Auth bypass in Cisco Call Manager
CVE-2004-1760
The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247.
Vulnerability class: Broken Authentication
EPSS: 0.038 (89.3th percentile) — read the EPSS interpretation.
Affected products
- Cisco Call_manager — versions 3.1(3a), 3.3\(3\), 3.1
- Cisco Conference_connection — versions 1.1\(1\), 1.1(1), 1.2
- Cisco Emergency_responder — versions 1.1
- Cisco Internet_service_node
- Cisco Ip_call_center_express_enhanced — versions 3.0
- Cisco Ip_call_center_express_standard — versions 3.0
- Cisco Ip_interactive_voice_response — versions 3.0
- Cisco Personal_assistant — versions 1.4(2), 1.3(2), 1.3\(1\)
- Ibm Director_agent — versions 2.2, 3.11
- Ibm Mcs-7815-1000
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Patch, Third Party Advisory, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (government-resource, x_refsource_CIAC, third-party-advisory)