NVD

Id
50087  
Name
CVE-2009-2865  
Description
Buffer overflow in the login implementation in the Extension Mobility feature in the Unified Communications Manager Express (CME) component in Cisco IOS 12.4XW, 12.4XY, 12.4XZ, and 12.4YA allows remote attackers to execute arbitrary code or cause a denial of service via crafted HTTP requests, aka Bug ID CSCsq58779.  
Reject
 
CVSS Version
2  
CVSS Score
7.6  
Severity
High  
CVSS Base Score
7.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-09-28  
Modified Date
2009-12-17  
Seq
2009-2865  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
253454 50087 CVE-2009-2865 http://tools.cisco.com/security/center/viewAlert.x?alertId=18884  View
253455 50087 CVE-2009-2865 20090923 Cisco Unified Communications Manager Express Vulnerability  View
253456 50087 CVE-2009-2865 36498  View
253457 50087 CVE-2009-2865 1022932  View
253458 50087 CVE-2009-2865 ADV-2009-2758  View
253459 50087 CVE-2009-2865 ciscoios-cme-extension-bo(53448)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41159 JVNDB-2009-002166 Cisco IOS の Unified CME コンポーネントにおけるバッファオーバーフローの脆弱性 Cisco IOS の Unified Communications Manager Express (CME) コンポーネントにある Extension Mobility 機能の login 実装には、バッファオーバーフローの脆弱性が存在します。 CVE-2009-2865 40296 CVE-2009-2865 50087 7.6 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002166.html 2009-09-23 2009-10-30 View