VULNERABILITY INTELLIGENCE
CVE-2008-0027
CVSS score10 HIGH
EPSS probability57.11%
CISA KEVNot currently listed
Published2008-01-17
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Heap-based buffer overflow in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications Manager (CUCM) 4.2 before 4.2(3)SR3 and 4.3 before 4.3(1)SR1, and CallManager 4.0 and 4.1 before 4.1(3)SR5c, allows remote attackers to cause a denial of service or execute arbitrary code via a long request.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer