5
CVE-2007-5468
- EPSS 1.59%
- Veröffentlicht 16.10.2007 00:17:00
- Zuletzt bearbeitet 16.06.2026 22:46:13
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCisco CallManager 5.1.1.3000-5 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allows remote attackers to use sniffed Digest authentication credentials to call arbitrary telephone numbers or spoof caller ID (aka "toll fraud and authentication forward attack").
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Call Manager Version5.1.1.3000
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.59% | 0.724 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066581.html
http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066691.html
http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066694.html
http://secunia.com/advisories/27231
http://www.securityfocus.com/bid/26057
http://www.vupen.com/english/advisories/2007/3534
https://exchange.xforce.ibmcloud.com/vulnerabilities/37197