CVE-2007-3776
First published: Sun Jul 15 2007(Updated: )
Cisco Unified Communications Manager (CUCM, formerly CallManager) and Unified Presence Server (CUPS) allow remote attackers to obtain sensitive information via unspecified vectors that reveal the SNMP community strings and configuration settings, aka (1) CSCsj20668 and (2) CSCsj25962.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Unified Presence Server | =1.0 | |
| Cisco Unified Presence Server | =1.0\(1\) | |
| Cisco Unified Communications Manager | =5.1\(2\) | |
| Cisco Unified Communications Manager | =5.0 | |
| Cisco Unified Presence Server | =1.0\(3\) | |
| Cisco Unified Communications Manager | =5.1\(1\) | |
| Cisco Unified Presence Server | =1.0\(2\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://osvdb.org/36124
- http://secunia.com/advisories/26039
- http://securitytracker.com/id?1018368
- http://www.cisco.com/warp/public/707/cisco-sa-20070711-voip.shtml
- http://www.securityfocus.com/bid/24867
- http://www.vupen.com/english/advisories/2007/2511
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35344
Frequently Asked Questions
What is the severity of CVE-2007-3776?
CVE-2007-3776 has a medium severity rating due to the potential exposure of sensitive information.
How do I fix CVE-2007-3776?
To mitigate CVE-2007-3776, update your Cisco Unified Communications Manager and Unified Presence Server to the latest patched versions.
What impact does CVE-2007-3776 have on my system?
CVE-2007-3776 can allow remote attackers to gain access to sensitive information such as SNMP community strings and configuration settings.
Which Cisco products are affected by CVE-2007-3776?
CVE-2007-3776 affects Cisco Unified Communications Manager versions 5.0, 5.1(1), 5.1(2) and Cisco Unified Presence Server versions 1.0, 1.0(1), 1.0(2), and 1.0(3).
Is CVE-2007-3776 a zero-day vulnerability?
No, CVE-2007-3776 is not a zero-day vulnerability as it has been publicly disclosed and a fix is available.
- agent/author
- agent/severity
- agent/references
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/remedy
- agent/type
- agent/weakness
- agent/event
- agent/description
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/cisco
- canonical/cisco unified communications manager
- version/cisco unified communications manager/5.0
- version/cisco unified communications manager/5.1\(1\)
- version/cisco unified communications manager/5.1\(2\)
- canonical/cisco unified presence server
- version/cisco unified presence server/1.0
- version/cisco unified presence server/1.0\(1\)
- version/cisco unified presence server/1.0\(2\)
- version/cisco unified presence server/1.0\(3\)