CVE-2012-3935

Public PoC / Exploit (1)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cisco Unified Presence (CUP) before 8.6(3) and Jabber Extensible Communications Platform (aka Jabber XCP) before 5.3 allow remote attackers to cause a denial of service (process crash) via a crafted XMPP stream header, aka Bug ID CSCtu32832.

Weaknesses (CWE)

CWE-119

Affected Products (33)

cisco · unified_presencevulnerable

References (10)

http://osvdb.org/85421

http://secunia.com/advisories/50562

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120912-cupxcp

http://www.securitytracker.com/id?1027520

https://exchange.xforce.ibmcloud.com/vulnerabilities/78457

http://osvdb.org/85421

http://secunia.com/advisories/50562

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120912-cupxcp

http://www.securitytracker.com/id?1027520

https://exchange.xforce.ibmcloud.com/vulnerabilities/78457