CVE-2009-2054

Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2a)su1, and 7.1 before 7.1(2a)su1 allows remote attackers to cause a denial of service (file-descriptor exhaustion and SIP outage) via a flood of TCP packets, aka Bug ID CSCsx23689.

• CWE-770

• http://osvdb.org/57456Broken Link
• http://secunia.com/advisories/36498Broken Link
• http://secunia.com/advisories/36499Broken Link
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080af2d11.shtmlBroken Link, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/36152Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1022775Broken Link, Third Party Advisory, VDB Entry
• http://osvdb.org/57456Broken Link
• http://secunia.com/advisories/36498Broken Link
• http://secunia.com/advisories/36499Broken Link
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080af2d11.shtmlBroken Link, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/36152Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1022775Broken Link, Third Party Advisory, VDB Entry

Published

Aug 27, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2048Cross-site scripting (XSS) vulnerability in the Administrati…
• CVE-2009-2049Cisco IOS 12.0(32)S12 through 12.0(32)S13 and 12.0(33)S3 thr…
• CVE-2009-2050Cisco Unified Communications Manager (aka CUCM, formerly Cal…
• CVE-2009-2051Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS…
• CVE-2009-2052Cisco Unified Communications Manager (aka CUCM, formerly Cal…
• CVE-2009-2053Cisco Unified Communications Manager (aka CUCM, formerly Cal…
• CVE-2009-2055Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to …5.9
• CVE-2009-2056Cisco IOS XR 3.8.1 and earlier allows remote authenticated u…
• CVE-2009-2057Microsoft Internet Explorer before 8 uses the HTTP Host head…
• CVE-2009-2058Apple Safari before 3.2.2 uses the HTTP Host header to deter…
• CVE-2009-2059Opera, possibly before 9.25, uses the HTTP Host header to de…
• CVE-2009-2060src/net/http/http_transaction_winhttp.cc in Google Chrome be…