CVE-2009-0057

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-01-22 · updated 2026-06-16
Weakness: CWE-20

Description

The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager 5.x before 5.1(3e) and 6.x before 6.1(3) allows remote attackers to cause a denial of service (voice service outage) by sending malformed input over a TCP session in which the "client terminates prematurely."

Affected products

Cisco Unified Communications Manager: 5.0, 5.0_1, 5.0_2, 5.0_3, 5.0_3a, 5.0_4 (+30)

References

http://secunia.com/advisories/33588
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a61928.shtml
http://www.securityfocus.com/bid/33379
http://www.securitytracker.com/id?1021620
http://www.vupen.com/english/advisories/2009/0213
https://exchange.xforce.ibmcloud.com/vulnerabilities/48139
http://secunia.com/advisories/33588
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a61928.shtml
http://www.securityfocus.com/bid/33379
http://www.securitytracker.com/id?1021620
http://www.vupen.com/english/advisories/2009/0213
https://exchange.xforce.ibmcloud.com/vulnerabilities/48139

Get alerted when CVE-2009-0057 or the next vulnerability affects your stack