CVE-2006-4032

Description

Unspecified vulnerability in Cisco IOS CallManager Express (CME) allows remote attackers to gain sensitive information (user names) from the Session Initiation Protocol (SIP) user directory via certain SIP messages, aka bug CSCse92417.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/28185

http://www.vupen.com/english/advisories/2006/3126

http://www.securityfocus.com/bid/19309

http://www.osvdb.org/27760

http://www.cisco.com/warp/public/707/cisco-sr-20060802-sip.shtml

http://www.blackhat.com/html/bh-usa-06/bh-usa-06-speakers.html#Endler

http://securitytracker.com/id?1016627

http://secunia.com/advisories/21335

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS