CVE-2009-0632

The IP Phone Personal Address Book (PAB) Synchronizer feature in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.1, 4.2 before 4.2(3)SR4b, 4.3 before 4.3(2)SR1b, 5.x before 5.1(3e), 6.x before 6.1(3), and 7.0 before 7.0(2) sends privileged directory-service account credentials to the client in cleartext, which allows remote attackers to modify the CUCM configuration and perform other privileged actions by intercepting these credentials, and then using them in requests unrelated to the intended synchronization task, as demonstrated by (1) DC Directory account credentials in CUCM 4.x and (2) TabSyncSysUser account credentials in CUCM 5.x through 7.x.

• CWE-255

• http://osvdb.org/52589
• http://secunia.com/advisories/34238
• http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080a86434.html
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080a8643c.shtmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/34082
• http://www.securitytracker.com/id?1021839
• http://www.vupen.com/english/advisories/2009/0675Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49196
• http://osvdb.org/52589
• http://secunia.com/advisories/34238
• http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080a86434.html
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080a8643c.shtmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/34082
• http://www.securitytracker.com/id?1021839
• http://www.vupen.com/english/advisories/2009/0675Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49196

Published

Mar 12, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-0626The SSLVPN feature in Cisco IOS 12.3 through 12.4 allows rem…
• CVE-2009-0627Unspecified vulnerability in Cisco NX-OS before 4.0(1a)N2(1)…
• CVE-2009-0628Memory leak in the SSLVPN feature in Cisco IOS 12.3 through …
• CVE-2009-0629The (1) Airline Product Set (aka ALPS), (2) Serial Tunnel Co…
• CVE-2009-0630The (1) Cisco Unified Communications Manager Express; (2) SI…
• CVE-2009-0631Unspecified vulnerability in Cisco IOS 12.0 through 12.4, wh…
• CVE-2009-0633Multiple unspecified vulnerabilities in the (1) Mobile IP NA…
• CVE-2009-0634Multiple unspecified vulnerabilities in the home agent (HA) …
• CVE-2009-0635Memory leak in the Cisco Tunneling Control Protocol (cTCP) e…
• CVE-2009-0636Unspecified vulnerability in Cisco IOS 12.0 through 12.4, wh…
• CVE-2009-0637The SCP server in Cisco IOS 12.2 through 12.4, when Role-Bas…
• CVE-2009-0638The Cisco Firewall Services Module (FWSM) 2.x, 3.1 before 3.…