Just because I had no idea what your acronyms meant:

CID: Caller ID

ANI: Automatic Number Identification

http://www.egyed.com/faq/cid.htm

If this is a widespread vulnerability, why is it left open? Also, my bank wants a 13-digit access card number and a 4-digit PIN, which is secure enough for me.