CVE-2008-0027 in Unified Callmanagerinfo

Summary

Heap-based buffer overflow in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications Manager (CUCM) 4.2 before 4.2(3)SR3 and 4.3 before 4.3(1)SR1, and CallManager 4.0 and 4.1 before 4.1(3)SR5c, allows remote attackers to cause a denial of service or execute arbitrary code via a long request.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservation

12/17/2007

Disclosure

01/16/2008

CPE

ready

CVSS

10.0

EPSS

0.35513

Activities

Very Low

Sources

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!