PT-2003-1992 · Cisco · Cisco Unity

Publicado 2003-12-11 · Atualizado 2008-09-10 · CVE-2003-0983

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco Unity on IBM servers (affected versions not specified)

Description The issue arises from default settings in Cisco Unity on IBM servers that were not disabled by the manufacturer. This allows local or remote attackers to perform unauthorized activities through several means, including a "bubba" local user account, an open TCP port 34571, or when a local DHCP server is unavailable, by connecting to a DHCP server on the manufacturer's test network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2003-0983

Produtos afetados

Cisco Unity

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2003-0983 · Nota de Segurança
• http://cisco.com/warp/public/707/cisco-sa-20031210-unity.shtml · Aviso do Fabricante