Description
The Skinny Call Control Protocol (SCCP) implementation in Cisco Unified CallManager (CUCM) 3.3 before 3.3(5)SR2a, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3)SR1, and 5.0 before 5.0(4a)SU1 allows remote attackers to cause a denial of service (loss of voice services) by sending crafted packets to the (1) SCCP (2000/tcp) or (2) SCCPS (2443/tcp) port.
Affected products
- Cisco / unified_callmanager3.3 – 3.3
- Cisco / unified_callmanager3.3(2) – 3.3(2)
- Cisco / unified_callmanager3.3(2)spb – 3.3(2)spb
- Cisco / unified_callmanager3.3(2)spc – 3.3(2)spc
- Cisco / unified_callmanager3.3(3) – 3.3(3)
- Cisco / unified_callmanager3.3(3)sr1 – 3.3(3)sr1
- Cisco / unified_callmanager3.3(3)sr4 – 3.3(3)sr4
- Cisco / unified_callmanager3.3(4) – 3.3(4)
- Cisco / unified_callmanager3.3(4)sr1a – 3.3(4)sr1a
- Cisco / unified_callmanager3.3(5) – 3.3(5)
- Cisco / unified_callmanager3.3(5)sr1 – 3.3(5)sr1
- Cisco / unified_callmanager3.3(5)sr1a – 3.3(5)sr1a
- Cisco / unified_callmanager4.1 – 4.1
- Cisco / unified_callmanager4.1(2) – 4.1(2)
- Cisco / unified_callmanager4.1(3) – 4.1(3)
- Cisco / unified_callmanager4.1(3)sr1 – 4.1(3)sr1
- Cisco / unified_callmanager4.1(3)sr2 – 4.1(3)sr2
- Cisco / unified_callmanager4.1(3)sr3 – 4.1(3)sr3
- Cisco / unified_callmanager4.2 – 4.2
- Cisco / unified_callmanager5.0 – 5.0
- Cisco / unified_callmanager5.0(1) – 5.0(1)
- Cisco / unified_callmanager5.0(2) – 5.0(2)
- Cisco / unified_callmanager5.0(3) – 5.0(3)
- Cisco / unified_callmanager5.0(3a) – 5.0(3a)
- Cisco / unified_callmanager5.0(4) – 5.0(4)
References
- MISChttp://securitytracker.com/id?1017826
- MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/33295
- VENDOR_ADVISORYhttp://secunia.com/advisories/24665
- VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2007/1144
- VENDOR_ADVISORYhttp://www.cisco.com/warp/public/707/cisco-sa-20070328-voip.shtml
- MISChttp://www.securityfocus.com/bid/23181