NVD

Id
57534  
Name
CVE-2007-5469  
Description
** DISPUTED ** OpenSER 1.2.2 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allows remote attackers to use sniffed Digest authentication credentials to call arbitrary telephone numbers or spoof caller ID (aka "toll fraud and authentication forward attack"). NOTE: Debian disputes this issue, stating that "having the two URIs mismatch is allowed by the standard and happens in some setups for valid reasons."  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-10-15  
Modified Date
2008-09-05  
Seq
2007-5469  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
294368 57534 CVE-2007-5469 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=446956  View
294369 57534 CVE-2007-5469 20071012 CallManager and OpeSer toll fraud and authentication forward attack  View
294370 57534 CVE-2007-5469 20071015 CallManager and OpeSer toll fraud and authentication forward attack  View
294371 57534 CVE-2007-5469 20071015 CallManager and OpeSer toll fraud and authentication forward attack  View
294372 57534 CVE-2007-5469 26057  View
294373 57534 CVE-2007-5469 callmanager-openser-sip-call-hijacking(37197)  View

Related JVN