PT-2007-6504 · Cisco · Cisco Callmanager

Publicado 2007-10-16 · Atualizado 2017-07-29 · CVE-2007-5468

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Cisco CallManager version 5.1.1.3000-5

Description: The issue allows remote attackers to use sniffed Digest authentication credentials to call arbitrary telephone numbers or spoof caller ID, which can lead to toll fraud and authentication forward attacks. This occurs because Cisco CallManager does not verify the Digest authentication header URI against the Request URI in SIP messages.

Recommendations: For Cisco CallManager version 5.1.1.3000-5, consider implementing additional authentication measures or restricting access to the SIP messaging system to minimize the risk of exploitation. As a temporary workaround, restrict the use of Digest authentication in SIP messages until a patch is available.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2007-5468

Produtos afetados

Cisco Callmanager

Referências · 8

• https://exchange.xforce.ibmcloud.com/vulnerabilities/37197 · Nota
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066691.html · Nota
• http://secunia.com/advisories/27231 · Nota
• http://securityfocus.com/bid/26057 · Nota
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066694.html · Nota
• http://vupen.com/english/advisories/2007/3534 · Nota
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066581.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5468 · Nota de Segurança