Most recent entries from all

CERTA-2010-AVI-408 — Deux vulnérabilités dans Cisco Unified Presence permettent à une personne distante malintentionnée de provoquer un déni…

2026-10-09T09:31:38.443730+00:00

CERTA-2010-AVI-408

fkie_cve-2010-2839

2026-10-09T09:31:38.443792+00:00

GHSA-5w79-rm63-fwvp

2026-10-09T09:31:38.443838+00:00

gsd-2010-2839

2026-10-09T09:31:38.443860+00:00

gsd-2010-2839

VAR-201008-0145

2026-10-09T09:31:38.443876+00:00

SIPD in Cisco Unified Presence 6.x before 6.0(7) and 7.x before 7.0(8) allows remote attackers to cause a denial of service (stack memory corruption and process failure) via a malformed SIP message, aka Bug ID CSCtd14474. Cisco Unified Presence is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause an interrupt in presence services, denying service to legitimate users. This issue is being tracked by Cisco BugID CSCtd14474.

Cisco has released free software updates that address these vulnerabilities. There are no workarounds for these vulnerabilities.

This advisory is posted at:

http://www.cisco.com/warp/public/707/cisco-sa-20100825-cup.shtml

Affected Products =================

Vulnerable Products +------------------

The following products are affected:

* Cisco Unified Presence 6.0 versions prior to 6.0(7) * Cisco Unified Presence 7.0 versions prior to 7.0(8)

Note: Cisco Unified Presence version 8.0(1) shipped with software fixes for all the vulnerabilities described in this advisory. The software version can be determined by running the command "show version active" using the command line interface (CLI).

Products Confirmed Not Vulnerable +--------------------------------

No other Cisco products are currently known to be affected by these vulnerabilities.

Details =======

Cisco Unified Presence contains two DoS vulnerabilities that involve the processing of SIP messages. All SIP ports (TCP ports 5060 and 5061, UDP ports…