CVE:CVE-2010-2838
CNNVD:CNNVD-201008-321
Cisco统一通讯管理器是是Cisco IP电话解决方案中的呼叫处理组件。
Cisco Unified Communications Manager(又名CUCM，formerly CallManager)之前的7.0SU版本中的SendCombinedStatusInfo实施存在拒绝服务漏洞。远程攻击者可以借助畸形的SIP REGISTER消息导致拒绝服务(进程失效)。
solution:Upgrade cisco unified_communications_manager to a higher version than 7.0\(2a\su2,7.0(1su1,7.0(1su1a,7.0(2,7.0(2a,7.0(2asu1,7.1\(5\su1a,7.1(2a,7.1(2asu1,7.1(2b,7.1(2bsu1,7.1(3,7.1(3a,7.1(3asu1,7.1(3asu1a,7.1(3b,7.1(3bsu1,7.1(3bsu2,7.1(5,7.1(5su1,7.1(5a,7.1(5b,8.0(2c,8.0(2csu1,8.0(3,and avoid the version (,7.0\(2a\)su2],7.0(1)su1,7.0(1)su1a,7.0(2),7.0(2a),7.0(2a)su1,(,7.1\(5\)su1a],7.1(2a),7.1(2a)su1,7.1(2b),7.1(2b)su1,7.1(3),7.1(3a),7.1(3a)su1,7.1(3a)su1a,7.1(3b),7.1(3b)su1,7.1(3b)su2,7.1(5),7.1(5)su1,7.1(5a),7.1(5b),8.0(2c),8.0(2c)su1,8.0(3)