Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2004-1760

The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247.

Published

2004-01-21T05:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

10.0

Impact Score

10.0

Weaknesses

Type: Primary
CWE-287

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	cisco	emergency_responder	1.1	Yes
Application	cisco	ip_call_center_express_enhanced	3.0	Yes
Application	cisco	ip_call_center_express_standard	3.0	Yes
Application	cisco	ip_interactive_voice_response	3.0	Yes
Application	cisco	personal_assistant	1.3\(1\)	Yes
Application	cisco	personal_assistant	1.3\(2\)	Yes
Application	cisco	personal_assistant	1.3\(3\)	Yes
Application	cisco	personal_assistant	1.3\(4\)	Yes
Application	cisco	personal_assistant	1.4\(1\)	Yes
Application	cisco	personal_assistant	1.4\(2\)	Yes
Application	ibm	director_agent	2.2	Yes
Application	ibm	director_agent	3.11	Yes
Hardware	cisco	call_manager	1.0	Yes
Hardware	cisco	call_manager	2.0	Yes
Hardware	cisco	call_manager	3.0	Yes
Hardware	cisco	call_manager	3.1	Yes
Hardware	cisco	call_manager	3.1\(2\)	Yes
Hardware	cisco	call_manager	3.1\(3a\)	Yes
Hardware	cisco	call_manager	3.2	Yes
Hardware	cisco	call_manager	3.3	Yes
Hardware	cisco	call_manager	3.3\(3\)	Yes
Hardware	cisco	call_manager	4.0	Yes
Hardware	cisco	internet_service_node	*	Yes
Operating System	cisco	conference_connection	1.1\(1\)	Yes
Operating System	cisco	conference_connection	1.2	Yes
Hardware	ibm	mcs-7815-1000	*	Yes
Hardware	ibm	mcs-7815i-2.0	*	Yes
Hardware	ibm	mcs-7835i-2.4	*	Yes
Hardware	ibm	mcs-7835i-3.0	*	Yes
Hardware	ibm	x330	8654	Yes
Hardware	ibm	x330	8674	Yes
Hardware	ibm	x340	*	Yes
Hardware	ibm	x342	*	Yes
Hardware	ibm	x345	*	Yes

References

http://secunia.com/advisories/10696 Patch, Vendor Advisory ([email protected])
http://www.ciac.org/ciac/bulletins/o-066.shtml ([email protected])
http://www.cisco.com/warp/public/707/cisco-sa-20040121-voice.shtml Patch, Vendor Advisory ([email protected])
http://www.kb.cert.org/vuls/id/602734 Patch, Third Party Advisory, US Government Resource ([email protected])
http://www.osvdb.org/3692 ([email protected])
http://www.securityfocus.com/bid/9468 Patch, Vendor Advisory ([email protected])
http://www.securitytracker.com/id?1008814 ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/14900 ([email protected])
http://secunia.com/advisories/10696 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.ciac.org/ciac/bulletins/o-066.shtml (af854a3a-2127-422b-91ae-364da2661108)
http://www.cisco.com/warp/public/707/cisco-sa-20040121-voice.shtml Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.kb.cert.org/vuls/id/602734 Patch, Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.osvdb.org/3692 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/9468 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1008814 (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/14900 (af854a3a-2127-422b-91ae-364da2661108)