CVEvulnerability
CVE-2007-5468
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-10-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
Cisco CallManager 5.1.1.3000-5 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allows remote attackers to use sniffed Digest authentication credentials to call arbitrary telephone numbers or spoof caller ID (aka "toll fraud and authentication forward attack").
Affected configurations
• cisco call manager 5.1.1.3000
Related
Weakness · not in database (1)
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066581.html lists.grok.org.uk
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066691.html lists.grok.org.uk
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066694.html lists.grok.org.uk
- http://secunia.com/advisories/27231 secunia.com
- http://www.securityfocus.com/bid/26057 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/3534 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37197 exchange.xforce.ibmcloud.com
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066581.html lists.grok.org.uk
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066691.html lists.grok.org.uk
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066694.html lists.grok.org.uk
- http://secunia.com/advisories/27231 secunia.com
- http://www.securityfocus.com/bid/26057 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/3534 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37197 exchange.xforce.ibmcloud.com