CVE-2007-6190
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
The HTTP daemon in the Cisco Unified IP Phone, when the Extension Mobility feature is enabled, allows remote authenticated users of other phones associated with the same CUCM server to eavesdrop on the physical environment via a CiscoIPPhoneExecute message containing a URL attribute of an ExecuteItem element that specifies a Real-Time Transport Protocol (RTP) audio stream.
El demonio HTTP en el teléfono Cisco Unified IPD Phone, cuando la funcionalidad de Movilidad de Extensión (Extension Mobility) está habilitada, permite a usuarios autenticados remotamente de otros teléfonos asociados con el mismo servidor CUCM escuchar el entorno físico sin ser detectados mediante un mensaje CiscoIPPhoneExecute que contenga un atributo URL de un elemento ExecuteItem que especifica un flujo de audio en el protocolo RTP (Real-Time Transport Protocol).
CVSS Scores
SSVC
- Decision:-
Timeline
- 2007-11-29 CVE Reserved
- 2007-11-30 CVE Published
- 2024-08-07 CVE Updated
- 2024-11-10 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
References (7)
URL | Tag | Source |
---|---|---|
http://osvdb.org/40874 | Vdb Entry | |
http://securitytracker.com/id?1019006 | Vdb Entry | |
http://www.hack.lu/pres/hacklu07_Remote_wiretapping.pdf | X_refsource_misc | |
http://www.securityfocus.com/bid/26668 | Vdb Entry | |
http://www.vupen.com/english/advisories/2007/4036 | Vdb Entry |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
http://secunia.com/advisories/27829 | 2011-03-08 | |
http://www.cisco.com/en/US/products/products_security_response09186a0080903a6d.html | 2011-03-08 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Cisco Search vendor "Cisco" | Unified Ip Phone Search vendor "Cisco" for product "Unified Ip Phone" | * | - |
Affected
|