PT-2006-4467 · Cisco · Cisco Unified Callmanager

Publicado 2006-07-14 · Atualizado 2017-07-20 · CVE-2006-3592

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco Unified CallManager (CUCM) versions 5.0(1) through 5.0(3a)

Description The issue is related to an unspecified vulnerability in the command line interface (CLI) that allows local users to execute arbitrary commands with elevated privileges. This involves certain CLI commands.

Recommendations For versions 5.0(1) through 5.0(3a), consider restricting access to the CLI to minimize the risk of exploitation until a fix is available.

Correção

Identificadores relacionados

CVE-2006-3592

Produtos afetados

Cisco Unified Callmanager

Referências · 8

• http://securityfocus.com/bid/18952 · Nota
• http://cisco.com/warp/public/707/cisco-sa-20060712-cucm.shtml · Aviso do Fabricante
• http://secunia.com/advisories/21030 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-3592 · Nota de Segurança
• http://osvdb.org/27160 · Nota
• http://vupen.com/english/advisories/2006/2774 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27689 · Nota
• http://securitytracker.com/id?1016475 · Nota