CVE-2007-5538

CVE Database · CVE-2007-5538

CVE-2007-5538

· N/AModified

CVSS v3.1

N/A

EPSS

5.53%

Published

Oct 17, 2007

Modified

Apr 22, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Buffer overflow in the Centralized TFTP File Locator Service in Cisco Unified Communications Manager (CUCM, formerly CallManager) 5.1 before 5.1(3), and Unified CallManager 5.0, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors involving the processing of filenames, aka CSCsh47712.

Weaknesses (CWE)

CWE-119

Affected Products (2)

cisco · unified_callmanagervulnerable

cisco · unified_communications_managervulnerable

References (14)

http://osvdb.org/37940

http://secunia.com/advisories/27296

http://www.cisco.com/en/US/products/products_security_advisory09186a00808dda34.shtml

http://www.securityfocus.com/bid/26105

http://www.securitytracker.com/id?1018828

http://www.vupen.com/english/advisories/2007/3532