Vulnerability Note VU#174248

Cisco Content Services Switch (CSS) permits non-privileged user to enter debug mode

Original Release date: 28 Apr 2001 | Last revised: 28 Apr 2001

Overview

A vulnerability in Cisco Content Services Switches (Arrowpoint) allows a valid user to gain administrative access.

Description

Cisco CSS switches run Cisco WebNS software. A user with a valid account on a CSS device can gain unauthorized administrative access to the device. See the Cisco advisory available at http://www.cisco.com/warp/public/707/arrowpoint-useraccnt-debug-pub.shtml for more information.

Impact

Local users can gain administrative access to the switch.

Solution

Update to version 4.01B19s of Cisco WebNS software.

Systems Affected (Learn More)

VendorStatusDate NotifiedDate Updated
CiscoAffected-27 Apr 2001
If you are a vendor and your product is affected, let us know.

CVSS Metrics (Learn More)

Group Score Vector
Base N/A N/A
Temporal N/A N/A
Environmental N/A N/A

References

Credit

Our thanks to Cisco for the information provided in their advisory.

This document was written by Shawn V. Hernan.

Other Information

  • CVE IDs: Unknown
  • Date Public: 04 Apr 2001
  • Date First Published: 28 Apr 2001
  • Date Last Updated: 28 Apr 2001
  • Severity Metric: 13.50
  • Document Revision: 7

Feedback

If you have feedback, comments, or additional information about this vulnerability, please send us email.