ID CVE-2007-3776
Summary Cisco Unified Communications Manager (CUCM, formerly CallManager) and Unified Presence Server (CUPS) allow remote attackers to obtain sensitive information via unspecified vectors that reveal the SNMP community strings and configuration settings, aka (1) CSCsj20668 and (2) CSCsj25962.
References
Vulnerable Configurations
  • cpe:2.3:a:cisco:unified_communications_manager:5.0:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:5.1\(1\):*:*:*:*:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:5.1\(1\):*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:unified_communications_manager:5.1\(2\):*:*:*:*:*:*:*
    cpe:2.3:a:cisco:unified_communications_manager:5.1\(2\):*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:unified_presence_server:1.0:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:unified_presence_server:1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:unified_presence_server:1.0\(1\):*:*:*:*:*:*:*
    cpe:2.3:a:cisco:unified_presence_server:1.0\(1\):*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:unified_presence_server:1.0\(2\):*:*:*:*:*:*:*
    cpe:2.3:a:cisco:unified_presence_server:1.0\(2\):*:*:*:*:*:*:*
  • cpe:2.3:a:cisco:unified_presence_server:1.0\(3\):*:*:*:*:*:*:*
    cpe:2.3:a:cisco:unified_presence_server:1.0\(3\):*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 29-07-2017 - 01:32)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:N/A:N
refmap via4
bid 24867
cisco 20070711 Cisco Unified Communications Manager and Presence Server Unauthorized Access Vulnerabilities
osvdb 36124
sectrack 1018368
secunia 26039
vupen ADV-2007-2511
xf cisco-callmanager-presence-info-disclosure(35344)
Last major update 29-07-2017 - 01:32
Published 15-07-2007 - 22:30
Last modified 29-07-2017 - 01:32
Back to Top