Unrated severityNVD Advisory· Published Jul 15, 2007· Updated Jun 16, 2026
CVE-2006-5277
CVE-2006-5277
Description
Off-by-one error in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications Manager (CUCM, formerly CallManager) before 20070711 allow remote attackers to execute arbitrary code via a crafted packet that triggers a heap-based buffer overflow.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:cisco:unified_callmanager:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cisco:unified_callmanager:*:*:*:*:*:*:*:*range: >=3.3,<=3.3\(5\)sr2
- cpe:2.3:a:cisco:unified_callmanager:5.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*range: >=4.3,<=4.3\(1\)
- (no CPE)range: before 20070711
Patches
Vulnerability mechanics
References
8- secunia.com/advisories/26043nvdThird Party Advisory
- securitytracker.com/idnvdThird Party AdvisoryVDB Entry
- www.cisco.com/warp/public/707/cisco-sa-20070711-cucm.shtmlnvdVendor Advisory
- www.securityfocus.com/bid/24868nvdThird Party AdvisoryVDB Entry
- www.vupen.com/english/advisories/2007/2512nvdPermissions RequiredThird Party Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/31437nvdThird Party AdvisoryVDB Entry
- www.iss.net/threats/270.htmlnvdBroken Link
- www.osvdb.org/36122nvdBroken Link
News mentions
0No linked articles in our index yet.