CVE-2002-1189

Cisco Unity <3.x - Privilege Escalation

Title source: llm
STIX 2.1

Description

The default configuration of Cisco Unity 2.x and 3.x does not block international operator calls in the predefined restriction tables, which could allow authenticated users to place international calls using call forwarding.

References (3)

Core 3
Core References
Vendor Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/10282.php
Patch, Vendor Advisory vendor-advisory x_refsource_cisco
http://www.cisco.com/warp/public/707/toll-fraud-pub.shtml
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/5896

Scores

EPSS 0.0035
EPSS Percentile 28.0%

Details

Status published
Products (8)
cisco/unity_server 2.0
cisco/unity_server 2.1
cisco/unity_server 2.2
cisco/unity_server 2.3
cisco/unity_server 2.4
cisco/unity_server 2.46
cisco/unity_server 3.0
cisco/unity_server 3.1
Published Oct 11, 2002
Tracked Since Feb 18, 2026