CVE-2008-0529: Buffer Overflow

Published Feb 15, 2008

Updated

Buffer overflow in the telnet server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G running SCCP firmware might allow remote authenticated users to execute arbitrary code via a crafted command.

Affected Software

14 affected components

Cisco Unified IP Phone=7906g

Cisco Unified IP Phone=7911g

Cisco Unified IP Phone=7935

Cisco Unified IP Phone=7936

Cisco Unified IP Phone=7940

Cisco Unified IP Phone=7940g

Cisco Unified IP Phone=7941g

Cisco Unified IP Phone=7960

Cisco Unified IP Phone=7960g

Cisco Unified IP Phone=7961g

Cisco Unified IP Phone=7970g

Cisco Unified IP Phone=7971g

Cisco Skinny Client Control Protocol \(sccp\) Firmware

Cisco Session Initiation Protocol \(sip\) Firmware

Remediation

Patch Available

http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml

Event History

Feb 15, 2008

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Data Sourced

02:00 AM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2008-0529?

CVE-2008-0529 is classified as a critical vulnerability due to the potential for remote code execution.

How do I fix CVE-2008-0529?

To fix CVE-2008-0529, update the Cisco Unified IP Phone firmware to a version that addresses this buffer overflow vulnerability.

Who is affected by CVE-2008-0529?

CVE-2008-0529 affects Cisco Unified IP Phones including models 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G with SCCP firmware.

Can CVE-2008-0529 be exploited remotely?

Yes, CVE-2008-0529 can be exploited remotely by authenticated users through crafted commands sent to the telnet server.

What are the potential consequences of CVE-2008-0529?

Exploitation of CVE-2008-0529 may allow an attacker to execute arbitrary code on the device, potentially leading to a full system compromise.