Cisco CallManager / OpenSer authentication relaying attacks
Published:		15.10.2007
Source:		BUGTRAQ
SecurityVulns ID:		8262
Type:		m-i-t-m
Level:		5/10
Description:		Insufficient Digest authentication validation allows active man-in-the-middle to access resources unrequested by client.

Affected:

CISCO : CallManager 5.1

Original document

Radu State, [Full-disclosure] CallManager and OpeSer toll fraud and authentication forward attack (15.10.2007)

Discuss:

Read or add your comments to this news (0 comments)