CVE-2007-5468

Cisco CallManager 5.1.1.3000-5 - Unauthenticated Call Spoofing and Toll Fraud via SIP Digest Authentication Bypass

Title source: llm

Description

Cisco CallManager 5.1.1.3000-5 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allows remote attackers to use sniffed Digest authentication credentials to call arbitrary telephone numbers or spoof caller ID (aka "toll fraud and authentication forward attack").

References (7)

Core 7

Core References

Mailing List mailing-list x_refsource_fulldisc

http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066581.html

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2007/3534

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/27231

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/26057

Mailing List mailing-list x_refsource_fulldisc

http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066694.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/37197

Mailing List mailing-list x_refsource_fulldisc

http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066691.html

Scores

EPSS 0.0159

EPSS Percentile 73.1%

Details

CWE

CWE-264

Status published

Products (1)

cisco/call_manager 5.1.1.3000

Published Oct 16, 2007

Tracked Since Feb 18, 2026