CVE-2006-0367

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2006-0367
Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allows remote authenticated users with read-only administrative privileges to obtain full administrative privileges via a "crafted URL on the CCMAdmin web page."

6.5 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 8.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://secunia.com/advisories/18501 Patch Vendor Advisory
http://securitytracker.com/id?1015502 Patch
http://www.cisco.com/warp/public/707/cisco-sa-20060118-ccmpe.shtml Patch Vendor Advisory
http://www.osvdb.org/22621 Patch
http://www.securityfocus.com/bid/16293
http://www.vupen.com/english/advisories/2006/0250 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24172
http://secunia.com/advisories/18501 Patch Vendor Advisory
http://securitytracker.com/id?1015502 Patch
http://www.cisco.com/warp/public/707/cisco-sa-20060118-ccmpe.shtml Patch Vendor Advisory
http://www.osvdb.org/22621 Patch
http://www.securityfocus.com/bid/16293
http://www.vupen.com/english/advisories/2006/0250 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24172
Configurations

Configuration 1 (hide)

OR cpe:2.3:h:cisco:call_manager:1.0:*:*:*:*:*:*:*
cpe:2.3:h:cisco:call_manager:2.0:*:*:*:*:*:*:*
cpe:2.3:h:cisco:call_manager:3.0:*:*:*:*:*:*:*
cpe:2.3:h:cisco:call_manager:3.1:*:*:*:*:*:*:*
cpe:2.3:h:cisco:call_manager:3.1\(2\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:call_manager:3.1\(3a\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:call_manager:3.2:*:*:*:*:*:*:*
cpe:2.3:h:cisco:call_manager:3.3:*:*:*:*:*:*:*
cpe:2.3:h:cisco:call_manager:3.3\(3\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:call_manager:3.3\(3\)es61:*:*:*:*:*:*:*
cpe:2.3:h:cisco:call_manager:3.3\(4\)es25:*:*:*:*:*:*:*
cpe:2.3:h:cisco:call_manager:3.3\(5\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:call_manager:4.0:*:*:*:*:*:*:*
cpe:2.3:h:cisco:call_manager:4.0\(2a\)es40:*:*:*:*:*:*:*
cpe:2.3:h:cisco:call_manager:4.0\(2a\)sr2b:*:*:*:*:*:*:*
cpe:2.3:h:cisco:call_manager:4.1\(2\)es33:*:*:*:*:*:*:*
cpe:2.3:h:cisco:call_manager:4.1\(3\)es07:*:*:*:*:*:*:*
cpe:2.3:h:cisco:call_manager:4.1\(3\)sr1:*:*:*:*:*:*:*
History

21 Nov 2024, 00:06

Type Values Removed Values Added
References () http://secunia.com/advisories/18501 - Patch, Vendor Advisory () http://secunia.com/advisories/18501 - Patch, Vendor Advisory
References () http://securitytracker.com/id?1015502 - Patch () http://securitytracker.com/id?1015502 - Patch
References () http://www.cisco.com/warp/public/707/cisco-sa-20060118-ccmpe.shtml - Patch, Vendor Advisory () http://www.cisco.com/warp/public/707/cisco-sa-20060118-ccmpe.shtml - Patch, Vendor Advisory
References () http://www.osvdb.org/22621 - Patch () http://www.osvdb.org/22621 - Patch
References () http://www.securityfocus.com/bid/16293 - () http://www.securityfocus.com/bid/16293 -
References () http://www.vupen.com/english/advisories/2006/0250 - Vendor Advisory () http://www.vupen.com/english/advisories/2006/0250 - Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/24172 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/24172 -
Information

Published : 2006-01-22 20:03

Updated : 2024-11-21 00:06

NVD link : CVE-2006-0367

Mitre link : CVE-2006-0367

CVE.ORG link : CVE-2006-0367

JSON object : View

Products Affected

cisco

  • call_manager
CWE
NVD-CWE-noinfo