Login or Register to Ask a Question and Join Our Community


Security Advisories (RSS)

S-189: SQL Injectionin Cisco Unified Communications Manager

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-189: SQL Injectionin Cisco Unified Communications Manager
# 1  
Old 02-15-2008
S-189: SQL Injectionin Cisco Unified Communications Manager
Cisco Unified Communications Manager is vulnerable to a SQL Injection attack in the parameter key of the admin and user interface pages. A successful attack could allow an authenticated attacker to access information such as usernames and password hashes that are stored in the database. The risk is LOW. An authenticated attacker may be able to exploit this vulnerability to extract records from the Cisco Unified Communications Manager database. A successful attack might retrieve sensitive data such as user names, passwords hashes, and information from call records. An attacker cannot use this vulnerability to alter or delete call record information from the database.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT DEBIAN

gammu-smsd-odbc

GAMMU-SMSD-ODBC(7)						       Gammu							GAMMU-SMSD-ODBC(7)

NAME

       gammu-smsd-odbc - gammu-smsd(1) backend using ODBC abstraction layer to use any supported database as a message storage

DESCRIPTION

       New in version 1.29.92.

       ODBC  backend  stores  all  data  in  any  database  supported by ODBC, which parameters are defined by configuration (see gammu-smsdrc for
       description of configuration options).

       For tables description see gammu-smsd-tables.

       This backend is based on gammu-smsd-sql.

SUPPORTED DRIVERS

       On Microsoft Windows, Gammu uses native ODBC, on other platforms, unixODBC can be used.

LIMITATIONS

       Due to limits of the ODBC interface, you might have to tweak SQL queries to work in used SQL server, see SQL Queries for more details.

       Partially this can be configured using SQL.

CONFIGURATION

       Before running gammu-smsd you need to create necessary tables in the database. You can use examples given  in  database	specific  backends
       parts of this manual to do that.

       You specify data source name (DSN) as Host in gammu-smsdrc. The data source is configured depending on your platform.

       On Microsoft Windows, you can find instructions on Microsoft website: http://support.microsoft.com/kb/305599

       For unixODBC this is documented in the user manual: http://www.unixodbc.org/doc/UserManual/

EXAMPLE

       Example configuration:

       [smsd]
       service = sql
       driver = odbc
       host = dsn_of_your_database
       sql = sql_variant_to_use
       user = username
       password = password

       See also

	      gammu-smsdrc

AUTHOR

       Michal iha <michal@cihar.com>

COPYRIGHT

       2009-2012, Michal iha <michal@cihar.com>

1.31.90 							 February 24, 2012						GAMMU-SMSD-ODBC(7)