CVE-2006-4032

Cisco IOS CallManager Express - Information Disclosure via SIP Messages

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in Cisco IOS CallManager Express (CME) allows remote attackers to gain sensitive information (user names) from the Session Initiation Protocol (SIP) user directory via certain SIP messages, aka bug CSCse92417.

References (8)

Core 8
Core References
Vendor Advisory vendor-advisory x_refsource_cisco
http://www.cisco.com/warp/public/707/cisco-sr-20060802-sip.shtml
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21335
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/28185
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1016627
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/19309
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/27760
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/3126

Scores

EPSS 0.0159
EPSS Percentile 73.1%

Details

Status published
Products (1)
cisco/callmanager_express 3.0
Published Aug 09, 2006
Tracked Since Feb 18, 2026