NVD

Id
58193  
Name
CVE-2007-6190  
Description
The HTTP daemon in the Cisco Unified IP Phone, when the Extension Mobility feature is enabled, allows remote authenticated users of other phones associated with the same CUCM server to eavesdrop on the physical environment via a CiscoIPPhoneExecute message containing a URL attribute of an ExecuteItem element that specifies a Real-Time Transport Protocol (RTP) audio stream.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-11-29  
Modified Date
2011-03-07  
Seq
2007-6190  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
298267 58193 CVE-2007-6190 1019006  View
298268 58193 CVE-2007-6190 20071128 Cisco Unified IP Phone Remote Eavesdropping  View
298269 58193 CVE-2007-6190 http://www.hack.lu/pres/hacklu07_Remote_wiretapping.pdf  View
298270 58193 CVE-2007-6190 26668  View
298271 58193 CVE-2007-6190 ADV-2007-4036  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54247 JVNDB-2007-002939 Cisco Unified IP Phone の HTTP デーモンにおける盗聴される脆弱性 Cisco Unified IP Phone の HTTP デーモンには、Extension Mobility 機能が有効になっている際、盗聴される脆弱性が存在します。 CVE-2007-6190 29545 CVE-2007-6190 58193 3.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002939.html 2007-11-28 2012-06-26 View