CVE-2004-1760

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2004-1760
The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247.

10.0 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://secunia.com/advisories/10696 Patch Vendor Advisory
http://www.ciac.org/ciac/bulletins/o-066.shtml
http://www.cisco.com/warp/public/707/cisco-sa-20040121-voice.shtml Patch Vendor Advisory
http://www.kb.cert.org/vuls/id/602734 Patch Third Party Advisory US Government Resource
http://www.osvdb.org/3692
http://www.securityfocus.com/bid/9468 Patch Vendor Advisory
http://www.securitytracker.com/id?1008814
https://exchange.xforce.ibmcloud.com/vulnerabilities/14900
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:cisco:emergency_responder:1.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:ip_call_center_express_enhanced:3.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:ip_call_center_express_standard:3.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:ip_interactive_voice_response:3.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:personal_assistant:1.3\(1\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:personal_assistant:1.3\(2\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:personal_assistant:1.3\(3\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:personal_assistant:1.3\(4\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:personal_assistant:1.4\(1\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:personal_assistant:1.4\(2\):*:*:*:*:*:*:*
cpe:2.3:a:ibm:director_agent:2.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:director_agent:3.11:*:*:*:*:*:*:*
cpe:2.3:h:cisco:call_manager:1.0:*:*:*:*:*:*:*
cpe:2.3:h:cisco:call_manager:2.0:*:*:*:*:*:*:*
cpe:2.3:h:cisco:call_manager:3.0:*:*:*:*:*:*:*
cpe:2.3:h:cisco:call_manager:3.1:*:*:*:*:*:*:*
cpe:2.3:h:cisco:call_manager:3.1\(2\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:call_manager:3.1\(3a\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:call_manager:3.2:*:*:*:*:*:*:*
cpe:2.3:h:cisco:call_manager:3.3:*:*:*:*:*:*:*
cpe:2.3:h:cisco:call_manager:3.3\(3\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:call_manager:4.0:*:*:*:*:*:*:*
cpe:2.3:h:cisco:internet_service_node:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:cisco:conference_connection:1.1\(1\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:conference_connection:1.2:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:h:ibm:mcs-7815-1000:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:mcs-7815i-2.0:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:mcs-7835i-2.4:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:mcs-7835i-3.0:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:x330:8654:*:*:*:*:*:*:*
cpe:2.3:h:ibm:x330:8674:*:*:*:*:*:*:*
cpe:2.3:h:ibm:x340:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:x342:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:x345:*:*:*:*:*:*:*:*
History

No history.

Information

Published : 2004-01-21 05:00

Updated : 2024-02-28 10:24

NVD link : CVE-2004-1760

Mitre link : CVE-2004-1760

CVE.ORG link : CVE-2004-1760

JSON object : View

Products Affected

ibm

  • x340
  • x342
  • x345
  • mcs-7815i-2.0
  • director_agent
  • mcs-7835i-2.4
  • mcs-7835i-3.0
  • x330
  • mcs-7815-1000

cisco

  • internet_service_node
  • ip_call_center_express_standard
  • ip_interactive_voice_response
  • call_manager
  • conference_connection
  • ip_call_center_express_enhanced
  • emergency_responder
  • personal_assistant
CWE
CWE-287

Improper Authentication