The command line interface (CLI) in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier allows local users to obtain privileges or cause a denial of service via unspecified vectors. NOTE: this issue can be leveraged remotely via CVE-2007-1063.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Unified_ip_phone_firmware_7906g | Cisco | 8.0(4)-sr1 (including) | 8.0(4)-sr1 (including) |
References
- http://osvdb.org/33064
- http://secunia.com/advisories/24262
- http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtml
- http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml
- http://www.securityfocus.com/bid/22647
- http://osvdb.org/33064
- http://secunia.com/advisories/24262
- http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtml
- http://www.cisco.com/warp/public/707/cisco-sa-20070221-phone.shtml
- http://www.securityfocus.com/bid/22647