Cisco Systems has made available upgrades to correct two critical flaws that make its Unified Communication Manager (formerly CallManager) vulnerable to denial of service attacks or remote code execution. Both problems have the potential to lead to a problem called a heap-based overflow. I don't know what that is exactly, but it sounds like a heap of headaches for those who don't go get the patch.
For more on the software vulnerabilities and how to correct them:
- read this article [1] from SC Magazine.com
Related Articles:
Cisco, Nokia reach dual-mode phone deal. Report [2]
Cisco systems vulnerable to DoS attacks. Report [3]
Links:
[1] http://scmagazine.com/us/news/article/671043/cisco-patches-two-voip-software-flaws/
[2] http://www.fiercevoip.com/node/1296/
[3] http://www.fiercevoip.com/story/cisco-systems-vulnerable-to-dos-attacks/2007-04-02