CVE-2009-0636

HighCVSS 7.8/10Last modified Jun 16, 2026

Description

Unspecified vulnerability in Cisco IOS 12.0 through 12.4, when SIP voice services are enabled, allows remote attackers to cause a denial of service (device crash) via a valid SIP message.

Metrics

CVSS 2.0 7.8/10AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/34438Vendor Advisory
http://securitytracker.com/id?1021902
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtmlPatch, Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a904c0.shtmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/34243
http://www.vupen.com/english/advisories/2009/0851Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49421
http://secunia.com/advisories/34438Vendor Advisory
http://securitytracker.com/id?1021902
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtmlPatch, Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a904c0.shtmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/34243
http://www.vupen.com/english/advisories/2009/0851Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49421

Timeline

Published: Mar 27, 2009
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2009

CVE-2009-06377.1The SCP server in Cisco IOS 12.2 through 12.4, when Role-Based CLI Access is enabled, does not enforce the CLI view configuration for file t CVE-2009-06387.8The Cisco Firewall Services Module (FWSM) 2.x, 3.1 before 3.1(16), 3.2 before 3.2(13), and 4.0 before 4.0(6) for Cisco Catalyst 6500 switche CVE-2009-06397.5PHP remote file inclusion vulnerability in moduli/libri/index.php in phpyabs 0.1.2 allows remote attackers to execute arbitrary PHP code via CVE-2009-06405.0Directory traversal vulnerability in the administrative web server in Swann DVR4-SecuraNet allows remote attackers to read arbitrary files v CVE-2009-06419.3sys_term.c in telnetd in FreeBSD 7.0-RELEASE and other 7.x versions deletes dangerous environment variables with a method that was valid onl CVE-2009-06426.8ext/openssl/ossl_ocsp.c in Ruby 1.8 and 1.9 does not properly check the return value from the OCSP_basic_verify function, which might allow CVE-2009-06435.1Static code injection vulnerability in post.php in Simple PHP News 1.0 final allows remote attackers to inject arbitrary PHP code into news.CVE-2009-06445.0The HTTP interface in Swann DVR4-SecuraNet has a certain default administrative username and password, which makes it easier for remote atta CVE-2009-06456.5Directory traversal vulnerability in index.php in Jaws 0.8.8 allows remote authenticated users to read arbitrary files via a .. (dot dot) in CVE-2009-06467.5Multiple SQL injection vulnerabilities in 4Site CMS 2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) log CVE-2009-06475.0msnmsgr.exe in Windows Live Messenger (WLM) 2009 build 14.0.8064.206, and other 14.0.8064.x builds, allows remote attackers to cause a denia CVE-2009-06486.8Multiple cross-site request forgery (CSRF) vulnerabilities in the manage_users handler in admin/index.php in Falt4 CMS (aka Falt4 Extreme) R