CVE-2006-4032
6.5 Medium
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.012 Low
EPSS
Percentile
84.9%
Unspecified vulnerability in Cisco IOS CallManager Express (CME) allows remote attackers to gain sensitive information (user names) from the Session Initiation Protocol (SIP) user directory via certain SIP messages, aka bug CSCse92417.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| cisco:callmanager_express | cisco callmanager express | eq | 3.0 |
References
secunia.com/advisories/21335
securitytracker.com/id?1016627
www.blackhat.com/html/bh-usa-06/bh-usa-06-speakers.html#Endler
www.cisco.com/warp/public/707/cisco-sr-20060802-sip.shtml
www.osvdb.org/27760
www.securityfocus.com/bid/19309
www.vupen.com/english/advisories/2006/3126
exchange.xforce.ibmcloud.com/vulnerabilities/28185
Related
6.5 Medium
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.012 Low
EPSS
Percentile
84.9%