Buffer overflow in Cisco iOS
CVE-2009-2865
Buffer overflow in the login implementation in the Extension Mobility feature in the Unified Communications Manager Express (CME) component in Cisco IOS 12.4XW, 12.4XY, 12.4XZ, and 12.4YA allows remote attackers to execute arbitrary code or cause a denial of service via crafted HTTP requests, aka Bug ID CSCsq58779.
Vulnerability class: Buffer Overflow
EPSS: 0.055 (92.0th percentile) — read the EPSS interpretation.
Affected products
- Cisco Ios — versions 12.4xw, 12.4xy, 12.4xz
- Cisco Unified_communications_manager_express
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (vdb-entry, x_refsource_BID)
- psirt@cisco.com (vdb-entry, x_refsource_XF)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- psirt@cisco.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- psirt@cisco.com (x_refsource_OSVDB, vdb-entry)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)