CVE-2007-6095
Published Nov 22, 2007
Last updated 16 years ago
Overview
- Description
- The SIP component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0, when Remote NAT Traversal is employed, does not properly perform user registration and message distribution, which might allow remote authenticated users to receive messages intended for other users.
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4
- Impact score
- 2.9
- Exploitability score
- 8
- Vector string
- AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-200
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ingate:ingate_firewall:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2FCD0134-18A5-4C85-B6D3-6E66A8983C43",
"versionEndIncluding": "4.5.2"
},
{
"criteria": "cpe:2.3:h:ingate:ingate_siparator:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "598B6EC9-AF61-4C65-AE23-FC8F42CE64B1",
"versionEndIncluding": "4.5.2"
}
],
"operator": "OR"
}
]
}
]