A security issue has been reported in Cisco CallManager, which can be exploited by malicious people to hijack user sessions.

The security issue is caused due to the improper processing of SIP messages and can be exploited to make calls from a hijacked account by requesting a URI containing a sniffed authentication header.

The security issue is reported in Cisco CallManager system version 5.1.1.3000-5 and administration version 1.1.0.0-1. Other versions may also be affected.

Solution
Use Cisco CallManager in a trusted network environment only.

Provided and/or discovered by
Humberto J. Abdelnur, Radu State, and Olivier Festor

Original Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066581.html

Deep Links
Links available in Customer Area