Some vulnerabilities have been reported in Cisco Unified Communications Manager, which can be exploited by malicious people to cause a DoS (Denial of Service).

Multiple unspecified errors exist in the processing of SIP messages, which can be exploited to cause a reload of an affected device.

This is related to vulnerability #5 in:
SA31990

The following versions are affected:
* Cisco Unified CallManager 4.1 versions prior to 4.1.3SR8
* Cisco Unified CallManager 4.2 versions prior to 4.2(3)SR4b
* Cisco Unified CallManager 4.3 versions prior to 4.3(2)SR1a
* Cisco Unified Communications Manager 5.x versions prior to 5.1(3d)
* Cisco Unified Communications Manager 6.x versions prior to 6.1(2)su1

Solution
The vendor will release updated versions that fix these vulnerabilities (please see vendor advisory for details).
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported by the vendor.

Original Advisory
Cisco:
http://www.cisco.com/warp/public/707/cisco-sa-20080924-cucm.shtml

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers