Cisco Unified Customer Voice Portal Unspecified Privilege Escalation Vulnerability

Bugtraq ID:	29315
Class:	Unknown
CVE:	CVE-2008-2053
Remote:	Yes
Local:	Yes
Published:	May 21 2008 12:00AM
Updated:	May 22 2008 04:04PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Cisco Unified Customer Voice Portal (CVP) 7.0 Cisco Unified Customer Voice Portal (CVP) 4.1 Cisco Unified Customer Voice Portal (CVP) 4.0 Cisco Unified Customer Voice Portal (CVP) 0 Cisco Customer Voice Portal
Not Vulnerable:	Cisco Unified Customer Voice Portal (CVP) 7.0(1) Cisco Unified Customer Voice Portal (CVP) 4.1(1)_ES11 Cisco Unified Customer Voice Portal (CVP) 4.0(2)_ES14

Cisco Unified Customer Voice Portal Unspecified Privilege Escalation Vulnerability

Cisco Unified Customer Voice Portal is prone to an unspecified privilege-escalation vulnerability. Note that this issue is exploitable only by users with administrative access to the affected software.

Successfully exploiting this issue allows attackers to gain superuser access, facilitating the complete compromise of affected computers.

This issue is documented as Cisco Bug ID CSCsj93874.

Cisco Unified Customer Voice Portal Unspecified Privilege Escalation Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Unified Customer Voice Portal Unspecified Privilege Escalation Vulnerability

Solution:
The vendor has released an advisory and fixes. Please see the references for more information.

Cisco Unified Customer Voice Portal Unspecified Privilege Escalation Vulnerability

References:

• Cisco Unified Customer Voice Portal Product Page (Cisco)
  
• Cisco Security Advisory: Cisco Voice Portal Privilege Escalation Vulnerability (Cisco Systems Product Security Incident Response Team )
  
• Cisco Security Advisory: Cisco Voice Portal Privilege Escalation Vulnerability (Cisco)