Approved changes feed: RSS · Atom
cpe:2.3:a:openser:openser:1.2.2:*:*:*:*:*:*:*
part: a version: 1.2.2 update: *
| Vendor | Openser (482a1953-87d4-5bf3-8398-919be4b908c6) |
|---|---|
| Product | Openser (0ad80a5f-38d8-549f-8810-7d2572e75958) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2007-5469 |
vulnerable | 2026-06-08 04:50:06.108676 |
Details available
OpenSER 1.2.2 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allows remote attackers to use sniffed Digest authentication credentials to call arbitrary telephone numbers or spoof caller ID (aka "toll fraud and authentication forward attack"). NOTE: Debian disputes this issue, stating that "having the two URIs mismatch is allowed by the standard and happens in some setups for valid reasons.
Published: 2007-10-16T00:00:00.000Z
Updated: 2024-08-07T15:31:58.907Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.