VulnerabilityModified
CVE-2006-4032
Unspecified vulnerability in Cisco IOS CallManager Express (CME) allows remote attackers to gain sensitive information (user names) from the Session Initiation Protocol (SIP) user directory via certain SIP messages, aka bug CSCse92417.
MEDIUM 5.0EPSS 1.62%
Does this matter?
Lower severity and a low EPSS score (1.62%). Track it; it rarely justifies an emergency change on its own.
Description
Unspecified vulnerability in Cisco IOS CallManager Express (CME) allows remote attackers to gain sensitive information (user names) from the Session Initiation Protocol (SIP) user directory via certain SIP messages, aka bug CSCse92417.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 1.62% probability · 75th percentile
- CISA KEV
- Not listed
- Affected
- cisco/callmanager express
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/21335Vendor Advisory
- http://securitytracker.com/id?1016627
- http://www.blackhat.com/html/bh-usa-06/bh-usa-06-speakers.html#Endler
- http://www.cisco.com/warp/public/707/cisco-sr-20060802-sip.shtmlVendor Advisory
- http://www.osvdb.org/27760
- http://www.securityfocus.com/bid/19309
- http://www.vupen.com/english/advisories/2006/3126
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28185
- http://secunia.com/advisories/21335Vendor Advisory
- http://securitytracker.com/id?1016627
- http://www.blackhat.com/html/bh-usa-06/bh-usa-06-speakers.html#Endler
- http://www.cisco.com/warp/public/707/cisco-sr-20060802-sip.shtmlVendor Advisory
- http://www.osvdb.org/27760
- http://www.securityfocus.com/bid/19309
- http://www.vupen.com/english/advisories/2006/3126
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28185
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.