CVE-2008-1740

Published: May 16, 2008Modified: Apr 23, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

The Presence Engine (PE) service in Cisco Unified Presence before 6.0(1) allows remote attackers to cause a denial of service (core dump and service interruption) via an unspecified "stress test," aka Bug ID CSCsh20972.

Affected (2)

Products: Cisco: Unified Presence

Cisco

1 product

Unified Presence

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Cisco Unified Presence	Up to 6.0_2
Cisco Unified Presence	Version 6.0_1

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (12)

http://secunia.com/advisories/30240

Source: psirt@cisco.com

http://securitytracker.com/id?1020023

Source: psirt@cisco.com

http://www.cisco.com/en/US/products/products_security_advisory09186a0080995682.shtml

Source: psirt@cisco.com

Patch

http://www.securityfocus.com/bid/29220

Source: psirt@cisco.com

http://www.vupen.com/english/advisories/2008/1534

Source: psirt@cisco.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/42412

Source: psirt@cisco.com

http://secunia.com/advisories/30240