CVE:CVE-2005-2181
CNNVD:CNNVD-200507-093
Cisco 7940/7960 是Cisco公司网络交换设备。
Cisco 7940/7960的Voice over IP (VoIP)电话存在远程欺骗漏洞。
由于验证订阅时未正确检查NOTIFY消息中的Call-ID、分机和标记值，这使得远程攻击者可以进行欺骗，例如"Messages waiting"消息。
solution:Upgrade cisco 7940_router to a higher version than *; Upgrade cisco 7960_router to a higher version than *