|
|
|
 |
Vulnerability Note VU#127545Cisco NetFlow Collection Engine contains known default passwordsOverviewA vulnerability in the Cisco NetFlow Collection Engine could allow a remote attacker to gain access to a vulnerable system.I. DescriptionThe Cisco Network Services (CNS) NetFlow Collection Engine (NFC) is a software package for supported UNIX platforms and is used to collect and monitor NetFlow accounting data for network devices such as routers and switches. It includes a web-based interface to perform application maintenance, configuration, and troubleshooting.Versions of NFC prior to 6.0 create and use default accounts with an identical username and password of "nfcuser".
For some configurations, the attacker may also be able to gain user access to the host operating system with the privileges of nfcuser. This access may allow for additional privilege escalation attacks on an affected system.
Cisco has published instructions for changing the passwords on the nfcuser account in Cisco Security Advisory cisco-sa-20070425-nfc. This advisory contains additional information about how the issue has been addressed in newer versions of the affected software. Note that both the web-based and UNIX user account passwords must be changed on some platforms.
References
Thanks to Cisco Systems Product Security Incident Response Team for reporting this vulnerability. This document was written by Chad R Dougherty.
If you have feedback, comments, or additional information about this vulnerability, please send us
email. |
|||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||
Get Adobe Reader