Please wait while the page is being loaded Skip this advertisement >
Saturday | 30 August, 2008
ARN
Cisco warns of Unified Communications Manager flaw
Cisco has made available a free software fix for affected customers
Linda Leung (Network World) 18 January, 2008 07:24:18

Related Stories
  • +

    Cisco IDs flaw in its Catalyst switches, 7600 Series routers 21 December, 2007 08:56:28

    Fixes and workarounds have been released
    Cisco is warning that a flaw in its Firewall Services Module could result in a reload of the module, or if exploited repeatedly, could result in a sustained denial-of-service attack.
  • +

    Critical flaws found in MySpace, Facebook ActiveX controls 01 February, 2008 10:56:32

    ActiveX developer promises a speedy fix
    Bugs in the ActiveX controls on popular social networking sites Facebook and MySpace can be used by hackers to snatch control of Windows PCs, security experts said Thursday.
  • +

    Microsoft warns of new Excel vulnerability 17 January, 2008 07:25:00

    Attackers are exploiting a vulnerability that lies within several software updates for versions of the Excel spreadsheet program, Microsoft warned late Tuesday.
    Attackers are exploiting a vulnerability that lies within several versions of the Excel spreadsheet program, Microsoft warned late Tuesday.
Additional Resources
ARN Library

Newsletter Subscription

Sign up for our ARN newsletters!
The premier provider of daily news to the IT channel, covering business, technology, products, and services.
RSS Feeds

Cisco Wednesday released its first new security alert of the year: a warning that its Cisco Unified Communications Manager - formerly CallManager - contains a heap overflow vulnerability in the Certificate Trust List that could allow a hacker to cause a denial-of-service attack or execute arbitrary code.

Cisco has made available a free software fix for affected customers, and a workaround is available in its security advisory.

The products that are vulnerable are:

-- Cisco Unified CallManager 4.0

-- Cisco Unified CallManager 4.1 Versions prior to 4.1(3)SR5c

-- Cisco Unified Communications Manager 4.2 Versions prior to 4.2(3) SR3

-- Cisco Unified Communications Manager 4.3 Versions prior to 4.3(1) SR1

Cisco says it is not aware of any public announcements or malicious use of the vulnerability, which was reported to Cisco from TippingPoint.

Market Place

ARN Member Login

 
Panel Sessions
  • ARN Panel Sessions: Day 3

    The last of our panel sessions recorded live at CeBIT 2008. Today, the topic is storage. Data is growing at an enormous rate, so what does the future hold?

Play
ARN news
  • IFA: LG's newest TV includes Bluetooth

    Bluetooth will be installed in models in LG's PG7000-series plasma sets and LG7000-series LCD sets, which are due on sale across Europe before the end of September.

Play
Channel Watch
  • Brian's bloopers

    It takes a long time to produce an episode of Channel Watch. Maybe you'll understand why after watching this...

Play
Business Continuity & Disaster Recovery Zone

When an IT disaster occurs, how handy it would be to push a button and start again as if nothing had happened.
Discover and learn more about CA XOSoft today.
ARN Vendor Directory
ARN Library

Bankstown Council streamlines their IT with Microsoft® Windows Server® 2008

Deciding it was time for more streamlined operations, Bankstown Council teamed up with OSS Infotech, a Microsoft Gold Certified Partner. The solution included Microsoft Windows Server, Microsoft SQL Server® and Microsoft Exchange®.

Sponsored Links