| | site-map | e-mail

User:

Guest

Name: Password:

www.center.hu / Archive / Security news / march, 2005 / Denial of services and default passwords in Cisco devices 

Denial of services and default passwords in Cisco devices

Denial of services and default passwords in Cisco devices

Madrid, February 28 2005 - Cisco has published a security bulletin warning of four vulnerabilities in its devices running ACNS (Application and Content Networking System) software, and which could be exploited to launch Denial of Service (DoS) attacks. The company has also reported that when this software is installed, a default admin password is set which, if not changed, would let a third party take control of the device.

Devices that support ACNS are: Cisco 500 Series Content Engines, Cisco 7300 Series Content Engines, Cisco Content Routers 4400 series, Cisco Content Distribution Manager 4600 series, and Cisco Content Engine Module for Cisco 2600, 2800, 3600, 3700 and 3800 series Integrated Service Routers.

Cisco has published new versions of ACNS to correct these vulnerabilities that could be exploited to launch DoS attacks -affecting all dependent network traffic-. To resolve the problem of the admin password installed by default with the software, it should be changed using the program settings, or through the ˝username˝ command, after having logged in as ˝admin˝.

For full details on these security problems, affected versions, updates and recommendations to mitigate these problems refer to the Cisco advisory at:
http://www.cisco.com/warp/public/707/cisco-sa-20050224-acnsdos.shtml


Oxygen3 24h-365d
by Panda Software

2005-03-01 10:12

Back