Lucene search
+L

545 matches found

NVD
NVD
•added 2006/05/04 12:38 p.m.•30 views

CVE-2006-2166

Unspecified vulnerability in the HTTP management interface in Cisco Unity Express CUE 2.22 and earlier, when running on any CUE Advanced Integration Module AIM or Network Module NM, allows remote authenticated attackers to reset the password for any user with an expired password...

2.1CVSS6.5AI score0.01616EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2006/05/04 10:00 a.m.•40 views

CVE-2006-2166

Unspecified vulnerability in the HTTP management interface in Cisco Unity Express CUE 2.22 and earlier, when running on any CUE Advanced Integration Module AIM or Network Module NM, allows remote authenticated attackers to reset the password for any user with an expired password...

6.5AI score0.01616EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/05/04 12:00 a.m.•6 views

CVE-2006-2166: Undefined Security Weakness

Unspecified vulnerability in the HTTP management interface in Cisco Unity Express CUE 2.22 and earlier, when running on any CUE Advanced Integration Module AIM or Network Module NM, allows remote authenticated attackers to reset the password for any user with an expired password...

2.1CVSS5.9AI score0.01616EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2006/05/02 12:00 a.m.•35 views

[Full-disclosure] Cisco Security Advisory: Cisco Unity Express Expired Password Reset Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unity Express Expired Password Reset Privilege Escalation Advisory ID: cisco-sa-20060501-cue http://www.cisco.com/warp/public/707/cisco-sa-20060501-cue.shtml Revision 1.0 For Public Release 2006 May 01 2300 UTC GMT...

7.1AI score
SaveExploits0
securityvulns
securityvulns
•added 2006/05/02 12:00 a.m.•73 views

Unauthorized Cisco Unity Express access

It's possible to change password without entering old one if account is expired...

2.5AI score
SaveExploits0References1Affected Software1
Cisco
Cisco
•added 2006/05/01 11:00 p.m.•61 views

Cisco Unity Express Expired Password Reset Privilege Escalation

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

2.1CVSS6.3AI score0.01616EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2005/05/19 12:00 a.m.•18 views

Cisco Unity VPN Detection

Binary data 2925.prm...

7.3AI score
SaveExploits0
Cvelist
Cvelist
•added 2005/01/06 5:00 a.m.•34 views

CVE-2004-1322

Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows remote attackers to gain unauthorized access and change configuration settings or read outgoing or incoming e-mail messages...

6.8AI score0.02453EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/01/06 12:00 a.m.•12 views

CVE-2004-1322: Undefined Security Weakness

Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows remote attackers to gain unauthorized access and change configuration settings or read outgoing or incoming e-mail messages...

7.5CVSS5.8AI score0.02453EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2004/12/16 12:00 a.m.•34 views

Cisco Security Advisory: Cisco Unity Integrated with Exchange Has Default Passwords

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ================================================================= Cisco Security Advisory: Cisco Unity Integrated with Exchange Has Default Passwords ================================================================= Revision 1.0: FINAL For Public...

0.1AI score
SaveExploits0
securityvulns
securityvulns
•added 2004/12/16 12:00 a.m.•35 views

Cisco Unity default password

Few Accounts with default passwords...

2.8AI score
SaveExploits0References1Affected Software1
Cisco
Cisco
•added 2004/12/15 4:00 p.m.•29 views

Cisco Unity Integrated with Exchange Has Default Passwords

...

2.6AI score
SaveExploits0References1
NVD
NVD
•added 2004/12/15 5:00 a.m.•25 views

CVE-2004-1322

Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows remote attackers to gain unauthorized access and change configuration settings or read outgoing or incoming e-mail messages...

7.5CVSS6.8AI score0.02453EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2004/09/01 4:00 a.m.•36 views

CVE-2002-1189

The default configuration of Cisco Unity 2.x and 3.x does not block international operator calls in the predefined restriction tables, which could allow authenticated users to place international calls using call forwarding...

6.4AI score0.00354EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2004/09/01 12:00 a.m.•10 views

CVE-2002-1189: Undefined Security Weakness

The default configuration of Cisco Unity 2.x and 3.x does not block international operator calls in the predefined restriction tables, which could allow authenticated users to place international calls using call forwarding...

4.6CVSS5.8AI score0.00354EPSS
SaveExploits0References1
NVD
NVD
•added 2004/01/05 5:00 a.m.•31 views

CVE-2003-0983

Cisco Unity on IBM servers is shipped with default settings that should have been disabled by the manufacturer, which allows local or remote attackers to conduct unauthorized activities via 1 a "bubba" local user account, 2 an open TCP port 34571, or 3 when a local DHCP server is unavailable, a...

7.5CVSS6.4AI score0.01884EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2003/12/11 5:00 a.m.•44 views

CVE-2003-0983

Cisco Unity on IBM servers is shipped with default settings that should have been disabled by the manufacturer, which allows local or remote attackers to conduct unauthorized activities via 1 a "bubba" local user account, 2 an open TCP port 34571, or 3 when a local DHCP server is unavailable, a...

6.4AI score0.01884EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2003/12/11 12:00 a.m.•42 views

Cisco Security Advisory: Unity Vulnerabilities on IBM-based Servers

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Unity Vulnerabilities on IBM-based Servers Revision Numeral 1.0 For Public Release 2003 December 10 17:00 UTC GMT ======================================================================== Contents ======== Summary Affected...

6.9AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2003/12/11 12:00 a.m.•9 views

CVE-2003-0983: Undefined Security Weakness

Cisco Unity on IBM servers is shipped with default settings that should have been disabled by the manufacturer, which allows local or remote attackers to conduct unauthorized activities via 1 a "bubba" local user account, 2 an open TCP port 34571, or 3 when a local DHCP server is unavailable, a...

7.5CVSS5.8AI score0.01884EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2003/12/11 12:00 a.m.•47 views

Cisco Unity multiple bugs

Local account with predefined passsword, server awaits for connection from statically compiled address. etc/...

2.5AI score
SaveExploits0References1
Rows per page
Query Builder