NVD

Id
37382  
Name
CVE-2013-1134  
Description
The Location Bandwidth Manager (LBM) Intracluster-communication feature in Cisco Unified Communications Manager (CUCM) 9.x before 9.1(1) does not require authentication from the remote LBM Hub node, which allows remote attackers to conduct cache-poisoning attacks against transaction records, and cause a denial of service (bandwidth-pool consumption and call outage), via unspecified vectors, aka Bug ID CSCub28920.  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-18  
Published
2013-02-27  
Modified Date
2013-02-28  
Seq
2013-1134  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
190846 37382 CVE-2013-1134 20130227 Cisco Unified Communications Manager Multiple Denial of Service Vulnerabilities  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30252 JVNDB-2012-005959 Cisco Unified Communications Manager におけるキャッシュポイズニング攻撃を実行される脆弱性 Cisco Unified Communications Manager (CUCM) の Location Bandwidth Manager (LBM) のイントラクラスタ通信機能は、リモートの LBM Hub ノードからの認証を必要としないため、トランザクションレコードに対するキャッシュポイズニング攻撃を実行される、およびサービス運用妨害 (帯域幅プールの消費およびコールの停止) 状態となる脆弱性が存在します。 CVE-2013-1134 61076 CVE-2013-1134 37382 7.1 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005959.html 2012-02-27 2013-03-01 View