CVE-2004-0044

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Cisco Personal Assistant 1.4(1) and 1.4(2) disables password authentication when "Allow Only Cisco CallManager Users" is enabled and the Corporate Directory settings refer to the directory service being used by Cisco CallManager, which allows remote attackers to gain access with a valid username.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published: Feb 3, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-00457.5Buffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute ar CVE-2004-00464.3Cross-site scripting (XSS) vulnerability in SnapStream PVS LITE allows remote attackers to inject arbitrary web script or HTML via a GET req CVE-2004-00474.6Multiple programs in trr19 1.0 do not properly drop privileges before executing a system command, which could allow local users to gain priv CVE-2004-00496.8Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTTP POST messages to th CVE-2004-00505.0Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web CVE-2004-00517.5Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use no CVE-2004-00527.5Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use no CVE-2004-00537.5Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use fi CVE-2004-00547.5Multiple vulnerabilities in the H.323 protocol implementation for Cisco IOS 11.3T through 12.2T allow remote attackers to cause a denial of CVE-2004-00555.0The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segment CVE-2004-00567.5Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP CVE-2004-00575.0The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a deni