TI-2009-02737 Aliases CVE-2009-2874 GHSA-phqm-4q46-2r6c

The TimesTenD process in Cisco Unified Presence 1.x, 6.x before 6.0(6), and 7.x before…

MEDIUM 41Published 2009-10-16 · Updated 2024-08-07

Key facts

Attack vector: Network
Privileges required: None
User interaction: — Not recorded in CVSS 2.0
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · None · Complete
Fix status: No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

The TimesTenD process in Cisco Unified Presence 1.x, 6.x before 6.0(6), and 7.x before 7.0(4) allows remote attackers to cause a denial of service (process crash) via a large number of TCP connections to ports 16200 and 22794, aka Bug ID CSCsy17662.

Why it matters now

EPSS 0.03764 89th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 12

CPE	Versions	Role	Vendor
cpe:2.3:a:cisco:unified_presence_server:1.0:::::::*	1.0	Vulnerable	Cisco
cpe:2.3:a:cisco:unified_presence_server:1.0\(1\):::::::*	1.0(1)	Vulnerable	Cisco
cpe:2.3:a:cisco:unified_presence_server:1.0\(2\):::::::*	1.0(2)	Vulnerable	Cisco
cpe:2.3:a:cisco:unified_presence_server:1.0\(3\):::::::*	1.0(3)	Vulnerable	Cisco
cpe:2.3:a:cisco:unified_presence_server:6.0:::::::*	6.0	Vulnerable	Cisco
cpe:2.3:a:cisco:unified_presence_server:6.0\(2\):::::::*	6.0(2)	Vulnerable	Cisco
cpe:2.3:a:cisco:unified_presence_server:6.0\(3\):::::::*	6.0(3)	Vulnerable	Cisco
cpe:2.3:a:cisco:unified_presence_server:6.0\(4\):::::::*	6.0(4)	Vulnerable	Cisco
cpe:2.3:a:cisco:unified_presence_server:6.0\(5\):::::::*	6.0(5)	Vulnerable	Cisco
cpe:2.3:a:cisco:unified_presence_server:7.0:::::::*	7.0	Vulnerable	Cisco

cpe:2.3:a:cisco:unified_presence_server:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Cisco
cpe:2.3:a:cisco:unified_presence_server:1.0\(1\):*:*:*:*:*:*:* Versions 1.0(1) Vulnerable ·Cisco
cpe:2.3:a:cisco:unified_presence_server:1.0\(2\):*:*:*:*:*:*:* Versions 1.0(2) Vulnerable ·Cisco
cpe:2.3:a:cisco:unified_presence_server:1.0\(3\):*:*:*:*:*:*:* Versions 1.0(3) Vulnerable ·Cisco
cpe:2.3:a:cisco:unified_presence_server:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Cisco
cpe:2.3:a:cisco:unified_presence_server:6.0\(2\):*:*:*:*:*:*:* Versions 6.0(2) Vulnerable ·Cisco
cpe:2.3:a:cisco:unified_presence_server:6.0\(3\):*:*:*:*:*:*:* Versions 6.0(3) Vulnerable ·Cisco
cpe:2.3:a:cisco:unified_presence_server:6.0\(4\):*:*:*:*:*:*:* Versions 6.0(4) Vulnerable ·Cisco
cpe:2.3:a:cisco:unified_presence_server:6.0\(5\):*:*:*:*:*:*:* Versions 6.0(5) Vulnerable ·Cisco
cpe:2.3:a:cisco:unified_presence_server:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Cisco

Show 2 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:a:cisco:unified_presence_server:7.0\(2\):::::::*	7.0(2)	Vulnerable	Cisco
cpe:2.3:a:cisco:unified_presence_server:7.0\(3\):::::::*	7.0(3)	Vulnerable	Cisco

cpe:2.3:a:cisco:unified_presence_server:7.0\(2\):*:*:*:*:*:*:* Versions 7.0(2) Vulnerable ·Cisco
cpe:2.3:a:cisco:unified_presence_server:7.0\(3\):*:*:*:*:*:*:* Versions 7.0(3) Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2009-2874
2026-10-03 Alias added: GHSA-phqm-4q46-2r6c

References

Patch 1

20091014 Cisco Unified Presence Denial of Service Vulnerabilities

Advisory 1

ADV-2009-2915

TI-2011-01432 Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x, 7.x before… CVSS 2.0HIGH 10.0
TI-2006-05364 Cisco Security Agent (CSA) for Linux 4.5 before 4.5.1.657 and 5.0 before 5.0.0.193, as… CVSS 2.0HIGH 7.8
TI-2013-00984 Cisco Unified Presence Server (CUPS) 8.6, 9.0, and 9.1 before 9.1.1 allows remote… CVSS 2.0HIGH 7.8
TI-2008-01110 The Presence Engine (PE) service in Cisco Unified Presence before 6.0(1) allows remote… CVSS 2.0HIGH 7.8
TI-2007-03662 Unspecified vulnerability in Cisco Unified Communications Manager (CUCM, formerly… CVSS 2.0HIGH 7.8
TI-2007-01758 Cisco Unified CallManager (CUCM) 5.0 before 5.0(4a)SU1 and Cisco Unified Presence Server… CVSS 2.0HIGH 7.8

See all 15 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences