CVEvulnerability

CVE-2004-1760

10.0 HIGH Published 2004-01-21 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-01-21
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-287

Description

The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247.

Affected configurations

• cisco emergency responder 1.1 • cisco ip call center express enhanced 3.0 • cisco ip call center express standard 3.0 • cisco ip interactive voice response 3.0 • cisco personal assistant 1.3\(1\) • cisco personal assistant 1.3\(2\) • cisco personal assistant 1.3\(3\) • cisco personal assistant 1.3\(4\) • cisco personal assistant 1.4\(1\) • cisco personal assistant 1.4\(2\) • ibm director agent 2.2 • ibm director agent 3.11 • cisco call manager 1.0 • cisco call manager 2.0 • cisco call manager 3.0 • cisco call manager 3.1 • cisco call manager 3.1\(2\) • cisco call manager 3.1\(3a\) • cisco call manager 3.2 • cisco call manager 3.3 • cisco call manager 3.3\(3\) • cisco call manager 4.0 • cisco internet service node • cisco conference connection 1.1\(1\) • cisco conference connection 1.2 • ibm mcs-7815-1000 • ibm mcs-7815i-2.0 • ibm mcs-7835i-2.4 • ibm mcs-7835i-3.0 • ibm x330 8654 • ibm x330 8674 • ibm x340 • ibm x342 • ibm x345

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References