CVE-2006-5277

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 9.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-07-15 · updated 2026-06-16

Description

Off-by-one error in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications Manager (CUCM, formerly CallManager) before 20070711 allow remote attackers to execute arbitrary code via a crafted packet that triggers a heap-based buffer overflow.

Affected products

Cisco Unified Callmanager: from 3.3 through 3.3\(5\)sr2; from 4.1 through 4.1\(3\)sr4; from 4.2 through 4.2\(3\)sr1; 5.0
Cisco Unified Communications Manager: from 4.3 through 4.3\(1\); from 5.1 through 5.1\(1\)

References

http://secunia.com/advisories/26043
http://securitytracker.com/id?1018369
http://www.cisco.com/warp/public/707/cisco-sa-20070711-cucm.shtml
http://www.iss.net/threats/270.html
http://www.osvdb.org/36122
http://www.securityfocus.com/bid/24868
http://www.vupen.com/english/advisories/2007/2512
https://exchange.xforce.ibmcloud.com/vulnerabilities/31437
http://secunia.com/advisories/26043
http://securitytracker.com/id?1018369
http://www.cisco.com/warp/public/707/cisco-sa-20070711-cucm.shtml
http://www.iss.net/threats/270.html

Get alerted when CVE-2006-5277 or the next vulnerability affects your stack