>> Cisco UCM SIP Remote Denial of Service Vulnerabilities
Title : Cisco UCM SIP Remote Denial of Service Vulnerabilities VUPEN ID : VUPEN/ADV-2008-2671 CVE ID : CVE-2008-3800 - CVE-2008-3801 CWE ID : CWE-20
Rated as : Moderate Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2008-09-25
Technical Description
Two vulnerabilities have been identified in Cisco Unified Communications Manager, which could be exploited by attackers to cause a denial of service. These issues are caused by errors in the Session Initiation Protocol (SIP) service when processing specific and valid SIP messages, which could be exploited by attackers to cause a vulnerable device to reload, creating a denial of service condition.