CVE-2006-4032

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-08-09 · updated 2026-06-16

Description

Unspecified vulnerability in Cisco IOS CallManager Express (CME) allows remote attackers to gain sensitive information (user names) from the Session Initiation Protocol (SIP) user directory via certain SIP messages, aka bug CSCse92417.

Affected products

Cisco Callmanager Express: 3.0

References

http://secunia.com/advisories/21335
http://securitytracker.com/id?1016627
http://www.blackhat.com/html/bh-usa-06/bh-usa-06-speakers.html#Endler
http://www.cisco.com/warp/public/707/cisco-sr-20060802-sip.shtml
http://www.osvdb.org/27760
http://www.securityfocus.com/bid/19309
http://www.vupen.com/english/advisories/2006/3126
https://exchange.xforce.ibmcloud.com/vulnerabilities/28185
http://secunia.com/advisories/21335
http://securitytracker.com/id?1016627
http://www.blackhat.com/html/bh-usa-06/bh-usa-06-speakers.html#Endler
http://www.cisco.com/warp/public/707/cisco-sr-20060802-sip.shtml

Get alerted when CVE-2006-4032 or the next vulnerability affects your stack