CVE-2004-1322

Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows remote attackers to gain unauthorized access and change configuration settings or read outgoing or incoming e-mail messages.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.ciac.org/ciac/bulletins/p-060.shtml	Patch Vendor Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20041215-unity.shtml	Patch Vendor Advisory
http://www.securityfocus.com/bid/11954	Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18489

Configurations

Configuration 1 (hide)

OR	cpe:2.3:h:cisco:unity_server:2.0:::::::*
	cpe:2.3:h:cisco:unity_server:2.1:::::::*
	cpe:2.3:h:cisco:unity_server:2.2:::::::*
	cpe:2.3:h:cisco:unity_server:2.3:::::::*
	cpe:2.3:h:cisco:unity_server:2.4:::::::*
	cpe:2.3:h:cisco:unity_server:2.46:::::::*
	cpe:2.3:h:cisco:unity_server:3.0:::::::*
	cpe:2.3:h:cisco:unity_server:3.1:::::::*
	cpe:2.3:h:cisco:unity_server:3.2:::::::*
	cpe:2.3:h:cisco:unity_server:3.3:::::::*
	cpe:2.3:h:cisco:unity_server:4.0:::::::*

History

No history.

Information

Published : 2004-12-15 05:00

Updated : 2017-07-11 01:30

NVD link : CVE-2004-1322

Mitre link : CVE-2004-1322

CVE.ORG link : CVE-2004-1322

JSON object : View

Products Affected

cisco

unity_server

CWE

NVD-CWE-Other

{"id": "CVE-2004-1322", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2004-12-15T05:00:00.000", "references": [{"url": "http://www.ciac.org/ciac/bulletins/p-060.shtml", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.cisco.com/warp/public/707/cisco-sa-20041215-unity.shtml", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/11954", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18489", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows remote attackers to gain unauthorized access and change configuration settings or read outgoing or incoming e-mail messages."}], "lastModified": "2017-07-11T01:30:55.357", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:unity_server:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A6659C2E-691B-47B8-9659-73FF4DEE3C19"}, {"criteria": "cpe:2.3:h:cisco:unity_server:2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C0317B33-20DC-4E57-8AFC-097FBC6067F4"}, {"criteria": "cpe:2.3:h:cisco:unity_server:2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D382C84D-C8F7-4257-B6C6-D00C595F6B63"}, {"criteria": "cpe:2.3:h:cisco:unity_server:2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6DF21240-6275-434F-B7C3-8CC029B9ABA2"}, {"criteria": "cpe:2.3:h:cisco:unity_server:2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8934A49D-9ABB-4B49-9B69-615B8CFFAF10"}, {"criteria": "cpe:2.3:h:cisco:unity_server:2.46:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0E60BDFE-108B-4621-9B02-774AA844407B"}, {"criteria": "cpe:2.3:h:cisco:unity_server:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "856D99BB-1CB3-4A8D-9752-CC854829C65A"}, {"criteria": "cpe:2.3:h:cisco:unity_server:3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B13E26E7-8284-4B70-B51C-B3B96995094F"}, {"criteria": "cpe:2.3:h:cisco:unity_server:3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2414F807-1EAE-438D-9497-B6259AC1AA2C"}, {"criteria": "cpe:2.3:h:cisco:unity_server:3.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CCB4D983-658F-4B5F-B136-02A9605DAF4C"}, {"criteria": "cpe:2.3:h:cisco:unity_server:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D26F84D4-B6AC-4BAD-8D9D-B33842FEF9F9"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}