Lucene search

[email protected]CVE-2006-0367

HistoryJan 22, 2006 - 8:03 p.m.

CVE-2006-0367

2006-01-2220:03:00

[email protected]

web.nvd.nist.gov

cisco

callmanager

vulnerability

authenticated users

admin privileges

web page

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

6.2 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.3%

JSON

Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allows remote authenticated users with read-only administrative privileges to obtain full administrative privileges via a “crafted URL on the CCMAdmin web page.”

Affected configurations

NVD

Node

ciscocall_managerMatch1.0

ciscocall_managerMatch2.0

ciscocall_managerMatch3.0

ciscocall_managerMatch3.1

ciscocall_managerMatch3.1\(2\)

ciscocall_managerMatch3.1\(3a\)

ciscocall_managerMatch3.2

ciscocall_managerMatch3.3

ciscocall_managerMatch3.3\(3\)

ciscocall_managerMatch3.3\(3\)es61

ciscocall_managerMatch3.3\(4\)es25

ciscocall_managerMatch3.3\(5\)

ciscocall_managerMatch4.0

ciscocall_managerMatch4.0\(2a\)es40

ciscocall_managerMatch4.0\(2a\)sr2b

ciscocall_managerMatch4.1\(2\)es33

ciscocall_managerMatch4.1\(3\)es07

ciscocall_managerMatch4.1\(3\)sr1

CPENameOperatorVersion
cisco:call_managercisco call managereq1.0
cisco:call_managercisco call managereq2.0
cisco:call_managercisco call managereq3.0
cisco:call_managercisco call managereq3.1
cisco:call_managercisco call managereq3.1\(2\)
cisco:call_managercisco call managereq3.1\(3a\)
cisco:call_managercisco call managereq3.2
cisco:call_managercisco call managereq3.3
cisco:call_managercisco call managereq3.3\(3\)
cisco:call_managercisco call managereq3.3\(3\)es61

CPE	Name	Operator	Version
cisco:call_manager	cisco call manager	eq	1.0
cisco:call_manager	cisco call manager	eq	2.0
cisco:call_manager	cisco call manager	eq	3.0
cisco:call_manager	cisco call manager	eq	3.1
cisco:call_manager	cisco call manager	eq	3.1\(2\)
cisco:call_manager	cisco call manager	eq	3.1\(3a\)
cisco:call_manager	cisco call manager	eq	3.2
cisco:call_manager	cisco call manager	eq	3.3
cisco:call_manager	cisco call manager	eq	3.3\(3\)
cisco:call_manager	cisco call manager	eq	3.3\(3\)es61

Rows per page:

1-10 of 181

References

secunia.com/advisories/18501

securitytracker.com/id?1015502

www.cisco.com/warp/public/707/cisco-sa-20060118-ccmpe.shtml

www.osvdb.org/22621

www.securityfocus.com/bid/16293

www.vupen.com/english/advisories/2006/0250

exchange.xforce.ibmcloud.com/vulnerabilities/24172

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

6.2 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.3%

JSON

Related for CVE-2006-0367

prion1 cvelist1 nvd1 cisco1