NVD

Id
1114  
Name
CVE-2008-1154  
Description
The Disaster Recovery Framework (DRF) master server in Cisco Unified Communications products, including Unified Communications Manager (CUCM) 5.x and 6.x, Unified Presence 1.x and 6.x, Emergency Responder 2.x, and Mobility Manager 2.x, does not require authentication for requests received from the network, which allows remote attackers to execute arbitrary code via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-04-04  
Modified Date
2012-10-29  
Seq
2008-1154  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
6863 1114 CVE-2008-1154 1019768  View
6864 1114 CVE-2008-1154 20080403 Cisco Unified Communications Disaster Recovery Framework Command Execution Vulnerability  View
6865 1114 CVE-2008-1154 28591  View
6866 1114 CVE-2008-1154 ADV-2008-1093  View
6867 1114 CVE-2008-1154 cisco-drf-command-execution(41632)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46712 JVNDB-2008-002022 Cisco Unified Communication 製品における任意のコードを挿入される脆弱性 Unified Communications Manager (CUCM) 、 Unified Presence 、 Emergency Responder および Mobility Manager を含む Cisco Unified Communications 製品の Disaster Recovery Framework (DRF) master server には、任意のコードを実行される脆弱性が存在します。 CVE-2008-1154 31267 CVE-2008-1154 1114 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002022.html 2008-04-04 2008-12-19 View