vulnerability alert CVE-2010-0587 CVE-2010-0588 CVE-2010-0590

Cisco Unified Communications Manager: denials of service

Synthesis of the vulnerability

An attacker can use SCCP, SIP or CIT messages, in order to generate denials of service on Cisco Unified Communications Manager.

Severity: 2/4. Creation date: 03/03/2010.

Description of the vulnerability

Five denials of service were announced in Cisco Unified Communications Manager. An attacker can send a SCCP (Skinny Client Control Protocol) StationCapabilitiesRes message with a large MaxCap field, in order to stop a process, which leads to a denial of service. [severity:2/4; BID-38496, CSCtc38985, CVE-2010-0587, >] An attacker can send a malformed SCCP (Skinny Client Control Protocol) RegAvailableLines/FwdStatReq message, in order to stop a process, which leads to a denial of service. [severity:2/4; BID-38501, CSCtc47823, CVE-2010-0588, >] An attacker can send a malformed SIP REGISTER message, in order to stop a process, which leads to a denial of service. [severity:2/4; BID-38495, CSCtc37188, CVE-2010-0590, >] An attacker can send a SIP REGISTER message with a malformed phone url, in order to stop a process, which leads to a denial of service. [severity:2/4; BID-38498, CSCtc62362, CVE-2010-0591, >] An attacker can send a malformed CIT (Computer Telephony Integration) message on the port 2748/tcp, in order to stop CTI Manager. [severity:2/4; BID-38497, CSCsu31800, CVE-2010-0592, >]

Complete Vigil@nce bulletin

Access to the complete Vigil@nce bulletin

Characteristics

Title: Cisco Unified Communications Manager: denials of service. Keywords: 2748 CIT CSCsu31800 CSCtc37188 CSCtc38985 CSCtc47823 CSCtc62362 CTI Cisco Client Communications Computer Control FwdStatReq Integration Manager MaxCap Protocol REGISTER RegAvailableLines SCCP SIP Skinny StationCapabilitiesRes Telephony Unified denials service. Identifiers: 111579, 111803, BID-38495, BID-38496, BID-38497, BID-38498, BID-38501, cisco-amb-20100303-cucm, cisco-sa-20100303-cucm, CSCsu31800, CSCtc37188, CSCtc38985, CSCtc47823, CSCtc62362, CVE-2010-0587, CVE-2010-0588, CVE-2010-0590, CVE-2010-0591, CVE-2010-0592, VIGILANCE-VUL-9491.

Information sources

Publications and announces Source example: Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities

Solutions for this vulnerability

Patch or workaround

Supplements

Vulnerability : CSCtc38985 - CCM Coredump on SCCP StationCapabilitiesRes Message with MaxCap Exceeded An attacker can send a SCCP (Skinny Client Control Protocol) StationCapabilitiesRes message with a large MaxCap field, in order to stop a process, which leads to a denial of service. Severity: 2/4. Identifiers: BID-38496, CSCtc38985, CVE-2010-0587. Publications and announces

Vulnerability : CSCtc47823 - CCM Core at invalid Line# in SCCP RegAvailableLines and FwdStatReq An attacker can send a malformed SCCP (Skinny Client Control Protocol) RegAvailableLines/FwdStatReq message, in order to stop a process, which leads to a denial of service. Severity: 2/4. Identifiers: BID-38501, CSCtc47823, CVE-2010-0588. Publications and announces

Vulnerability : CSCtc37188 - CMSIPUtility Coredump on Fuzzed Register Message An attacker can send a malformed SIP REGISTER message, in order to stop a process, which leads to a denial of service. Severity: 2/4. Identifiers: BID-38495, CSCtc37188, CVE-2010-0590. Publications and announces

Vulnerability : CSCtc62362 - CCM Coredump on Overflow of Field Telephone-URL in REG Msg An attacker can send a SIP REGISTER message with a malformed phone url, in order to stop a process, which leads to a denial of service. Severity: 2/4. Identifiers: BID-38498, CSCtc62362, CVE-2010-0591. Publications and announces

Vulnerability : CSCsu31800 - CTI crash with invalid packet An attacker can send a malformed CIT (Computer Telephony Integration) message on the port 2748/tcp, in order to stop CTI Manager. Severity: 2/4. Identifiers: BID-38497, CSCsu31800, CVE-2010-0592. Publications and announces

Computer vulnerabilities tracking service

The Vigil@nce computer vulnerability tracking service alerts your teams of vulnerabilities or threats impacting your information system.
The Vigil@nce vulnerability database contains several thousand vulnerabilities.
This bulletin is published by the Vigil@nce team, which tracks computer vulnerabilities impacting systems and applications.
Technology watch team on vulnerabilities