Lucene search
MitreCVE-2006-0367HistoryJan 22, 2006 - 8:03 p.m.
CVE-2006-0367
2006-01-2220:03:00
mitre
web.nvd.nist.gov
30
cisco
callmanager
vulnerability
authenticated users
admin privileges
web page
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
6.2
Confidence
Low
EPSS
0.005
Percentile
76.3%
Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allows remote authenticated users with read-only administrative privileges to obtain full administrative privileges via a “crafted URL on the CCMAdmin web page.”
Affected configurations
Node
ciscocall_managerMatch1.0
ORciscocall_managerMatch2.0
ORciscocall_managerMatch3.0
ORciscocall_managerMatch3.1
ORciscocall_managerMatch3.1\(2\)
ORciscocall_managerMatch3.1\(3a\)
ORciscocall_managerMatch3.2
ORciscocall_managerMatch3.3
ORciscocall_managerMatch3.3\(3\)
ORciscocall_managerMatch3.3\(3\)es61
ORciscocall_managerMatch3.3\(4\)es25
ORciscocall_managerMatch3.3\(5\)
ORciscocall_managerMatch4.0
ORciscocall_managerMatch4.0\(2a\)es40
ORciscocall_managerMatch4.0\(2a\)sr2b
ORciscocall_managerMatch4.1\(2\)es33
ORciscocall_managerMatch4.1\(3\)es07
ORciscocall_managerMatch4.1\(3\)sr1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | call_manager | 1.0 | cpe:2.3:h:cisco:call_manager:1.0:*:*:*:*:*:*:* |
| cisco | call_manager | 2.0 | cpe:2.3:h:cisco:call_manager:2.0:*:*:*:*:*:*:* |
| cisco | call_manager | 3.0 | cpe:2.3:h:cisco:call_manager:3.0:*:*:*:*:*:*:* |
| cisco | call_manager | 3.1 | cpe:2.3:h:cisco:call_manager:3.1:*:*:*:*:*:*:* |
| cisco | call_manager | 3.1(2) | cpe:2.3:h:cisco:call_manager:3.1\(2\):*:*:*:*:*:*:* |
| cisco | call_manager | 3.1(3a) | cpe:2.3:h:cisco:call_manager:3.1\(3a\):*:*:*:*:*:*:* |
| cisco | call_manager | 3.2 | cpe:2.3:h:cisco:call_manager:3.2:*:*:*:*:*:*:* |
| cisco | call_manager | 3.3 | cpe:2.3:h:cisco:call_manager:3.3:*:*:*:*:*:*:* |
| cisco | call_manager | 3.3(3) | cpe:2.3:h:cisco:call_manager:3.3\(3\):*:*:*:*:*:*:* |
| cisco | call_manager | 3.3(3)es61 | cpe:2.3:h:cisco:call_manager:3.3\(3\)es61:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2006-01-22 20:03:00
cvelist
cvelist
CVE-2006-0367
2006-01-22 20:00:00
cisco
cisco
Cisco Call Manager Privilege Escalation
2006-01-18 16:00:00
nvd
nvd
CVE-2006-0367
2006-01-22 20:03:00
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
6.2
Confidence
Low
EPSS
0.005
Percentile
76.3%
Related for CVE-2006-0367