CVE Vulnerabilities

CVE-2009-0632

Published: Mar 12, 2009 | Modified: Aug 17, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
9 HIGH
AV:N/AC:L/Au:S/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

The IP Phone Personal Address Book (PAB) Synchronizer feature in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.1, 4.2 before 4.2(3)SR4b, 4.3 before 4.3(2)SR1b, 5.x before 5.1(3e), 6.x before 6.1(3), and 7.0 before 7.0(2) sends privileged directory-service account credentials to the client in cleartext, which allows remote attackers to modify the CUCM configuration and perform other privileged actions by intercepting these credentials, and then using them in requests unrelated to the intended synchronization task, as demonstrated by (1) DC Directory account credentials in CUCM 4.x and (2) TabSyncSysUser account credentials in CUCM 5.x through 7.x.

Affected Software

Name Vendor Start Version End Version
Unified_communications_manager Cisco 4.1 4.1
Unified_communications_manager Cisco 4.2 4.2
Unified_communications_manager Cisco 4.2(3)sr1 4.2(3)sr1
Unified_communications_manager Cisco 4.2(3)sr2b 4.2(3)sr2b
Unified_communications_manager Cisco 4.2(3)sr3 4.2(3)sr3
Unified_communications_manager Cisco 4.2(3)sr4 4.2(3)sr4
Unified_communications_manager Cisco 4.3 4.3
Unified_communications_manager Cisco 4.3(1)sr.1 4.3(1)sr.1
Unified_communications_manager Cisco 4.3(2) 4.3(2)
Unified_communications_manager Cisco 4.3(2)sr1 4.3(2)sr1
Unified_communications_manager Cisco 5.0 5.0
Unified_communications_manager Cisco 5.1(1) 5.1(1)
Unified_communications_manager Cisco 5.1(2) 5.1(2)
Unified_communications_manager Cisco 5.1(2a) 5.1(2a)
Unified_communications_manager Cisco 5.1(2b) 5.1(2b)
Unified_communications_manager Cisco 5.1(3) 5.1(3)
Unified_communications_manager Cisco 5.1(3a) 5.1(3a)
Unified_communications_manager Cisco 5.1(3c) 5.1(3c)
Unified_communications_manager Cisco 5.1(3d) 5.1(3d)
Unified_communications_manager Cisco 6.0 6.0
Unified_communications_manager Cisco 6.0(1) 6.0(1)
Unified_communications_manager Cisco 6.0(1a) 6.0(1a)
Unified_communications_manager Cisco 6.1 6.1
Unified_communications_manager Cisco 6.1(1) 6.1(1)
Unified_communications_manager Cisco 6.1(1a) 6.1(1a)
Unified_communications_manager Cisco 6.1(2) 6.1(2)
Unified_communications_manager Cisco 6.1(2)su1 6.1(2)su1
Unified_communications_manager Cisco 6.1(3) 6.1(3)
Unified_communications_manager Cisco 7.0 7.0
Unified_communications_manager Cisco 7.0(1) 7.0(1)

References