CVE-2008-0027

high · 10

Heap-based buffer overflow in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications Manager (CUCM) 4.2 before 4.2(3)SR3 and 4.3 before 4.3(1)SR1, and CallManager 4.0 and 4.1 before 4.1(3)SR5c, allows remote attackers to cause a denial of service or execute arbitrary code via a long request.

CVSS

57.1%

EPSS (exploit prob.)

99th

EPSS percentile

2008-01-17

Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
cisco	unified_callmanager	4.0
cisco	unified_callmanager	4.1
cisco	unified_callmanager	4.1(3)sr4
cisco	unified_callmanager	4.1(3)sr5
cisco	unified_callmanager	4.1(3)sr5b
cisco	unified_communications_manager	4.2
cisco	unified_communications_manager	4.2.3sr2
cisco	unified_communications_manager	4.2.3sr2b
cisco	unified_communications_manager	4.3

Check a specific version with /api/v1/cve/match.

References

http://dvlabs.tippingpoint.com/advisory/TPTI-08-02
http://secunia.com/advisories/28530
http://securityreason.com/securityalert/3551
http://www.cisco.com/en/US/products/products_security_advisory09186a0080932c61.shtml
http://www.securityfocus.com/archive/1/486432/100/0/threaded
http://www.securityfocus.com/bid/27313
http://www.securitytracker.com/id?1019223
http://www.vupen.com/english/advisories/2008/0171
https://exchange.xforce.ibmcloud.com/vulnerabilities/39704
http://dvlabs.tippingpoint.com/advisory/TPTI-08-02
http://secunia.com/advisories/28530
http://securityreason.com/securityalert/3551
http://www.cisco.com/en/US/products/products_security_advisory09186a0080932c61.shtml
http://www.securityfocus.com/archive/1/486432/100/0/threaded
http://www.securityfocus.com/bid/27313
http://www.securitytracker.com/id?1019223
http://www.vupen.com/english/advisories/2008/0171
https://exchange.xforce.ibmcloud.com/vulnerabilities/39704

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2008-0027