CVE-2007-5538?
There are no specific workarounds recommended for CVE-2007-5538 aside from upgrading to the secure version.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/last-modified-date
- agent/severity
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/weakness
- agent/softwarecombine
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/cisco
- canonical/cisco unified communications manager
- version/cisco unified communications manager/5.1\(2\)
- canonical/cisco callmanager express
- version/cisco callmanager express/5.0