7.8

CVE-2008-1740

The Presence Engine (PE) service in Cisco Unified Presence before 6.0(1) allows remote attackers to cause a denial of service (core dump and service interruption) via an unspecified "stress test," aka Bug ID CSCsh20972.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Unified Presence Version <= 6.0_2
Cisco ≫ Unified Presence Version6.0_1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.92% 0.772
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/30240
http://securitytracker.com/id?1020023
http://www.cisco.com/en/US/products/products_security_advisory09186a0080995682.shtml
Patch
http://www.vupen.com/english/advisories/2008/1534
https://exchange.xforce.ibmcloud.com/vulnerabilities/42412
http://www.securityfocus.com/bid/29220