CVE-2007-1833

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The Skinny Call Control Protocol (SCCP) implementation in Cisco Unified CallManager (CUCM) 3.3 before 3.3(5)SR2a, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3)SR1, and 5.0 before 5.0(4a)SU1 allows remote attackers to cause a denial of service (loss of voice services) by sending crafted packets to the (1) SCCP (2000/tcp) or (2) SCCPS (2443/tcp) port.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/24665Patch, Vendor Advisory
http://securitytracker.com/id?1017826Patch
http://www.cisco.com/warp/public/707/cisco-sa-20070328-voip.shtmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/23181
http://www.vupen.com/english/advisories/2007/1144
https://exchange.xforce.ibmcloud.com/vulnerabilities/33295
http://secunia.com/advisories/24665Patch, Vendor Advisory
http://securitytracker.com/id?1017826Patch
http://www.cisco.com/warp/public/707/cisco-sa-20070328-voip.shtmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/23181
http://www.vupen.com/english/advisories/2007/1144
https://exchange.xforce.ibmcloud.com/vulnerabilities/33295

Timeline

Published: Apr 3, 2007
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2007

CVE-2007-18347.8Cisco Unified CallManager (CUCM) 5.0 before 5.0(4a)SU1 and Cisco Unified Presence Server (CUPS) 1.0 before 1.0(3) allow remote attackers to CVE-2007-18354.6PHP 4 before 4.4.5 and PHP 5 before 5.2.1, when using an empty session save path (session.save_path), uses the TMPDIR default after checking CVE-2007-18369.0The command line administration interface in Data Domain OS before 4.0.3.6 allows remote authenticated users to execute arbitrary commands v CVE-2007-18377.5Multiple PHP remote file inclusion vulnerabilities in MangoBery CMS 0.5.5 allow remote attackers to execute arbitrary PHP code via a URL in CVE-2007-18387.5SQL injection vulnerability in view.php in the Friendfinder 3.3 and earlier module for Xoops allows remote attackers to execute arbitrary SQ CVE-2007-18397.5Multiple PHP remote file inclusion vulnerabilities in CodeBB 1.1b3 and earlier allow remote attackers to execute arbitrary PHP code via a UR CVE-2007-18404.3lib/modules.inc in LDAP Account Manager (LAM) before 1.3.0 does not escape HTML special characters in LDAP data, which allows remote attacke CVE-2007-18414.3The isakmp_info_recv function in src/racoon/isakmp_inf.c in racoon in Ipsec-tools before 0.6.7 allows remote attackers to cause a denial of CVE-2007-18427.5Directory traversal vulnerability in login.php in JSBoard before 2.0.12 allows remote attackers to include and execute arbitrary local files CVE-2007-18436.8PHP remote file inclusion vulnerability in gmapfactory/params.php in MapLab 2.2.1, when register_globals is enabled, allows remote attackers CVE-2007-18447.5Multiple PHP remote file inclusion vulnerabilities in Aardvark Topsites PHP 5 allow remote attackers to execute arbitrary PHP code via a URL CVE-2007-18457.5SQL injection vulnerability in show_event.php in the Expanded Calendar (calendar_panel) 2.00 module for PHP-Fusion allows remote attackers t