Unscored severity · published Oct 18, 2007
CVE-2007-5538
Buffer overflow in the Centralized TFTP File Locator Service in Cisco Unified Communications Manager (CUCM, formerly CallManager) 5.1 before 5.1(3), and Unified CallManager 5.0,…
–
CVSS
5.5%
EPSS
No
On KEV
Description
Buffer overflow in the Centralized TFTP File Locator Service in Cisco Unified Communications Manager (CUCM, formerly CallManager) 5.1 before 5.1(3), and Unified CallManager 5.0, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors involving the processing of filenames, aka CSCsh47712.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.5% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UC
Unified Callmanager · Cisco
5.0 · source: NVD
UC
Unified Communications Manager · Cisco
through 5.1\(2\) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5538
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5538
osvdb.org
http://osvdb.org/37940
secunia.com
http://secunia.com/advisories/27296
www.cisco.com
http://www.cisco.com/en/US/products/products_security_advisory09186a00808dda34.shtml
www.securityfocus.com
http://www.securityfocus.com/bid/26105
www.securitytracker.com
http://www.securitytracker.com/id?1018828
www.vupen.com
http://www.vupen.com/english/advisories/2007/3532
More from Unified Callmanager
–
CVE-2015-0680
Cisco Unified Call Manager (CM) 9.1(2.1000.28) does not properly restrict resource requests, which allows remote authenticated users to read arbitrary files via unspecified…
–
CVE-2009-2864
Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 5.x before 5.1(3g), 6.x before 6.1(4), 7.0.x before 7.0(2a)su1, and 7.1.x before 7.1(2) allows remote…
–
CVE-2008-3801
Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is…
–
CVE-2008-3800
Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4 and Unified Communications Manager 4.1 through 6.1, when VoIP is…
–
CVE-2008-1744
The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, and 4.3 before 4.3(2) allows…