Cisco Unified Communications Manager Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Cisco Unified Communications Manager. A remote authenticated user can execute arbitrary code on the target system, and cause denial of service conditions.

1. A remote user can send a large number of TCP connections to ports 5060 or 5061 to trigger a memory leak and cause denial of service conditions.
2. A remote user can send specially crafted registration messages to trigger an error handling flaw and cause denial of service conditions.
3. A remote user can send UDP packets at a high rate to certain ports including port 5060 to cause denial of service conditions.
4. A remote authenticated user can send specially crafted data to trigger a buffer overflow and execute arbitrary code on the target system.