CVE-2008-1113 | BDVDB-2026-29503 Detail

Description#

Cisco Unified Wireless IP Phone 7921, when using Protected Extensible Authentication Protocol (PEAP), does not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle (MITM) attacks.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://blogs.zdnet.com/security/?p=896
http://seclists.org/fulldisclosure/2008/Feb/0449.html
http://securitytracker.com/id?1019494
http://seclists.org/fulldisclosure/2008/Feb/0402.html
http://www.securityfocus.com/bid/27935
http://blogs.zdnet.com/security/?p=901
http://secunia.com/advisories/29082

Exploit#

No public exploit known

History#

Version 12008-03-03Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.