What’s Vulnerable › Vulnerabilities

CVE-2007-5468

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-10-16 · updated 2026-06-16
• Weakness: CWE-264

Description

Cisco CallManager 5.1.1.3000-5 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allows remote attackers to use sniffed Digest authentication credentials to call arbitrary telephone numbers or spoof caller ID (aka "toll fraud and authentication forward attack").

Affected products

• Cisco Call Manager: 5.1.1.3000

References

• http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066581.html
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066691.html
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066694.html
• http://secunia.com/advisories/27231
• http://www.securityfocus.com/bid/26057
• http://www.vupen.com/english/advisories/2007/3534
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37197
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066581.html
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066691.html
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066694.html
• http://secunia.com/advisories/27231
• http://www.securityfocus.com/bid/26057

Get alerted when CVE-2007-5468 or the next vulnerability affects your stack