Description
Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony (SRST) is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed Skinny Client Control Protocol (SCCP) message, aka Bug ID CSCsz49741, the "SCCP Request Handling Denial of Service Vulnerability."
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=20070
- 39069 third-party-advisory
- oval:org.mitre.oval:def:6625 vdb-entry signature
- 63177 vdb-entry
- 20100324 Cisco Unified Communications Manager Express Denial of Service Vulnerabilities vendor-advisory