CVE-2009-2054: High severity Cisco Unified Communications Manager vulnerability

Published Aug 27, 2009
·
Updated

Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2a)su1, and 7.1 before 7.1(2a)su1 allows remote attackers to cause a denial of service (file-descriptor exhaustion and SIP outage) via a flood of TCP packets, aka Bug ID CSCsx23689.

Affected Software

106 affected components
Cisco Unified Communications Manager>=4.0<5.1\(3g\)
Cisco Unified Communications Manager>=6.0<6.1\(4\)
Cisco Unified Communications Manager>=7.0<7.0\(2a\)su1
Cisco Unified Communications Manager>=7.1<7.1\(2a\)su1
Cisco Unified Communications Manager=4.2_1
Cisco Unified Communications Manager=4.2_3_sr3
Cisco Unified Communications Manager=5.0_4
Cisco Unified Communications Manager=5.1\(3c\)
Cisco Unified Communications Manager=4.1.2
Cisco Unified Communications Manager=4.1-\(3\)sr5b
Cisco Unified Communications Manager=6.1\(2\)
Cisco Unified Communications Manager=6.1.0
Cisco Unified Communications Manager=5.1\(2a\)
Cisco Unified Communications Manager=5.1-\(1\)
Cisco Unified Communications Manager=5.1_3a
Cisco Unified Communications Manager=\(2b\)
Cisco Unified Communications Manager=4.2.3sr2
Cisco Unified Communications Manager=3.3\(5\)
Cisco Unified Communications Manager=6.0\(1\)
Cisco Unified Communications Manager=4.2_2
Cisco Unified Communications Manager=4.1.1
Cisco Unified Communications Manager=5.0_4a
Cisco Unified Communications Manager=\(2\)
Cisco Unified Communications Manager=4.3_1
Cisco Unified Communications Manager=4.3_1_sr1
Cisco Unified Communications Manager=4.1\(3\)sr1
Cisco Unified Communications Manager=5.1\(2\)
Cisco Unified Communications Manager=5.1-5.1\(1\)
Cisco Unified Communications Manager=4.2\(3\)sr2b
Cisco Unified Communications Manager=4.2.3_sr3
Cisco Unified Communications Manager=5.0
Cisco Unified Communications Manager=6.1-\(1a\)
Cisco Unified Communications Manager=5.1-\(2\)
Cisco Unified Communications Manager=4.3.2
Cisco Unified Communications Manager=4.1-\(3\)sr5
Cisco Unified Communications Manager=4.1-\(3\)sr5c
Cisco Unified Communications Manager=4.2.3sr1
Cisco Unified Communications Manager=4.1\(3\)sr2
Cisco Unified Communications Manager=4.3\(2\)sr1
Cisco Unified Communications Manager=5.1\(2b\)
Cisco Unified Communications Manager=5.0_1
Cisco Unified Communications Manager=4.1\(3\)
Cisco Unified Communications Manager=6.1
Cisco Unified Communications Manager=5.1-\(2a\)
Cisco Unified Communications Manager=5.1_2a
Cisco Unified Communications Manager=4.2
Cisco Unified Communications Manager=5.0_4a_su1
Cisco Unified Communications Manager=4.3
Cisco Unified Communications Manager=4.2.3
Cisco Unified Communications Manager
Cisco Unified Communications Manager=6.1\(3\)
Cisco Unified Communications Manager=4.1\(3\)sr4
Cisco Unified Communications Manager=4.2.1
Cisco Unified Communications Manager=4.2_3_sr2b
Cisco Unified Communications Manager=4.1.3
Cisco Unified Communications Manager=4.1-\(3\)sr.5
Cisco Unified Communications Manager=4.3-4.3\(1\)sr.1
Cisco Unified Communications Manager=6.1\(1\)
Cisco Unified Communications Manager=5.1-5.1_\(2a\)
Cisco Unified Communications Manager=6.1_1a
Cisco Unified Communications Manager=5.1\(3d\)
Cisco Unified Communications Manager=5.1.2
Cisco Unified Communications Manager=\(1\)
Cisco Unified Communications Manager=5.1-\(3a\)
Cisco Unified Communications Manager=4.2-4.2_\(3\)sr2b
Cisco Unified Communications Manager=4.2_3sr1
Cisco Unified Communications Manager=4.2_3_sr2
Cisco Unified Communications Manager=4.2-4.2\(3\)sr.2
Cisco Unified Communications Manager=4.2\(3\)sr1
Cisco Unified Communications Manager=3.3\(5\)sr2a
Cisco Unified Communications Manager=4.3\(1\)sr.1
Cisco Unified Communications Manager=5.1_2b
Cisco Unified Communications Manager=5.0_3a
Cisco Unified Communications Manager=4.2-4.2_\(3\)sr3
Cisco Unified Communications Manager=7.0\(1\)
Cisco Unified Communications Manager=4.2\(3\)sr4
Cisco Unified Communications Manager=4.2.2
Cisco Unified Communications Manager=4.3\(1\)
Cisco Unified Communications Manager=5.1_\(2a\)
Cisco Unified Communications Manager=4.1\(3\)sr3
Cisco Unified Communications Manager=6.0-\(1a\)
Cisco Unified Communications Manager=5.1\(3\)
Cisco Unified Communications Manager=4.1
Cisco Unified Communications Manager=6.0\(1a\)
Cisco Unified Communications Manager=4.2_3
Cisco Unified Communications Manager=5.0_3
Cisco Unified Communications Manager=5.1\(1\)
Cisco Unified Communications Manager=6.0-\(1\)
Cisco Unified Communications Manager=5.0_2
Cisco Unified Communications Manager=7.0
Cisco Unified Communications Manager=4.1-\(3\)sr4
Cisco Unified Communications Manager=5.1_2
Cisco Unified Communications Manager=4.3.1
Cisco Unified Communications Manager=6.0_1
Cisco Unified Communications Manager=4.3\(2\)
Cisco Unified Communications Manager=6.1\(2\)su1
Cisco Unified Communications Manager=3.3\(5\)sr1
Cisco Unified Communications Manager=5.1-\(2b\)
Cisco Unified Communications Manager=5.1\(3a\)
Cisco Unified Communications Manager=6.0
Cisco Unified Communications Manager=5.1
Cisco Unified Communications Manager=4.2\(3\)sr3
Cisco Unified Communications Manager=4.2.3sr2b
Cisco Unified Communications Manager=6.1\(1a\)
Cisco Unified Communications Manager=6.0_1a
Cisco Unified Communications Manager=5.1_1

Remediation

Patch Available

http://www.cisco.com/en/US/products/products_security_advisory09186a0080af2d11.shtml

Event History

Aug 27, 2009
CVE Published
via MITRE·04:31 PM
Data Sourced
via MITRE·04:31 PM
Description

Frequently Asked Questions

1

What is the severity of CVE-2009-2054?

CVE-2009-2054 has a high severity rating due to its potential to cause a denial of service and SIP outage.

2

How do I fix CVE-2009-2054?

To fix CVE-2009-2054, upgrade your Cisco Unified Communications Manager to a patched version such as 5.1(3g) or later.

3

What systems are affected by CVE-2009-2054?

CVE-2009-2054 affects Cisco Unified Communications Manager versions 4.x, 5.x, 6.x, and 7.x prior to their respective patched updates.

4

What type of vulnerability is CVE-2009-2054?

CVE-2009-2054 is a remote denial of service vulnerability that can be exploited through a flood of TCP packets.

5

Can CVE-2009-2054 be exploited remotely?

Yes, CVE-2009-2054 can be exploited remotely by attackers targeting the affected Cisco Unified Communications Manager systems.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203