OSVDB ID: 45245

Title: Cisco Unified IP Phone Administrator HTTP Session Direct Request Authentication Bypass

Info

Disclosure

Feb 21, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Location: Remote / Network Access
Attack Type: Authentication Management
Impact: Loss of Integrity
Solution: Upgrade
Disclosure: Vendor Verified
OSVDB: Web Related

Solution

Products

Unknown or Incomplete

References

Security Tracker: 1017680
CVE ID: 2007-1062 (see also: NVD)
Bugtraq ID: 22647
Secunia Advisory ID: 24262
ISS X-Force ID: 32623
VUPEN Advisory: ADV-2007-0688
Vendor Specific Advisory URL: http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtml
http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/45245