Some vulnerabilities have been reported in Cisco Unified Communications Manager (CUCM), which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise a vulnerable system.

1) An off-by-one error in the Certificate Trust List Provider service (CTLProvider.exe) can be exploited to cause a heap-based buffer overflow by sending specially crafted packets to the vulnerable service (default port 2444/TCP).

Note: This vulnerability does not affect CUCM 3.x.

2) An integer overflow error in the Real-Time Information Server (RIS) Data Collector service (RisDC.exe) can be exploited to cause a heap-based buffer overflow by sending specially crafted packets to the vulnerable service (default port 2556/TCP).

Successful exploitation may allow execution of arbitrary code.

Solution
Apply updated versions:
Further details available to Secunia VIM customers

Provided and/or discovered by
IBM Internet Security Systems X-Force

Original Advisory
Cisco:
http://www.cisco.com/warp/public/707/cisco-sa-20070711-cucm.shtml

IBM Internet Security Systems:
1) http://www.iss.net/threats/270.html
2) http://www.iss.net/threats/271.html

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available to Secunia VIM customers