PT-2007-6504 · Cisco · Cisco Callmanager

Published 2007-10-16 · Updated 2017-07-29 · CVE-2007-5468

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Cisco CallManager version 5.1.1.3000-5

Description: The issue allows remote attackers to use sniffed Digest authentication credentials to call arbitrary telephone numbers or spoof caller ID, which can lead to toll fraud and authentication forward attacks. This occurs because Cisco CallManager does not verify the Digest authentication header URI against the Request URI in SIP messages.

Recommendations: For Cisco CallManager version 5.1.1.3000-5, consider implementing additional authentication measures or restricting access to the SIP messaging system to minimize the risk of exploitation. As a temporary workaround, restrict the use of Digest authentication in SIP messages until a patch is available.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2007-5468

Affected Products

Cisco Callmanager

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2007-5468 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37197 · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066691.html · Note
• http://secunia.com/advisories/27231 · Note
• http://securityfocus.com/bid/26057 · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066694.html · Note
• http://vupen.com/english/advisories/2007/3534 · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066581.html · Note