CVE-2008-1742

Published: May 16, 2008Modified: Apr 23, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Memory leak in the Certificate Trust List (CTL) Provider service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) allows remote attackers to cause a denial of service (memory consumption and service interruption) via a series of malformed TCP packets, as demonstrated by TCPFUZZ, aka Bug ID CSCsj80609.

Affected (13)

Products: Cisco: Unified Communications Manager

Cisco

1 product

Unified Communications Manager

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Cisco Unified Communications Manager	Version 4.1
Cisco Unified Communications Manager	Version 4.2
Cisco Unified Communications Manager	Version 4.3
Cisco Unified Communications Manager	Version 5.1 (1)
Cisco Unified Communications Manager	Version 5.1 (2)
Cisco Unified Communications Manager	Version 5.1 (2a)
Cisco Unified Communications Manager	Version 5.1 (2b)
Cisco Unified Communications Manager	Version 5.1 (3a)
Cisco Unified Communications Manager	Version 6.0
Cisco Unified Communications Manager	Version 6.0 (1)
Cisco Unified Communications Manager	Version 6.0 (1a)
Cisco Unified Communications Manager	Version 6.1
Cisco Unified Communications Manager	Version 6.1 (1a)