Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2011-1602

The su utility on Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.0.3 allows local users to gain privileges via unspecified vectors, aka Bug ID CSCtf07426.

Published

2011-06-02T20:55:03.373

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 6.6 (MEDIUM)

CVSSv2 Vector

AV:L/AC:M/Au:S/C:C/I:C/A:C

Access Vector: LOCAL
Access Complexity: MEDIUM
Authentication: SINGLE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

2.7

Impact Score

10.0

Weaknesses

Type: Primary
CWE-264

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Hardware	cisco	unified_ip_phone_7906	*	Yes
Hardware	cisco	unified_ip_phone_7911g	*	Yes
Hardware	cisco	unified_ip_phone_7931g	*	Yes
Hardware	cisco	unified_ip_phone_7941g	*	Yes
Hardware	cisco	unified_ip_phone_7941g-ge	*	Yes
Hardware	cisco	unified_ip_phone_7942g	*	Yes
Hardware	cisco	unified_ip_phone_7945g	*	Yes
Hardware	cisco	unified_ip_phone_7961g	*	Yes
Hardware	cisco	unified_ip_phone_7961g-ge	*	Yes
Hardware	cisco	unified_ip_phone_7962g	*	Yes
Hardware	cisco	unified_ip_phone_7965g	*	Yes
Hardware	cisco	unified_ip_phone_7970g	*	Yes
Hardware	cisco	unified_ip_phone_7971g-ge	*	Yes
Hardware	cisco	unified_ip_phone_7975g	*	Yes
Operating System	cisco	skinny_client_control_protocol_software	≤ 9.0\(2\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	1.0\(1\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	1.0\(2\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	1.0\(2\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	1.0\(3\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	1.0\(4\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	1.0\(5\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	1.0\(9\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	1.1\(1\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	1.2\(1\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	1.3\(1\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	1.3\(2\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	1.3\(3\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	1.3\(4\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	1.3\(4\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	1.4\(1\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	1.4\(2\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	2.0\(0\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	2.0\(1\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.0	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.0\(0\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.0\(1\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.0\(2\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.1	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.1\(1\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.1\(2\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.1\(3\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.1\(4\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.1\(6\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.1\(10\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.1\(11\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.2	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.2\(1\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.2\(2\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.2\(3\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.2\(4\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.2\(5\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.2\(6\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.2\(6a\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.2\(7\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.2\(8\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.2\(9\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.2\(10\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.2\(11\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.2\(12\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.2\(13\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.2\(14\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.2\(15\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.3\(2\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.3\(3\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.3\(4\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.3\(5\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.3\(6\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.3\(7\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.3\(8\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.3\(9\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.3\(10\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.3\(11\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.3\(12\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.3\(13\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.3\(14\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.3\(15\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.3\(16\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	3.3\(20\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	4.0\(0\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	4.1\(2\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	4.1\(3\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	4.1\(4\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	4.1\(5\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	4.1\(6\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	4.1\(7\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	5.0\(0\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	5.0\(1a\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	5.0\(3\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	5.0\(5\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	5.0\(6\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	5.0\(7\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	6.0\(0\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	6.0\(2\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	6.0\(3\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	6.0\(3\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	6.0\(4\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	6.0\(5\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	6.1\(0\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	6.1\(1\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	7.0\(1\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	7.0\(2\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	7.0\(2\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	7.0\(3\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	7.1\(2\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	7.2\(2\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	7.2\(3\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	7.2\(4\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.0\(1\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.0\(2\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.0\(3\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.0\(4\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.0\(4\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.0\(4\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.0\(5\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.0\(6\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.0\(7\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.0\(8\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.0\(9\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.0\(10\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.1\(1\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.1\(2\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.2\(1\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.2\(2\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.2\(2\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.2\(2\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.2\(2\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.3\(1\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.3\(2\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.3\(2\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.3\(3\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.3\(3\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.3\(3\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.3\(5\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.4\(1\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.4\(1\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.4\(2\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.4\(3\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.4\(4\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.5\(2\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.5\(2\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.5\(3\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.5\(3\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.5\(4\)	Yes
Operating System	cisco	skinny_client_control_protocol_software	8.70	Yes
Operating System	cisco	skinny_client_control_protocol_software	9.0\(2\)	Yes

References

http://osvdb.org/72717 ([email protected])
http://secunia.com/advisories/44814/ ([email protected])
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80111.shtml Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/48074 ([email protected])
http://www.securitytracker.com/id?1025588 ([email protected])
http://osvdb.org/72717 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/44814/ (af854a3a-2127-422b-91ae-364da2661108)
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80111.shtml Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/48074 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1025588 (af854a3a-2127-422b-91ae-364da2661108)