SkipNavigation
Home | FAQ | Contact | Privacy Policy
US-CERT
American Flag
  Vulnerability
Notes
Database

Search Vulnerability Notes

Vulnerability Notes Help Information


 
 View Notes By
  Name

ID Number

CVE Name

Date Public

Date Published

Date Updated

Severity Metric
 Other Documents
  Technical Alerts

Technical Bulletins

Alerts

Security Tips

Vulnerability Note VU#174248

Cisco Content Services Switch (CSS) permits non-privileged user to enter debug mode

Overview

A vulnerability in Cisco Content Services Switches (Arrowpoint) allows a valid user to gain administrative access.

I. Description

Cisco CSS switches run Cisco WebNS software. A user with a valid account on a CSS device can gain unauthorized administrative access to the device. See the Cisco advisory available at http://www.cisco.com/warp/public/707/arrowpoint-useraccnt-debug-pub.shtml for more information.

II. Impact

Local users can gain administrative access to the switch.

III. Solution

Update to version 4.01B19s of Cisco WebNS software.

Systems Affected
VendorStatusDate NotifiedDate Updated
CiscoVulnerable27-Apr-2001

References


http://www.cisco.com/warp/public/707/arrowpoint-useraccnt-debug-pub.shtml
http://www.securityfocus.com/bid/2559
http://www.ciac.org/ciac/bulletins/l-069.shtml
http://www.uniras.gov.uk/l1/l2/l3/brief2001/UNIRAS%20Briefing%20-%204601-%20Cisco%20Content%20Services%20Switch%20User%20Account%20Vulnerability.txt

Credit

Our thanks to Cisco for the information provided in their advisory.

This document was written by Shawn V. Hernan.

Other Information

Date Public:2001-04-04
Date First Published:2001-04-28
Date Last Updated:2001-04-28
CERT Advisory: 
CVE-ID(s): 
NVD-ID(s): 
US-CERT Technical Alerts: 
Metric:13.50
Document Revision:7

If you have feedback, comments, or additional information about this vulnerability, please send us email.
 

 
Page Corner Image
Copyright 2001 Carnegie Mellon University
Disclaimers and copyright information
Get Adobe Reader Get Adobe Reader