CVE-2007-1833

Severity

50%

Complexity

99%

Confidentiality

48%

The Skinny Call Control Protocol (SCCP) implementation in Cisco Unified CallManager (CUCM) 3.3 before 3.3(5)SR2a, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3)SR1, and 5.0 before 5.0(4a)SU1 allows remote attackers to cause a denial of service (loss of voice services) by sending crafted packets to the (1) SCCP (2000/tcp) or (2) SCCPS (2443/tcp) port.

CVSS 2.0 Base Score 5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P).

Overview

Type

Cisco Unified CallManager

First reported 17 years ago

2007-04-03 00:19:00

Last updated 7 years ago

2017-07-29 01:31:00

Affected Software

Cisco Unified CallManager 3.3

3.3

Cisco Unified CallManager 3.3(2)

3.3\(2\)

Cisco Unified CallManager 3.3(2) spB

3.3\(2\)spb

Cisco Unified CallManager 3.3(2) spC

3.3\(2\)spc

Cisco Unified CallManager 3.3(3)

3.3\(3\)

Cisco Unified CallManager 3.3(3) SR1

3.3\(3\)sr1

Cisco Unified CallManager 3.3(3) SR4

3.3\(3\)sr4

Cisco Unified CallManager 3.3(4)

3.3\(4\)

Cisco Unified CallManager 3.3(4) SR1a

3.3\(4\)sr1a

Cisco Unified CallManager 3.3(5)

3.3\(5\)

Cisco Unified CallManager 3.3(5) SR1

3.3\(5\)sr1

Cisco Unified CallManager 3.3(5) SR1a

3.3\(5\)sr1a

Cisco Unified CallManager 4.1

4.1

Cisco Unified CallManager 4.1(2)

4.1\(2\)

Cisco Unified CallManager 4.1(3)

4.1\(3\)

Cisco Unified CallManager 4.1(3) SR1

4.1\(3\)sr1

Cisco Unified CallManager 4.1(3) SR2

4.1\(3\)sr2

Cisco Unified CallManager 4.1(3) SR3

4.1\(3\)sr3

Cisco Unified CallManager 4.2

4.2

Cisco Unified CallManager 5.0

5.0

Cisco Unified CallManager 5.0(1)

5.0\(1\)

Cisco Unified CallManager 5.0(2)

5.0\(2\)

Cisco Unified CallManager 5.0(3)

5.0\(3\)

Cisco Unified CallManager 5.0(3a)

5.0\(3a\)

Cisco Unified CallManager 5.0(4)

5.0\(4\)

References

24665

Patch, Vendor Advisory

1017826

Patch

20070328 Multiple Cisco Unified CallManager and Presence Server Denial of Service Vulnerabilities