CVE-2006-0367

Published: Jan 22, 2006Modified: Apr 16, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allows remote authenticated users with read-only administrative privileges to obtain full administrative privileges via a "crafted URL on the CCMAdmin web page."

Affected (18)

Products: Cisco: Call Manager

Cisco

1 product

Call Manager

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Cisco Call Manager	Version 1.0
Cisco Call Manager	Version 2.0
Cisco Call Manager	Version 3.0
Cisco Call Manager	Version 3.1
Cisco Call Manager	Version 3.1(2)
Cisco Call Manager	Version 3.1(3a)
Cisco Call Manager	Version 3.2
Cisco Call Manager	Version 3.3
Cisco Call Manager	Version 3.3(3)
Cisco Call Manager	Version 3.3(3)es61
Cisco Call Manager	Version 3.3(4)es25
Cisco Call Manager	Version 3.3(5)
Cisco Call Manager	Version 4.0
Cisco Call Manager	Version 4.0(2a)es40
Cisco Call Manager	Version 4.0(2a)sr2b
Cisco Call Manager	Version 4.1(2)es33
Cisco Call Manager	Version 4.1(3)es07
Cisco Call Manager	Version 4.1(3)sr1