Unscored severity · published Jan 21, 2004
CVE-2004-1760
The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote…
–
CVSS
3.8%
EPSS
No
On KEV
Description
The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.8% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CM
Call Manager · Cisco
1.0; 2.0; 3.0; 3.1; 3.1(2); 3.1(3a); +4 more · source: NVD
CC
Conference Connection · Cisco
1.1(1); 1.2 · source: NVD
DA
Director Agent · Ibm
2.2; 3.11 · source: NVD
ER
Emergency Responder · Cisco
1.1 · source: NVD
IC
IP Call Center Express Enhanced · Cisco
3.0 · source: NVD
IC
IP Call Center Express Standard · Cisco
3.0 · source: NVD
II
IP Interactive Voice Response · Cisco
3.0 · source: NVD
IS
Internet Service Node · Cisco
All versions, or not specified · source: NVD
MC
Mcs-7815-1000 · Ibm
All versions, or not specified · source: NVD
MC
Mcs-7815i-2.0 · Ibm
All versions, or not specified · source: NVD
MC
Mcs-7835i-2.4 · Ibm
All versions, or not specified · source: NVD
MC
Mcs-7835i-3.0 · Ibm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-1760
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-1760
Patch
http://secunia.com/advisories/10696
www.ciac.org
http://www.ciac.org/ciac/bulletins/o-066.shtml
Patch
http://www.cisco.com/warp/public/707/cisco-sa-20040121-voice.shtml
Patch
http://www.kb.cert.org/vuls/id/602734
www.osvdb.org
http://www.osvdb.org/3692
Patch
http://www.securityfocus.com/bid/9468
More from Call Manager
7.5
CVE-2004-0079
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake…
–
CVE-2007-5468
Cisco CallManager 5.1.1.3000-5 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allows remote attackers to use sniffed Digest…
–
CVE-2007-4634
Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before…
–
CVE-2007-4633
Multiple cross-site scripting (XSS) vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2,…
–
CVE-2007-2832
Cross-site scripting (XSS) vulnerability in the web application firewall in Cisco CallManager before 3.3(5)sr3, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before…