Cisco Unity Default Restrictions International Operator Call Forwarding Vulnerability

Bugtraq ID:	5896
Class:	Configuration Error
CVE:	CVE-2002-1189
Remote:	No
Local:	Yes
Published:	Oct 04 2002 12:00AM
Updated:	Jul 11 2009 05:06PM
Credit:	Vulnerability announced in a Cisco Security Advisory.
Vulnerable:	Cisco Unity Server 3.1 Cisco Unity Server 3.0 Cisco Unity Server 2.46 Cisco Unity Server 2.4 Cisco Unity Server 2.3 Cisco Unity Server 2.2 Cisco Unity Server 2.1 Cisco Unity Server 2.0
Not Vulnerable:

Cisco Unity Default Restrictions International Operator Call Forwarding Vulnerability

Unity is a Cisco software product designed to unify voice message, fax, and e-mail into a user's inbox.

Under some circumstances, users may be able to forward calls to unauthorized destinations. The default restrictions implemented by Unity software prevent users from forwarding calls to operators with the 9 011 prefix. However, this does not prevent forwarding to International operators.

Cisco Unity Default Restrictions International Operator Call Forwarding Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Cisco Unity Default Restrictions International Operator Call Forwarding Vulnerability

References: