CVE-2004-0044 | BDVDB-2026-7146 Detail

Description#

Cisco Personal Assistant 1.4(1) and 1.4(2) disables password authentication when "Allow Only Cisco CallManager Users" is enabled and the Corporate Directory settings refer to the directory service being used by Cisco CallManager, which allows remote attackers to gain access with a valid username.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/14172
http://www.cisco.com/warp/public/707/cisco-sa-20040108-pa.shtml
http://www.osvdb.org/3430
http://www.securityfocus.com/bid/9384

Exploit#

No public exploit known

History#

Version 12004-09-01Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.