CVE-2008-1742: High severity cisco unified communications solutions vulnerability

Published May 16, 2008

Updated

Memory leak in the Certificate Trust List (CTL) Provider service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) allows remote attackers to cause a denial of service (memory consumption and service interruption) via a series of malformed TCP packets, as demonstrated by TCPFUZZ, aka Bug ID CSCsj80609.

Affected Software

13 affected components

Cisco Unified Communications Manager=5.1-\(1\)

Cisco Unified Communications Manager=6.1-\(1a\)

Cisco Unified Communications Manager=5.1-\(2\)

Cisco Unified Communications Manager=6.1

Cisco Unified Communications Manager=5.1-\(2a\)

Cisco Unified Communications Manager=4.2

Cisco Unified Communications Manager=4.3

Cisco Unified Communications Manager=5.1-\(3a\)

Cisco Unified Communications Manager=6.0-\(1a\)

Cisco Unified Communications Manager=4.1

Cisco Unified Communications Manager=6.0-\(1\)

Cisco Unified Communications Manager=5.1-\(2b\)

Cisco Unified Communications Manager=6.0

Event History

May 16, 2008

CVE Published

via MITRE·06:54 AM

Data Sourced

via MITRE·06:54 AM

Description

Frequently Asked Questions

What is the severity of CVE-2008-1742?

CVE-2008-1742 has a severity rating that indicates it can lead to a denial of service due to memory consumption.

How do I fix CVE-2008-1742?

To fix CVE-2008-1742, upgrade your Cisco Unified Communications Manager to at least version 5.1(3) or later.

What systems are affected by CVE-2008-1742?

CVE-2008-1742 affects multiple versions of Cisco Unified Communications Manager including versions 4.1, 4.2, 4.3, 5.1, and 6.1.

What are the potential impacts of CVE-2008-1742?

The potential impacts of CVE-2008-1742 include service interruption and crashes caused by malformed TCP packets.

Is there a workaround for CVE-2008-1742?

There are no known workarounds for CVE-2008-1742; upgrading is the recommended solution.