10

CVE-2004-1760

The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Emergency Responder Version 1.1
Ibm ≫ Director Agent Version 2.2
Ibm ≫ Director Agent Version 3.11
Cisco ≫ Call Manager Version 1.0
Cisco ≫ Call Manager Version 2.0
Cisco ≫ Call Manager Version 3.0
Cisco ≫ Call Manager Version 3.1
Cisco ≫ Call Manager Version 3.2
Cisco ≫ Call Manager Version 3.3
Cisco ≫ Call Manager Version 4.0
Cisco ≫ Conference Connection Version 1.2
Ibm ≫ X330 Version 8654
Ibm ≫ X330 Version 8674
Ibm ≫ X340
Ibm ≫ X342
Ibm ≫ X345
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.8% 0.886
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://secunia.com/advisories/10696
Patch
Vendor Advisory
http://www.ciac.org/ciac/bulletins/o-066.shtml
http://www.cisco.com/warp/public/707/cisco-sa-20040121-voice.shtml
Patch
Vendor Advisory
http://www.securitytracker.com/id?1008814
http://www.kb.cert.org/vuls/id/602734
Patch
Third Party Advisory
US Government Resource
http://www.osvdb.org/3692
http://www.securityfocus.com/bid/9468
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/14900