CVE-2008-1745: Input Validation

Published May 16, 2008

Updated

Cisco Unified Communications Manager (CUCM) 5.x before 5.1(2) and 6.x before 6.1(1) allows remote attackers to cause a denial of service (service interruption) via a SIP JOIN message with a malformed header, aka Bug ID CSCsi48115.

Affected Software

21 affected components

Cisco Unified Communications Manager=4.1-\(3\)sr5b

Cisco Unified Communications Manager=5.1-\(1\)

Cisco Unified Communications Manager=6.1-\(1a\)

Cisco Unified Communications Manager=5.1-\(2\)

Cisco Unified Communications Manager=4.1-\(3\)sr5

Cisco Unified Communications Manager=4.1-\(3\)sr5c

Cisco Unified Communications Manager=6.1

Cisco Unified Communications Manager=5.1-\(2a\)

Cisco Unified Communications Manager=4.3

Cisco Unified Communications Manager=4.1-\(3\)sr.5

Cisco Unified Communications Manager=4.3-4.3\(1\)sr.1

Cisco Unified Communications Manager=5.1-\(3a\)

Cisco Unified Communications Manager=4.2-4.2_\(3\)sr2b

Cisco Unified Communications Manager=4.2-4.2\(3\)sr.2

Cisco Unified Communications Manager=4.2-4.2_\(3\)sr3

Cisco Unified Communications Manager=6.0-\(1a\)

Cisco Unified Communications Manager=4.1

Cisco Unified Communications Manager=6.0-\(1\)

Cisco Unified Communications Manager=4.1-\(3\)sr4

Cisco Unified Communications Manager=5.1-\(2b\)

Cisco Unified Communications Manager=6.0

Event History

May 16, 2008

CVE Published

via MITRE·06:54 AM

Data Sourced

via MITRE·06:54 AM

Description

Frequently Asked Questions

What are the affected versions for CVE-2008-1745?

CVE-2008-1745 affects Cisco Unified Communications Manager versions 5.x before 5.1(2) and 6.x before 6.1(1) as well as certain 4.x versions.

What is the severity of CVE-2008-1745?

CVE-2008-1745 has been classified as a vulnerability that can lead to denial of service.

How do I fix CVE-2008-1745?

To fix CVE-2008-1745, users should upgrade their Cisco Unified Communications Manager to the latest patched version as recommended by Cisco.

What kind of attack does CVE-2008-1745 enable?

CVE-2008-1745 enables remote attackers to cause a denial of service through a SIP JOIN message with a malformed header.

Is there a workaround for CVE-2008-1745?

There are no official workarounds for CVE-2008-1745, and the recommended mitigation is to apply the necessary software updates.