PT-2008-5777 · Cisco · Cisco Unity

Publicado 2008-10-13 · Atualizado 2017-08-08 · CVE-2008-4545

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Unity versions 4.x through 4.2(1)ES160 Cisco Unity versions 5.x through 5.0(1)ES52 Cisco Unity versions 7.x through 7.0(1)ES7

Description The issue allows remote authenticated users to obtain sensitive information by reading files in the D:CommServerReports directory due to weak permissions.

Recommendations For Cisco Unity versions 4.x through 4.2(1)ES160, update to version 4.2(1)ES161 or later. For Cisco Unity versions 5.x through 5.0(1)ES52, update to version 5.0(1)ES53 or later. For Cisco Unity versions 7.x through 7.0(1)ES7, update to version 7.0(2)ES8 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-4545

Produtos afetados

Cisco Unity

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2008-4545 · Nota de Segurança
• http://securityfocus.com/bid/31642 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45742 · Nota
• http://cisco.com/en/US/products/products_security_response09186a0080a0d861.html · Aviso do Fabricante
• http://voipshield.com/research-details.php?id=130 · Nota
• http://secunia.com/advisories/32187 · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/2771 · Nota
• http://securitytracker.com/id?1021022 · Nota