Cisco Cisco IOS Software Release 12.4(23)

Workaround: Prevent the Telco from sending the following information in the setup_ack message:

Progress Ind i = 0x8288 - In-band" information or appropriate now available

Note that the symptom does not occur in Cisco IOS Release 12.3(11)T10 and with CME version 3.2.

CSCse05642

Multiple voice-related vulnerabilities are identified in Cisco IOS software, one of which is also 
shared with Cisco Unified Communications Manager. These vulnerabilities pertain to the following 
protocols or features:

Session Initiation Protocol (SIP) 

Media Gateway Control Protocol (MGCP) 

Signaling protocols H.323, H.254 

Real-time Transport Protocol (RTP) 

Facsimile reception 

Cisco has made free software available to address these vulnerabilities for affected customers. Fixed 
Cisco IOS software listed in the Software Versions and Fixes section contains fixes for all 
vulnerabilities mentioned in this advisory.

There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from 
disabling the protocol or feature itself. 

This advisory is posted at 

CSCse42141

Symptoms: T38 fax calls fail when they come inbound through DID Analog ports. In the debug h245 
asn1, there is no OLCAck sent back towards the fax server. 

Conditions: This symptom was only reproduced on analog ports. PRI works with the same 
configuration. 

Workaround: Send the fax call through a PRI.

CSCse50887

Symptoms: MGCP IOS Gateway sees the following:

%PARSER-4-BADCFG: Unexpected end of configuration file.

and then:

config term

router(UNKNOWN-MODE)

Or, the show running-config command output is only 5 bytes.

Conditions: This symptom occurs under the following conditions:

Use MGCP with the ccm-manager config command 

Have more than 20 MGCP end points (voice ports) 

Run Cisco IOS Release 12.3(11)T or later releases 

Reset device pool from Cisco CallManager

Workaround: Add the no ccm-manager config command.