Vulnerability CVE-2002-1189
Published: 2002-10-11   Modified: 2012-02-12

Description:
The default configuration of Cisco Unity 2.x and 3.x does not block international operator calls in the predefined restriction tables, which could allow authenticated users to place international calls using call forwarding.

CVSS2 => (AV:L/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4.6/10
6.4/10
3.9/10
Exploit range
Attack complexity
Authentication
Local
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Cisco -> Unity server 

 References:
http://www.cisco.com/warp/public/707/toll-fraud-pub.shtml
http://www.iss.net/security_center/static/10282.php
http://www.securityfocus.com/bid/5896
Copyright 2024, cxsecurity.com

 

Back to Top