CVE-2006-0367 Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allows remote authenticated users with read-only administrative p...
MediumCVSS 6.5
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allows remote authenticated users with read-only administrative privileges to obtain full administrative privileges via a "crafted URL on the CCMAdmin web page."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco call manager | = 1.0 | No fix listed |
| cisco call manager | = 2.0 | No fix listed |
| cisco call manager | = 3.0 | No fix listed |
| cisco call manager | = 3.1 | No fix listed |
| cisco call manager | = 3.1(2) | No fix listed |
| cisco call manager | = 3.1(3a) | No fix listed |
| cisco call manager | = 3.2 | No fix listed |
| cisco call manager | = 3.3 | No fix listed |
| cisco call manager | = 3.3(3) | No fix listed |
| cisco call manager | = 3.3(3)es61 | No fix listed |
| cisco call manager | = 3.3(4)es25 | No fix listed |
| cisco call manager | = 3.3(5) | No fix listed |
| cisco call manager | = 4.0 | No fix listed |
| cisco call manager | = 4.0(2a)es40 | No fix listed |
| cisco call manager | = 4.0(2a)sr2b | No fix listed |
| cisco call manager | = 4.1(2)es33 | No fix listed |
| cisco call manager | = 4.1(3)es07 | No fix listed |
| cisco call manager | = 4.1(3)sr1 | No fix listed |
References
- 18501 patch third-party-advisory vendor-advisory
- 1015502 patch vdb-entry
- 20060118 Cisco Call Manager Privilege Escalation patch vendor-advisory
- 22621 patch vdb-entry
- 16293 vdb-entry
- ADV-2006-0250 vdb-entry vendor-advisory
- cisco-callmanager-ccmadmin-gain-priv(24172) vdb-entry