5

CVE-2006-4032

Unspecified vulnerability in Cisco IOS CallManager Express (CME) allows remote attackers to gain sensitive information (user names) from the Session Initiation Protocol (SIP) user directory via certain SIP messages, aka bug CSCse92417.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Callmanager Express Version3.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.59% 0.727
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/21335
Vendor Advisory
http://securitytracker.com/id?1016627
http://www.blackhat.com/html/bh-usa-06/bh-usa-06-speakers.html#Endler
http://www.cisco.com/warp/public/707/cisco-sr-20060802-sip.shtml
Vendor Advisory
http://www.osvdb.org/27760
http://www.securityfocus.com/bid/19309
http://www.vupen.com/english/advisories/2006/3126
https://exchange.xforce.ibmcloud.com/vulnerabilities/28185