CVE-2008-3801: High severity cisco unified communications manager vulnerability

Published Sep 26, 2008

Updated

Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is configured, allows remote attackers to cause a denial of service (device or process reload) via unspecified valid SIP messages, aka Cisco Bug ID CSCsm46064, a different vulnerability than CVE-2008-3800 and CVE-2008-3802.

Affected Software

10 affected components

Cisco Unified CallManager=4.2

Cisco Unified Communications Manager=5.0

Cisco IOS=12.3

Cisco Unified Communications Manager=6.1

Cisco Unified CallManager=4.1

Cisco Unified CallManager=4.3

Cisco IOS=12.4

Cisco Unified Communications Manager=4.1

Cisco IOS=12.2

Cisco Unified Communications Manager=5.1

Event History

Sep 26, 2008

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-3801?

CVE-2008-3801 has been rated with a high severity due to its potential to cause a denial of service.

How do I fix CVE-2008-3801?

To fix CVE-2008-3801, upgrade the affected Cisco IOS or Unified Communications Manager software to a version that includes the security patch.

What versions are affected by CVE-2008-3801?

CVE-2008-3801 affects Cisco IOS versions 12.2 through 12.4 and Unified Communications Manager versions 4.1 through 6.1.

Can CVE-2008-3801 be exploited remotely?

Yes, CVE-2008-3801 can be exploited remotely by attackers when VoIP is configured.

What type of attack does CVE-2008-3801 facilitate?

CVE-2008-3801 facilitates a denial of service attack that may result in device or process reload.