CVE-2004-1760

Published: Jan 21, 2004Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247.

Affected (34)

Products: Cisco: Call Manager, Emergency Responder, Internet Service Node, Ip Call Center Express Enhanced, Ip Call Center Express Standard, Ip Interactive Voice Response, Personal Assistant, Conference Connection · Ibm: Director Agent, Mcs 7815 1000, Mcs 7815i 2.0, Mcs 7835i 2.4, Mcs 7835i 3.0, X330, X340, X342, X345

Cisco

8 products

Call Manager

Emergency Responder

Internet Service Node

Ip Call Center Express Enhanced

Ip Call Center Express Standard

Ip Interactive Voice Response

Personal Assistant

Conference Connection

9 products

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Cisco Call Manager	Version 1.0
Cisco Call Manager	Version 2.0
Cisco Call Manager	Version 3.0
Cisco Call Manager	Version 3.1
Cisco Call Manager	Version 3.1(2)
Cisco Call Manager	Version 3.1(3a)
Cisco Call Manager	Version 3.2
Cisco Call Manager	Version 3.3
Cisco Call Manager	Version 3.3(3)
Cisco Call Manager	Version 4.0
Cisco Emergency Responder	Version 1.1
Cisco Internet Service Node	All versions
Cisco Ip Call Center Express Enhanced	Version 3.0
Cisco Ip Call Center Express Standard	Version 3.0
Cisco Ip Interactive Voice Response	Version 3.0
Cisco Personal Assistant	Version 1.3(1)
Cisco Personal Assistant	Version 1.3(2)
Cisco Personal Assistant	Version 1.3(3)
Cisco Personal Assistant	Version 1.3(4)
Cisco Personal Assistant	Version 1.4(1)
Cisco Personal Assistant	Version 1.4(2)
Ibm Director Agent	Version 2.2
Ibm Director Agent	Version 3.11

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Cisco Conference Connection	Version 1.1(1)
Cisco Conference Connection	Version 1.2

Configuration C

9 vulnerable

Vulnerable Software	Affected Versions
Ibm Mcs 7815 1000	All versions
Ibm Mcs 7815i 2.0	All versions
Ibm Mcs 7835i 2.4	All versions
Ibm Mcs 7835i 3.0	All versions
Ibm X330	Version 8654
Ibm X330	Version 8674
Ibm X340	All versions
Ibm X342	All versions
Ibm X345	All versions