CVE-2008-0027
- State
- Published
- Severity
- Not scored
- Published
- Jan 17, 2008
- Updated
- Aug 7, 2024
- Reserved
- Dec 17, 2007
Description
Heap-based buffer overflow in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications Manager (CUCM) 4.2 before 4.2(3)SR3 and 4.3 before 4.3(1)SR1, and CallManager 4.0 and 4.1 before 4.1(3)SR5c, allows remote attackers to cause a denial of service or execute arbitrary code via a long request.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20080116 TPTI-08-02: Cisco Call Manager CTLProvider Heap Overflow Vulnerabilitymailing-list
- ADV-2008-0171vdb-entry
- 3551third-party-advisory
- 20080116 Cisco Unified Communications Manager CTL Provider Heap Overflowvendor-advisory
- http://dvlabs.tippingpoint.com/advisory/TPTI-08-02
- cisco-cucm-ctl-bo(39704)vdb-entry
- 1019223vdb-entry
- 27313vdb-entry
- 28530third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.