CVEvulnerability
CVE-2004-1760
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-01-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-287
Description
The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247.
Affected configurations
• cisco emergency responder 1.1
• cisco ip call center express enhanced 3.0
• cisco ip call center express standard 3.0
• cisco ip interactive voice response 3.0
• cisco personal assistant 1.3\(1\)
• cisco personal assistant 1.3\(2\)
• cisco personal assistant 1.3\(3\)
• cisco personal assistant 1.3\(4\)
• cisco personal assistant 1.4\(1\)
• cisco personal assistant 1.4\(2\)
• ibm director agent 2.2
• ibm director agent 3.11
• cisco call manager 1.0
• cisco call manager 2.0
• cisco call manager 3.0
• cisco call manager 3.1
• cisco call manager 3.1\(2\)
• cisco call manager 3.1\(3a\)
• cisco call manager 3.2
• cisco call manager 3.3
• cisco call manager 3.3\(3\)
• cisco call manager 4.0
• cisco internet service node
• cisco conference connection 1.1\(1\)
• cisco conference connection 1.2
• ibm mcs-7815-1000
• ibm mcs-7815i-2.0
• ibm mcs-7835i-2.4
• ibm mcs-7835i-3.0
• ibm x330 8654
• ibm x330 8674
• ibm x340
• ibm x342
• ibm x345
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://secunia.com/advisories/10696 Patch, Vendor Advisory
- http://www.ciac.org/ciac/bulletins/o-066.shtml www.ciac.org
- http://www.cisco.com/warp/public/707/cisco-sa-20040121-voice.shtml Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/602734 Patch, Third Party Advisory, US Government Resource
- http://www.osvdb.org/3692 www.osvdb.org
- http://www.securityfocus.com/bid/9468 Patch, Vendor Advisory
- http://www.securitytracker.com/id?1008814 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14900 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/10696 Patch, Vendor Advisory
- http://www.ciac.org/ciac/bulletins/o-066.shtml www.ciac.org
- http://www.cisco.com/warp/public/707/cisco-sa-20040121-voice.shtml Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/602734 Patch, Third Party Advisory, US Government Resource
- http://www.osvdb.org/3692 www.osvdb.org
- http://www.securityfocus.com/bid/9468 Patch, Vendor Advisory
- http://www.securitytracker.com/id?1008814 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14900 exchange.xforce.ibmcloud.com