Vulnerability in Cisco Unified_callmanager
CVE-2006-5277
Off-by-one error in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications Manager (CUCM, formerly CallManager) before 20070711 allow remote attackers to execute arbitrary code via a crafted pac…
EPSS: 0.096 (95.0th percentile) — read the EPSS interpretation.
Affected products
- Cisco Unified_callmanager — versions 5.0
- Cisco Unified_communications_manager
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)
- cve@mitre.org (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- cve@mitre.org (Permissions Required, Third Party Advisory, vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (x_refsource_ISS, Broken Link, third-party-advisory)
- cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)