CVE-2003-0983
Severity Score
7.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Cisco Unity on IBM servers is shipped with default settings that should have been disabled by the manufacturer, which allows local or remote attackers to conduct unauthorized activities via (1) a "bubba" local user account, (2) an open TCP port 34571, or (3) when a local DHCP server is unavailable, a DHCP server on the manufacturer's test network.
Cisco Unitiy en servidores IBM es entregado con una configuración por defecto que debería haber sido deshabilitada por el fabricante, lo que permite a atacantes locales o remotos conducir actividades no autorizadas mediante
una cuenta de usuario "bubba" local, o
un puerto TCP 34571 abierto, o
cuando un servidor DHCP local no está disponible, un servidor DHCP en la red de prueba del fabricante.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2003-12-10 CVE Reserved
- 2003-12-11 CVE Published
- 2024-09-16 CVE Updated
- 2024-09-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.cisco.com/warp/public/707/cisco-sa-20031210-unity.shtml | 2008-09-10 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | 80-7111-01 For The Unity-svrx255-1a Search vendor "Cisco" for product "80-7111-01 For The Unity-svrx255-1a" | * | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | 80-7112-01 For The Unity-svrx255-2a Search vendor "Cisco" for product "80-7112-01 For The Unity-svrx255-2a" | * | - |
Affected
| ||||||