----------------------------------------------------------------------

Secunia Network Software Inspector 2.0 (NSI) - Public Beta

The Public Beta has ended. Thanks to all that participated.

Learn more:
http://secunia.com/network_software_inspector_2/

----------------------------------------------------------------------

TITLE:
Cisco Unified Communications Manager Multiple Denial of Service

SECUNIA ADVISORY ID:
SA30238

VERIFY ADVISORY:
http://secunia.com/advisories/30238/

CRITICAL:
Moderately critical

IMPACT:
DoS

WHERE:
>From remote

SOFTWARE:
Cisco Unified Communications Manager 4.x
http://secunia.com/product/5363/
Cisco Unified Communications Manager 5.x
http://secunia.com/product/11019/
Cisco Unified Communications Manager 6.x
http://secunia.com/product/14776/

DESCRIPTION:
Some vulnerabilities have been reported in Cisco Unified
Communications Manager, which can be exploited by malicious people to
cause a DoS (Denial of Service).

1) An error within the Certificate Trust List (CTL) Provider service
can be exploited to consume large amounts of memory resources via a
series of specially crafted packets sent to default port 2444/TCP.

This vulnerability is reported in version 5.x.

2) Another error within the CTL Provider service can be exploited to
consume large amounts of memory resources via a series of specially
crafted packets sent to default port 2444/TCP.

This vulnerability is reported in versions 5.x and 6.x.

3) An error within the Certificate Authority Proxy Function (CAPF)
service can be exploited to cause a DoS via a specially crafted
packet sent to default port 3804/TCP.

NOTE: The CAPF service is disabled by default.

This vulnerability is reported in versions 4.1, 4.2, and 4.3.

4) An error in the handling of malformed SIP JOIN messages can be
exploited to cause a DoS.

This vulnerability is reported in versions 5.x and 6.x.

5) Two errors in the handling of SIP INVITE messages can be exploited
to cause a DoS.

These vulnerabilities are reported in versions 4.1, 4.2, 4.3, 5.x,
and 6.x

6) An error in the SNMP Trap Agent service can be exploited to cause
a DoS via a series of specially-crafted UDP packets sent to default
port 61441/UDP.

This vulnerability is reported in versions 4.1, 4.2, 4.3, 5.x, and
6.x.

SOLUTION:
Update to the fixed versions. Please see the vendor's advisory for
details.

PROVIDED AND/OR DISCOVERED BY:
Reported by the vendor.

ORIGINAL ADVISORY:
http://www.cisco.com/warp/public/707/cisco-sa-20080514-cucmdos.shtml

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------