CVE-2011-1637

Cisco Unified IP Phones 7900 devices aka TNP phones with software before 9.2.1 do not properly verify signatures for software images, which allows local users to gain privileges via a crafted image, aka Bug ID CSCtn65962...

CVE-2011-1603

Cisco Unified IP Phones 7900 devices aka TNP phones with software before 9.2.1 allow local users to gain privileges via unspecified vectors, aka Bug ID CSCtn65815...

Code injection

The su utility on Cisco Unified IP Phones 7900 devices aka TNP phones with software before 9.0.3 allows local users to gain privileges via unspecified vectors, aka Bug ID CSCtf07426...

Command injection

Cisco Unified IP Phones 7900 devices aka TNP phones with software before 9.2.1 allow local users to gain privileges via unspecified vectors, aka Bug ID CSCtn65815...

Code injection

Cisco Unified IP Phones 7900 devices aka TNP phones with software before 9.2.1 do not properly verify signatures for software images, which allows local users to gain privileges via a crafted image, aka Bug ID CSCtn65962...

CVE-2011-1602

The su utility on Cisco Unified IP Phones 7900 devices aka TNP phones with software before 9.0.3 allows local users to gain privileges via unspecified vectors, aka Bug ID CSCtf07426...

CVE-2011-1637

Cisco Unified IP Phones 7900 devices aka TNP phones with software before 9.2.1 do not properly verify signatures for software images, which allows local users to gain privileges via a crafted image, aka Bug ID CSCtn65962...

CVE-2011-1603

Cisco Unified IP Phones 7900 devices aka TNP phones with software before 9.2.1 allow local users to gain privileges via unspecified vectors, aka Bug ID CSCtn65815...

CVE-2011-1637

CVE-2011-1637 affects Cisco Unified IP Phones 7900 Series (TNP phones). The issue is an insecure signature verification check that allows an authenticated, local attacker to load a software image without verification, due to improper verification of signatures. Root cause: unsigned code installat...

CVE-2011-1602

The su utility on Cisco Unified IP Phones 7900 devices aka TNP phones with software before 9.0.3 allows local users to gain privileges via unspecified vectors, aka Bug ID CSCtf07426...

CVE-2011-1603

Cisco Unified IP Phones 7900 devices aka TNP phones with software before 9.2.1 allow local users to gain privileges via unspecified vectors, aka Bug ID CSCtn65815...

CVE-2011-1637

Cisco Unified IP Phones 7900 devices aka TNP phones with software before 9.2.1 do not properly verify signatures for software images, which allows local users to gain privileges via a crafted image, aka Bug ID CSCtn65962...

CVE-2011-1602

Cisco Unified IP Phones 7900 Series (TNP phones) are affected by CVE-2011-1602 due to two privilege-escalation vulnerabilities in the su utility. Devices with software before 9.0.3 could allow an authenticated local attacker to change phone configuration or disclose information; the CVSS base sco...

CVE-2011-1603

CVE-2011-1603 affects Cisco Unified IP Phones 7900 Series running software before 9.2.1. The two privilege-escalation flaws (CVE-2011-1602, CVE-2011-1603) could let an authenticated local user change configurations or access information; a separate signature-verification bypass (CVE-2011-1637) co...

CVE-2011-1637: Undefined Security Weakness

Cisco Unified IP Phones 7900 devices aka TNP phones with software before 9.2.1 do not properly verify signatures for software images, which allows local users to gain privileges via a crafted image, aka Bug ID CSCtn65962...

PT-2011-3247

Name of the Vulnerable Software and Affected Versions Cisco Unified IP Phones 7900 devices aka TNP phones versions prior to 9.2.1 Description The issue allows local users to gain privileges via unspecified vectors. Recommendations For versions prior to 9.2.1, update to version 9.2.1 or later to...

PT-2011-3246

Name of the Vulnerable Software and Affected Versions Cisco Unified IP Phones 7900 devices aka TNP phones versions prior to 9.0.3 Description The issue allows local users to gain privileges via unspecified vectors. Recommendations For versions prior to 9.0.3, update to version 9.0.3 or later to...

PT-2011-3258

Name of the Vulnerable Software and Affected Versions Cisco Unified IP Phones 7900 devices aka TNP phones versions prior to 9.2.1 Description The issue is related to improper verification of signatures for software images, allowing local users to gain privileges via a crafted image. Recommendatio...

Cisco Unified IP Phones 7900 series security vulnerabilites

Privilege escalation, signature check bypass for software images...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified IP Phones 7900 Series

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified IP Phones 7900 Series Advisory ID: cisco-sa-20110601-phone Revision 1.0 For Public Release 2011 June 1 1600 UTC GMT +----------------------------------------------------------------...