Description
The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247.
References
- ciscovoice-ibmservers-admin-access(14900) vdb-entry
- 3692 vdb-entry
- 10696 third-party-advisory
- VU#602734 third-party-advisory
- 1008814 vdb-entry
- 20040121 Voice Product Vulnerabilities on IBM Servers vendor-advisory
- 9468 vdb-entry
- O-066 third-party-advisory government-resource