CVE-2007-1821

Sprint Nextel Sprint voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing Calling Number…

published April 2, 2007

CVSS
—
EPSS
2%
Percentile
80.3
In the wild
Unconfirmed
What it is

🚨 Spoofing Caller ID could let anyone in! Attackers can retrieve or delete voicemails on Sprint Nextel systems just by pretending to be someone else! 🔥 Think of it as a sneaky imposter showing up at your door, claiming to be your friend, and then rummaging through your mailbox without a second thought. That’s what happens when the voicemail system doesn’t verify who’s really calling! If exploited, an attacker could listen to private voicemails, delete important messages, or even change mailbox settings. This could lead to serious privacy breaches, missed communications, and a sense of vulnerability for users. Your voicemail is supposed to be a safe space, not a playground for pranksters!

Put simply

Think of it as a sneaky imposter showing up at your door, claiming to be your friend, and then rummaging through your mailbox without a second thought. That’s what happens when the voicemail system doesn’t verify who’s really calling! This vulnerability allows attackers to misuse the Caller ID feature in Sprint Nextel's voicemail systems. By spoofing the Calling Number Identification, they can access, manipulate, and delete messages without proper authentication.

What to do

If exploited, an attacker could listen to private voicemails, delete important messages, or even change mailbox settings. This could lead to serious privacy breaches, missed communications, and a sense of vulnerability for users. Your voicemail is supposed to be a safe space, not a playground for pranksters! To mitigate this risk, Sprint should enforce authentication protocols before allowing access to voicemail features. Users are encouraged to stay informed about any updates from their service provider and consider additional security measures like changing PINs frequently. 🛡️ You've got this! Stay vigilant and keep those voicemails safe! 📞✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01975 · 80.3th percentile
Published
2007-04-02T23:00Z
EPSS history
Timeline
  • 02 APR 23:00Z
    Sprint Nextel Sprint voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing Calling Number…
    cvelistv5