CVE-2002-1189

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-10-11 · updated 2026-06-16

Description

The default configuration of Cisco Unity 2.x and 3.x does not block international operator calls in the predefined restriction tables, which could allow authenticated users to place international calls using call forwarding.

Affected products

Cisco Unity Server: 2.0, 2.1, 2.2, 2.3, 2.4, 2.46 (+2)

References

http://www.cisco.com/warp/public/707/toll-fraud-pub.shtml
http://www.iss.net/security_center/static/10282.php
http://www.securityfocus.com/bid/5896
http://www.cisco.com/warp/public/707/toll-fraud-pub.shtml
http://www.iss.net/security_center/static/10282.php
http://www.securityfocus.com/bid/5896

Get alerted when CVE-2002-1189 or the next vulnerability affects your stack