CVE:CVE-2008-1745
CNNVD:CNNVD-200805-198
CISCO融合通讯管理工具5.1(2),before 6.1(1)之前的版本,远程攻击者可以利用SIP协议畸形报头的加入消息造成拒绝服务攻击(服务中断) CISCO BUG ID CSCsi48115。
solution:Upgrade cisco unified_communications_manager to a higher version than 4.1,4.1:(3sr.5,4.1:(3sr4,4.1:(3sr5,4.1:(3sr5b,4.1:(3sr5c,4.2:4.2(3sr.2,4.2:4.2_(3sr2b,4.2:4.2_(3sr3,4.3,4.3:4.3(1sr.1,5.1:(1,5.1:(2,5.1:(2a,5.1:(2b,5.1:(3a,6.0,6.0:(1,6.0:(1a,6.1,6.1:(1a,and avoid the version 4.1,4.1:(3)sr.5,4.1:(3)sr4,4.1:(3)sr5,4.1:(3)sr5b,4.1:(3)sr5c,4.2:4.2(3)sr.2,4.2:4.2_(3)sr2b,4.2:4.2_(3)sr3,4.3,4.3:4.3(1)sr.1,5.1:(1),5.1:(2),5.1:(2a),5.1:(2b),5.1:(3a),6.0,6.0:(1),6.0:(1a),6.1,6.1:(1a)