Cisco has reported a vulnerability in multiple voice products on the IBM platform, which can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system.

Voice products running on IBM servers install the Director Agent insecurely by leaving the service on port 14247 (both TCP and UDP) accessible without requiring user authentication. This can be exploited to gain administrative control of a server.

It is also possible to make the IBM Director Agent process "twgipc.exe" consume 100% CPU resources by scanning it with a network scanner.

The vulnerability affects voice products installed on the following IBM-based servers running an OS prior to OS 2000.2.6:

* IBM X330 (8654 or 8674)
* IBM X340
* IBM X342
* IBM X345
* MCS-7815-1000
* MCS-7815I-2.0
* MCS-7835I-2.4
* MCS-7835I-3.0

Solution
Cisco has published a repair script, which is available at:
Further details available in Customer Area

Provided and/or discovered by
Reported by vendor.

Changelog
Further details available in Customer Area

Original Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20040121-voice.shtml

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area