CVE-2004-1760 The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administ...
HighCVSS 10.0
EPSS 3.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco emergency responder | = 1.1 | No fix listed |
| cisco ip call center express enhanced | = 3.0 | No fix listed |
| cisco ip call center express standard | = 3.0 | No fix listed |
| cisco ip interactive voice response | = 3.0 | No fix listed |
| cisco personal assistant | = 1.3(1) | No fix listed |
| cisco personal assistant | = 1.3(2) | No fix listed |
| cisco personal assistant | = 1.3(3) | No fix listed |
| cisco personal assistant | = 1.3(4) | No fix listed |
| cisco personal assistant | = 1.4(1) | No fix listed |
| cisco personal assistant | = 1.4(2) | No fix listed |
| ibm director agent | = 2.2 | No fix listed |
| ibm director agent | = 3.11 | No fix listed |
| cisco call manager | = 1.0 | No fix listed |
| cisco call manager | = 2.0 | No fix listed |
| cisco call manager | = 3.0 | No fix listed |
| cisco call manager | = 3.1 | No fix listed |
| cisco call manager | = 3.1(2) | No fix listed |
| cisco call manager | = 3.1(3a) | No fix listed |
| cisco call manager | = 3.2 | No fix listed |
| cisco call manager | = 3.3 | No fix listed |
| cisco call manager | = 3.3(3) | No fix listed |
| cisco call manager | = 4.0 | No fix listed |
| cisco internet service node | All versions | No fix listed |
| cisco conference connection | = 1.1(1) | No fix listed |
| cisco conference connection | = 1.2 | No fix listed |
Show 9 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm mcs-7815-1000 | All versions | No fix listed |
| ibm mcs-7815i-2.0 | All versions | No fix listed |
| ibm mcs-7835i-2.4 | All versions | No fix listed |
| ibm mcs-7835i-3.0 | All versions | No fix listed |
| ibm x330 | = 8654 | No fix listed |
| ibm x330 | = 8674 | No fix listed |
| ibm x340 | All versions | No fix listed |
| ibm x342 | All versions | No fix listed |
| ibm x345 | All versions | No fix listed |
References
- 10696 patch third-party-advisory vendor-advisory
- O-066 government-resource third-party-advisory
- 20040121 Voice Product Vulnerabilities on IBM Servers patch vendor-advisory
- VU#602734 patch third-party-advisory us-government-resource
- 3692 vdb-entry
- 9468 patch vdb-entry vendor-advisory
- 1008814 vdb-entry
- ciscovoice-ibmservers-admin-access(14900) vdb-entry