GCVE-110-CERTCC-2003-726548

Advisory Published

Vulnetix · Advisory published January 30, 2007

Certain voice mail systems trust Calling Number Identification (CNID, Caller ID) to authenticate administrative access to voice mail accounts. Caller ID can be easily spoofed, allowing an attacker to gain control over a vulnerable voice mailbox.

Download JSON Open in Console

Risk Scores

certcc-cam

impact8population16exploitation7widely_known7score_current9.216ease_of_exploitation16

certcc-vrda

d1_impact3d1_population3d1_direct_report1

References

Voice mail systems allow administrative access based on Caller ID

advisory

Voice mail systems allow administrative access based on Caller ID

url

Voice mail systems allow administrative access based on Caller ID

url

Voice mail systems allow administrative access based on Caller ID

url

Voice mail systems allow administrative access based on Caller ID

url

Voice mail systems allow administrative access based on Caller ID

url

Voice mail systems allow administrative access based on Caller ID

url

Browse GCVE Records

73,040 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON