CVE-2007-6190: Infoleak
First published: Fri Nov 30 2007(Updated: )
The HTTP daemon in the Cisco Unified IP Phone, when the Extension Mobility feature is enabled, allows remote authenticated users of other phones associated with the same CUCM server to eavesdrop on the physical environment via a CiscoIPPhoneExecute message containing a URL attribute of an ExecuteItem element that specifies a Real-Time Transport Protocol (RTP) audio stream.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Unified Ip Phone | ||
| Cisco Unified IP Phone |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.hack.lu/pres/hacklu07_Remote_wiretapping.pdf
- http://www.cisco.com/en/US/products/products_security_response09186a0080903a6d.html
- http://securitytracker.com/id?1019006
- http://www.securityfocus.com/bid/26668
- http://secunia.com/advisories/27829
- http://osvdb.org/40874
- http://www.vupen.com/english/advisories/2007/4036
- collector/nvd-historical
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/type
- agent/description
- agent/tags
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- vendor/cisco
- canonical/cisco unified ip phone