nvd-json-data-feeds/CVE-2006/CVE-2006-40xx/CVE-2006-4032.json

{
  "id": "CVE-2006-4032",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2006-08-09T22:04:00.000",
  "lastModified": "2024-11-21T00:14:58.947",
  "vulnStatus": "Modified",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in Cisco IOS CallManager Express (CME) allows remote attackers to gain sensitive information (user names) from the Session Initiation Protocol (SIP) user directory via certain SIP messages, aka bug CSCse92417."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en Cisco IOS CallManager Express (CME) permite a atacantes remotos obtener informaci\u00f3n sensible (nombres de usuario) desde el directorio de usuarios SIP(Session Initiation Protocol) mediante ciertos mensajes SIP, tambi\u00e9n conocido como bug CSCse92417."
    }
  ],
  "metrics": {
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "baseScore": 5.0,
          "accessVector": "NETWORK",
          "accessComplexity": "LOW",
          "authentication": "NONE",
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "baseSeverity": "MEDIUM",
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:h:cisco:callmanager_express:3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "CAB98052-29EA-444E-B1C5-86588CAAEDDD"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "http://secunia.com/advisories/21335",
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ]
    },
    {
      "url": "http://securitytracker.com/id?1016627",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.blackhat.com/html/bh-usa-06/bh-usa-06-speakers.html#Endler",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.cisco.com/warp/public/707/cisco-sr-20060802-sip.shtml",
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ]
    },
    {
      "url": "http://www.osvdb.org/27760",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/19309",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/3126",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28185",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/21335",
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ]
    },
    {
      "url": "http://securitytracker.com/id?1016627",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.blackhat.com/html/bh-usa-06/bh-usa-06-speakers.html#Endler",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.cisco.com/warp/public/707/cisco-sr-20060802-sip.shtml",
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ]
    },
    {
      "url": "http://www.osvdb.org/27760",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/19309",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/3126",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28185",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "evaluatorSolution": "Cisco's recommended best practice of implementing the VoIP infrastructure and data devices on separate VLANs would prevent malicious users from launching such attacks against the VoIP network."
}