CVE-2010-2840
7.8
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:C
Exploitability: 10.0 / Impact: 6.9
Source: NVD
Description
The Presence Engine (PE) service in Cisco Unified Presence 6.x before 6.0(7) and 7.x before 7.0(8) does not properly handle an erroneous Contact field in the header of a SIP SUBSCRIBE message, which allows remote attackers to cause a denial of service (process failure) via a malformed message, aka Bug ID CSCtd39629.
Affected (22)
Products: Cisco: Unified Presence Server
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 6.0 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 6.0.5.1102-1 |
References (4)
Source: psirt@cisco.com
PatchVendor Advisory
Source: psirt@cisco.com
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.