Secunia

A vulnerability has been reported in Cisco Voice Portal (CVP), which can be exploited by malicious users to gain escalated privileges.

The vulnerability is caused due to an unspecified error and can be exploited by a user with administrator privileges to create, modify, or delete a superuser account.

The vulnerability is reported in versions prior to 4.0(2)_ES14 for the 4.0.x release, 4.1(1)_ES11 for the 4.1.x release, and 7.0(1) for the 7.x release.

Solution
CVP 4.0.x:
Further details available in Customer Area

Provided and/or discovered by
Reported by the vendor.

Original Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20080521-cvp.shtml

Deep Links
Links available in Customer Area