Authentication flaw

The Cisco Unified IP Phone 7960G 9.21 and earlier allows remote attackers to bypass authentication and change trust relationships by injecting a Certificate Trust List CTL file, aka Bug ID CSCuj66795...