CVE-2008-0029

Related Files

Cisco Security Advisory 20080123-avs

Posted Jan 24, 2008

Authored by Cisco Systems | Site cisco.com

Cisco Security Advisory - Versions of the Cisco Application Velocity System (AVS) prior to software version AVS 5.1.0 do not prompt users to modify system account passwords during the initial configuration process. Because there is no requirement to change these credentials during the initial configuration process, an attacker may be able to leverage the accounts that have default credentials, some of which have root privileges, to take full administrative control of the AVS system.

tags | advisory, root

systems | cisco

advisories | CVE-2008-0029

SHA-256 | a9b8503c174834fdd7037d56ec24ac8e700a7b5d581a4afd28b0429f4d4bf515

Download | Favorite | View