{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-02T03:06:12.972","vulnerabilities":[{"cve":{"id":"CVE-2006-4032","sourceIdentifier":"cve@mitre.org","published":"2006-08-09T22:04:00.000","lastModified":"2026-04-16T00:27:16.627","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Cisco IOS CallManager Express (CME) allows remote attackers to gain sensitive information (user names) from the Session Initiation Protocol (SIP) user directory via certain SIP messages, aka bug CSCse92417."},{"lang":"es","value":"Vulnerabilidad no especificada en Cisco IOS CallManager Express (CME) permite a atacantes remotos obtener información sensible (nombres de usuario) desde el directorio de usuarios SIP(Session Initiation Protocol) mediante ciertos mensajes SIP, también conocido como bug CSCse92417."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:callmanager_express:3.0:*:*:*:*:*:*:*","matchCriteriaId":"CAB98052-29EA-444E-B1C5-86588CAAEDDD"}]}]}],"references":[{"url":"http://secunia.com/advisories/21335","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1016627","source":"cve@mitre.org"},{"url":"http://www.blackhat.com/html/bh-usa-06/bh-usa-06-speakers.html#Endler","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sr-20060802-sip.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/27760","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/19309","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2006/3126","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/28185","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/21335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1016627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.blackhat.com/html/bh-usa-06/bh-usa-06-speakers.html#Endler","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/cisco-sr-20060802-sip.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/27760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/19309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/28185","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorSolution":"Cisco's recommended best practice of implementing the VoIP infrastructure and data devices on separate VLANs would prevent malicious users from launching such attacks against the VoIP network."}}]}