The Intuity Audix voicemail system by default is maintained over port 23 (telnet) in a restricted command interface. If an attacker has a known account/password, they can circumvent this interface and get an unrestricted shell using rexec.
4fcde277b065ccb6ef5420098a7767fb530e514f5b5d5d99c34c266efcaab54a