Cisco Security Advisory – Cisco Unified Communications Manager (CUCM), formerly CallManager, contains two denial of service (DoS) vulnerabilities. Large volumes of UDP Session Initiation Protocol (SIP) INVITE messages may cause a resource exhaustion condition on CUCM systems resulting in a kernel panic. The CUCM Trivial File Transfer Protocol (TFTP) service contains a buffer overflow vulnerability that may result in a denial of service condition or allow a remote, unauthenticated user to execute arbitrary code. There are no workarounds for these vulnerabilities.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/60197/cisco-sa-20071017-cucm.txt
Source: https://packetstormsecurity.com/files/60197/Cisco-Security-Advisory-20071017-cucm.html