PT-2008-5168 · Cisco · Cisco Unity

Publicado 2008-10-08 · Atualizado 2017-08-08 · CVE-2008-3814

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco Unity versions 4.x through 4.2(1)ES160 Cisco Unity versions 5.x through 5.0(1)ES52 Cisco Unity versions 7.x through 7.0(1)ES7

Description The issue allows remote attackers to bypass authentication and read or modify system configuration parameters when using anonymous authentication. This can be achieved by accessing a specific link more than once.

Recommendations For Cisco Unity versions 4.x through 4.2(1)ES160, update to version 4.2(1)ES161 or later. For Cisco Unity versions 5.x through 5.0(1)ES52, update to version 5.0(1)ES53 or later. For Cisco Unity versions 7.x through 7.0(1)ES7, update to version 7.0(2)ES8 or later.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2008-3814

Produtos afetados

Cisco Unity

Referências · 10

• http://voipshield.com/research-details.php?id=126 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45741 · Nota
• http://securityfocus.com/bid/31642 · Nota
• http://cisco.com/en/US/products/products_security_response09186a0080a0d861.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-3814 · Nota de Segurança
• http://securitytracker.com/id?1021011 · Nota
• http://securityfocus.com/bid/31638 · Nota
• http://secunia.com/advisories/32187 · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/2771 · Aviso do Fabricante
• http://cisco.com/en/US/products/products_security_advisory09186a0080a0d85f.shtml · Aviso do Fabricante