CVE-2004-2486 – Cisco Security Advisory 20080213-phone

https://notcve.org/view.php?id=CVE-2004-2486

31 Dec 2004 — The DSS verification code in Dropbear SSH Server before 0.43 frees uninitialized variables, which might allow remote attackers to gain access. Cisco Unified IP Phone models contain multiple overflow and denial of service (DoS) vulnerabilities. There are workarounds for several of these vulnerabilities. Cisco has made free software available to address this issue for affected customers. • http://matt.ucc.asn.au/dropbear/CHANGES •