CVE-2007-5468 Cisco CallManager 5.1.1.3000-5 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allows remote attackers to use sniffed Digest authentication credenti...
MediumCVSS 5.0
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco CallManager 5.1.1.3000-5 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allows remote attackers to use sniffed Digest authentication credentials to call arbitrary telephone numbers or spoof caller ID (aka "toll fraud and authentication forward attack").
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco call manager | = 5.1.1.3000 | No fix listed |
References
- 20071012 CallManager and OpeSer toll fraud and authentication forward attack mailing-list
- 20071015 CallManager and OpeSer toll fraud and authentication forward attack mailing-list
- 20071015 CallManager and OpeSer toll fraud and authentication forward attack mailing-list
- 27231 third-party-advisory
- 26057 vdb-entry
- ADV-2007-3534 vdb-entry
- callmanager-openser-sip-call-hijacking(37197) vdb-entry