{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2008-02-13T00:00:00", "descriptions": [{"lang": "en", "value": "Buffer overflow in the telnet server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G running SCCP firmware might allow remote authenticated users to execute arbitrary code via a crafted command."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-07T12:57:01", "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco"}, "references": [{"name": "20080213 Cisco Unified IP Phone Overflow and Denial of Service Vulnerabilities", "tags": ["vendor-advisory", "x_refsource_CISCO"], "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml"}, {"name": "1019410", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1019410"}, {"name": "27774", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/27774"}, {"name": "ADV-2008-0543", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2008/0543"}, {"name": "cisco-unifiedipphone-telnet-bo(40493)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/40493"}, {"name": "28935", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28935"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@cisco.com", "ID": "CVE-2008-0529", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Buffer overflow in the telnet server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G running SCCP firmware might allow remote authenticated users to execute arbitrary code via a crafted command."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20080213 Cisco Unified IP Phone Overflow and Denial of Service Vulnerabilities", "refsource": "CISCO", "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml"}, {"name": "1019410", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1019410"}, {"name": "27774", "refsource": "BID", "url": "http://www.securityfocus.com/bid/27774"}, {"name": "ADV-2008-0543", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2008/0543"}, {"name": "cisco-unifiedipphone-telnet-bo(40493)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/40493"}, {"name": "28935", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28935"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T07:46:55.059Z"}, "title": "CVE Program Container", "references": [{"name": "20080213 Cisco Unified IP Phone Overflow and Denial of Service Vulnerabilities", "tags": ["vendor-advisory", "x_refsource_CISCO", "x_transferred"], "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml"}, {"name": "1019410", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1019410"}, {"name": "27774", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/27774"}, {"name": "ADV-2008-0543", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2008/0543"}, {"name": "cisco-unifiedipphone-telnet-bo(40493)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/40493"}, {"name": "28935", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/28935"}]}]}, "cveMetadata": {"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "assignerShortName": "cisco", "cveId": "CVE-2008-0529", "datePublished": "2008-02-15T01:00:00", "dateReserved": "2008-01-31T00:00:00", "dateUpdated": "2024-08-07T07:46:55.059Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:unified_ip_phone:7906g:*:*:*:*:*:*:*", "matchCriteriaId": "53A9A468-CAC3-4DC6-B839-557DBE8246D3", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:unified_ip_phone:7911g:*:*:*:*:*:*:*", "matchCriteriaId": "26830222-1503-4748-A104-334265D8F06F", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:unified_ip_phone:7935:*:*:*:*:*:*:*", "matchCriteriaId": "19712324-A41D-49F1-AA74-3B30A731FF47", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:unified_ip_phone:7936:*:*:*:*:*:*:*", "matchCriteriaId": "43F9E1FE-4BD5-40B9-B239-B2185821A551", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:unified_ip_phone:7940:*:*:*:*:*:*:*", "matchCriteriaId": "26BC4C08-16FD-4E27-AC7E-155E9CBAB808", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:unified_ip_phone:7940g:*:*:*:*:*:*:*", "matchCriteriaId": "987BEE5F-5686-4B83-A6EF-903C86439BB3", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:unified_ip_phone:7941g:*:*:*:*:*:*:*", "matchCriteriaId": "DFE61DF2-3D61-400F-BA70-B506412C9C28", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:unified_ip_phone:7960:*:*:*:*:*:*:*", "matchCriteriaId": "6EE292B7-DFC7-402C-BC10-9293D32B75B3", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:unified_ip_phone:7960g:*:*:*:*:*:*:*", "matchCriteriaId": "648AFF80-3F8B-4966-9899-530F498C8B3B", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:unified_ip_phone:7961g:*:*:*:*:*:*:*", "matchCriteriaId": "F0B76F56-31D4-4576-AC95-00AED498F25A", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:unified_ip_phone:7970g:*:*:*:*:*:*:*", "matchCriteriaId": "2747DB12-83B9-40E4-9671-382E241C98EE", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:unified_ip_phone:7971g:*:*:*:*:*:*:*", "matchCriteriaId": "FF0EBD01-E3AC-44C7-A03A-EDDBA18794C5", "vulnerable": false}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:skinny_client_control_protocol_\\(sccp\\)_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5FDB3D25-274E-42F5-B5C1-B2A7875F94EE", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:unified_ip_phone:7940:*:*:*:*:*:*:*", "matchCriteriaId": "26BC4C08-16FD-4E27-AC7E-155E9CBAB808", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:unified_ip_phone:7940g:*:*:*:*:*:*:*", "matchCriteriaId": "987BEE5F-5686-4B83-A6EF-903C86439BB3", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:unified_ip_phone:7960:*:*:*:*:*:*:*", "matchCriteriaId": "6EE292B7-DFC7-402C-BC10-9293D32B75B3", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:unified_ip_phone:7960g:*:*:*:*:*:*:*", "matchCriteriaId": "648AFF80-3F8B-4966-9899-530F498C8B3B", "vulnerable": false}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:session_initiation_protocol_\\(sip\\)_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "780CE3C9-7CA3-4770-8DC9-BCB3365C32F9", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Buffer overflow in the telnet server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G running SCCP firmware might allow remote authenticated users to execute arbitrary code via a crafted command."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer en el servidor de telnet de Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, y 7971G ejecut\u00e1ndose en un software empotrado (firmware) SCCP, puede que permita a usuarios autenticados remotamente ejecutar c\u00f3digo de su elecci\u00f3n mediante un comando manipulado."}], "evaluatorSolution": "Patch requires login", "id": "CVE-2008-0529", "lastModified": "2024-11-21T00:42:19.060", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2008-02-15T02:00:00.000", "references": [{"source": "ykramarz@cisco.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/28935"}, {"source": "ykramarz@cisco.com", "tags": ["Patch"], "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml"}, {"source": "ykramarz@cisco.com", "url": "http://www.securityfocus.com/bid/27774"}, {"source": "ykramarz@cisco.com", "url": "http://www.securitytracker.com/id?1019410"}, {"source": "ykramarz@cisco.com", "url": "http://www.vupen.com/english/advisories/2008/0543"}, {"source": "ykramarz@cisco.com", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/40493"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/28935"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/27774"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id?1019410"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2008/0543"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/40493"}], "sourceIdentifier": "ykramarz@cisco.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}