imPC@ndo IT

Tracker / CVE-2006-5278

CVE-2006-5278

High 10.0

Integer overflow in the Real-Time Information Server (RIS) Data Collector service (RisDC.exe) in Cisco Unified Communications Manager (CUCM, formerly CallManager) before 20070711 allow remote attackers to execute arbitrary code via crafted packets, resulting in a heap-based buffer overflow.

Affected products and versions

cisco unified_callmanager
cisco unified_callmanager · 3.3 → 3.3\(5\)sr2
cisco unified_callmanager · 4.1 → 4.1\(3\)sr4
cisco unified_callmanager · 4.2 → 4.2\(3\)sr1
cisco unified_callmanager · 5.1 → 5.1\(2\)
cisco unified_communications_manager · 4.3 → 4.3\(1\)

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References