CVE-2010-0588: High severity Cisco Unified Communications Manager vulnerability

Published Mar 5, 2010

Updated

Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5), 7.x before 7.1(3a)su1, and 8.x before 8.0(1) allows remote attackers to cause a denial of service (process failure) via a malformed SCCP (1) RegAvailableLines or (2) FwdStatReq message with an invalid Line number, aka Bug ID CSCtc47823.

Affected Software

19 affected components

Cisco Unified Communications Manager=6.1\(2\)

Cisco Unified Communications Manager=6.1.0

Cisco Unified Communications Manager=6.0\(1\)

Cisco Unified Communications Manager=6.1\(2\)su1a

Cisco Unified Communications Manager=6.1\(4\)

Cisco Unified Communications Manager=6.1-\(1a\)

Cisco Unified Communications Manager=7.1

Cisco Unified Communications Manager=6.1

Cisco Unified Communications Manager=6.1\(3\)

Cisco Unified Communications Manager=6.1\(1\)

Cisco Unified Communications Manager=8.0

Cisco Unified Communications Manager=7.0\(1\)

Cisco Unified Communications Manager=6.1\(1b\)

Cisco Unified Communications Manager=6.0\(1a\)

Cisco Unified Communications Manager=7.0

Cisco Unified Communications Manager=6.1\(2\)su1

Cisco Unified Communications Manager=6.0

Cisco Unified Communications Manager=6.1\(1a\)

Cisco Unified Communications Manager=7.0\(2\)

Remediation

Patch Available

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1b924.shtml

Event History

Mar 5, 2010

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Data Sourced

via NVD·04:30 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-0588?

CVE-2010-0588 has a severe impact as it allows remote attackers to cause a denial of service in Cisco Unified Communications Manager.

How do I fix CVE-2010-0588?

To resolve CVE-2010-0588, upgrade your Cisco Unified Communications Manager to a version that is 6.1(5), 7.1(3a)su1 or 8.0(1) or higher.

Which versions of Cisco Unified Communications Manager are affected by CVE-2010-0588?

CVE-2010-0588 affects Cisco Unified Communications Manager versions 6.x before 6.1(5), 7.x before 7.1(3a)su1, and 8.x before 8.0(1).

Can CVE-2010-0588 be exploited remotely?

Yes, CVE-2010-0588 can be exploited remotely by sending malformed SCCP messages to the vulnerable Cisco Unified Communications Manager.

What types of messages can trigger CVE-2010-0588?

CVE-2010-0588 can be triggered by malformed SCCP RegAvailableLines or FwdStatReq messages with invalid line numbers.