Cisco Unity Connection SIP relay Integrated Port UDP 5060 DoS Vulnerability

Cisco Unity Connection SIP relay Integrated Port UDP 5060 DoS Vulnerability

Release date:
Updated on:

Affected Systems:
Cisco Unity Connection
Description:
CVE (CAN) ID: CVE-2015-0612

Cisco Unity Connection is a fully functional voice messaging platform that uses the Linux Unified Communication operating system.

A security vulnerability exists in the Connection Conversation Manager (CuCsMgr) process of Cisco Unity Connection. unauthenticated remote attackers send constructed UDP packets to affected devices configured with SIP relay, after successful exploitation, the SIP port can be closed, resulting in DOS.

<* Source: Cisco

Link: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-cuc
*>

Suggestion:
Vendor patch:

Cisco
-----
Cisco has released a Security Bulletin (cisco-sa-20150401-cuc) and patches for this:
Cisco-sa-20150401-cuc: Multiple Vulnerabilities in Cisco Unity Connection
Link: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-cuc

This article permanently updates the link address: