[email protected]CVE-2007-3776

HistoryJul 15, 2007 - 10:30 p.m.

CVE-2007-3776

2007-07-1522:30:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cisco

unified communications manager

cucm

callmanager

unified presence server

snmp

remote attackers

sensitive information

vulnerability

6.4 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.016 Low

EPSS

Percentile

87.1%

JSON

Cisco Unified Communications Manager (CUCM, formerly CallManager) and Unified Presence Server (CUPS) allow remote attackers to obtain sensitive information via unspecified vectors that reveal the SNMP community strings and configuration settings, aka (1) CSCsj20668 and (2) CSCsj25962.

CPENameOperatorVersion
cisco:unified_presence_servercisco unified presence servereq1.0
cisco:unified_presence_servercisco unified presence servereq1.0\(1\)
cisco:unified_communications_managercisco unified communications managereq5.1\(2\)
cisco:unified_communications_managercisco unified communications managereq5.0
cisco:unified_presence_servercisco unified presence servereq1.0\(3\)
cisco:unified_communications_managercisco unified communications managereq5.1\(1\)
cisco:unified_presence_servercisco unified presence servereq1.0\(2\)

CPE	Name	Operator	Version
cisco:unified_presence_server	cisco unified presence server	eq	1.0
cisco:unified_presence_server	cisco unified presence server	eq	1.0\(1\)
cisco:unified_communications_manager	cisco unified communications manager	eq	5.1\(2\)
cisco:unified_communications_manager	cisco unified communications manager	eq	5.0
cisco:unified_presence_server	cisco unified presence server	eq	1.0\(3\)
cisco:unified_communications_manager	cisco unified communications manager	eq	5.1\(1\)
cisco:unified_presence_server	cisco unified presence server	eq	1.0\(2\)

References

osvdb.org/36124

secunia.com/advisories/26039

securitytracker.com/id?1018368

www.cisco.com/warp/public/707/cisco-sa-20070711-voip.shtml

www.securityfocus.com/bid/24867

www.vupen.com/english/advisories/2007/2511

exchange.xforce.ibmcloud.com/vulnerabilities/35344

6.4 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.016 Low

EPSS

Percentile

87.1%

JSON

Related for CVE-2007-3776

prion1 cisco1