CVE-2007-5468

Published: Oct 16, 2007Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Cisco CallManager 5.1.1.3000-5 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allows remote attackers to use sniffed Digest authentication credentials to call arbitrary telephone numbers or spoof caller ID (aka "toll fraud and authentication forward attack").

Affected (1)

Products: Cisco: Call Manager

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cisco Call Manager	Version 5.1.1.3000

Related CWEs

References (14)

http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066581.html

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066691.html

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066694.html

Source: cve@mitre.org

http://secunia.com/advisories/27231

Source: cve@mitre.org

http://www.securityfocus.com/bid/26057

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/3534

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/37197

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066581.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066691.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066694.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27231

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/26057

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/3534

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/37197

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.