CVE-2011-4487

Executive Summary

Informations
Name	CVE-2011-4487	First vendor Publication	2012-02-29
Vendor	Cve	Last vendor Modification	2012-03-05

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P)
Cvss Base Score	6.8	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

SQL injection vulnerability in Cisco Unified Communications Manager (CUCM) with software 6.x and 7.x before 7.1(5b)su5, 8.0 before 8.0(3a)su3, and 8.5 and 8.6 before 8.6(2a)su1 and Cisco Business Edition 3000 with software before 8.6.3 and 5000 and 6000 with software before 8.6(2a)su1 allows remote attackers to execute arbitrary SQL commands via a crafted SCCP registration, aka Bug ID CSCtu73538.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4487

CWE : Common Weakness Enumeration

id	Name
CWE-89	Improper Sanitization of Special Elements used in an SQL Command ('SQL Injection')

CPE : Common Platform Enumeration

Type	Description	Count
Application	Cisco Business Edition 3000 Software cpe:/a:cisco:business_edition_3000_software:8.6(2a) cpe:/a:cisco:business_edition_3000_software:8.6(1a) cpe:/a:cisco:business_edition_3000_software:8.6(1) cpe:/a:cisco:business_edition_3000_software:8.6.2	4
Application	Cisco Business Edition 5000 Software cpe:/a:cisco:business_edition_5000_software:8.6(2a) cpe:/a:cisco:business_edition_5000_software:8.6(2) cpe:/a:cisco:business_edition_5000_software:8.6(1a) cpe:/a:cisco:business_edition_5000_software:8.6(1) cpe:/a:cisco:business_edition_5000_software:8.6 cpe:/a:cisco:business_edition_5000_software:8.5(1) cpe:/a:cisco:business_edition_5000_software:8.5	7
Application	Cisco Business Edition 6000 Software cpe:/a:cisco:business_edition_6000_software:8.6(2a) cpe:/a:cisco:business_edition_6000_software:8.6(2) cpe:/a:cisco:business_edition_6000_software:8.6(1a) cpe:/a:cisco:business_edition_6000_software:8.6(1) cpe:/a:cisco:business_edition_6000_software:8.5(1)su3 cpe:/a:cisco:business_edition_6000_software:8.5(1)su2 cpe:/a:cisco:business_edition_6000_software:8.5(1)su1 cpe:/a:cisco:business_edition_6000_software:8.5(1) cpe:/a:cisco:business_edition_6000_software:8.5(1-2011o)	9
Application	Cisco Unified Communications Manager cpe:/a:cisco:unified_communications_manager:8.6(2a) cpe:/a:cisco:unified_communications_manager:8.6(2) cpe:/a:cisco:unified_communications_manager:8.6(1a) cpe:/a:cisco:unified_communications_manager:8.6(1) cpe:/a:cisco:unified_communications_manager:8.6 cpe:/a:cisco:unified_communications_manager:8.5(1)su3 cpe:/a:cisco:unified_communications_manager:8.5(1)su2 cpe:/a:cisco:unified_communications_manager:8.5(1)su1 cpe:/a:cisco:unified_communications_manager:8.5(1) cpe:/a:cisco:unified_communications_manager:8.5 cpe:/a:cisco:unified_communications_manager:8.0(3a)su2 cpe:/a:cisco:unified_communications_manager:8.0(3a)su1 cpe:/a:cisco:unified_communications_manager:8.0(3a) cpe:/a:cisco:unified_communications_manager:8.0(3) cpe:/a:cisco:unified_communications_manager:8.0(2c)su1 cpe:/a:cisco:unified_communications_manager:8.0(2c) cpe:/a:cisco:unified_communications_manager:8.0(2b) cpe:/a:cisco:unified_communications_manager:8.0(2a) cpe:/a:cisco:unified_communications_manager:8.0(2) cpe:/a:cisco:unified_communications_manager:8.0(1) cpe:/a:cisco:unified_communications_manager:8.0 cpe:/a:cisco:unified_communications_manager:7.1(5b)su4 cpe:/a:cisco:unified_communications_manager:7.1(5b)su3 cpe:/a:cisco:unified_communications_manager:7.1(5b)su2 cpe:/a:cisco:unified_communications_manager:7.1(5b)su1a cpe:/a:cisco:unified_communications_manager:7.1(5b)su1 cpe:/a:cisco:unified_communications_manager:7.1(5b) cpe:/a:cisco:unified_communications_manager:7.1(5a) cpe:/a:cisco:unified_communications_manager:7.1(5)su1a cpe:/a:cisco:unified_communications_manager:7.1(5)su1 cpe:/a:cisco:unified_communications_manager:7.1(5) cpe:/a:cisco:unified_communications_manager:7.1(3b)su2 cpe:/a:cisco:unified_communications_manager:7.1(3b)su1 cpe:/a:cisco:unified_communications_manager:7.1(3b) cpe:/a:cisco:unified_communications_manager:7.1(3a)su1a cpe:/a:cisco:unified_communications_manager:7.1(3a)su1 cpe:/a:cisco:unified_communications_manager:7.1(3a) cpe:/a:cisco:unified_communications_manager:7.1(3) cpe:/a:cisco:unified_communications_manager:7.1(2b)su1 cpe:/a:cisco:unified_communications_manager:7.1(2b) cpe:/a:cisco:unified_communications_manager:7.1(2a)su1 cpe:/a:cisco:unified_communications_manager:7.1(2a) cpe:/a:cisco:unified_communications_manager:7.0(2a)su2 cpe:/a:cisco:unified_communications_manager:7.0(2a)su1 cpe:/a:cisco:unified_communications_manager:7.0(2a) cpe:/a:cisco:unified_communications_manager:7.0(2) cpe:/a:cisco:unified_communications_manager:7.0(1)su1a cpe:/a:cisco:unified_communications_manager:7.0(1)su1 cpe:/a:cisco:unified_communications_manager:6.1(5)su3 cpe:/a:cisco:unified_communications_manager:6.1(5)su2 cpe:/a:cisco:unified_communications_manager:6.1(5)su1 cpe:/a:cisco:unified_communications_manager:6.1(5) cpe:/a:cisco:unified_communications_manager:6.1(4a)su2 cpe:/a:cisco:unified_communications_manager:6.1(4a) cpe:/a:cisco:unified_communications_manager:6.1(4)su1 cpe:/a:cisco:unified_communications_manager:6.1(4) cpe:/a:cisco:unified_communications_manager:6.1(3b)su1 cpe:/a:cisco:unified_communications_manager:6.1(3b) cpe:/a:cisco:unified_communications_manager:6.1(3a) cpe:/a:cisco:unified_communications_manager:6.1(3) cpe:/a:cisco:unified_communications_manager:6.1(2)su1a cpe:/a:cisco:unified_communications_manager:6.1(2)su1 cpe:/a:cisco:unified_communications_manager:6.1(2) cpe:/a:cisco:unified_communications_manager:6.1(1b) cpe:/a:cisco:unified_communications_manager:6.1(1a) cpe:/a:cisco:unified_communications_manager:6.1(1) cpe:/a:cisco:unified_communications_manager:6.0(1b) cpe:/a:cisco:unified_communications_manager:6.0(1a) cpe:/a:cisco:unified_communications_manager:6.0(1) cpe:/a:cisco:unified_communications_manager:6.0	70
Hardware	Cisco Business Edition 3000 cpe:/h:cisco:business_edition_3000:-	1
Hardware	Cisco Business Edition 5000 cpe:/h:cisco:business_edition_5000:-	1
Hardware	Cisco Business Edition 6000 cpe:/h:cisco:business_edition_6000:-	1

Internal Sources (Detail)

Source	Url
CISCO	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa...

Alert History

If you want to see full details history, please login or register.

Date	Informations
2013-05-10 23:10:55	Multiple Updates

Type	Count
CPE ID(s)	93

Related	Severity
cisco-sa-201202...	(High)

Same Subject	Severity
Login to view 1 more Alert(s)

CVE-2011-4487

Executive Summary

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

CPE : Common Platform Enumeration

Internal Sources (Detail)

Alert History

Global Informations

Open Standards

COMPANY

STANDARDS

RECENT POSTS

MENU