Cisco Unified Communications Manager and Presence Server Unauthorized Access Vulnerabilities

Bugtraq ID:	24867
Class:	Unknown
CVE:	CVE-2007-3776 CVE-2007-3775
Remote:	Yes
Local:	No
Published:	Jul 11 2007 12:00AM
Updated:	Jul 06 2016 02:17PM
Credit:	The vendor reported this issue.
Vulnerable:	Cisco Unified Presence Server 1.0(3) Cisco Unified Presence Server 1.0(2) Cisco Unified Presence Server 1.0 Cisco Unified Communications Manager 5.1(1) Cisco Unified CallManager 5.0
Not Vulnerable:	Cisco Unified Presence Server 6.0 Cisco Unified Communications Manager 5.1(2a) Cisco Unified Communications Manager 4.3(1)sr.1 Cisco Unified CallManager 6.0 Cisco Unified CallManager 4.2 Cisco Unified CallManager 4.1 Cisco Unified CallManager 4.0 Cisco Unified CallManager 3.3

Cisco Unified Communications Manager and Presence Server Unauthorized Access Vulnerabilities

Cisco Unified Communications Manager and Presence Server are prone to multiple unauthorized-access vulnerabilities.

To exploit this issue, an attacker must have administrative access.

Attackers may exploit these issues to gain access to sensitive information or to cause denial-of-service conditions.

Cisco Unified Communications Manager and Presence Server Unauthorized Access Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Unified Communications Manager and Presence Server Unauthorized Access Vulnerabilities

Solution:
The vendor has released an advisory and fixes to address this issue. Please see the references for more information.

Cisco Unified Communications Manager and Presence Server Unauthorized Access Vulnerabilities

References:

• Cisco Homepage (Cisco )
  
• Cisco Security Advisory: Cisco Unified Communications Manager and Presence Serve (Cisco Systems Product Security Incident Response Team)
  
• Cisco Security Advisory: Cisco Unified Communications Manager and Presence Serve (Cisco)