cisco unity express software 1.1.2 vulnerabilities and exploits

(subscribe to this query)

Multiple cross-site request forgery (CSRF) vulnerabilities on the Cisco Unity Express with software prior to 8.0 allow remote malicious users to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCue35910.

Cisco Unity Express Software 7.2 Cisco Unity Express Software 7.0 Cisco Unity Express Software 2.2 Cisco Unity Express Software 2.0 Cisco Unity Express Software 1.1.1 Cisco Unity Express Software 3.2 Cisco Unity Express Software 3.1 Cisco Unity Express Software 3.0 Cisco Unity Express Software 2.3 Cisco Unity Express Software Cisco Unity Express Software 7.3 Cisco Unity Express Software 7.1 Cisco Unity Express Software 2.1 Cisco Unity Express Software 1.1.2 Cisco Unity Express

1 EDB exploit

The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 prior to 1.0.2e on the x86_64 platform, as used by the BN_mod_exp function, mishandles carry propagation and produces incorrect output, which makes it easier for remote malicious users to obt...

Openssl Openssl 1.0.2a Openssl Openssl 1.0.2b Openssl Openssl 1.0.2c Openssl Openssl 1.0.2 Openssl Openssl 1.0.2d Nodejs Node.js Canonical Ubuntu Linux 15.10 Canonical Ubuntu Linux 15.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 12.04

1 Github repository

The ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 prior to 1.0.2e allows remote servers to cause a denial of service (segmentation fault) via a zero p value in an anonymous Diffie-Hellman (DH) ServerKeyExchange message.

Openssl Openssl 1.0.2a Openssl Openssl 1.0.2b Openssl Openssl 1.0.2c Openssl Openssl 1.0.2 Openssl Openssl 1.0.2d

1 Article

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook