CVE-2009-2052

Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2), and 7.1 before 7.1(2); and Cisco Unified Presence 1.x, 6.x before 6.0(6), and 7.x before 7.0(4); allows remote attackers to cause a denial of service (TCP services outage) via a large number of TCP connections, related to "tracking of network connections," aka Bug IDs CSCsq22534 and CSCsw52371.

• http://secunia.com/advisories/36498Vendor Advisory
• http://secunia.com/advisories/36499Vendor Advisory
• http://secunia.com/advisories/37039Third Party Advisory
• http://securitytracker.com/id?1023018Third Party Advisory, VDB Entry
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080af2d11.shtmlPatch, Vendor Advisory
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080afc930.shtmlVendor Advisory
• http://www.securityfocus.com/bid/36152Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/36676Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1022775Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2009/2915Third Party Advisory
• http://secunia.com/advisories/36498Vendor Advisory
• http://secunia.com/advisories/36499Vendor Advisory
• http://secunia.com/advisories/37039Third Party Advisory
• http://securitytracker.com/id?1023018Third Party Advisory, VDB Entry
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080af2d11.shtmlPatch, Vendor Advisory
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080afc930.shtmlVendor Advisory
• http://www.securityfocus.com/bid/36152Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/36676Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1022775Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2009/2915Third Party Advisory

Published

Aug 27, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2046The embedded web server on the Cisco Video Surveillance 2500…
• CVE-2009-2047Directory traversal vulnerability in the Administration inte…
• CVE-2009-2048Cross-site scripting (XSS) vulnerability in the Administrati…
• CVE-2009-2049Cisco IOS 12.0(32)S12 through 12.0(32)S13 and 12.0(33)S3 thr…
• CVE-2009-2050Cisco Unified Communications Manager (aka CUCM, formerly Cal…
• CVE-2009-2051Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS…
• CVE-2009-2053Cisco Unified Communications Manager (aka CUCM, formerly Cal…
• CVE-2009-2054Cisco Unified Communications Manager (aka CUCM, formerly Cal…
• CVE-2009-2055Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to …5.9
• CVE-2009-2056Cisco IOS XR 3.8.1 and earlier allows remote authenticated u…
• CVE-2009-2057Microsoft Internet Explorer before 8 uses the HTTP Host head…
• CVE-2009-2058Apple Safari before 3.2.2 uses the HTTP Host header to deter…