Lucene search

[email protected]CVE-2004-1760

HistoryMar 10, 2005 - 5:00 a.m.

CVE-2004-1760

2005-03-1005:00:00

CWE-287

[email protected]

web.nvd.nist.gov

cisco

voice products

remote attacks

admin privileges

tcp port 14247

7.1 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.011 Low

EPSS

Percentile

84.6%

JSON

The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247.

Affected configurations

NVD

Node

ciscoemergency_responderMatch1.1

ciscoip_call_center_express_enhancedMatch3.0

ciscoip_call_center_express_standardMatch3.0

ciscoip_interactive_voice_responseMatch3.0

ciscopersonal_assistantMatch1.3\(1\)

ciscopersonal_assistantMatch1.3\(2\)

ciscopersonal_assistantMatch1.3\(3\)

ciscopersonal_assistantMatch1.3\(4\)

ciscopersonal_assistantMatch1.4\(1\)

ciscopersonal_assistantMatch1.4\(2\)

ibmdirector_agentMatch2.2

ibmdirector_agentMatch3.11

ciscocall_managerMatch1.0

ciscocall_managerMatch2.0

ciscocall_managerMatch3.0

ciscocall_managerMatch3.1

ciscocall_managerMatch3.1\(2\)

ciscocall_managerMatch3.1\(3a\)

ciscocall_managerMatch3.2

ciscocall_managerMatch3.3

ciscocall_managerMatch3.3\(3\)

ciscocall_managerMatch4.0

ciscointernet_service_node

Node

ciscoconference_connectionMatch1.1\(1\)

ciscoconference_connectionMatch1.2

Node

ibmmcs-7815-1000

ibmmcs-7815i-2.0

ibmmcs-7835i-2.4

ibmmcs-7835i-3.0

ibmx330Match8654

ibmx330Match8674

ibmx340

ibmx342

ibmx345

CPENameOperatorVersion
cisco:emergency_respondercisco emergency respondereq1.1
cisco:ip_call_center_express_enhancedcisco ip call center express enhancedeq3.0
cisco:ip_call_center_express_standardcisco ip call center express standardeq3.0
cisco:ip_interactive_voice_responsecisco ip interactive voice responseeq3.0
cisco:personal_assistantcisco personal assistanteq1.3\(1\)
cisco:personal_assistantcisco personal assistanteq1.3\(2\)
cisco:personal_assistantcisco personal assistanteq1.3\(3\)
cisco:personal_assistantcisco personal assistanteq1.3\(4\)
cisco:personal_assistantcisco personal assistanteq1.4\(1\)
cisco:personal_assistantcisco personal assistanteq1.4\(2\)

CPE	Name	Operator	Version
cisco:emergency_responder	cisco emergency responder	eq	1.1
cisco:ip_call_center_express_enhanced	cisco ip call center express enhanced	eq	3.0
cisco:ip_call_center_express_standard	cisco ip call center express standard	eq	3.0
cisco:ip_interactive_voice_response	cisco ip interactive voice response	eq	3.0
cisco:personal_assistant	cisco personal assistant	eq	1.3\(1\)
cisco:personal_assistant	cisco personal assistant	eq	1.3\(2\)
cisco:personal_assistant	cisco personal assistant	eq	1.3\(3\)
cisco:personal_assistant	cisco personal assistant	eq	1.3\(4\)
cisco:personal_assistant	cisco personal assistant	eq	1.4\(1\)
cisco:personal_assistant	cisco personal assistant	eq	1.4\(2\)

Rows per page:

1-10 of 231

References

secunia.com/advisories/10696

www.ciac.org/ciac/bulletins/o-066.shtml

www.cisco.com/warp/public/707/cisco-sa-20040121-voice.shtml

www.kb.cert.org/vuls/id/602734

www.osvdb.org/3692

www.securityfocus.com/bid/9468

www.securitytracker.com/id?1008814

exchange.xforce.ibmcloud.com/vulnerabilities/14900

7.1 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.011 Low

EPSS

Percentile

84.6%

JSON

Related for CVE-2004-1760

nvd1 cvelist1