CVE-2008-1154
First published: Fri Apr 04 2008(Updated: )
The Disaster Recovery Framework (DRF) master server in Cisco Unified Communications products, including Unified Communications Manager (CUCM) 5.x and 6.x, Unified Presence 1.x and 6.x, Emergency Responder 2.x, and Mobility Manager 2.x, does not require authentication for requests received from the network, which allows remote attackers to execute arbitrary code via unspecified vectors.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Mobility Manager | =2.0 | |
| Cisco Unified Communications Manager | =5.0 | |
| Cisco Unified Presence | =1.0 | |
| Cisco Unified Presence | =6.0 | |
| Cisco Unified Communications Manager | =6.1 | |
| Cisco Emergency Responder | =2.0 | |
| Cisco Unified Communications Manager | =6.0 | |
| Cisco Unified Communications Manager | =5.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.cisco.com/en/US/products/products_security_advisory09186a008096fd9a.shtml
- http://www.securityfocus.com/bid/28591
- http://securitytracker.com/id?1019768
- http://secunia.com/advisories/29670
- http://www.vupen.com/english/advisories/2008/1093
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41632
- collector/nvd-historical
- collector/nvd-index
- agent/severity
- agent/author
- agent/weakness
- agent/references
- agent/type
- agent/description
- agent/event
- agent/softwarecombine
- agent/last-modified-date
- agent/remedy
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/cisco
- canonical/cisco mobility manager
- version/cisco mobility manager/2.0
- canonical/cisco unified communications manager
- version/cisco unified communications manager/5.0
- canonical/cisco unified presence
- version/cisco unified presence/1.0
- version/cisco unified presence/6.0
- version/cisco unified communications manager/6.1
- canonical/cisco emergency responder
- version/cisco emergency responder/2.0
- version/cisco unified communications manager/6.0
- version/cisco unified communications manager/5.1